Comprehensive Framework for Data Governance and Institutional Construction in China

Data governance in China requires the construction of a comprehensive data institutional framework, and since the release of the twenty‑article policy, extensive discussion has focused on how to build these foundational systems, identify responsible stakeholders, and coordinate their efforts.

The National Data Bureau plays a central coordinating role, recognizing data as a strategic national resource and addressing challenges in data ownership, valuation, and rights confirmation at the state level. Eight basic systems have been defined:

1. Data Property Rights System – establishes requirements for data supply quantity and quality, structural allocation of data property rights, and classification‑based authorization for public, corporate, and personal data, including mechanisms for ownership, processing, and product rights.

2. Data Circulation System – sets standards for data market entry, ensuring legality, privacy protection, and cross‑border flow, while developing quality standards, collection interfaces, and interoperable data exchange mechanisms.

3. Data Transaction System – creates a hybrid on‑ and off‑site trading framework, diversified pricing models, and mechanisms for fair pricing of public and private data, as well as anti‑monopoly rules for cross‑border transactions.

4. Data Usage System – mandates government, exchanges, and enterprises to develop rules for data development, usage rights exchange, and market‑driven circulation, fostering a shared‑benefit acquisition model.

5. Revenue Distribution System – defines property‑based and equitable profit‑sharing mechanisms for individuals, enterprises, and public data, ensuring returns for all stages of data value creation.

6. Data Credit System – establishes a credit framework for data market participants, including discredit identification, incentives for trustworthiness, penalties, and credit repair processes, supporting credit‑based financing for digital transformation.

7. Data Governance System – outlines responsibilities for government and enterprises, including joint governance mechanisms, fault‑tolerant innovation policies, comprehensive compliance, security audits, algorithm reviews, and negative‑list regulations for data flow.

8. Data Security System – enforces compliance with the Cybersecurity Law, Data Security Law, Personal Information Protection Law, and sector‑specific classification guidelines, requiring certification and robust security management across all data actors.

Beyond institutional construction, the article stresses coordinated integration, sharing, and utilization of data resources. It highlights the need to identify nationally important data—covering security, economic stability, and social development—and to balance high‑sensitivity data protection with cross‑sectoral sharing for smart city, smart park, and broader digital China initiatives.

Finally, the piece offers practical guidance for data governance teams: stay alert to policy updates from the National Data Bureau, deepen professional knowledge of data governance mechanisms, and promote data literacy across organizations to harness data as a competitive advantage.