- Type
- National regulatory framework
- Jurisdiction
- People's Republic of China
- Principal regulator
- Cyberspace Administration of China (CAC)
- Key instruments
- Algorithmic Recommendation Provisions, Deep Synthesis Provisions, Interim Measures for Generative AI
- Emerged
- 2021-2023
- Related
- EU AI Act, US AI executive orders, ASEAN AI governance
- Type
- National regulatory framework
- Jurisdiction
- People's Republic of China
- Principal regulator
- Cyberspace Administration of China (CAC)
- Key instruments
- Algorithmic Recommendation Provisions, Deep Synthesis Provisions, Interim Measures for Generative AI
- Emerged
- 2021-2023
- Related
- EU AI Act, US AI executive orders, ASEAN AI governance
China AI regulation refers to the framework of laws, administrative regulations, and technical standards through which the People's Republic of China governs artificial intelligence. China was among the first jurisdictions to issue binding national rules for AI, adopting a sectoral approach that combines general data protection and security laws with specific measures for algorithms, deep synthesis (deepfakes), and generative AI services. The framework is administered principally by the Cyberspace Administration of China (CAC) together with other ministries, and it has become a reference point in global debates about AI governance alongside the European Union's AI Act and US executive orders.[1][2]
History and Background
China's AI governance developed in stages. In 2017, the State Council's "New Generation Artificial Intelligence Development Plan" set national ambitions for AI leadership, and in 2019 the governance principles issued by the National New Generation AI Governance Committee established an early ethical baseline. Binding rules followed: the Personal Information Protection Law (PIPL) and the Data Security Law, both effective in 2021, created general obligations for data handling that apply to AI systems. In 2022, the CAC issued the Provisions on the Administration of Algorithmic Recommendations in Internet Information Services, which required recommendation algorithms to be filed with regulators and to promote "correct value orientation."[1]
The most consequential measure came in 2023. In July 2023, the CAC and six other agencies published the Interim Measures for the Management of Generative Artificial Intelligence Services, effective 15 August 2023 — widely described as the world's first comprehensive national regulation of generative AI. The Interim Measures require providers of generative AI services to ensure content legality, obtain the relevant filings and licences, label synthetic content, protect personal information, and submit security assessments for public-facing services, while also encouraging industry development and innovation. In September 2025, further CAC rules on AI content labelling took effect, requiring explicit labels for AI-generated and AI-synthesised content, including invisible metadata markers.[2][3]
Key Concepts
Algorithmic filing and registration: Providers of algorithmic recommendation, deep synthesis, and generative AI services must file information about their algorithms and services with the CAC, and public-facing generative services must pass security assessments before launch.
Deep synthesis regulation: The 2023 Deep Synthesis Provisions (effective January 2023) regulate technologies that generate or alter images, audio, and video — including deepfakes — requiring clear labelling of synthetic content and prohibiting use for fraud or the fabrication of news.
Content security and "core socialist values": Generative AI providers must ensure that generated content does not violate Chinese law, undermine national security, or spread content contrary to socialist core values, and they must take measures to prevent discriminatory, false, or harmful output.
Labelling and provenance: The 2025 rules require both explicit labels (visible to users) and implicit markers (embedded metadata) for AI-generated content, aligning China with a broader international trend toward AI content provenance and watermarking.[3]
Development-oriented framing: Chinese regulators have repeatedly stated that the rules aim to balance safety with innovation, and the Interim Measures include provisions encouraging the development of generative AI, such as supporting independent research and international cooperation.
Applications and Impact
China's AI regulation affects the entire AI value chain within the country: foundation model developers (including Baidu's Ernie, Alibaba's Qwen, Zhipu's GLM, Moonshot's Kimi, and ByteDance's Doubao) must comply with filing, assessment, and content requirements to serve the Chinese market; platform companies must moderate AI-generated content; and foreign providers offering services to users in mainland China are also subject to the rules. The framework has shaped the global open-weight ecosystem as well — Chinese labs release models internationally under permissive licences while their domestic deployments remain regulated.
Internationally, China's approach is often compared with the EU's risk-based AI Act and the United States' executive orders and voluntary frameworks. Analysts note that China's model combines ex-ante licensing and filing with ex-post content moderation, and that its emphasis on state-directed content standards differs from Western approaches grounded in fundamental-rights frameworks. China has also promoted its own international governance vision, including the 2023 Global AI Governance Initiative and cooperation within the UN and ASEAN contexts.[1][2]
>See Also
References
China's AI regulatory framework is highly relevant to Malaysia because of deepening Malaysia-China technology ties and the presence of Chinese AI firms in the Malaysian market.
Chinese AI companies in Malaysia: Malaysian users and businesses commonly use AI products and services from Chinese providers — including TikTok/ByteDance, Alibaba Cloud, Huawei, and Chinese open-weight models such as Qwen and DeepSeek. Understanding Chinese regulatory requirements helps Malaysian organisations assess the compliance posture, data practices, and content policies of these providers.
Cross-border data flows: China's Personal Information Protection Law imposes strict conditions on transferring Chinese personal data abroad, and Malaysia's PDPA 2010 imposes its own cross-border transfer rules. Companies operating in both jurisdictions must reconcile two data-protection regimes, and the two governments have engaged in digital-economy and data-governance dialogue to facilitate trade.
Malaysian governance model: Malaysia's approach under the National AI Office (NAIO) and the AI Governance and Ethical Guidelines draws selectively on international practice, including the EU AI Act and China's measures, while tailoring rules to local conditions. Malaysia's position as a neutral hub between major AI powers is reflected in its engagement with both Western and Chinese technology ecosystems, including ASEAN-level AI governance cooperation.[4]
Sovereign AI and open weights: Chinese open-weight models (Qwen, GLM, DeepSeek) are popular bases for Malaysian developers fine-tuning local-language models, partly because their licences permit commercial use. Malaysian policymakers follow Chinese regulatory developments closely since changes to Chinese model release policies can affect the availability of these tools for local AI development.
References
- ↑[Regulation of artificial intelligence — Wikipedia](https://en.wikipedia.org/wiki/Regulation_of_artificial_intelligence)
- ↑[Artificial intelligence industry in China — Wikipedia](https://en.wikipedia.org/wiki/Artificial_intelligence_industry_in_China)
- ↑[Interim Measures for the Management of Generative AI Services — Cyberspace Administration of China](https://www.cac.gov.cn/2023-07/13/c_1690898327029107.htm)
- ↑[Stanford DigiChina — translations and analysis of Chinese digital policy](https://digichina.stanford.edu/)