英中贸易协会数字经济工作组长期致力于在数字及数据领域的政策和商业交流，在倡导、合作和信息共享三大核心支柱之上，促进中英双方深化合作交流。

作为工作组活动的一部分，英中贸易协会携手LexisNexis律商联讯，为您每月准时送上数字经济监管动态、典型案例、专家解读等内容。

北京市网信办等三部门印发《北京市数据跨境流动便利化综合配套改革实施方案》

Beijing Releases Comprehensive Reform Plan to Facilitate Cross-Border Data Flows

【2025-03-27】

2025年3月27日，北京市网信办、北京市商务局、北京市政务服务和数据管理局联合印发了《北京市数据跨境流动便利化综合配套改革实施方案》，规定了数据跨境流动的总体目标、工作原则、主要任务、保障措施四大方面的内容，围绕政策、应用、服务、技术、生态、监管六方面，提出了24项具体举措：

（一）营造高效透明可预期的政策环境，包括实现负面清单倍增扩面、探索建立负面清单自贸试验区外适用机制、建立重点行业领域重要数据识别认定机制、实施个人信息出境个人信息保护认证制度、积极对接国际高标准经贸规则；

（二）加快推动数据跨境多主体高频流通应用，包括打造生物医药领域数据跨主体流通利用标杆、促进更多领域数据跨主体流通利用、分领域靶向解决企业复杂业务场景数据出境需求；

（三）全面提升政务服务能级，包括深化数据出境“绿色通道”跨层级跨部门服务机制、实施“减时间、减材料、减费用”专项行动、提升北京数据跨境服务中心效能、上线北京市数据跨境流动公共服务平台V2.0、出台区级企业合规激励与数据服务产业促进政策、完善常态化政企沟通机制；

（四）强化可信流通技术赋能，包括加快推进数据流通安全技术应用、推广跨境数据安全治理自动化处理工具、前瞻布局数据跨境流动基础设施、加快建设“国际数据口岸”；

（五）培育合规服务产业生态，包括推动企业数据出境安全治理能力稳步提升、引导规范第三方服务市场发展、高标准建设运营北京数据跨境服务平台公司、组建北京数据跨境合规服务产业联盟；

（六）优化全链条全领域安全监管，包括实施“信用+风险”分级分类精准监管、“综合+行业+属地”协同监管机制。

On March 27, 2025, the Beijing Municipal Cyberspace Administration, the Beijing Municipal Commerce Bureau, and the Beijing Municipal Bureau of Government Services and Data Management jointly issued the Implementation Plan for the Comprehensive Supporting Reform to Facilitate Cross-Border Data Flows in Beijing Municipality. The Plan sets out the overall objectives, guiding principles, key tasks, and safeguard measures for cross-border data flows, outlining 24 specific measures across six key areas—policy, application, service, technology, ecosystem, and regulation:

(1) Fostering an efficient, transparent, and predictable policy environment: a: Expand the coverage of the negative list; b. Explore mechanisms for applying the negative list beyond the pilot free trade zone; c. Establish mechanisms for identifying and designating important data in key industries; d. Implement a personal information protection certification system for outbound cross-border transfers of personal information; e. Align actively with high-standard international economic and trade rules.

(2) Accelerating and advancing high-frequency, multi-stakeholder cross-border data flows and applications: a. Create model use cases for cross-entity data flow and utilization in the biopharmaceutical sector; b. Promote cross-entity data flow and utilization within more sectors: c. Provide targeted, sector-specific solutions for outbound data transfer needs in complex business scenarios.

(3) Comprehensively enhancing government service capabilities: a. Deepen the cross-hierarchical, cross-departmental “green channel” mechanism for outbound data transfers; b. Implement special initiatives to reduce processing time, documentation requirements, and costs; c. Improve the performance of the Beijing Cross-Border Data Service Center; c. Launch Version 2.0 of the Beijing Municipal Public Service Platform for Cross-Border Data Flow; d. Introduce district-level policies to incentivize corporate compliance and promote the data services industry; e. Refine regular communication mechanisms between government and enterprises.

(4) Empowering trusted data flows through technology: a. Accelerate and advance the application of security technologies for data flows; b. Promote the use of automated tools for cross-border data security governance; c. Proactively plan for foundational infrastructure supporting cross-border data flows; d. Expedite the development of an “International Data Port”.

(5) Cultivating a service ecosystem for compliance: a. Drive enterprises to steadily enhance their data security governance capabilities; b. Guide and regulate the development of the third-party services market; c. Develop the Beijing Service Platform Company for Cross-Border Data Transfers and operate it to high standards; d. Establish service industry alliances in Beijing for cross-border data transfer compliance.

(6) Optimizing security regulation across all processes and sectors: a. Implement a tiered and categorized precision regulation model based on credit and risk; b. Establish a coordinated regulatory mechanism involving general, sectoral, and territorial authorities

国家网信办发文总结《促进和规范数据跨境流动规定》实施一周年积极成效

CAC Reviews Achievements from the First Year of Cross-Border Data Flow Facilitation and Regulation Implementation

【2025-03-21】

2025年3月21日，国家网信办发文总结，促进和规范数据跨境流动规定》自2024年3月22日实施一年来数据出境安全管理工作取得积极成效，主要包括：1.一批数据跨境便利化措施陆续出台，企业普遍反响积极；2.数据出境安全评估用时大幅缩减，安全评估工作效率明显提升；3.多地发布自贸试验区数据出境负面清单，负面清单制度实施初见成效；4.数据出境安全管理政策宣贯更加深入，企业数据出境合规能力持续提升；5.积极开展多双边数字治理对话交流，数据跨境对外合作稳步推进。

On March 21, 2025, the Cyberspace Administration of China (CAC) published an article summarizing the positive outcomes achieved during the first year since the Provisions on Facilitating and Regulating Cross-Border Data Flow came into effect on March 22, 2024. Key achievements in cross-border data security management include: 1. The rollout of a series of facilitation measures for cross-border data flows, which have received widespread positive feedback from enterprises; 2. A significant reduction in the time required for cross-border data security assessments, with a notable improvement in assessment efficiency; 3. The release of negative lists for cross-border data flows for pilot free trade zones in several regions, with initial progress seen in the implementation of the negative list mechanism; 4. Enhanced outreach and education on cross-border data security management policies, contributing to the ongoing improvement of enterprises’ compliance capabilities; and 5. Active participation in bilateral and multilateral dialogues and exchanges on digital governance, steadily advancing international cooperation on cross-border data flows.

国家网信办发布关于印发《人工智能生成合成内容标识办法》的通知

CAC Issues Measures for Labeling AI-Generated and Synthesized Content

【2025-03-14】

2025年3月14日，国家网信办等四部门正式发布《人工智能生成合成内容标识办法》，配套强制性国家标准《网络安全技术 人工智能生成合成内容标识方法》（GB 45438-2025）以及配套实践指南《网络安全标准实践指南——人工智能生成合成内容标识 服务提供者编码规则》亦同时发布。该办法明确了人工智能生成合成内容标识的两种形式，即显式标识和隐式标识，并对相关主体的义务和管理部门等进行了规定，自2025年9月1日起施行。

On March 14, 2025, the Cyberspace Administration of China (CAC), together with three other authorities, officially released the Measures for Labeling AI-Generated and Synthesized Content. Alongside the Measures, the mandatory national standard Cybersecurity Technology – Labeling Methods for AI-Generated and Synthesized Content (GB 45438-2025) and the accompanying practice guide Cybersecurity Standard Practice Guide – Labeling of AI-Generated and Synthesized Content: Encoding Rules for Service Providers were also issued. The Measures define two forms of labeling for AI-generated and synthesized content – explicit labeling and implicit labeling – and outline the obligations of relevant entities, as well as the responsibilities of regulatory authorities. The Measures will come into effect on September 1, 2025.

For further enquiries please click here.