Platform Economy & Data Regulation

The platform line is still managed normalization, but the minors' track has crossed from rule-writing into implementation. On 16 October CAC opened formal identification of "online platform service providers with huge numbers of minor users and significant impact on minors" (未成年人用户数量巨大和对未成年人群体具有显著影响的网络平台服务提供者), instructing platforms to self-assess and file ¹. This is the first instrument in the batch that produces a named list with numeric thresholds, which is what turns a principle into an enforceable status.

The thresholds are explicit and low enough to catch mainstream consumer apps. A platform whose product is aimed at minors qualifies at 10 million registered users or 1 million minor monthly actives; a general-audience platform qualifies at the same numbers counted among minors only. The legal base is the Minors' Online Protection Regulation plus the identification measures (认定办法) in force since 1 April 2026, and the guide says qualifying providers "shall proactively and promptly submit" materials. Structurally this is a designated-entity model: designation is the trigger, and the obligations that follow — product design, algorithm and content duties, data handling — attach to those on the list rather than to the whole market.

That sequencing matters because the duty-setting text is still open. CAC's 18 September draft State Council regulation on minors' healthy and safe internet use, which binds network service providers, smart-terminal manufacturers and app-distribution platforms to the best-interests-of-the-minor principle, closed for comment on 17 October and has not been finalised ². The designation guide now runs ahead of it: platforms are being asked to declare their exposure before the parent regulation's final wording is known. The standards channel remains where the audit tests get written, via the fourth-term SAC/TC260 roster rotated in on 3 September. Rule sets the duty, standards set the test, designation picks the target — and the third step just went live.

What has not changed is the absence of a punitive turn. There is no SAMR anti-monopoly decision, no CAC penalty under the PIPL or Data Security Law, and no finalised State Council platform regulation in this batch. The enforcement machinery Beijing is visibly proud of sits elsewhere: the Ministry of Emergency Management used its 16 October briefing to advertise unannounced inspections in 18 provinces and named-hazard media exposure under a "only stricter" (只会更严) banner ³. That apparatus is loud and pointed at mines and factories, not at platforms. Macro conditions give no reason to pivot — August industrial value-added rose 5.2% year on year and high-tech manufacturing 16.7% ⁴, with September CPI at 0.9% ⁵.

Outward, the register is still cooperation. Li Qiang at the Fifth Global Digital Trade Expo in Hangzhou on 24 September sold digital connectivity, bridging the digital divide and "improving digital governance", casting Chinese AI as open-source and a "digital ladder" ⁶, consistent with Xi Jinping's BRICS package in New Delhi on 12-13 September — an AI open-source zone, a digital industry cloud platform, a youth sci-tech exchange plan, with China chairing BRICS in 2027 ⁷. Geopolitical cyber friction still draws diplomacy, not regulation: Mao Ning on 9 October answered the US Justice Department's seizure of seven China-linked domains with rebuttal, naming no new platform or data-security measure ⁸. The industrial substrate keeps expanding on the supply side rather than through restriction — the Zhengzhou national supercomputing node's fully domestic 100,000-card AI cluster, built in July and shown at the Shenzhen high-performance computing conference, is the clearest symbol ⁹.

For operators outside China the practical reading is now sharper than "discount crackdown talk". The cost is coming through designation, not penalties. Any app store, smart-terminal maker or consumer platform serving Chinese users needs to measure minor registrations and minor monthly actives against the 10 million / 1 million lines and expect to file. Watch three things: the published designation list and how foreign-invested platforms are treated on it, the final text of the State Council minors' regulation after the 17 October cutoff, and whether designation is extended by analogy to algorithm or data-security obligations. Until one of those lands, the posture is normalization with a widening compliance perimeter. ^1,2