Platform Economy & Data Regulation

The platform-economy regulatory line is unchanged: managed normalization through plans, rulemaking and standards, not enforcement. The newest documents add friction abroad and nothing at home. The 8 and 9 October MFA readouts are diplomacy only — state visits by Botswana and Togo, the South China Sea, and a US Justice Department seizure of seven internet domains tied to Chinese hackers — with no platform, data-security or anti-monopoly enforcement content ^1,2. There is again no SAMR anti-monopoly decision, no CAC action under the PIPL or Data Security Law, and no finalised State Council platform regulation in this set.

The live instrument remains CAC's 18 September draft State Council regulation on minors' healthy and safe internet use, open for comment until 17 October 2026 ³. Its reach is the story: it binds network service providers, makers of smart terminal products and app-distribution platforms to the best-interests-of-the-minor principle, grounded in the Minors Protection Law, the Cybersecurity Law and the PIPL ³. Design duties land on the device, the app store and the service at once, which is what makes it a template for product-level regulation rather than a one-off.

The standards channel is still where those duties become operable. CAC's 3 September notice rotates the National Cybersecurity Standardization Technical Committee (SAC/TC260) into its fourth term and reserves seats for well-known domestic and foreign-invested enterprises in cybersecurity, ICT, internet media, data security and AI ⁴. Data-localisation thresholds, security assessments, and AI and content standards are drafted inside this committee, and a minors' regime would need technical annexes of the same kind. MIIT's development plan for the information and communications industry for 2026-2030 supplies the same register from the industrial side, calling for a "technologically advanced, secure and controllable" system and an "agile and efficient governance system integrating technology and management" ⁵.

Outward, Beijing keeps exporting a cooperation register, not a crackdown. Premier Li Qiang used the Fifth Global Digital Trade Expo in Hangzhou on 24 September to sell digital connectivity, bridging the digital divide and "improving digital governance", casting China's AI route as open-source and a "digital ladder" others can climb ⁶. That matches Xi Jinping's BRICS package in New Delhi on 12-13 September — a BRICS AI open-source zone, a digital industry cloud platform and a youth sci-tech exchange programme, with China chairing BRICS in 2027 ⁷ — and Wang Xiaohong's 10 September pitch to build the Lianyungang-based International Alliance Combating Telecom and Cyber Fraud into a global anti-fraud platform ⁸.

The counter-signal is friction without a regulatory response. At the 9 September MFA briefing, spokesperson Mao Ning was asked about a US cybersecurity firm's claim that it built an AI hacking tool able to take over WeChat accounts (Tencent says it patched the flaw) and about CISA's accusation that DeepSeek and Moonshot AI stole US model technology; she called for AI "for good" and denied the allegations, but named no Chinese enforcement or data-security measure ⁹. The US domain seizures reported on 9 October fit the same pattern: geopolitical cyber friction met with diplomatic rebuttal, not with new platform rules ².

The rest is macro and industrial promotion. The National Bureau of Statistics reported August industrial value-added up 5.2% year-on-year, high-tech manufacturing up 16.7% and CPI up 0.8% ^10,11. MIIT Vice Minister Xie Yuansheng used the Shenyang Global Industrial Internet Conference to promise a stronger digital base for "AI plus manufacturing" ¹², and Liaoning's 18 excellence-grade and 1,312 basic or advanced-grade smart factories are capability-building, not policing ^13,14.

For outside readers the practical implication is unchanged: discount renewed-crackdown narratives, but budget for incremental compliance cost generated by planning, rulemaking and standards together. The minors' draft remains the first item here that would impose explicit product- and platform-design duties, potentially on non-Chinese terminal makers and app stores serving Chinese users. Near-term tests are the final minors' regulation text after 17 October, the published fourth-term TC260 roster, MIIT's implementing rules under the 2026-2030 ICT plan, and any fourth-quarter SAMR or CAC penalty announcements ^3,4,5.