Platform Economy & Data Regulation

The platform-economy regulatory line has not moved: it is still managed normalization carried by plans, rulemaking and standards, with enforcement held in reserve. This batch contains no SAMR anti-monopoly decision, no CAC action under the PIPL or the Data Security Law, and no finalised State Council platform regulation. The 8 and 9 October MFA readouts are diplomacy — state visits by Togo and Botswana, the Second Thomas Shoal, and a US Justice Department seizure of seven internet domains tied to Chinese hackers — with no platform, data-security or anti-monopoly content ^1,2. The one genuinely new datapoint is the September CPI print of 0.9% year on year, up from 0.8% in August ³, which shifts the macro backdrop by a rounding error and not at all the policy stance.

The live instrument remains CAC's 18 September draft State Council regulation on minors' healthy and safe internet use, open for comment until 17 October 2026 ⁴. Its reach is the story: it binds network service providers, makers of smart terminal products and app-distribution platforms to the best-interests-of-the-minor principle, grounded in the Minors Protection Law, the Cybersecurity Law and the PIPL. Design duties land on the device, the app store and the service at once, which makes it a template for product-level regulation rather than a one-off. Nothing in this batch suggests the text will be softened before the deadline.

The standards channel is still where those duties become operable. CAC's 3 September notice rotates the National Cybersecurity Standardization Technical Committee (SAC/TC260) into its fourth term and reserves seats for well-known domestic and foreign-invested enterprises in cybersecurity, ICT, internet media, data security and AI. Data-localisation thresholds, security assessments and AI and content standards are drafted inside this committee, and a minors' regime would need technical annexes of the same kind. MIIT's 2026-2030 plan for the information and communications industry supplies the same register from the industrial side, calling for a "technologically advanced, secure and controllable" system and an "agile and efficient governance system integrating technology and management".

Outward, Beijing keeps exporting a cooperation register, not a crackdown. Premier Li Qiang used the Fifth Global Digital Trade Expo in Hangzhou on 24 September to sell digital connectivity, bridging the digital divide and "improving digital governance", casting China's AI route as open-source and a "digital ladder" others can climb ⁵. That matches Xi Jinping's BRICS package in New Delhi on 12-13 September — a BRICS AI open-source zone, a digital industry cloud platform and a youth sci-tech exchange programme, with China chairing BRICS in 2027 ⁶ — and Wang Xiaohong's 10 September pitch to build the Lianyungang-based International Alliance Combating Telecom and Cyber Fraud into a global anti-fraud platform ⁷. The domestic industrial counterpart is the Shenyang Global Industrial Internet Conference on 9 September, where MIIT Vice Minister Xie Yuansheng promised a stronger digital base for "AI plus manufacturing" ⁸.

The counter-signal is friction without a regulatory response. At the 9 September MFA briefing, spokesperson Mao Ning was asked about a US cybersecurity firm's claim that it built an AI hacking tool able to take over WeChat accounts (Tencent says it patched the flaw) and about CISA's accusation that DeepSeek and Moonshot AI stole US model technology; she called for AI "for good" and denied the allegations, but named no Chinese enforcement or data-security measure ⁹. The US domain seizures reported on 9 October fit the same pattern: geopolitical cyber friction met with diplomatic rebuttal, not with new platform rules.

The sharpest contrast in this batch is with enforcement elsewhere. The Ministry of Emergency Management used its 16 October briefing to advertise unannounced inspections, media exposure of named hazards and a "only stricter" posture, sending teams into 18 provinces over the Mid-Autumn and National Day holidays ¹⁰. That machinery — public shaming, surprise inspection, named targets — exists and is being used loudly; it is simply not being pointed at platforms. The macro data give Beijing no reason to change course: August industrial value-added rose 5.2% year on year and high-tech manufacturing 16.7% ¹¹, while September CPI came in at 0.9% against 0.8% in August ³.

For outside readers the practical implication is unchanged: discount renewed-crackdown narratives, but budget for incremental compliance cost generated by planning, rulemaking and standards together. The minors' draft remains the first item here that would impose explicit product- and platform-design duties, potentially on non-Chinese terminal makers and app stores serving Chinese users. Near-term tests are the final minors' regulation text after 17 October, the published fourth-term TC260 roster, MIIT's implementing rules under the 2026-2030 ICT plan, and any fourth-quarter SAMR or CAC penalty announcements ⁴.