Platform Economy & Data Regulation

The platform-economy regulatory line is unchanged: managed normalization carried by planning, rulemaking and standards, with enforcement held in reserve. Nothing in this batch moves it. The only documents not already reflected in this assessment are a US Federal Register notice approving Cboe's listing of binary options tied to issuer-reported key performance indicators ¹ and a 10 September State Council announcement that Xi Jinping would attend the 18th BRICS Summit in New Delhi ². Neither touches Chinese platform, data-security or anti-monopoly policy. There is no SAMR anti-monopoly decision here, no CAC action under the PIPL or the Data Security Law, and no finalised State Council platform regulation. For outside operators the practical reading stands: discount renewed-crackdown narratives, but budget for incremental compliance cost generated by drafting, standards and planning together.

The live instrument remains CAC's 18 September draft State Council regulation on minors' healthy and safe internet use, open for comment until 17 October 2026 ³. Its significance is reach, not novelty: it binds network service providers, makers of smart terminal products and app-distribution platforms to the best-interests-of-the-minor principle, grounded in the Minors Protection Law, the Cybersecurity Law and the PIPL. Because the duties attach simultaneously to the device, the app store and the service, it is a template for product-level regulation rather than a one-off content rule. Nothing in this batch signals the text will be softened before the comment deadline closes.

The standards channel is where those duties become operable. CAC's 3 September notice rotated the National Cybersecurity Standardization Technical Committee (SAC/TC260) into its fourth term, reserving seats for well-known domestic and foreign-invested enterprises across cybersecurity, ICT, internet media, data security and AI. Data-localisation thresholds, security assessments and AI and content standards are drafted inside that committee, and a minors' regime would need technical annexes of exactly that kind. MIIT's 2026-2030 plan for the information and communications industry supplies the same register from the industrial side, calling for a "technologically advanced, secure and controllable" system and an "agile and efficient governance system integrating technology and management". This is the mechanism to watch: rulemaking sets the duty, standards set the audit test.

Outward, Beijing keeps exporting a cooperation register, not a crackdown. Premier Li Qiang used the Fifth Global Digital Trade Expo in Hangzhou on 24 September to sell digital connectivity, bridging the digital divide and "improving digital governance", casting China's AI route as open-source and a "digital ladder" others can climb ⁴. That matches Xi Jinping's BRICS package in New Delhi on 12-13 September — a BRICS AI open-source zone, a digital industry cloud platform and a youth sci-tech exchange programme, with China chairing BRICS in 2027 ^5,2 — and Wang Xiaohong's 10 September pitch to build the Lianyungang-based International Alliance Combating Telecom and Cyber Fraud into a global anti-fraud platform ⁶. The domestic industrial counterpart is the Shenyang Global Industrial Internet Conference on 9 September, where MIIT Vice Minister Xie Yuansheng promised a stronger digital base for "AI plus manufacturing" ⁷.

The counter-signal is friction without a regulatory response. At the 9 September MFA briefing, spokesperson Mao Ning was asked about a US cybersecurity firm's claim that it built an AI hacking tool able to take over WeChat accounts (Tencent says it patched the flaw) and about CISA's accusation that DeepSeek and Moonshot AI stole US model technology; she called for AI "for good" and denied the allegations, but named no Chinese enforcement or data-security measure ⁸. The US Justice Department's seizure of seven China-linked internet domains, raised at the 9 October briefing, fits the same pattern: geopolitical cyber friction met with diplomatic rebuttal, not new platform rules ⁹.

The sharpest contrast is with enforcement elsewhere in the same government. The Ministry of Emergency Management used its 16 October briefing to advertise unannounced inspections, media exposure of named hazards and a "only stricter" posture, sending teams into 18 provinces over the Mid-Autumn and National Day holidays using the "four noes and two straights" method ¹⁰. That machinery — public shaming, surprise inspection, named targets — exists and is being used loudly; it is simply not pointed at platforms. Macro data give Beijing no reason to change course: August industrial value-added rose 5.2% year on year and high-tech manufacturing 16.7% ¹¹, while September CPI came in at 0.9% against 0.8% in August ¹².

Near-term tests are concrete: the final minors' regulation text after the 17 October deadline, the published fourth-term TC260 roster, MIIT's implementing rules under the 2026-2030 ICT plan, and any fourth-quarter SAMR or CAC penalty announcements ³. The minors' draft remains the first item here that would impose explicit product- and platform-design duties, potentially on non-Chinese terminal makers and app stores serving Chinese users.