Industrial Policy & Trade Monitor· 2667 actions· ✨ 89 recent

The Huadu District Government Office in Guangzhou (Guangdong Province) issued "Measures for Promoting High-Quality Development of New Energy and Intelligent Connected Vehicle Industries" (花府办规〔2025〕11号), effective upon issuance on 31 December 2025 for a two-year term. The package covers R&D-platform grants (up to RMB 100m per enterprise), model-promotion subsidies (up to RMB 50m per model), an L4+ autonomous-vehicle fleet-scale bonus (up to RMB 20m per enterprise), core-component investment rebates (1% of qualifying investment ≥RMB 50m, capped at RMB 300m), battery-production scale bonuses (up to RMB 60m for 5GWh+ output), at least RMB 200m for a "vehicle-road-cloud" integrated pilot zone (200+ autonomous vehicles, ~2,000 OBU retrofits), per-enterprise autonomous-fleet-operation subsidies (up to RMB 200m for qualifying passenger/cargo fleets), preferential industrial-land pricing (minimum 70% of benchmark rate), and facility-cost subsidies (up to RMB 150m/year for 3-5 years). It is a sub-provincial, district-level instrument implementing national NEV industrial-policy and the 2025-2026 Automobile Industry Stabilization and Growth Work Plan at the local level.

The General Office of the Fujian Provincial People's Government issued Min Zheng Ban [2025] No. 30, "Several Measures to Promote the Development of the Artificial Intelligence Industry and Empowerment Applications in Fujian Province," on 2025-11-04. The notice implements the national "AI+" initiative at provincial level via three quantified subsidy tracks: a talent-recruitment supplement of RMB 200,000/year per person for AI engineers registered on a provincial core-engineer roster; a compute subsidy covering up to 50% of annual cloud/compute-service spend (capped at RMB 500,000 per firm) for companies purchasing at least RMB 100,000 of computing services per year; and a one-time capital subsidy of up to 50% of build cost (capped at RMB 5,000,000) for qualifying AI innovation platforms. The measure is in force through 2028-12-31 (per GTA state-act revocation date) and is one of a wave of province- and city-level AI industrial-policy notices issued across China in late 2025.

The Beijing Economic-Technological Development Zone (BDA / Yizhuang) Management Committee issued Jingjiguanfa [2025] No. 15, "Several Measures on Promoting Quantum Technology and Industry Development in the Beijing Economic-Technological Development Zone," on 2025-07-14, effective immediately and in force through 2027-12-31. The package spans ten support lines covering the full quantum stack (computing hardware/software, communications, sensing): up to RMB 2,000,000 one-off support for disruptive early-stage R&D projects, R&D-investment matching at 20% of an enterprise's prior-year R&D spend capped at RMB 5,000,000, 1:1 matching up to RMB 30,000,000 for enterprises undertaking state/municipal quantum research tasks, RMB 500,000 per product for new-technology/product certifications, up to RMB 100,000 per flagship application-demonstration project, up to RMB 30,000,000/year (three years max) for quantum-computing cloud platforms and compute centers, up to RMB 5,000,000/year (three years max) for operating industry-ecosystem platforms, rent subsidies up to RMB 1.5/sqm/day (max 2,000 sqm, three years), and talent, financing ("patient capital"/future-industry guidance fund), and international- cooperation support. The zone targets an internationally influential quantum industry cluster by 2027.

The Cyberspace Administration of China (CAC) issued the Provisions on Promoting and Regulating Cross-Border Data Flows (《促进和规范数据跨境流动规定》) on 22 March 2024, effective immediately. The rules substantially raise the thresholds at which CAC security assessment, Standard Contractual Clauses (SCC), or Personal Information Protection Certification are required for outbound data transfers, and create categorical exemptions for contract performance, HR management, intra-group transfers below a volume threshold, and transit data processed in China with no domestic personal information introduced. A Free Trade Zone pilot mechanism allows designated FTZs (Shanghai Lingang, Tianjin, Beijing) to publish their own negative lists defining which data categories still require prior approval, easing conditions for multinationals with operations in those zones.

The Personal Information Protection Law of the People's Republic of China (中华人民共和国个人信息保护法 — PIPL) was adopted at the 30th meeting of the 13th NPC Standing Committee on 20 August 2021 and entered into force on 1 November 2021, constituting the third and final pillar of China's cybersecurity and data-governance regulatory trinity alongside the Cybersecurity Law (2016) and the Data Security Law (2021). The PIPL is China's comprehensive personal-information statute establishing consent-based and necessity-based legal bases for PI processing, a tiered cross-border personal-data transfer regime (CAC security assessment / PI protection certification / Standard Contractual Clauses), extraterritorial application (Art. 3) to non-Chinese controllers offering services to or analysing the behaviour of PRC residents, and a heightened protection regime for sensitive personal information and data of minors under 14. It mandates data-protection impact assessments, personal-information-protection-officer obligations at designated handlers, breach notification, and a full suite of data-subject rights including access, rectification, deletion, portability, objection, and automated- decision-making opt-out. Article 53 requires overseas controllers to establish a domestic representative or designated entity in China, providing a domestic enforcement counterparty.

The Data Security Law of the People's Republic of China (中华人民共和国数据安全法) was adopted at the 29th meeting of the 13th NPC Standing Committee on 10 June 2021 and entered into force on 1 September 2021, constituting the second pillar of China's cybersecurity and data-governance regulatory trinity alongside the Cybersecurity Law (2016) and the Personal Information Protection Law (2021). The DSL establishes a tiered data-classification regime — "important data" and "national core data" — with escalating security obligations including risk assessment, risk monitoring, breach reporting, and classified-protection requirements for data handlers. It introduces a data-export security review for "important data" generated or collected within China, the statutory parent authority operationalised by the 2024 CAC Cross-Border Data Flow Provisions, and enacts a §36 blocking statute prohibiting Chinese organisations and individuals from transferring data stored in China to foreign judicial or law-enforcement authorities without prior PRC government approval.

The Cybersecurity Law of the People's Republic of China (中华人民共和国网络安全法) was adopted at the 24th meeting of the 12th NPC Standing Committee on 7 November 2016 and entered into force on 1 June 2017, establishing the foundational legal framework for network security governance across all sectors. The law creates the Critical Information Infrastructure Operator (CIIO) designation and protection regime administered by the Cyberspace Administration of China (CAC), mandates data localisation for personal information and important data collected or generated by CIIOs in China, and establishes cross-border data-transfer security assessment requirements under Article 37 — the provision later operationalised by DSL 2021, PIPL 2021, and the 2024 CAC Cross-Border Data Flow Provisions. The CSL introduced multi-level protection scheme (等级保护制度 / MLPS) obligations for all network operators and network-product/service security-review procedures, under which CAC triggered the cybersecurity review of Didi Global in 2021 and the exclusion of Micron's products from Chinese critical-infrastructure projects in 2023.