政务数据共享条例

Primary Framework and Governance Objectives

The regulations represent a shift from fragmented, department-specific data management to an integrated, national system. At its core, the legislation defines "government affairs data" as all data collected or generated by government departments and authorized organizations in the performance of their legal duties, excluding state and work secrets. The primary objective is to facilitate "secure, orderly, and efficient" sharing to prevent the redundancy of data collection and to improve the speed of administrative processes.

Under the new rules, government data sharing is no longer an optional collaborative effort but a mandatory administrative function governed by the principles of unified standards and law-based sharing. The State Council has designated specific departments to oversee this coordination, with the State Council department in charge of government data sharing leading the national effort, while local governments at the county level and above manage regional integration.

A Chronology of China’s Data Governance Evolution

The implementation of the Regulations on Government Affairs Data Sharing is the culmination of a decade-long legislative trajectory aimed at securing and monetizing data as a national resource.

November 2016: The Cybersecurity Law is adopted, establishing the first comprehensive framework for network security and data localization.
September 2021: The Data Security Law enters into force, classifying data based on its importance to national security and public interests.
November 2021: The Personal Information Protection Law (PIPL) is implemented, providing a legal basis for the protection of individual privacy in both the private and public sectors.
2022–2024: Various provincial pilots for "Big Data Bureaus" are tested in regions like Zhejiang and Guangdong, seeking to "break data islands" where departments refuse to share information.
June 2025: The State Council officially publishes the Regulations on Government Affairs Data Sharing.
August 1, 2025: The regulations officially take effect, mandating compliance across all administrative divisions.

Systematic Classification: The Three-Tier Sharing Model

One of the most significant features of the new regulations is the mandatory classification of data into three distinct sharing attributes. Article 14 of the regulations stipulates that all government data must be categorized to ensure clarity and remove bureaucratic bottlenecks:

Unconditional Sharing: Data that can be accessed by all government departments to facilitate general administrative functions. This typically includes basic corporate registration info, geographical data, and public service statistics.
Conditional Sharing: Data that is sensitive or specific to certain functions. It can only be shared with relevant departments under specific conditions, such as for law enforcement or specialized financial auditing.
Non-Sharing: Data that cannot be provided to other departments as clearly stipulated by existing administrative regulations or State Council decisions. This is strictly limited to prevent the misuse of the "non-sharing" label as a means of withholding information.

Article 15 explicitly forbids departments from "arbitrarily adding conditions" to impede data sharing, a move intended to address the historical reluctance of ministries to surrender control over their proprietary datasets.

Operational Standards and the "Data Source" Principle

To ensure the quality and accuracy of the shared information, the regulations introduce the concept of the "Data Source Department." When multiple departments are involved in collecting similar data, the department in charge of data sharing will designate a lead agency. This lead agency is responsible for the completeness and accuracy of the data, serving as the "single source of truth" for the rest of the government.

Furthermore, the regulations impose a "once-only" collection rule. Article 19 states that government departments must not repeatedly collect data from citizens or legal entities if that information can already be obtained through the national sharing system. This is expected to significantly reduce the administrative burden on businesses and individuals, who often have to submit the same documents to multiple agencies.

Timelines and Dispute Resolution

The regulations establish strict administrative timelines to prevent foot-dragging. Once a data sharing request is submitted:

The providing department must review the request and issue a reply within a specified timeframe.
If the request is approved, the data must be shared within 20 working days.
If a department finds that the shared data is inaccurate, the providing department must verify and correct the error within 10 working days of receiving a verification request.

In cases where departments disagree on whether data should be shared, a dispute resolution mechanism is established under Article 28. If consultation fails, the department in charge of data sharing at the same level will coordinate a solution. If a consensus still cannot be reached, the matter is escalated to the respective people’s government for a final decision.

Security, Privacy, and Technical Safeguards

Security remains a paramount concern within the framework. Article 34 mandates a multi-agency approach to security, involving cybersecurity, public security, and state security departments. The regulations adopt the principle of "whoever manages and uses is responsible," ensuring that the department receiving the data is legally liable for any leaks, tampering, or unauthorized use that occurs once the data has been transferred.

Technical measures such as cloud computing, artificial intelligence, and blockchain are encouraged to enhance the security and traceability of data transfers. Additionally, Article 36 addresses the role of third-party contractors. When government departments entrust private entities with the operation or maintenance of information systems, these contractors must fulfill strict security obligations and are strictly prohibited from accessing or retaining government data without explicit authorization.

Legal Liability and Accountability

Chapters VII of the regulations outlines a rigorous accountability system. Administrative sanctions and disciplinary actions will be imposed on officials who:

Fail to compile or update data catalogs.
Repeatedly collect data from the public.
Provide shared data to third parties without authorization.
Leak personal privacy or trade secrets.

In cases where "malpractice for personal gain" or "neglect of duty" results in a crime, criminal liability will be pursued. This focus on individual and departmental accountability is seen as a necessary deterrent to ensure the regulations are followed in practice, rather than just on paper.

Supporting Data and Economic Context

The push for integrated government data comes at a time when China’s digital economy is expanding rapidly. According to data from the China Academy of Information and Communications Technology (CAICT), China’s digital economy reached 53.9 trillion yuan (approximately $7.5 trillion) in 2023, accounting for 42.8% of the GDP.

Government-held data is estimated to account for roughly 70% to 80% of all high-value society-wide data. By unlocking these silos, the government aims to stimulate economic growth through "data element" utilization. Efficient data sharing is expected to:

Reduce government operating costs by an estimated 10-15% through the elimination of redundant systems.
Accelerate the "Cross-Province Direct Filing" system, allowing citizens to access services across different regions without physical travel.
Provide a better data foundation for macro-economic analysis and urban planning.

Official Responses and Inferred Implications

While official statements from the State Council emphasize "efficiency" and "service efficacy," analysts suggest the regulations also serve to centralize control over information. By integrating departmental data into a "national integrated government affairs big data system," the central government gains a more granular, real-time view of local administrative activities and economic trends.

Legal experts have noted that the regulations place a heavy emphasis on Article 37, which links back to the Personal Information Protection Law. This suggests that while data will move more freely between government offices, the legal barriers preventing that data from leaking into the private sector or being used for non-administrative purposes have been reinforced.

The broader impact of the Regulations on Government Affairs Data Sharing will likely be felt most immediately in the "G2B" (Government to Business) and "G2C" (Government to Citizen) sectors. As data flows become more seamless, the "One-Stop Service" model—where a single application triggers multiple departmental approvals—is expected to become the standard across China. This modernization of the state’s internal "nervous system" is a critical step in China’s long-term goal of becoming a global leader in digital governance by 2035.