Regulates generative AI services in mainland China, emphasizing legal compliance, societal ethics, and security. Encourages innovation while preventing discrimination and protecting personal information. Mandates providers to ensure content accuracy, transparency, and user privacy. Enforces penalties for non-compliance.
Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.
Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.
All other risk subdomains had no coverage in this document.
Risk Coverage Summary
The document has good coverage of approximately 10-12 subdomains, with strong focus on discrimination and toxicity (1.1, 1.2), privacy and security (2.1, 2.2), misinformation (3.1, 3.2), malicious actors (4.1, 4.3), and AI system safety (7.3, 7.4). Coverage is concentrated in content safety, data protection, and operational reliability domains.
Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.
Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.
All other sectors had no coverage in this document.
Sectors Summary
This document primarily governs the Information sector, specifically organizations providing generative AI services through data processing, telecommunications, and broadcasting. It also has limited applicability to Educational Services and Arts/Entertainment sectors where generative AI is used, though other state provisions may take precedence in those areas.
Hard Law
Legislative Status Summary
This is a binding regulatory instrument issued by multiple Chinese government ministries with mandatory language, explicit enforcement mechanisms including penalties and sanctions, and formal legal authority under Chinese cybersecurity and data protection laws.
Proposer
Target
Enforcer
Monitor
Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems
AI Lifecycle Summary
The document comprehensively covers multiple AI lifecycle stages with particular emphasis on Build and Use Model, Deploy, and Operate and Monitor stages. It addresses data collection and processing, model development, deployment requirements, and ongoing operational monitoring with detailed governance measures for each stage.
Terms relating to technical scope that are mentioned or implicitly referenced in the document
Technical Scope Summary
The document explicitly focuses on generative AI services and technology, defining it as models and technologies that generate content such as text, images, audio, or video. It does not distinguish between frontier AI, general purpose AI, or task-specific AI, nor does it mention foundation models, compute thresholds, or open-weight models. The scope is broad, covering all generative AI services provided to the public in mainland China.
Document data from AGORA, CSET Emerging Technology Observatory.