China’s Ministry of Commerce is holding talks with Alibaba, ByteDance, and Z.ai about restricting overseas access to the country’s most advanced AI models — including Qwen, Doubao, GLM-5.2, and DeepSeek R1. Open-source was China’s global distribution strategy. DeepSeek and Qwen…
Cross-border data transfers to China are moving back into the European regulatory spotlight. Ireland’s Data Protection Commission (DPC) has launched a formal GDPR investigation into Shein over the transfer of European user data to China. Key Focus Areas • Whether…
Two Chinese State Council decrees entered into force on April 7, 2026 — with no transition period, no grace period, and no implementing guidelines. For any organization subject to EU law that maintains commercial relationships with Chinese entities, these regulations…
Two Chinese State Council decrees. No transition period. No implementing guidelines. Immediate effect. If your organization is subject to NIS2, the CRA, or GDPR — and you have Chinese suppliers or processors — you are now operating inside a structural…
Cross-border data transfers are under increasing regulatory scrutiny in 2026. United Kingdom The United Kingdom’s Information Commissioner’s Office (ICO) issued updated guidance clarifying when a “restricted transfer” occurs under UK GDPR, introducing a practical 3-step test and reinforcing the need…
For years, personal data compliance in China has lived in a comfortable grey zone for foreign companies. Yes, policies were written. Yes, consent banners were added. Yes, someone somewhere was named “PIPO” on an org chart. But audits? Structured, evidence-driven,…
On 22 Nov 2025, China issued draft regulations imposing enhanced privacy and security obligations on large online platforms. Who Counts as a “Large Platform”? • At least 50M registered users, or • At least 10M MAU, or • Platforms providing important…
China has just approved a major amendment to its Cybersecurity Law, effective January 1, 2026 — the first overhaul since 2016. The revision integrates AI governance directly into China’s cybersecurity framework, signaling a clear message: Oversight now extends beyond traditional network risks to include AI…
China’s public security authority announced that Dior’s Shanghai branch committed serious violations of China’s data protection laws by transferring Chinese customer data to its headquarters in France without mandatory legal safeguards. Background The issue traces back to a breach in…
Part 5/6: [S8fe.ai’s Manifesto] If the digital economy is the new trade economy, then cross-border data flows are its shipping lanes—and those lanes urgently need modern customs checkpoints. Today, most data leaves a country without documentation, taxation, or even awareness—a…
