China, EU and United States side by side

15 pointers between the Chinese register and the EU and US registers. A pointer says the two texts cover the same ground, never that they say the same thing.

Chinese ruleEU actUS rule
Personal Information Protection Law of the People's Republic of China
个人信息保护法
GDPR — Regulation (EU) 2016/679: Both texts govern personal data and both reach processing outside their own territory.CCPA / CPRA: Both texts give the individual rights over data held about them.
Cybersecurity Law of the People's Republic of China
网络安全法
NIS2 — Directive (EU) 2022/2555: Both texts set security duties graded by how critical the entity is.NYDFS Part 500: Both texts require a written security programme and incident reporting.
Data Security Law of the People's Republic of China
数据安全法
GDPR — Regulation (EU) 2016/679: Article 48 of the GDPR also governs disclosure to an authority in another country.GLBA Safeguards Rule: Both texts require a named person responsible for the security programme.
Measures for the Security Assessment of Outbound Data Transfers
数据出境安全评估办法
GDPR — Regulation (EU) 2016/679: Chapter V of the GDPR governs the same step in the other direction, transfer out of the EU.No pointer in the register
Measures on the Standard Contract for Outbound Transfer of Personal Information
个人信息出境标准合同办法
GDPR — Regulation (EU) 2016/679: Article 46 of the GDPR uses standard clauses for the same purpose, without a filing step.No pointer in the register
Provisions on Facilitating and Regulating Cross-border Data Flows
促进和规范数据跨境流动规定
GDPR — Regulation (EU) 2016/679: Article 49 of the GDPR also names derogations for specific situations.No pointer in the register
Export Control Law of the People's Republic of China
出口管制法
No pointer in the registerFTC Section 5: Both regimes act on how an item or a service is actually used, not only how it is described.
Regulations on Export Control of Dual-Use Items
两用物项出口管制条例
No pointer in the registerNIST AI RMF: Both texts ask the exporter to document what the item can do before it is shipped.
Regulations on the Origin of Import and Export Goods
进出口货物原产地条例
No pointer in the registerNo pointer in the register
Regulations on Compulsory Product Certification (CCC)
强制性产品认证
AI Act — Regulation (EU) 2024/1689: Both regimes put a conformity step before a product reaches the market.No pointer in the register
Interim Measures for the Management of Generative AI Services
生成式人工智能服务管理暂行办法
AI Act — Regulation (EU) 2024/1689: Article 50 of the AI Act also requires generated content to be marked as generated.NIST AI RMF: Both texts ask the provider to document data sources and known limits of the model.
Provisions on the Management of Algorithmic Recommendation in Internet Information Services
互联网信息服务算法推荐管理规定
Digital Services Act — Regulation (EU) 2022/2065: Article 27 of the DSA also requires the main parameters of a recommender to be explained.No pointer in the register

Read this node in Chinese

The register states what the official texts say. It is not advice and it is not a verdict on any company.

ExploreWorldAI is operated by Valkiv Ventures AB (Reg. no. 556995-1311), Kungsgatan 8, 111 43 Stockholm, Sweden. EU-hosted, with data processing assessed against the GDPR. Contact: hello@exploreworldai.com.

Machine-readable summaries for AI agents: /llms.txt and /llms-full.txt.