China has broadened its trade secret protection framework to explicitly include data and algorithms, strengthening enforcement mechanisms as it seeks to prevent technology leaks during escalating US-China competition.
China's regulatory authorities expanded the definition of trade secrets to encompass data sets and artificial intelligence algorithms, closing gaps in existing intellectual property protections.
The move addresses vulnerabilities in current law, which primarily focused on traditional trade secrets like formulas and manufacturing processes. Data and AI systems—increasingly central to Chinese tech development—now receive explicit legal coverage.
Key Changes
The updated rules establish that proprietary data and algorithms qualify as trade secrets when they provide competitive advantage and are subject to reasonable protection measures. Companies must demonstrate they've taken steps to maintain confidentiality, including access controls and employee agreements.
Enforcement penalties include damages up to 5 million yuan (approximately $700,000) for violations, with provisions for injunctions and seizures of infringing materials.
Strategic Context
The expansion reflects Beijing's concerns about technology transfer and espionage as US restrictions tighten on Chinese tech access. Recent sanctions targeting semiconductor companies and AI capabilities have intensified pressure on Chinese firms to secure proprietary developments domestically.
Data and algorithms represent critical assets for Chinese companies in cloud computing, autonomous vehicles, and large language models. Enhanced legal protections aim to prevent employee departures, corporate espionage, and unauthorized data access that could benefit competitors.
Implementation
The rules apply to both state-owned and private enterprises. Foreign companies operating in China must also comply with the expanded definitions when handling data and algorithms.
Courts will assess trade secret status on a case-by-case basis, considering factors like information uniqueness, competitive value, and protection efforts. The framework creates both opportunities for enforcement and potential complications for multinational firms navigating dual IP regimes.
China's move signals continued emphasis on securing technological independence amid geopolitical tensions and reflects broader global trends toward stricter data governance.
Threat actors are deploying an AI-powered ransomware toolkit that automates Active Directory discovery and circumvents endpoint detection and response solutions. The advancement marks a significant escalation in ransomware attack sophistication.
Palo Alto Networks raised its adjusted earnings forecast, citing strong demand for security services as AI-related threats escalate concerns among enterprises and governments.
Password manager Dashlane disclosed that attackers compromised some customer accounts by brute-forcing its two-factor authentication system, gaining access to encrypted password vaults.
A Grand Theft Auto V cheat service suffered a security breach, with hackers stealing usernames, hashed passwords, and user data from thousands of gamers.