每周数据法律资讯 Data Law Weekly（20250908—20250914）

1. 国家网信办发布《促进和规范电子单证应用规定（征求意见稿）》

9月13日，国家网信办发布《促进和规范电子单证应用规定（征求意见稿）》。电子单证，是指采用数据电文形式，能够证明当事人之间存在货物运输、仓储、货物保险等法律关系的单证，包括电子提单、电子多式联运单证、电子海运单、电子铁路货运单、电子航空货运单、电子仓单、电子货物保险单等。电子单证包括可转让电子单证和不可转让电子单证。《规定》旨在促进和规范电子单证推广应用，提高货物贸易和运输数字化水平，降低全社会物流成本，保障电子单证活动当事人合法权益，维护国家安全和社会公共利益。

【点击查阅《规定》全文：

https://mp.weixin.qq.com/s/kNjnnmVq0EsGnzJUHQoB9A】

The CAC released “Regulations on Promoting and Standardizing the Application of Electronic Documents (Draft for Comment)”（《促进和规范电子单证应用规定（征求意见稿）》）

On September 13, the Cyberspace Administration of China released the “Regulations on Promoting and Standardizing the Application of Electronic Documents (Draft for Comment).” Electronic documents refer to data-based instruments that can prove the existence of legal relationships between parties concerning goods transportation, warehousing, cargo insurance, etc. They include electronic bills of lading, electronic multimodal transport documents, electronic ocean waybills, electronic railway consignment notes, electronic air waybills, electronic warehouse receipts, and electronic cargo insurance policies. Electronic documents encompass both negotiable and non-negotiable types. The Regulations aim to promote and standardize the application of electronic documents, enhance the digitalization of goods trade and transportation, reduce logistics costs across society, safeguard the legitimate rights and interests of parties involved in electronic document activities, and protect national security and public interests.

[Click to view the full text of the Regulations:

https://mp.weixin.qq.com/s/kNjnnmVq0EsGnzJUHQoB9A]

2.《网络安全法（修正草案）》公布

9月12日，十四届全国人大常委会第十七次会议对《中华人民共和国网络安全法（修正草案）》进行了审议并公开征求意见。修正草案对现行《网络安全法》作出如下修改：对未履行网络安全责任的处罚内容进行了细化；增加了大量数据泄露、关键基础设施丧失局部功能、主要功能等严重危害网络安全后的处罚规定；增加了销售或提供未经安全认证、安全检测相关的网络关键设备和网络专用产品的处罚规定；在用户“实名制”违规方面，拓宽了主管机关责令整改的业务范畴，将“关闭网站”调整为“关闭网站或者应用程序”；针对违法发布或传输信息的行为，补充了未按规定采取处置措施的处罚规定；对于侵害个人信息、数据安全的行为的处罚明确依照有关规定处罚；增加从轻、减轻或不予处罚的情形的规定。

【参见：

http://www.npc.gov.cn/flcaw/userIndex.html?lid=ff80818198a7ecd401993be8b36b6327】

Cybersecurity Law（Revised Draft）released

On September 12, the 17th Session of the Standing Committee of the 14th National People’s Congress reviewed the PRC Cybersecurity Law（Revised Draft）and solicited public feedback. The Revised Draft modifies the existing Cybersecurity Law as follows: specifications for penalties regarding failure to fulfill cybersecurity responsibilities have been detailed; adds penalties for severe cybersecurity breaches such as massive data leaks, partial or major functional loss of critical infrastructure; introduces penalties for selling or providing uncertified or untested critical network equipment and specialized network products; expands the scope of rectification orders by competent authorities for violations of the “real-name registration” system, replacing “website shutdown” with “website or application shutdown”; for illegal publication or transmission of information, it supplements penalties for failure to take prescribed disposal measures; penalties for infringing upon personal information and data security are explicitly defined as being imposed in accordance with relevant regulations; and provisions for mitigating, reducing, or waiving penalties are added.

[Reference:

http://www.npc.gov.cn/flcaw/userIndex.html?lid=ff80818198a7ecd401993be8b36b6327]

3. 国家网信办发布《大型网络平台设立个人信息保护监督委员会规定（征求意见稿）》

9月12日，国家网信办发布《大型网络平台设立个人信息保护监督委员会规定（征求意见稿）》。《个人信息保护法》明确规定，提供重要互联网平台服务、用户数量巨大、业务类型复杂的个人信息处理者，应当成立主要由外部成员组成的独立机构对个人信息保护情况进行监督。本次发布的《征求意见稿》是对上述规定的具体细化。《征求意见稿》规定，个人信息保护监督委员会成员人数应与大型网络平台业务规模、用户数量等相匹配，一般不得少于7人，外部成员占比不低于三分之二；监督委员会应当至少每三个月召开一次定期会议，就大型网络平台个人信息保护监督事项进行审议，并作出监督意见。

【参见：

https://mp.weixin.qq.com/s/y_ElMIb4CZJZyx0t2oOAdA】

The CAC released “Establishing Personal Information Protection Oversight Committees for Large Online Platforms(Draft for Comments)”（《大型网络平台设立个人信息保护监督委员会规定（征求意见稿）》）

On September 12, the Cyberspace Administration of China（CAC） released “Establishing Personal Information Protection Oversight Committees for Large Online Platforms(Draft for Comments)”（《大型网络平台设立个人信息保护监督委员会规定（征求意见稿）》. The PRC Personal Information Protection Law explicitly stipulates that personal information processors providing critical internet platform services, serving a massive user base, or handling complex business types must establish independent oversight bodies composed primarily of external members to monitor personal information protection practices. The Draft provides specific details for the aforementioned provisions. It stipulates that the number of committee members should be commensurate with the platform’s business scale and user base, generally not fewer than seven members, with external members constituting no less than two-thirds of the total. The committee must convene regular meetings at least quarterly to deliberate on personal information protection matters and issue oversight opinions.

[Reference:

https://mp.weixin.qq.com/s/y_ElMIb4CZJZyx0t2oOAdA]

4. 小红书因破坏网络生态被网信部门查处

9月11日，国家网信办发布资讯，称针对小红书平台未落实信息内容管理主体责任，在热搜榜单重点环节频繁呈现多条炒作明星个人动态和琐事类词条等不良信息内容，破坏网络生态问题，国家网信办指导上海市网信办，依据《网络信息内容生态治理规定》等有关规定，对小红书平台采取约谈、责令限期改正、警告、从严处理责任人等处置处罚措施。

【参见：

https://mp.weixin.qq.com/s/4x1r2ix8IqzBO20gzYb6RQ】

Rednote was penalized by cyberspace authorities for disrupting online ecosystem

On September 11, the CAC announced that Rednote had failed to fulfill its primary responsibility for content management. The platform frequently featured multiple entries promoting celebrity gossip and trivial matters on its trending topics list, thereby disseminating harmful content and undermining the online ecosystem. The CAC directed the Cyberspace Administration of Shanghai to impose disciplinary measures on Rednote in accordance with the “Regulations on the Governance of the Online Information Content Ecosystem”(《网络信息内容生态治理规定》) and other relevant provisions. These measures include formal interviews, orders to rectify within a specified timeframe, warnings, and strict disciplinary actions against responsible personnel.

[Reference:

https://mp.weixin.qq.com/s/4x1r2ix8IqzBO20gzYb6RQ]

5. 国家网信办发布第十三批深度合成服务算法备案信息公告

9月11日，国家网信办公开发布第十三批境内深度合成服务算法备案信息。具体信息可通过互联网信息服务算法备案系统（https://beian.cac.gov.cn）进行查询。《互联网信息服务深度合成管理规定》第十九条明确规定，具有舆论属性或者社会动员能力的深度合成服务提供者，应当按照《互联网信息服务算法推荐管理规定》履行备案和变更、注销备案手续。深度合成服务技术支持者应当参照履行备案和变更、注销备案手续。

【参见：

https://www.cac.gov.cn/2025-09/11/c_1759222331638208.htm】

The CAC released announcement on the 13th batch of deep synthesis service algorithm filing Information

On September 11, the CAC publicly released the 13th batch of filing information for deep synthesis service algorithms within China. Specific information can be queried through the Internet Information Service Algorithm filing System (https://beian.cac.gov.cn). Article 19 of the Provisions on the Administration of Deep Synthesis Services for Internet Information Services （《互联网信息服务深度合成管理规定》）explicitly stipulates that providers of deep synthesis services with public opinion attributes or social mobilization capabilities shall comply with the filing, amendment, and cancellation procedures as stipulated in the Provisions on the Administration of Algorithm Recommendation for Internet Information Services（《互联网信息服务算法推荐管理规定》）. Technical support providers for deep synthesis services shall refer to these provisions for filing, amendment, and cancellation procedures.

[Reference:

https://www.cac.gov.cn/2025-09/11/c_1759222331638208.htm]

6. 国家网络安全通报中心通报69款违法违规收集使用个人信息的移动应用

9月10日，国家网络安全通报中心对69款存在违法违规收集使用个人信息情况的移动应用进行了通报。这些移动应用存在的问题包括：在App首次运行时未通过弹窗等明显方式提示用户阅读隐私政策等收集使用规则；隐私政策难以访问；隐私政策未逐一列出App（包括委托的第三方或嵌入的第三方代码、插件）收集使用个人信息的目的、方式、范围等；向其他个人信息处理者提供其处理的个人信息的，未向个人告知接收方的名称或者姓名、联系方式、处理目的、处理方式和个人信息的种类，并取得个人的单独同意；未在征得用户同意后才开始收集个人信息或打开可收集个人信息的权限；个人信息处理者处理敏感个人信息的，未向个人告知处理敏感个人信息的必要性以及对个人权益的影响；个人信息处理者处理不满十四周岁未成年人个人信息的，未制定专门的个人信息处理规则；收集未成年人信息未取得监护人单独同意；未采取相应的加密、去标识化等安全技术措施等。

【参见：

https://mp.weixin.qq.com/s/8yDgXMZxSkAeXmsSGD3lrg】

National Cybersecurity Notification Center issued the notice on 69 mobile Apps violating personal information collection and use regulations

On September 10, the National Cybersecurity Notification Center issued a notice regarding 69 mobile applications found to be illegally collecting and using personal information. The issues identified include: failure to prominently notify users via pop-ups or similar methods to review privacy policies and data collection rules upon initial app launch; inaccessible privacy policies; privacy policies failing to itemize the purposes, methods, and scope of personal information collection and use by the app (including third-party contractors or embedded third-party code/plugins); when providing processed personal information to other processors, failing to inform individuals of the recipient’s name, contact details, processing purpose, methods, and types of personal information, and failing to obtain separate consent; processing personal information collection or enabling collection permissions without prior user consent; when processing sensitive personal information, failing to inform individuals of the necessity of such processing and its impact on their rights and interests; when processing personal information of minors under the age of fourteen, processors have failed to establish specific personal information processing rules as well as have failed to obtain separate consent from the guardian; failing to implement corresponding security technical measures such as encryption and de-identification.

[Reference:

https://mp.weixin.qq.com/s/8yDgXMZxSkAeXmsSGD3lrg]

7. 国家网信办发布生成式人工智能服务已备案信息公告（2025年7月至8月）

9月10日，国家网信办发布生成式人工智能服务已备案信息公告（2025年7月至8月）。公告称，7月至8月，新增99款生成式人工智能服务在国家网信办完成备案，对于通过API接口或其他方式直接调用已备案模型能力的生成式人工智能应用或功能，由地方网信办开展登记，本阶段新增27款完成登记。截至2025年8月31日，累计有538款生成式人工智能服务完成备案，263款生成式人工智能应用或功能完成登记。

【参见：

https://mp.weixin.qq.com/s/T8vhj9NpAlgSqelIgqAw-Q】

The CAC released announcement on the filed information of generative AI services (July–August 2025)

On September 10, the CAC released announcement on the filed information of generative AI services during July and August 2025. The announcement stated that from July to August, 99 new generative AI services completed filing with the CAC. For generative AI applications or functionalities that directly invoke capabilities of filed models via API interfaces or other means, registration is conducted by local cyberspace administration offices. During this phase, 27 such applications or functionalities completed registration. As of August 31, 2025, a cumulative total of 538 generative AI services have completed filing, while 263 generative AI applications or functionalities have completed registration.

[Reference:

https://mp.weixin.qq.com/s/T8vhj9NpAlgSqelIgqAw-Q]

8. 北京互联网法院发布涉AI案件典型案例

9月10日，北京互联网法院召开涉人工智能案件审理情况新闻发布会，对涉人工智能案件特点、案件审理面临的挑战、审理思路及典型案例进行了发布，并针对性地提出了妥善化解此类纠纷的对策建议。发布会发布了八起涉人工智能典型案例，明确了“AI文生图”的法律属性及权利归属的认定、自然人声音权益可及于AI生成声音、未经权利人许可使用AI合成的名人声音用于“带货”构成侵权，委托推广商家应承担连带责任、未经授权对包含他人肖像的视频进行“AI换脸”处理构成对他人个人信息权益的侵害、网络平台利用算法工具检测AI生成内容但未尽到合理适度说明义务的应承担违约责任、利用AI软件恶搞丑化他人肖像构成人格权侵权、具有独创性的虚拟数字人形象构成美术作品、未经同意创造自然人的AI形象构成对人格权的侵害等裁判规则。

【参见：

https://mp.weixin.qq.com/s/B8X-NH8pt6L4Ago7owe42w】

Beijing Internet Court released representative AI-related cases

On September 10, the Beijing Internet Court held a press conference on the adjudication of AI-related cases. It outlined the characteristics of such cases, challenges in adjudication, judicial approaches, and representative cases, while proposing targeted solutions for resolving these disputes. The conference released eight representative AI-related cases, clarifying: The legal nature and rights attribution of “AI text-to-image” generation; natural persons’ voice right extend to AI-generated voices; unauthorized use of AI-synthesized celebrity voices for product endorsements constitutes infringement as well as the merchants who are entrusted to promote shall be joint liability; unauthorized “AI face swapping” on videos containing others’ portraits infringes personal information rights; online platforms using algorithmic tools to detect AI-generated content but failing to fulfill reasonable disclosure obligations shall bear liability for breach of contract; using AI software to parody or defame others’ portraits constitutes infringement of personality rights; original virtual digital human images constitute works of art; creating AI images of natural persons without consent infringes upon personality rights.

[Reference:

https://mp.weixin.qq.com/s/B8X-NH8pt6L4Ago7owe42w]

9. 工业和信息化部等六部门联合部署开展汽车行业网络乱象专项整治行动

9月10日，工业和信息化部、中央社会工作部、中央网信办、国家发展改革委、公安部、市场监管总局等六部门近日联合印发《关于开展汽车行业网络乱象专项整治行动的通知》，决定在全国范围内开展为期3个月的汽车行业网络乱象专项整治行动。本次专项整治行动将集中整治非法牟利、夸大和虚假宣传、恶意诋毁攻击等网络乱象，提升涉汽车企业网络乱象处置质效，督促企业规范营销宣传行为，营造良好舆论环境，护航汽车产业高质量发展。

【参见：

https://mp.weixin.qq.com/s/y6PE1MWj1k71WQ_IeUdlMw】

Six Ministries jointly launch special campaign to tackle online malpractices in automotive industry

On September 10, six ministries—including the Ministry of Industry and Information Technology, the Central Social Work Department, the Cyberspace Administration of China, the National Development and Reform Commission, the Ministry of Public Security, and the State Administration for Market Regulation—jointly issued the “Notice on Launching a Special Campaign to Tackle Online Malpractices in the Automotive Industry.” They decided to conduct a nationwide three-month special campaign targeting online malpractices within the automotive sector. This campaign will focus on addressing online misconduct such as illegal profiteering, exaggerated and false advertising, and malicious defamation. It aims to enhance the quality and efficiency of handling online misconduct involving automotive enterprises, urge companies to standardize their marketing and promotional activities, foster a positive public opinion environment, and safeguard the high-quality development of the automotive industry.

[Reference:

https://mp.weixin.qq.com/s/y6PE1MWj1k71WQ_IeUdlMw]

10. 国家能源局发布《能源行业数据安全管理办法（试行）》（征求意见稿）

9月10日，国家能源局发布了《能源行业数据安全管理办法（试行）》（征求意见稿），《办法》适用于在中华人民共和国境内开展能源行业数据处理活动及其安全监督管理，能源行业数据，是指在开展能源活动中收集和产生的数据。能源活动主要包括与能源相关的规划、建设、生产、储运、消费等。与城市燃气、供热、加油站等能源活动相关的数据应遵守有关主管部门规定。《办法》将能源行业数据分为一般、重要、核心三级，明确了能源行业数据处理者应当履行的数据安全责任相关规定。

【点击查阅《办法》全文：

https://www.nea.gov.cn/20250912/1ed9acfc3f80490c8203e25af2a41495/c.html】

National Energy Administration released “Administrative Measures for Data Security in the Energy Sector (Trial)” (Draft for Comment)（《能源行业数据安全管理办法（试行）》（征求意见稿））

On September 10, the National Energy Administration released the “Administrative Measures for Data Security in the Energy Sector (Trial)” (Draft for Comment). These Measures apply to data processing activities and their security supervision and management within the energy sector in the People's Republic of China. Energy sector data refers to data collected and generated during energy-related activities. Energy activities primarily include energy-related planning, construction, production, storage, transportation, consumption, and other related operations. Data related to energy activities such as urban gas, heating, and gas stations shall comply with the regulations of the relevant competent authorities. The Measures classify energy industry data into three tiers: general, important, and core. They specify the data security responsibilities that energy industry data processors must fulfill.

[Click to view the full text of the Measures:

https://www.nea.gov.cn/20250912/1ed9acfc3f80490c8203e25af2a41495/c.html]

11. 迪奥（上海）公司因未依法履行个人信息保护义务被属地公安机关处罚

9月9日，公安网安部门公布对迪奥（上海）公司未依法履行个人信息保护义务案的行政调查结果。今年5月，多家媒体报道法国时尚消费品牌迪奥发生数据泄露事件，中国大陆地区用户也陆续收到迪奥官方警示短信。对此，公安网安部门组织对迪奥（上海）公司依法开展行政调查。经查，迪奥（上海）公司存在三项违法事实：一是未通过数据出境安全评估、订立个人信息出境标准合同或通过个人信息保护认证，违规向法国迪奥总部传输用户个人信息。二是向法国迪奥总部提供用户个人信息前，未向用户充分告知其个人信息境外接收方的处理方式，未取得用户“单独同意”。三是未对收集的个人信息采取加密、去标识化等安全技术措施。属地公安机关依据《个人信息保护法》规定，对迪奥（上海）公司依法予以行政处罚。

【参见：

https://mp.weixin.qq.com/s/0NZ852z1Jo7w4HkYiGJgVg】

Dior (Shanghai) Company was penalized by local public security authorities for failing to legally fulfill personal information protection obligations

On September 9, the public security cybersecurity department announced the results of its administrative investigation into the case of Dior (Shanghai) Company’s failure to legally fulfill personal information protection obligations. In May this year, multiple media outlets reported a data breach incident involving the French fashion and luxury brand Dior, with users in mainland China subsequently receiving official warning messages from Dior. In response, the public security cyber security department conducted a lawful administrative investigation into Dior (Shanghai) Company. The investigation revealed three violations: First, Dior (Shanghai) Company illegally transmitted user personal information to Dior’s headquarters in France without undergoing a data cross-border security assessment, establishing a standard contract for personal information cross-border transfer, or obtaining personal information protection certification. Second, prior to providing user personal information to Dior’s headquarters in France, the company failed to adequately inform users about the processing methods of the overseas recipient of their personal information and did not obtain users’ “separate consent”. Third, it failed to implement security technical measures such as encryption and de-identification for the collected personal information. The local public security authorities imposed administrative penalties on Dior (Shanghai) Co., Ltd. in accordance with the PRC Personal Information Protection Law.

[Reference:

https://mp.weixin.qq.com/s/0NZ852z1Jo7w4HkYiGJgVg]

12. 某运输公司OA系统因数据泄露风险被青海网信办处罚

9月9日，青海网信办发布一起网络安全违法行为资讯。资讯称，青海省互联网信息办公室在日常巡查监测中发现省内某运输公司建设的OA系统存在认证绕过漏洞。经查，该公司OA系统存储一定数量的个人敏感数据，数据库直接暴露在互联网端，利用系统漏洞可以查看、复制存储的数据，形成数据泄露风险。该公司未能履行网络安全和数据安全保护义务，存在网络安全违法行为。青海省互联网信息办公室依据《中华人民共和国网络安全法》第五十九条第一款规定，对该公司作出责令改正，予以警告的行政处罚。

【参见：

https://mp.weixin.qq.com/s/qnPwaDs20etTmL1Oc3sE0A】

Cyberspace Administration of Qinghai penalized a transportation company for OA system data leakage risk

On September 9, the Cyberspace Administration of Qinghai released information regarding a cybersecurity violation. The notice stated that during routine monitoring, the Cyberspace Administration of Qinghai discovered an authentication bypass vulnerability in the OA system developed by a local transportation company. Upon investigation, it was found that the company’s OA system stored a significant amount of sensitive personal data. The database was directly exposed to the internet, allowing attackers to exploit the vulnerability to view and copy stored data, posing a risk of data leakage. The company failed to fulfill its obligations regarding cybersecurity and data security protection, constituting a violation of cybersecurity regulations. In accordance with Article 59, Paragraph 1 of the PRC Cybersecurity Law, the Cyberspace Administration of Qinghai imposed administrative penalties on the company, ordering it to rectify the violations and issuing a formal warning.

[Reference:

https://mp.weixin.qq.com/s/qnPwaDs20etTmL1Oc3sE0A]

13. 上海网信办部署售楼处有关场景下人脸识别技术应用治理工作

9月9日，上海市网信办近日牵头市房管局、市市场监管局等行业主管部门、监管执法部门，聚焦“售楼处安装视频监控设备并通过对视频中采集的人脸信息鉴别签约客户来源”这一细分治理场景召开会议，部署工作要求。会议发布了关于售楼处落实“安装视频监控设备并用以采集人脸信息鉴别客户来源”的合规要求，指导各售楼处做好“设备安装”“落实‘告知同意’”“事前评估及日常管理”等3方面合规要求。

【参见：

https://mp.weixin.qq.com/s/LzsW_Mx8aekKdthxMO_abA?click_id=12】

Shanghai Cyberspace Administration deployed Governance Measures for Facial Recognition Technology in Sales Offices

On September 9, the Shanghai Cyberspace Administration recently convened a meeting with industry regulators including the Municipal Housing Authority and the Municipal Market Regulation Bureau, focusing on the specific governance scenario of “installing video surveillance equipment in sales offices and using facial information collected from videos to identify the origin of signing clients.” The meeting outlined work requirements. The meeting released compliance requirements for sales offices implementing “video surveillance equipment installation and facial recognition for customer source identification,” guiding them to meet three key compliance aspects: “equipment installation,” “implementation of ‘informed consent,’” and “pre-assessment and daily management.”

[Reference:

https://mp.weixin.qq.com/s/LzsW_Mx8aekKdthxMO_abA?click_id=12]

1. 欧盟《数据法案》（Data Act）正式施行

9月12日，欧盟《数据法案》正式施行。欧盟《数据法案》旨在为包括消费者与商家在内的用户赋权，让他们对汽车、智能电视和工业机械等连接设备生成的数据有更大的控制权，法案为公平、创新和有竞争力的欧洲数据经济奠定了基础。法案规定，应确保欧盟市场上的互联设备的设计允许数据共享；应让消费者有可能选择更多的服务，而不必依赖设备制造商；应让制造业或农业等行业的企业用户能够访问有关工业设备性能的数据，从而为提高效率和优化运营创造机会；应让消费者轻松传输数据并在云服务商之间切换；应禁止可能阻碍数据共享的不公平合同等。

【点击查阅法案全文：

https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=OJ:L_202302854&qid=1757765271344】

EU Data Act entered into application

On September 12, EU Data Act entered into application. The Data Act is designed to empower users — both consumers and businesses — by giving them greater control over the data generated by their connected devices, such as cars, smart TVs, and industrial machinery. It lays the foundation for a fair, innovative, and competitive European data economy. With this aim, the Data Act: ensures that connected devices on the EU market are designed to allow data sharing; gives consumers the possibility to choose more services, without having to rely on the manufacturer of the device; gives business users in industries like manufacturing or agriculture access to data about the performance of industrial equipment opening up opportunities to enhance efficiency and optimise operations; allows consumers to easily transfer data and switch between cloud providers; prohibits unfair contracts that could prevent data-sharing.

[Click to view the full text of the Act:

https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=OJ:L_202302854&qid=1757765271344]

2. 欧盟发布《与法规2023/2854（数据法案）相配套的车辆数据指南》【Guidance on Vehicle Data, Accompanying Regulation 2013/2854(Data Act)】

9月12日，即欧盟《数据法案》正式施行当日，欧盟发布《与法规2023/2854（数据法案）相配套的车辆数据指南》(Guidance on Vehicle Data, Accompanying Regulation 2013/2854(Data Act))。该车辆数据指南为汽车利益相关者提供了如何实施《数据法案》第二章的具体建议。指南目的是解释《数据法案》的关键义务（（如本指南第19段所定义），重点是《数据法案》第二章范围内的数据和适用的访问规则，其具体明确了数据法案中定义的原始数据、预处理数据、推断或衍生数据，在汽车产品中的示例。需要说明的是，该指南仅涉及汽车行业，包括整车制造商（OEM）、供应商、售后服务提供商和保险提供商，其内容不能自动推及到其他行业或公共部门。

【参见：

https://digital-strategy.ec.europa.eu/en/library/guidance-vehicle-data-accompanying-data-act】

EU published Guidance on Vehicle Data, Accompanying Regulation 2013/2854(Data Act)

On September 12, the day of the EU Data Act officially came into application, the EU published the Guidance on Vehicle Data, Accompanying Regulation 2013/2854(Data Act). This guidance on vehicle data provides tailored advice to automotive stakeholders on how to implement Chapter II of the Data Act. It aims to explain the key obligations of the Data Act as they relate to vehicle data as defined in paragraph 19 of this guidance, focusing on the data that fall within the scope of Chapter II of the Data Act and on the applicable access rules, with specific examples illustrating the definitions of raw data, pre-processed data, inferred or derived data as defined in the Data Act within automotive products. It should be noted that this guidance applies exclusively to the automotive sector, encompassing original equipment manufacturers (OEMs), suppliers, aftermarket service providers, and insurance providers. Its content cannot therefore be automatically extrapolated to other industries or to the public sector.

[Reference:

https://digital-strategy.ec.europa.eu/en/library/guidance-vehicle-data-accompanying-data-act]