每周数据法律资讯 Data Law Weekly（20260112—20260118）

1. 上海网信办发布2025年执法典型案例

1月16日，上海网信办发布2025年执法典型案例。这些案例涉及三大类型，一是企业未能依法履行网络数据安全主体责任，未采取有效安全防护措施，致使网络数据遭到攻击窃取而泄露；二是企业未能真正落实相关规定要求，导致数据违规出境造成个人信息安全风险；三是企业未能依法履行个人信息保护义务，违规收集、处理个人信息导致公民权益受到侵害。

【参见：

https://mp.weixin.qq.com/s/W_EDyn0NIltRWO72L7dVyA】

Shanghai Cyberspace Administration released 2025 enforcement typical cases

On January 16, the Shanghai Cyberspace Administration released its 2025 enforcement typical cases. These cases fall into three major categories: 1. Enterprises failing to fulfill their primary responsibility for cyber data security as required by law, neglecting to implement effective security measures, resulting in cyber data being attacked, stolen, and leaked; 2. Enterprises failing to genuinely implement relevant regulatory requirements, leading to illegal cross-border data transfers that pose risks to personal information security; 3. Enterprises failing to fulfill personal information protection obligations, resulting in illegal collection and processing of personal information that infringed upon citizens' rights and interests.

[Reference:

https://mp.weixin.qq.com/s/W_EDyn0NIltRWO72L7dVyA]

2. 交通运输部发布《交通运输数据安全管理办法（征求意见稿）》

1月14日，交通运输部发布了《交通运输数据安全管理办法（征求意见稿）》，面向社会公开征求意见。交通运输部负责综合交通运输和公路、水路领域数据安全管理工作。《办法》规定了交通运输数据分类分级、数据全生命周期安全管理、数据安全风险评估等相关要求。

【参见：

https://www.mot.gov.cn/yijianzhengji/dangqianzhengji/202601/t20260112_4196944.html?sessionid=】

Ministry of Transport released Draft Measures for the Administration of Transportation Data Security《交通运输数据安全管理办法（征求意见稿）》

On January 14, the Ministry of Transport released the “Measures for the Administration of Transportation Data Security (Draft for Comment)” for public consultation. The Ministry is responsible for overseeing data security management across integrated transportation systems and in the highway and waterway sectors. The Measures outline requirements for transportation data classification and grading, security management throughout the data lifecycle, and data security risk assessments.

[Reference:

https://www.mot.gov.cn/yijianzhengji/dangqianzhengji/202601/t20260112_4196944.html?sessionid=]

3. 台湾《人工智能基本法》正式施行

1月14日，台湾地区《人工智能基本法》正式实施。该法所定义的人工智能，系指具自主运行能力之系统，该系统透过输入或感测，经由机器学习及算法，可为明确或隐含之目标实现预测、内容、建议或决策等影响实体或虚拟环境之产出。该法规定了政府部门在管理和推动人工智能发展的相关原则性要求。

【参见：

https://www.president.gov.tw/Page/294/50131】

Taiwan's Artificial Intelligence Framework Act officially enforced

On January 14, Taiwan's Artificial Intelligence Framework Act officially took effect. The Act defines artificial intelligence as systems possessing autonomous operational capabilities. These systems, through input or sensing, utilize machine learning and algorithms to generate outputs—such as predictions, content, recommendations, or decisions—that impact physical or virtual environments for explicit or implicit objectives. The Act establishes fundamental requirements for government departments in managing and advancing AI development.

[Reference:

https://www.president.gov.tw/Page/294/50131]

4. 全国网安标委发布《人工智能应用安全指引总则》等4项网络安全标准实践指南征求意见稿

1月13日，全国网安标委发布《人工智能应用安全指引总则》《人工智能应用安全指引广播电视和网络视听》《用户使用人工智能安全指南》《人工智能训练数据清洗安全指南》等4项网络安全标准实践指南征求意见稿。

【参见：

https://mp.weixin.qq.com/s/Jlx43MKWzzfdlfvq_N73iA】

TC260 released drafts of four cybersecurity practice guidelines including “AI Application Security Guideline-General Provisions”（《人工智能应用安全指引总则》）

On January 13, the TC260 released drafts of four cybersecurity practice guidelines: “AI Application Security Guideline - General Provisions”（《人工智能应用安全指引总则》）, “AI Application Security Guideline - Television, and Online Audio-Visual Services”（《人工智能应用安全指引广播电视和网络视听》）, “User Guide for AI Application Security”（《用户使用人工智能安全指南》） and “Security Guidelines for AI Training Data Cleaning”（《人工智能训练数据清洗安全指南》）.

[Reference:

https://mp.weixin.qq.com/s/Jlx43MKWzzfdlfvq_N73iA]

1. 美国众议院通过《远程访问安全法》（Remote Access Security Act）

1月12日，美国众议院通过《远程访问安全法》（Remote Access Security Act）。该法案系对《2018年出口管制改革法（the Export Control Reform Act of 2018）》的修订，主要涉及法案所涉相关物项的远程访问管控。法案规定，“远程访问”是指外国人通过网络连接（包括互联网或云计算服务），从该物项物理所在地以外的地点，以蓄意、明知、鲁莽或过失的方式，访问本法管辖下的受美方管辖物项, 前提是部长认定对该物项的使用可能对美国的国家安全或外交政策构成严重风险。法案旨在限制外国对手通过云计算服务远程获取技术（包括人工智能芯片）的能力，从而对美国出口管制法律制度进行现代化更新。

【参见：

https://www.congress.gov/bill/119th-congress/house-bill/2683/text】

U.S. House of Representatives passed the Remote Access Security Act

On January 12, the U.S. House of Representatives passed the Remote Access Security Act. This legislation amends the Export Control Reform Act of 2018, primarily addressing remote access controls for items covered by the Act. The “remote access” in the Act as means access on a purposeful, knowing, reckless, or negligent basis to an item subject to the jurisdiction of the United States under this Act by a foreign person through a network connection, including the internet or a cloud computing service, from a location other than where the item is physically located if the Secretary determines that the use of the item could pose a serious risk to the national security or foreign policy of the United States. The legislation aims to modernize the U.S. export control legal framework by restricting adversaries’ ability to remotely access technologies—including artificial intelligence chips—via cloud computing services.

[Reference:

https://www.congress.gov/bill/119th-congress/house-bill/2683/text]

2. 美国政府批准向中国出口英伟达H200芯片

1月13日，美国政府批准英伟达向中国出售H200人工智能芯片。据悉，上述对华销售将由美国商务部负责审批和安全审查，美方还将从相关交易中收取约25%的费用。

【参见：

https://mp.weixin.qq.com/s/jYLAFtnw5FJwYTabJE2VyA】