每周数据法律资讯 Data Law Weekly（20250106-20250112）

1、国家网信办发布《网络信息内容多渠道分发服务机构相关业务活动管理规定（草案稿）》

1月10日，国家网信办发布《网络信息内容多渠道分发服务机构相关业务活动管理规定（草案稿）》，向社会公开征求意见。网络信息内容多渠道分发服务机构（MCN机构）是指在网络信息内容服务平台入驻，为网络信息内容生产者提供策划、制作、营销、经纪等相关服务的机构。《规定》从MCN机构的入驻、备案登记、网络信息内容服务平台的管理责任及MCN机构的内容审核义务等方面着手对MCN机构相关业务活动进行规范。

全文链接：

https://mp.weixin.qq.com/s/ssDEIaKa1IZfWBeUgSfIyQ

1. The CAC released Administrative Provisions on Business Activities of Network Information Content Multi-Channel Distribution Service Organizations (Draft)

On January 10, the CAC released Administrative Provisions on Business Activities of Network Information Content Multi-Channel Distribution Service Organizations (Draft) (“网络信息内容多渠道分发服务机构相关业务活动管理规定（草案稿）”) for public opinions. Multi-Channel Distribution Service Organization of Network Information Content (MCN Organization) refers to organizations that settle in online information content service platforms and provide planning, production, marketing, brokerage, and other related services for online information content producers. The Provisions regulate the relevant business activities of MCN Organization from the aspects of their stationing, filing and registration, the management responsibility of network information content service platforms, and the content auditing obligations of MCN organizations.

[https://mp.weixin.qq.com/s/ssDEIaKa1IZfWBeUgSfIyQ]

2、国家网信办发布2024年生成式人工智能服务已备案信息

1月8日，国家互联网信息办公室发布2024年生成式人工智能服务已备案信息的公告。2024年，网信部门会同有关部门按照《生成式人工智能服务管理暂行办法》要求，持续开展生成式人工智能服务备案工作。截至2024年12月31日，共302款生成式人工智能服务在国家网信办完成备案，其中2024年新增238款备案；对于通过API接口或其他方式直接调用已备案模型能力的生成式人工智能应用或功能，2024年共105款生成式人工智能应用或功能在地方网信办完成登记。

全文链接：

https://mp.weixin.qq.com/s/gOnPIuexMgB4UcUisvJLuQ

2. The CAC released the filing information of generative artificial intelligence services in 2024

On January 8, the CAC released the announcement of the filing information of generative AI services in 2024. In 2024, the cyberspace administration department together with relevant departments continued to carry out the filing of generative AI services in accordance with the requirements of the Interim Measures for the Administration of Generative Artificial Intelligence Services（“生成式人工智能服务管理暂行办法”）. As of December 31, 2024, a total of 302 generative AI services had completed filing with the CAC, of which 238 were newly filed in 2024; for generative AI applications or functions that directly invoke the capabilities of filed models through API interfaces or other means, a total of 105 generative AI applications or functions had completed registration in 2024 with local cyberspace administration offices.

[https://mp.weixin.qq.com/s/gOnPIuexMgB4UcUisvJLuQ]

3、中国汽车工业协会发布关于汽车数据处理4项安全要求检测情况的通报（第二批）

1月7日，中国汽车工业协会发布关于汽车数据处理4项安全要求检测情况的通报（第二批）。自2024年9月起，中国汽车工业协会、国家计算机网络应急技术处理协调中心组织对汽车制造商汽车产品数据安全合规情况（涵盖车外人脸信息等匿名化处理、默认不收集座舱数据、座舱数据车内处理、处理个人信息显著告知等4项合规要求）进行检测。其中比亚迪等9家企业的139款车型符合汽车数据安全4项合规要求。

全文链接：

http://www.caam.org.cn/chn/1/cate_3/con_5236617.html

3. China Association of Automobile Manufacturers Released Circular on the Detection of 4 Safety Requirements for Automotive Data Processing (Second Batch)

On January 7, China Association of Automobile Manufacturers issued a circular on the testing of 4 safety requirements for automotive data processing (second batch). Since September 2024, China Association of Automobile Manufacturers and the National Computer Network Emergency Response Technical Team/Coordination Center have been organizing the testing of automobile manufacturers' automotive product data security compliance (covering 4 compliance requirements, such as anonymized processing of face information outside the vehicle, no collection of cabin data by default, in-vehicle processing of cabin data, and notification of significant information on the processing of personal information). Among them, 139 models from 9 companies, meet the 4 compliance requirements for automotive data security.

[http://www.caam.org.cn/chn/1/cate_3/con_5236617.html]

4、国家数据局等部门发布《国家数据基础设施建设指引》

1月6日，国家发改委、国家数据局、工信部联合印发《国家数据基础设施建设指引》。国家数据基础设施是从数据要素价值释放的角度出发，面向社会提供数据采集、汇聚、传输、加工、流通、利用、运营、安全服务的一类新型基础设施，是集成硬件、软件、模型算法、标准规范、机制设计等在内的有机整体。《指引》阐述了国家数据基础设施概念内涵、发展愿景、总体功能、总体架构，从数据流通利用、算力底座、网络支撑、安全防护等四个方面指明具体建设方向。

全文链接：

4. The National Data Administration and other departments released Guidelines for National Data Infrastructure Construction

On January 6, the National Development and Reform Commission, the National Data Administration and the Ministry of Industry and Information Technology jointly released the Guidelines for the Construction of National Data Infrastructure (“国家数据基础设施建设指引”). National data infrastructure is a new type of infrastructure that provides data collection, aggregation, transmission, processing, circulation, utilization, operation, and security services for the society from the perspective of releasing the value of data elements, and it is an organic whole that integrates hardware, software, modeling algorithms, standard specifications, and mechanism design. The Guidelines set out the conceptual connotation, development vision, overall function and overall structure of the national data infrastructure, and specify the specific construction direction in four aspects, including data circulation and utilization, arithmetic base, network support and security protection.

[https://www.ndrc.gov.cn/xxgk/zcfb/tz/202501/t20250106_1395455_ext.html]

5、爱奇艺起诉AI企业MiniMax侵犯版权

近日，根据网传报道，爱奇艺已向上海市徐汇区人民法院提起诉讼，指控国内人工智能企业MiniMax未经授权使用了爱奇艺享有版权的素材进行模型训练，要求MiniMax立即停止侵权行为，并索赔约10万元人民币。而MiniMax方面则可能提出抗辩，声称所涉素材为公开资源或由用户输入，并试图依据技术中立原则来免除自身的法律责任。

5. iQIY sues AI firm MiniMax for copyright infringement

Recently, according to online reports, iQIY has filed a lawsuit with Shanghai Xuhui District People's Court, accusing MiniMax, a domestic AI enterprise, of unauthorized use of iQIY's copyrighted materials for model training, demanding MiniMax to immediately stop the infringing behavior and claiming for about RMB 100,000. MiniMax may put forward a defense, claiming that the material in question is a public resource or input by users, and attempting to exempt itself from legal liability on the basis of the principle of technology neutrality.

1、欧盟法院裁定购票时要求提供性别称谓违反了GDPR的数据最小化原则

欧盟法院（CJEU）在C-394/23 Mousse案中裁定，法国铁路公司SNCF Connect在网上购票时要求提供性别称谓（如先生或女士）不符合GDPR的数据最小化原则。欧盟法院认为，表明性别身份并非履行铁路运输合同的必要条件，使用性别中性语言可能是一种干扰性较低的替代方法。裁决还强调，个人数据处理必须是出于合法利益的需要，并应告知客户，且不得侵犯其基本权利，包括性别认同歧视的风险。

点击以下链接查阅完整判决书：

https://curia.europa.eu/juris/document/document.jsf?text=&docid=294110&pageIndex=0&doclang=FR&mode=req&dir=&occ=first&part=1&cid=1728710

1. CJEU ruled gender titles in ticket purchases violate GDPR's data minimization principle

The Court of Justice of the European Union (CJEU) ruled in Case C-394/23 Mousse that requiring a title (e.g., Mr or Ms) for online ticket purchases by French railway SNCF Connect does not comply with the GDPR's data minimization principle. The CJEU found that indicating gender identity is not essential for the performance of a rail transport contract and that using gender-neutral language could be a less intrusive alternative. The ruling also emphasized that personal data processing must be necessary for a legitimate interest, which customers should be informed about, and must not infringe on fundamental rights, including the risk of gender identity discrimination.

[Click on the following link for the full judgment:

https://curia.europa.eu/juris/document/document.jsf?text=&docid=294110&pageIndex=0&doclang=FR&mode=req&dir=&occ=first&part=1&cid=1728710]

2、越南《电信法》关于在互联网上提供基本电信服务等规定生效

1月1日，越南第24/2023/QH15号《电信法》第72条第3款和第4款的规定生效，涉及关于在互联网上提供基本电信服务、数据中心服务、云计算服务的规定。越南《电信法》于2023年11月24日发布，除前述条款外，其余条款于2024年7月1日生效。该法规定了在互联网上提供基础电信服务的企业享有的权利及其义务，包括进行电信服务登记和申报。此外，该法还规定了提供数据中心服务和云计算服务的企业的权利及其义务，如进行注册并通知其服务等。

点击以下链接查阅完整法律条文：

https://vanban.chinhphu.vn/?pageid=27160&docid=209631&classid=1&typegroupid=3

2. Provisions of Vietnam's Telecommunications Law on the provision of basic telecommunication services on the Internet, etc. enter into force

On January 1, the provisions of paragraphs 3 and 4 of Article 72 of Vietnam's Law on Telecommunications No.24/2023/QH15 came into force regarding the provision of basic telecommunication services, data center services, and cloud computing services on the Internet. Vietnam's Telecommunications Law has been issued on November 24, 2023 and came into force on July 1, 2024, except for the aforementioned articles. The Law provides for the rights of enterprises providing basic telecommunication services on the Internet and their obligations, including registration and declaration of telecommunication services. In addition, the Law also provides for the rights of businesses providing data center services and cloud computing services and their obligations, such as registering and notifying their services.

[Click on the following link to access the full text of the law:

https://vanban.chinhphu.vn/?pageid=27160&docid=209631&classid=1&typegroupid=3]