Veeam Completes Acquisition of Securiti AI to Create the Industry’s First Trusted Data Platform for Accelerating Safe AI at Scale

View

Understanding the Shanghai AI Regulations

Contributors

Anas Baig

Product Marketing Manager at Securiti

Adeel Hasan

Sr. Data Privacy Analyst at Securiti

CIPM, CIPP/Canada

Published September 26, 2023

Listen to the content

AI is no longer the future; it has well and truly become the present. What may have seemed like science fiction a few years ago has become mainstream. This has seismically impacted countries' attitudes toward AI development worldwide. Proactive measures are being undertaken to ensure no gulf in technology occurs.

The Regulations for the Promotion of the Development of the Artificial Intelligence Industry in Shanghai Municipality, more commonly known as Shanghai AI Regulations, intend to lay the groundwork for Shanghai to be China's AI-related innovation hub.

Passed at the 44th meeting of the Standing Committee of the 15th Shanghai Municipal People's Congress on September 22, 2022, these regulations introduce a set of instructions on how the local bodies in Shanghai, particularly at the municipal level, can leverage supercomputing infrastructure, data centers, financing, human resources, and AI technological leaps for the benefit of the city's AI industry and its overall governance.

The regulations came into effect on October 1, 2022. Here's all you need to know about these regulations.

1. Applicability

The regulations apply to all activities directly and indirectly related to the development of AI Science & Technology (S&T), industrial development, application empowerment, and industrial governance within the administrative region of Shanghai.

2. The Objective of Shanghai AI Regulations

The main objective of the regulations is to strengthen Shanghai's leadership at all levels, including the municipality, district, and township, to organize the formulation of AI industry development plans and incorporate them into national economic and social development plans.

In addition, the regulations also offer in-depth guidance on conflict resolution of major issues in AI S&T innovation, industry cultivation, application scenario construction, and industrial ecosystem construction.

3. Key Provisions & Subsequent Guidelines For Local Bodies

Here’s what each of the Shanghai AI Regulation’s key provisions states about the role and responsibility of the municipal government as well as other relevant departments:

a. General Provisions

The regulations provide for the responsibilities of the municipal government, district governments, and township governments for the purposes of strengthening the AI industry. For example, the regulations task the municipal governments to undertake appropriate measures to encourage all citizens and organizations to carry out innovative activities within the field of AI as long as laws, regulations, and relevant national and municipal regulations do not prohibit such activities.

The municipal governments are also required to proactively seek international cooperation via regular participation at the China International Import Expo, World Artificial Intelligence Conference, and other exhibitions to provide an appropriate cooperation platform for all relevant stakeholders in the development and governance of the AI industry.

Similarly, the municipal government is also tasked with undertaking appropriate measures to promote the popularization of AI S&T by publicizing new developments, achievements, and breakthroughs within the AI industry via the use of radio, television, newspapers, and the Internet.

b. Basic Factors of Production

The regulations require the Municipal Economic & Informatization Department, the Municipal Development & Reform Department, and other relevant departments to collaborate and strengthen the planning of "computing power" infrastructure, promote the green and low-carbon development of such infrastructure, and support relevant entities that carry out the construction of the infrastructure. The Municipal Economic & Informatization Department is directly responsible for collaborating with other departments within the municipality and S&T departments to develop measures and mechanisms guaranteeing the stable supply of computing power resources.

To achieve the above goals, the municipal government is responsible for taking, among others, the following steps:

  • implement and develop the "East-West Compute Transfer" project, cooperate with the other provinces and cities in the Yangtze River Delta to build the national hub node for the national integrated big data center system;
  • undertake appropriate measures to optimize the layout of the data center, improve the cross-network and cross-regional interaction capabilities, and develop appropriately designed localized data centers of their own to meet the demand computing demands of the AI industry in Shanghai;
  • initiate steps to promote the construction of high-quality data sets in the AI field; and
  • encourage all organizations involved in developing AI applications to carry out their transactions via the Shanghai Data Exchange to create data value and ensure all data circulation is done in accordance with the appropriate laws and regulations.

c. S&T Innovation

With respect to bringing S&T innovation in the region, the municipal government is tasked with the following:

  • formulating policies and mechanisms that encourage and incentivize educational and research institutions to carry out basic theoretical research and R&D on major scientific issues within AI;
  • dedicating special resources to strategic emerging industry projects with support for AI industry innovation, industrial foundation reengineering, and demonstrable industrial applications;
  • promoting the reform of any existing scientific research projects and methods by empowering AI innovation teams, promoting talents with greater technical approach decision-making authority, and adopting a flexible salary system to introduce incentive measures for researchers within major AI S&T research projects; and
  • establishing incentive mechanisms to promote all S&T theoretical achievements into practical applications within the AI field.

d. Industrial Development

The regulations require the municipal government to ensure that it can provide a suitable environment for the AI industry by undertaking measures to improve the construction of the AI ecosystem with both software and hardware integration, strengthening the concentration of AI organizations, and developing a sound AI production chain. In this regard, the municipal governments may leverage any and all industrial advantages to promote the high-quality development of basic hardware, critical software, and smart products via a strong policy support and innovation incentivization system in place.

In relation to the development of AI in specific sectors, the regulations require the municipal government to take appropriate measures. For example, the municipal government should encourage the development of the unmanned aerial vehicle (UAV) industry, unmanned surface vehicle (USV) industry, civil unmanned aviation test bases, UAV take-off and landing points, and UAV operation and management service platforms. Similarly, the municipal government should extend its support in the R&D of critical AI medical devices by funding breakthroughs in intelligence-assisted diagnostic algorithms, surgical positioning, and navigation, guidance services for registration and approval of AI medical devices, and supporting entry of relevant developed products to the special approval process for national innovative medical devices.

e. Application Empowerment

The municipal government should also undertake measures to promote the large-scale application of the developed AI theoretical and research breakthroughs into everyday life, urban governance, digital transformations, financial leasing, and several other critical products related to R&D, manufacturing, management, and service. To achieve this goal, the municipal government should collaborate proactively with various other relevant departments to regularly update the AI demonstration application list while also producing appropriate guidance material.

f. Economic Applications

The municipal government must also promote deep integration and innovation within the integrated application of critical technical equipment related to AI, IT, smart manufacturing, and industrial internet systems. Following are some of the areas where the municipal government can play its role in relation to the economic applications:

  • It should undertake measures to promote the digitalization and upgradation of cargo management, transportation services, and station facilities;
  • It should ensure the integration of developed AI technology within the medical field, build intelligent medical infrastructure, establish a new model for medical services, improve medical innovation, and promote the digital transformation of the medical field;
  • It should undertake appropriate steps to improve the quality of urban elder care and upgrade the urban elder care infrastructure by adopting AI technology, intelligent terminals, and convent elder care services; and
  • It should promote the integration of AI and big data within the financial industry to improve overall financial data processing and promote intelligentization transformation and service innovations.

g. Urban Governance Applications

The regulations require the municipal government to take appropriate steps to integrate AI into its urban governance capabilities and increase the use of such AI technology within informationized government systems by constructing "unified online government services." In this regard, the municipal government is required to:

  • promote the use of AI within its various monitoring, sensing, implementation, and integration plans related to the integration of AI technology and Internet of Things applications between the physical and digital city;
  • leverage AI applications in urban governance to focus on various overall operations such as traffic management, public safety, planning and construction, ecological environment protection, and community governance and improve the overall decision-making efficiency and response capabilities; and
  • undertake proactive measures to support the construction of a smart justice system that integrates AI capabilities within functions such as data application, judicial disclosure, and dynamic tracking to improve the intelligentization of the judicial system.

h. Industry Governance Applications

The municipal government is also tasked with adopting a holistic approach toward national security and undertaking steps to integrate AI applications within the production and supply chains. For this purpose, it is required to establish an AI ethics expert committee to work directly under its supervision and perform the following tasks:

  • Formulate ethical norms and guidelines for the AI field;
  • Create guidance material for education and research institutions, enterprises, and other relevant organizations on how to responsibly conduct research and come up with ethical theories in the AI field;
  • Encourage organizations in the AI field to establish ethics and security governance systems;
  • Conduct risk assessments of AI applications that involve health, public safety, and life;
  • Provide ethical advice and decision-making consulting services for other relevant departments within the AI field;
  • Provide educational material on ethics and safety in the AI field.

i. Other Applications

The municipal government should also encourage the application of AI technology to improve the matching and predictability of all information searches and expand content production and interpersonal interactions on social media. The regulations require the municipal government to promote the normalization of the integration of AI in teaching, management, resource construction, and other end-to-end applications to facilitate the establishment of a new kind of modern education and innovative talent training system.

4. Regulatory Authorities & Responsibilities

The municipal government is tasked with establishing a Municipal Artificial Intelligence Strategy Advisory Expert Committee, with appropriate personnel and experts from various institutes, to provide appropriate advice in all major decision-making matters related to the development of the AI industry within the municipality.

Additionally, as per the regulations, different municipality departments have been entrusted with different responsibilities with respect to the development of the AI industry, which are detailed below:

a. Economic and Informatization Departments

The Municipal Economic and Information Departments are the primary departments responsible for overseeing the various tasks related to planning, implementing, promoting, and coordination within the AI industry.

b. Development and Reform Departments

The Municipal Development and Reform Departments coordinate infrastructure construction related to various projects within the AI industry.

c. Science and Technology Departments

The Municipal S&T Departments play a supportive role in advancing innovation and theories, developing key technologies, promoting AI governance, and assisting in constructing major S&T innovation bases.

d. Cybersecurity and Informatization Departments

The Municipal Cybersecurity and Informatization Departments coordinate all cybersecurity and informatization-related tasks related to the development of the AI industry and laying down the groundwork for appropriate network information content governance and supervision management work.

e. Market Supervision Departments

The Municipal Market Supervision Departments oversee all tasks related to the AI industry measurement, inspection, certification, accreditation, and standards that are responsible for product quality supervision.

The Municipal State-owned Assets Supervision & Administration, Human Resources, Social Security, Education, Health, Finance, Statistics, and National Security Departments will be responsible for formulating relevant policies and measures within their jurisdiction related to various facets of the AI industry relevant to them.

Each relevant department will be able to formulate its own distinct list of non-administrative penalties for minor violations within the AI industry. Such non-administrative penalties will encourage all legal persons, organizations, and entities to strictly comply with all relevant regulations via a combination of guides, educative material, and criticism through scheduled conversations.

5. How Securiti Can Help

The Shanghai AI regulations present the municipal government and all other relevant departments with a comprehensive roadmap of how they must contribute to ensuring Shanghai becomes a hub of AI innovation.

While the regulations press upon the relevant departments to do everything within their power and resources to enable this planned growth, it is verbose and strict on how every initiative must be within the confines of the appropriate local and national regulations.

Hence, compliance with China's three distinct data privacy laws is paramount for an organization hoping to contribute meaningfully to Shanghai's ambitions to become a leader in AI innovation.

Securiti is a market leader in providing enterprise data privacy, security, governance, and compliance solutions. Its plethora of modules and products are designed to ensure compliance with all major data regulations worldwide, including China.

Request a demo today and learn more about how Securiti can enable effective and efficient data compliance, allowing your organization to shift its focus and efforts toward making headways in AI innovation.

Analyze this article with AI

Prompts open in third-party AI tools.
Join Our Newsletter

Get all the latest information, law updates and more delivered to your inbox



More Stories that May Interest You
Videos
View More
Mitigating OWASP Top 10 for LLM Applications 2025
Generative AI (GenAI) has transformed how enterprises operate, scale, and grow. There’s an AI application for every purpose, from increasing employee productivity to streamlining...
View More
Top 6 DSPM Use Cases
With the advent of Generative AI (GenAI), data has become more dynamic. New data is generated faster than ever, transmitted to various systems, applications,...
View More
Colorado Privacy Act (CPA)
What is the Colorado Privacy Act? The CPA is a comprehensive privacy law signed on July 7, 2021. It established new standards for personal...
View More
Securiti for Copilot in SaaS
Accelerate Copilot Adoption Securely & Confidently Organizations are eager to adopt Microsoft 365 Copilot for increased productivity and efficiency. However, security concerns like data...
View More
Top 10 Considerations for Safely Using Unstructured Data with GenAI
A staggering 90% of an organization's data is unstructured. This data is rapidly being used to fuel GenAI applications like chatbots and AI search....
View More
Gencore AI: Building Safe, Enterprise-grade AI Systems in Minutes
As enterprises adopt generative AI, data and AI teams face numerous hurdles: securely connecting unstructured and structured data sources, maintaining proper controls and governance,...
View More
Navigating CPRA: Key Insights for Businesses
What is CPRA? The California Privacy Rights Act (CPRA) is California's state legislation aimed at protecting residents' digital privacy. It became effective on January...
View More
Navigating the Shift: Transitioning to PCI DSS v4.0
What is PCI DSS? PCI DSS (Payment Card Industry Data Security Standard) is a set of security standards to ensure safe processing, storage, and...
View More
Securing Data+AI : Playbook for Trust, Risk, and Security Management (TRiSM)
AI's growing security risks have 48% of global CISOs alarmed. Join this keynote to learn about a practical playbook for enabling AI Trust, Risk,...
AWS Startup Showcase Cybersecurity Governance With Generative AI View More
AWS Startup Showcase Cybersecurity Governance With Generative AI
Balancing Innovation and Governance with Generative AI Generative AI has the potential to disrupt all aspects of business, with powerful new capabilities. However, with...

Spotlight Talks

Spotlight 50:52
From Data to Deployment: Safeguarding Enterprise AI with Security and Governance
Watch Now View
Spotlight 11:29
Not Hype — Dye & Durham’s Analytics Head Shows What AI at Work Really Looks Like
Not Hype — Dye & Durham’s Analytics Head Shows What AI at Work Really Looks Like
Watch Now View
Spotlight 11:18
Rewiring Real Estate Finance — How Walker & Dunlop Is Giving Its $135B Portfolio a Data-First Refresh
Watch Now View
Spotlight 13:38
Accelerating Miracles — How Sanofi is Embedding AI to Significantly Reduce Drug Development Timelines
Sanofi Thumbnail
Watch Now View
Spotlight 10:35
There’s Been a Material Shift in the Data Center of Gravity
Watch Now View
Spotlight 14:21
AI Governance Is Much More than Technology Risk Mitigation
AI Governance Is Much More than Technology Risk Mitigation
Watch Now View
Spotlight 12:!3
You Can’t Build Pipelines, Warehouses, or AI Platforms Without Business Knowledge
Watch Now View
Spotlight 47:42
Cybersecurity – Where Leaders are Buying, Building, and Partnering
Rehan Jalil
Watch Now View
Spotlight 27:29
Building Safe AI with Databricks and Gencore
Rehan Jalil
Watch Now View
Spotlight 46:02
Building Safe Enterprise AI: A Practical Roadmap
Watch Now View
Latest
View More
DataAI Security: Why Healthcare Organizations Choose Securiti
Discover why healthcare organizations trust Securiti for Data & AI Security. Learn key blockers, five proven advantages, and what safe data innovation makes possible.
View More
The Anthropic Exploit: Welcome to the Era of AI Agent Attacks
Explore the first AI agent attack, why it changes everything, and how DataAI Security pillars like Intelligence, CommandGraph, and Firewalls protect sensitive data.
View More
Aligning Your AI Systems With GDPR: What You Need to Know
Securiti’s latest blog walks you through all the important information and guidance you need to ensure your AI systems are compliant with GDPR requirements.
Network Security: Definition, Challenges, & Best Practices View More
Network Security: Definition, Challenges, & Best Practices
Discover what network security is, how it works, types, benefits, and best practices. Learn why network security is core to having a strong data...
Australia’s Guidance for AI Adoption View More
Australia’s Guidance for AI Adoption
Access the whitepaper to learn about what businesses need to know about Australia’s Guidance for AI Adoption. Discover how Securiti helps ensure compliance.
Montana Privacy Amendment on Notices: What to Change by Oct 1 View More
Montana Privacy Amendment on Notices: What to Change by Oct 1
Download the whitepaper to learn about the Montana Privacy Amendment on Notices and what to change by Oct 1. Learn how Securiti helps.
View More
Solution Brief: Microsoft Purview + Securiti
Extend Microsoft Purview with Securiti to discover, classify, and reduce data & AI risk across hybrid environments with continuous monitoring and automated remediation. Learn...
Top 7 Data & AI Security Trends 2026 View More
Top 7 Data & AI Security Trends 2026
Discover the top 7 Data & AI security trends for 2026. Learn how to secure AI agents, govern data, manage risk, and scale AI...
View More
Navigating HITRUST: A Guide to Certification
Securiti's eBook is a practical guide to HITRUST certification, covering everything from choosing i1 vs r2 and scope systems to managing CAPs & planning...
The DSPM Architect’s Handbook View More
The DSPM Architect’s Handbook: Building an Enterprise-Ready Data+AI Security Program
Get certified in DSPM. Learn to architect a DSPM solution, operationalize data and AI security, apply enterprise best practices, and enable secure AI adoption...
What's
New