Beijing Escalates Data Security Crackdown on Chinese Tech Firms Listing in U.S.
Chinese regulators target recently U.S.-listed companies like Didi in a sweeping data security crackdown. New draft rules aim to strictly control how tech giants handle massive amounts of citizen information.
Beijing is dramatically shifting how it regulates and accesses the massive troves of citizen data collected by its tech giants. This new wave of strict cybersecurity enforcement starts with Didi, a SoftBank-backed ride-sharing company that faces a government probe just days after its $4 billion IPO in New York. Authorities order the Didi app removed from stores for illegally collecting user data, marking the first major enforcement action by China's Cybersecurity Review Office.
The government's primary concern centers on data sovereignty and the fear that Didi's information could face scrutiny from U.S. regulators if left unguarded by Chinese laws. Although a Didi executive insists all China data stays local and denies passing anything to the U.S., the Cybersecurity Review Office quickly expands its scope to other recently U.S.-listed companies like Full Truck Alliance and Boss Zhipin.
These ongoing probes signal just the beginning of a broader regulatory overhaul as the Cybersecurity Review Office unveils a revised draft of its data security review rules. A major change in this updated legislation requires any business commanding over one million users to comply with stringent new data handling requirements. This evolving landscape ultimately creates significant uncertainty for Chinese tech firms seeking to woo investors in the United States.