I. Introduction

In the past two years, to ensure the cyber data security and the legitimate rights of citizens, China has issued a series of regulatory documents to set the benchmark of data use. With the global focus on legislation of cyber data protection, the regulatory process manifested China’s attempt to establish its own cyber data protection system.

This note will briefly introduce the development and status quo of cyber data protection in China. Part I introduces the regulatory development on cyber data protection driven by the three regulations. Part II, in the following, concludes the regulatory trend manifested by the three documents and discusses the multi-layered system established by them, including the reason to establish this system and how it works, and the tension between innovation and privacy protection underlying this system. This note concludes that there are problems when carrying out this system. Suggestions will also be given to address the problems.