Recent developments in China’s data governance landscape have sent ripples through the global research community—particularly in Europe, where several leading research funders have paused bilateral scientific collaborations.
At the heart of this disruption is a set of sweeping data protection laws introduced by the People’s Republic of China, which are increasingly viewed not only as privacy safeguards but also as tools of strategic statecraft.
The Legal Framework: A New Era of Data Sovereignty
China’s new data regime is anchored in three main laws:
- The Data Security Law (DSL) – effective September 2021, this law regulates the classification, storage, and cross-border transfer of data deemed vital to national security or economic stability.
- The Personal Information Protection Law (PIPL) – also effective in 2021, this law resembles the EU’s GDPR in its structure but is more restrictive in its treatment of data leaving Chinese borders.
- The Cybersecurity Law (CSL) – in force since 2017, this law emphasizes the localization of data and imposes strict controls on network operators and information infrastructure.
Together, these laws form a tightly controlled digital sovereignty regime. They mandate that data—especially if categorized as “important” or “core”—must be stored locally and subject to government approval before it can be transferred abroad.
The EU’s Response: A Growing Divide
Several of Europe’s most prominent science funding bodies, including those in Germany, the Netherlands, and Scandinavia, have confirmed temporary suspensions or reviews of collaborative research programs with Chinese partners. Fields affected include virology, atmospheric science, climate modeling, and biosecurity—all of which involve sensitive data categories that now fall under Chinese jurisdictional control.
At issue is not just data access, but the uncertainty around compliance. European institutions must now assess whether they can legally handle data sourced from China without violating Chinese law—or inadvertently compromising EU data protection principles and transparency obligations.
Legal and Strategic Tensions
From a legal industry standpoint, this clash highlights the friction between two competing governance models:
- The EU model, rooted in transparency, open science, and privacy as a fundamental right, versus
- The Chinese model, which prioritizes data as a sovereign asset, heavily policed under state oversight.
This divergence makes data sharing across jurisdictions increasingly difficult—not just logistically, but legally. Researchers funded by the EU must now navigate a thicket of legal risks, including potential breaches of EU General Data Protection Regulation (GDPR), Chinese export controls, and national security laws.
Broader Implications for Global Science
These developments may usher in a new era of “data decoupling”, where national legal regimes fragment global scientific collaboration. For EU research funders, the risks extend beyond legal liability—they also touch on academic freedom, reputational harm, and geopolitical entanglement.
Already, discussions are underway within the EU about developing new legal frameworks or model agreements that could allow collaboration under stricter safeguards. But without bilateral or multilateral accords that reconcile these diverging legal obligations, the path forward remains uncertain.
Conclusion: Legal Risk as a Strategic Barrier
China’s new data laws reflect more than a concern for digital privacy—they are part of a strategic effort to control information flows in a world where data is a resource as vital as oil or capital. For European legal advisors and research funders, the challenge is now twofold: interpreting evolving legal requirements abroad, while safeguarding their own compliance frameworks at home.
In the absence of legal harmonization or mutual data-sharing treaties, this legal impasse could shift the center of gravity in global science, potentially isolating China—or fragmenting collaborative research into regional silos.
For now, legal caution prevails. But with strategic science at stake, the need for a diplomatic and regulatory bridge has never been more urgent.