China releases AI Security Governance Framework 3.0

China released version 3.0 of its AI Security Governance Framework at the opening of National Cybersecurity Publicity Week in Jinan on September 14. The release is separate from a claim that China has approved an AI-enabled brain-computer-interface medical-device standard effective in 2027. The standards record does not support that claim.

The national standards database shows project 20263149-T-464 - quality requirements and evaluation methods for EEG datasets used in brain-computer-interface medical devices - as "being drafted." It is a recommended national-standard plan assigned on June 27 with a 12-month project cycle. There is no final text or September 2027 effective date in that record.

AI developers can use the new framework to guide security programs. Medical-device companies still await final requirements for EEG data.

Technical guidance can shape procurement and security spending

Version 2.0, released in September 2025, was published as a technical document under China's national cybersecurity standardization system, TC260. It organized AI security risks, technical responses and governance measures and explored risk grading as model capability and deployment changed.

The September 14 release continues that framework rather than creating a new statute by itself. Public descriptions of version 3.0 say it updates the risk taxonomy and corresponding response measures while retaining the earlier architecture of risk classification, technical response and comprehensive governance. That can shape internal controls, procurement expectations and later standards work without automatically creating the same legal obligations as a mandatory national standard or regulation.

A cloud provider may spend on model evaluation, data protection, incident response and supply-chain controls before a regulator mandates specific measures. The release itself creates neither a new statutory fine schedule nor a fixed certification test.

The BCI standard follows a separate process under the National Medical Products Administration. It concerns the quality and evaluation of EEG datasets used by medical devices, and its drafting organizations include national medical-device testing and review institutions. Requirements for dataset representativeness, annotation quality, validation procedures or other measures could force developers to redesign evidence packages and data pipelines. The current project page does not settle those metrics.

Companies need to budget for the two instruments according to their status on September 14. Framework 3.0 is published technical guidance with practical weight in China's standards-driven policy system. The BCI requirements may still change during drafting, so treating them as final would commit compliance spending before the rules are settled.

Sources

• Cyberspace Administration of China, Framework 2.0 release and TC260 status: https://www.cac.gov.cn/2025-09/15/c_1759653448369123.htm?type=h5
• September 14 report on the release of Framework 3.0: https://www.ccwb.cn/content/202609/14/c917654.html
• National Public Service Platform for Standards, project 20263149-T-464: https://std.samr.gov.cn/gb/search/gbDetailed?id=55725A8B3BEA40F6E06397BE0A0AECAD
• National standard project record for 20263149-T-464: https://std.samr.gov.cn/gb/search/gbDetailed?id=4DC2E685C3443AD3E06397BE0A0AE22F