IDEAS home Printed from https://ideas.repec.org/a/eee/telpol/v48y2024i10s0308596124001484.html

Privacy and personal data risk governance for generative artificial intelligence: A Chinese perspective

Author

Listed:
  • Ye, Xiongbiao
  • Yan, Yuhong
  • Li, Jia
  • Jiang, Bo

Abstract

The rapid development of generative artificial intelligence (AI) has attracted global attention and posed challenges to existing data governance frameworks. The increased technical complexity and expanded scale of data usage not only make it more difficult to regulate AI but also present challenges for the current legal system. This article, which takes ChatGPT's training data and working principles as a starting point, examines specific privacy risks, data leakage risks, and personal data risks posed by generative AI. It also analyzes the latest practices in privacy and personal data protection in China. This article finds that while China's governance on privacy and personal data protection takes a macro-micro integration approach and a private-and-public law integration approach, there are shortcomings in the legal system. Given that the current personal data protection system centered on individual control is unsuitable for the modes of data processing by generative AI, and that private law is insufficient in safeguarding data privacy, urgent institutional innovation is needed to achieve the objective of “trustworthy AI.”

Suggested Citation

  • Ye, Xiongbiao & Yan, Yuhong & Li, Jia & Jiang, Bo, 2024. "Privacy and personal data risk governance for generative artificial intelligence: A Chinese perspective," Telecommunications Policy, Elsevier, vol. 48(10).
    • Handle: RePEc:eee:telpol:v:48:y:2024:i:10:s0308596124001484
    DOI: 10.1016/j.telpol.2024.102851
    as

    Download full text from publisher

    File URL: http://www.sciencedirect.com/science/article/pii/S0308596124001484
    Download Restriction: Full text for ScienceDirect subscribers only
    File URL: https://libkey.io/10.1016/j.telpol.2024.102851?utm_source=ideas
    LibKey link: if access is restricted and if your library uses this service, LibKey will redirect you to where you can use your library subscription to access this item
    ---><---

    As the access to this document is restricted, you may want to

    for a different version of it.

    References listed on IDEAS

    as
    1. I. Ooijen & Helena U. Vrabec, 2019. "Does the GDPR Enhance Consumers’ Control over Personal Data? An Analysis from a Behavioural Perspective," Journal of Consumer Policy, Springer, vol. 42(1), pages 91-107, March.
    2. Lynskey, Orla, 2014. "Deconstructing data protection: the 'Added-value' of a right to data protection in the EU legal order," LSE Research Online Documents on Economics 57713, London School of Economics and Political Science, LSE Library.
    3. Edwards, Lilian & Veale, Michael, 2017. "Slave to the Algorithm? Why a 'right to an explanation' is probably not the remedy you are looking for," LawRxiv 97upg, Center for Open Science.
    Full references (including those not matched with items on IDEAS)

    Citations

    Citations are extracted by the CitEc Project, subscribe to its RSS feed for this item.
    as


    Cited by:

    1. Xi, Yipeng & Mai, Luu Thuc Ngan, 2025. "Shifting tides: How public perceptions of GPT regulation evolved before and after GPT-4 on Quora," Telecommunications Policy, Elsevier, vol. 49(7).
    2. Yan, Wenjia & Liu, Yu-li & Mamaeva, Valeriia & Dong, Fang & Tao, Guannan & Li, Rubing & Yang, Heng, 2026. "Generative AI literacy: Scale development and its influence on privacy protection behaviors and information verification behaviors," Telecommunications Policy, Elsevier, vol. 50(2).
    3. Xue, Fengrui & Zhu, Tianqi, 2025. "Research on the impact and internal mechanism of intelligent technology on industrial chain resilience," Finance Research Letters, Elsevier, vol. 84(C).
    4. He, Miao & Chen, Yongfang, 2025. "Personal data protection in China: Progress, challenges and prospects in the age of big data and AI," Telecommunications Policy, Elsevier, vol. 49(10).
    5. Suárez, David & García-Mariñoso, Begoña, 2025. "On the verge of a digital divide in the use of generative AI?," Telecommunications Policy, Elsevier, vol. 49(7).
    6. Meng, Yuxi, 2026. "Governing AI virtual anchors in China’s live streaming E-commerce ecosystem: Policy challenges and global implications," Telecommunications Policy, Elsevier, vol. 50(2).

    Most related items

    These are the items that most often cite the same works as this one and are cited by the same works as this one.
    1. Benjamin Clubbs Coldron & Guido Noto Diega & Christian Twigg-Flesner & Christoph Busch & Tabea Stolte & Marc-Oliver Vries, 2025. "When the Internet Gets Under Our Skin: Reassessing Consumer Law and Policy in a Society of Cyborgs," Journal of Consumer Policy, Springer, vol. 48(3), pages 205-232, September.
    2. repec:osf:socarx:fbu27_v1 is not listed on IDEAS
    3. König, Pascal D. & Wenzelburger, Georg, 2021. "The legitimacy gap of algorithmic decision-making in the public sector: Why it arises and how to address it," Technology in Society, Elsevier, vol. 67(C).
    4. Vasiliki Koniakou, 2023. "From the “rush to ethics” to the “race for governance” in Artificial Intelligence," Information Systems Frontiers, Springer, vol. 25(1), pages 71-102, February.
    5. Tara Merk, 2024. "Why to DAO: a narrative analysis of the drivers of tokenized Exit to Community," Papers 2407.14327, arXiv.org.
    6. Philipp Lorenz-Spreen & Stephan Lewandowsky & Cass R. Sunstein & Ralph Hertwig, 2020. "How behavioural sciences can promote truth, autonomy and democratic discourse online," Nature Human Behaviour, Nature, vol. 4(11), pages 1102-1109, November.
    7. repec:osf:socarx:pm3wy_v1 is not listed on IDEAS
    8. Volosevici Dana, 2025. "Human Resources and GDPR Compliance: Lessons from Romanian Data Protection Case Law on Workplace Privacy," Proceedings of the International Conference on Business Excellence, Sciendo, vol. 19(1), pages 4329-4344.
    9. Koefer, Franziska & Lemken, Ivo & Pauls, Jan, 2023. "Fairness in algorithmic decision systems: A microfinance perspective," EIF Working Paper Series 2023/88, European Investment Fund (EIF).
    10. Hazel Si Min Lim & Araz Taeihagh, 2019. "Algorithmic Decision-Making in AVs: Understanding Ethical and Technical Concerns for Smart Cities," Sustainability, MDPI, vol. 11(20), pages 1-28, October.
    11. Haifei Yu & Shanshan Zheng & Hao Wu, 2023. "User Privacy Awareness, Incentive and Data Supply Chain Pricing Strategy," Sustainability, MDPI, vol. 15(4), pages 1-24, February.
    12. Sangeetha Chandrashekeran & Svenja Keele, 2024. "Making markets from the data of everyday life," Environment and Planning A, , vol. 56(1), pages 288-310, February.
    13. van de Kerkhof, Jacob, 2025. "Article 22 Digital Services Act: Building trust with trusted flaggers," Internet Policy Review: Journal on Internet Regulation, Alexander von Humboldt Institute for Internet and Society (HIIG), Berlin, vol. 14(1), pages 1-26.
    14. Buhmann, Alexander & Fieseler, Christian, 2021. "Towards a deliberative framework for responsible innovation in artificial intelligence," Technology in Society, Elsevier, vol. 64(C).
    15. repec:bjc:journl:v:12:y:2025:i:12:p:547-612 is not listed on IDEAS
    16. Claire M. Segijn & Joanna Strycharz & Amy Riegelman & Cody Hennesy, 2021. "A Literature Review of Personalization Transparency and Control: Introducing the Transparency–Awareness–Control Framework," Media and Communication, Cogitatio Press, vol. 9(4), pages 120-133.
    17. Veale, Michael & Binns, Reuben & Van Kleek, Max, 2018. "Some HCI Priorities for GDPR-Compliant Machine Learning," LawRxiv wm6yk, Center for Open Science.
    18. Xi, Xuan & Zhang, Yulin & Goh, Mark, 2026. "User information control and its strategic implications for information strategies in digital businesses," European Journal of Operational Research, Elsevier, vol. 330(2), pages 608-626.
    19. Cobbe, Jennifer & Veale, Michael & Singh, Jatinder, 2023. "Understanding Accountability in Algorithmic Supply Chains," SocArXiv p4sey, Center for Open Science.
    20. Kirsten Martin & Ari Waldman, 2023. "Are Algorithmic Decisions Legitimate? The Effect of Process and Outcomes on Perceptions of Legitimacy of AI Decisions," Journal of Business Ethics, Springer, vol. 183(3), pages 653-670, March.
    21. Veale, Michael & Binns, Reuben & Van Kleek, Max, 2018. "Some HCI Priorities for GDPR-Compliant Machine Learning," LawArchive wm6yk_v1, Center for Open Science.
    22. Gorwa, Robert, 2019. "What is Platform Governance?," SocArXiv fbu27, Center for Open Science.
    23. Claire M. Segijn & Joanna Strycharz & Amy Riegelman & Cody Hennesy, 2021. "A Literature Review of Personalization Transparency and Control: Introducing the Transparency–Awareness–Control Framework," Media and Communication, Cogitatio Press, vol. 9(4), pages 120-133.

    More about this item

    Keywords

    ;
    ;
    ;
    ;

    Statistics

    Access and download statistics

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:eee:telpol:v:48:y:2024:i:10:s0308596124001484. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    If CitEc recognized a bibliographic reference but did not link an item in RePEc to it, you can help with this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: Catherine Liu (email available below). General contact details of provider: http://www.elsevier.com/wps/find/journaldescription.cws_home/30471/description#description .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.