China Proposes National Standards On Generative AI Security - The Basic Requirements For The Security Of Generative Artificial Intelligence Services

Recently, the National Information Security Standardization Technical Committee ("TC260") issued the Basic Requirements for Security of Generative Artificial Intelligence Services (Draft for Soliciting Opinions) ("Draft Requirements").¹ This is China's first national standard that specifically puts forward specific security requirements for generative artificial intelligence ("GAI"), and also assists the implementation of the Interim Measures for the Management of Generative Artificial Intelligence Services ("GAI Measures") in practice.

The Draft Requirements provide basic guidance on the security issues facing GAI services regarding training data security, model security, security measures, security evaluation, filing applications, security assessments, and other matters, which we explore in more detail below based on China's existing artificial intelligence governance framework, judicial practice in related fields, and our practical experience.