---
title_en: "Changchun Municipality Measures for the Administration of Authorized Operation of Public Data Resources"
title_zh: "长春市公共数据资源授权运营管理办法"
abbreviation: "Changchun Public Data Authorized Operation Measures"
hierarchy: "rule"
issuing_body: "Changchun Municipal People's Government"
adopted_date: 2025-09-19
effective_date: 2025-09-19
status: "effective"
related_laws: ["public-data-authorized-operation-specifications", "public-data-registration-interim-measures", "public-data-development-utilization-opinions", "public-data-authorized-operation-pricing-notice", "jilin-public-data-authorized-operation-measures", "yanbian-public-data-authorized-operation-measures", "shanghai-public-data-authorized-operation-measures", "data-foundation-system-opinions", "dsl", "pipl"]
domains: ["data-economy", "data-security"]
url: https://datacompliancechina.com/laws/changchun-public-data-authorized-operation-measures/
summary: "Issued by the Changchun Municipal People's Government as 长府规〔2025〕5号 on September 19, 2025 and effective the same day, these 29-article Measures replace the city's 2023 authorized-operation rules (长府规〔2023〕3号) and realign Changchun — the capital of Jilin Province — with the NDRC/NDA Implementing Specifications and the Jilin provincial measures. Changchun combines whole authorization with authorization by field; the Municipal Government leads through its digital-government leading group, a cross-departmental coordination working group (data, cyberspace, development and reform, public security, state security, finance, market regulation and state-owned assets) handles major issues and builds value, security, quality and compliance assessment systems, the Municipal Government Affairs and Data Bureau administers, and the Municipal Information Center acts as the municipal implementing institution by delegation. All operation takes place in a single citywide 'authorized operation domain': raw data is invisible to processing staff and may not be exported, and models are trained only on sampled, de-identified data. Plans are filed with the provincial data authority, agreements with both provincial and municipal authorities. Pricing follows the national free-for-public-use, government-guided-for-commercial split; revenue is shared on 'who invests, contributes, benefits,' and operators are encouraged to reinvest in departmental and county data governance. Business entities re-develop delivered products after scenario compliance assessment; personal information must be anonymized or authorized; and counties and development zones apply the Measures by reference."
---

> **Source: Data Compliance China** — https://datacompliancechina.com/laws/changchun-public-data-authorized-operation-measures/ · English rendering and annotations by DCC; the Chinese original governs. Cite as: Data Compliance China, "Changchun Municipality Measures for the Administration of Authorized Operation of Public Data Resources", https://datacompliancechina.com/laws/changchun-public-data-authorized-operation-measures/
**Promulgated by:** Changchun Municipal People's Government.  
**Document No.:** 长府规〔2025〕5号 (Chang Fu Gui [2025] No. 5).  
**Issued September 19, 2025. Effective September 19, 2025. Repeals 长府规〔2023〕3号.**

> *Translation note — DCC. Translated in full from the official Chinese text
> of the issuing notice and the Measures. Terminology follows DCC's bilingual
> glossary and the usage in the national
> [Implementing Specifications for the Authorized Operation of Public Data Resources (Trial)](/laws/public-data-authorized-operation-specifications/)
> and the parent
> [Jilin Province measures](/laws/jilin-public-data-authorized-operation-measures/).
> "Municipal Government Affairs and Data Bureau" renders 市政数局.*

---

## Notice of the Changchun Municipal People's Government on Issuing the Changchun Municipality Measures for the Administration of Authorized Operation of Public Data Resources

To the people's governments of all counties (cities) and districts, the administrative committees of the development zones, and all commissions, offices, bureaus and directly affiliated institutions of the Municipal Government:

The *Changchun Municipality Measures for the Administration of Authorized Operation of Public Data Resources* are hereby issued to you. Please comply with and implement them conscientiously.

Changchun Municipal People's Government  
September 19, 2025

---

# Changchun Municipality Measures for the Administration of Authorized Operation of Public Data Resources

## Chapter I General Provisions

**Article 1.** These Measures are formulated in accordance with the Data Security Law of the People's Republic of China and in accordance with the requirements of the Opinions of the CPC Central Committee and the State Council on Building a Basic Data System to Better Bring into Play the Role of Data Elements, the Opinions of the General Office of the CPC Central Committee and the General Office of the State Council on Accelerating the Development and Utilization of Public Data Resources and the Notice of the National Development and Reform Commission and the National Data Administration on Issuing the Implementing Specifications for the Authorized Operation of Public Data Resources (Trial), and in light of the actual conditions of this Municipality, in order to advance the development and utilization of public data resources, regulate the authorized operation of public data resources, promote the cultivation of an integrated data market in this Municipality, and release the value of data elements.

**Article 2.** These Measures apply to the authorized operation of public data resources and related administrative activities carried out within the administrative area of this Municipality.

**Article 3.** "Public data resources" means collections of data of utilization value generated by Party and government organs at all levels and enterprises and public institutions in the course of performing their duties in accordance with law or providing public services.

"Public data products and services" means products and services formed by processing public data.

"Authorized operation of public data resources" means the activity of authorizing, in accordance with laws, regulations and relevant requirements, qualified operating institutions to govern and develop the public data resources held by the Municipal Government and industry competent departments and to provide data products and services to the market on a fair basis.

"Implementing institution" means the unit determined by the Municipal Government in light of the authorization model to be specifically responsible for organizing and carrying out authorized-operation activities.

"Operating institution" means a legal-person organization that has obtained authorization in accordance with standard procedures to develop and operate the public data resources within the scope of the authorization.

"Business entity" means a legal person or unincorporated organization that re-develops public data products and services on a scenario basis to meet market-based demand.

"Public data resource authorized-operation domain" means the infrastructure for the authorized operation of public data resources, organized and built by the municipal-level implementing institution, with functions including resource registration, operation management, development and utilization, and security supervision.

**Article 4.** The Municipal Government shall strengthen leadership of the authorized operation of public data resources across the Municipality and, relying on the Municipal Leading Group for Advancing the Transformation of Government Functions and the Building of Digital Government, establish and improve working mechanisms and study and resolve major issues in the authorized operation of public data resources.

**Article 5.** A Municipal Coordination Working Group for the Authorized Operation of Public Data Resources shall be established under the Municipal Leading Group for Advancing the Transformation of Government Functions and the Building of Digital Government. The working group shall comprise the government-affairs-and-data, cyberspace, development and reform, public security, state security, finance, market regulation, state-owned assets and other departments and shall be responsible for studying and promoting matters relating to the authorized operation of public data resources. The working group shall have an office, located in the Municipal Government Affairs and Data Bureau, responsible for its day-to-day work.

**Article 6.** The duties of the Municipal Coordination Working Group for the Authorized Operation of Public Data Resources include:

(1) establishing and improving the deliberation and coordination mechanism for the authorized operation of public data resources;

(2) forming an expert group for authorized operation;

(3) promoting the establishment of assessment systems for the value assessment, security assessment, quality assessment and compliance assessment of this Municipality's public data resources;

(4) resolving major problems encountered in the authorized operation of public data resources in this Municipality.

**Article 7.** The Municipal Government Affairs and Data Bureau, as the municipal-level data administration department, shall be responsible for the comprehensive coordination, administration, supervision and evaluation of the authorized operation of public data resources; shall formulate the management systems and standards for the authorized operation of public data resources; and shall guide, coordinate and urge other relevant departments to carry out, in accordance with their respective duties, the work relating to the authorized operation of public data resources.

The Municipal Information Center, as the municipal-level implementing institution, may, as entrusted by the Municipal Government, be responsible for specifically organizing and carrying out authorized-operation activities.

Each municipal industry competent department shall be responsible for promoting the authorized operation of its department's public data resources; for preparing the public data catalogue of its department and unit; for promoting the supply of the public data of its system and industry; for guiding its subordinate public institutions and state-owned enterprises to increase data supply; for source data governance and the classification and grading of data; for registering public data resources; and for coordinating and promoting the interfacing of data under vertical departmental management. It shall participate in the planning and building of data application scenarios, promote innovation in data applications, and guide its industry in strengthening the management of industry data resources within the scope of authorized operation.

The finance, market regulation, state-owned assets, intellectual property and other departments shall, in accordance with their respective duties, carry out the supervision and administration of the marketization of public data products and services.

The cyberspace, public security, state security, secrecy, cryptography and other departments shall, in accordance with their respective duties, carry out the security supervision and administration of the authorized operation of public data resources.

**Article 8.** The authorized operation of public data resources shall follow the principles of lawfulness and compliance, fairness and impartiality, priority to the public interest, reasonable returns, and security and controllability; shall protect in accordance with law the lawful rights and interests of all participants in authorized operation; shall safeguard national security and the public interest; and shall protect personal information and trade secrets. Public data that relevant laws and regulations expressly provide may not be opened to society shall not be subject to authorized operation.

## Chapter II Basic Requirements

**Article 9.** The Municipal Government may bring the public data resources it holds in accordance with law into the scope of authorized operation, on the premise of implementing the requirements of the classified and graded data protection system, not endangering national security or the public interest, and not infringing trade secrets, personal privacy, personal information rights and interests or other lawful rights and interests.

Where public data of another region or department obtained by way of government data sharing is used for authorized operation, the consent of the unit providing the shared data shall be obtained.

**Article 10.** The operating institution shall carry on its business within the scope of authorization in accordance with laws and regulations; shall, in accordance with the relevant regulations and technical standards, identify application scenarios, confirm data needs, develop data products and safeguard the security of public data; and shall not directly or indirectly participate in the re-development of public data products and services already delivered within the scope of the authorization. The operating institution is encouraged to obtain non-public data lawfully and compliantly for integrated development with this Municipality's public data resources.

**Article 11.** A business entity shall submit its application-scenario plan for public data resources to the implementing institution through the operating institution, undergo a compliance assessment of the application scenario, and re-develop public data products and services in the public data resource authorized-operation domain in accordance with standard procedures.

## Chapter III Preparation of Plans and Administration of Authorization

**Article 12.** This Municipality shall adopt the whole-authorization model and the authorization-by-field model for the authorized operation of public data resources.

**Article 13.** The Municipal Government Affairs and Data Bureau shall guide the implementing institution in preparing the implementation plan for the authorized operation of public data resources. The implementation plan shall include the scope of data resources subject to authorized operation, the selection criteria for operating institutions, the term of authorized operation, the exit mechanism, supervision and administration and assessment and evaluation requirements, the mechanism for accounting for the operating institution's operating costs and revenues within the scope of the authorization, the revenue-distribution mechanism, and security-protection and emergency-response measures, ensuring that it is implementable and can be put into practice.

**Article 14.** The Municipal Government Affairs and Data Bureau shall be responsible for submitting the implementation plan for the authorized operation of public data resources to the Municipal Government for deliberation and approval before implementation, and shall file it with the provincial data administration department for the record. An implementation plan approved after deliberation shall not, in principle, be changed at will; where a major change is genuinely necessary, the Municipal Government Affairs and Data Bureau shall re-submit it to the Municipal Government for deliberation in accordance with the original process.

**Article 15.** The implementing institution shall, in accordance with the approved implementation plan and the relevant laws and regulations, select the operating institution by fair-competition methods such as public tender, invited tender or negotiation. The operating institution shall be a legal-person organization that possesses the management and technical service capabilities required for the processing and operation of data resources, is in good business and credit standing, and meets the State's data security protection requirements and the relevant laws and regulations.

The implementing institution shall draft the agreement on the authorized operation of public data resources and, after collective discussion and decision, sign the agreement with the operating institution selected in accordance with law, and file it with the provincial and municipal data administration departments for the record.

**Article 16.** In carrying out authorized-operation activities, the operating institution shall not use a dominant market position to exclude or restrict competition, and shall not use advantages in data, algorithms, technology or capital to engage in monopolistic conduct.

## Chapter IV Implementation of Operations

**Article 17.** All participants in the authorized operation of public data resources shall register public data resources in accordance with the relevant national, provincial and municipal provisions.

**Article 18.** A citywide unified public data resource authorized-operation domain shall be established for the administration of the authorized operation of public data resources within the administrative area of the Municipality.

The operating institution shall process the public data resources under authorized operation through the public data resource authorized-operation domain to form public data products or services. Raw data shall be invisible to data-processing personnel and shall not be exported from the public data resource authorized-operation domain; the operating institution shall use sampled and de-identified public data for the training and validation of models for data products or services; and the public data products or services formed shall not be used, or covertly used, in application scenarios that have not been approved.

**Article 19.** The Municipal Government Affairs and Data Bureau shall, together with the municipal development and reform, finance and state-owned assets departments and the relevant industry competent departments, establish and improve the pricing and revenue-distribution mechanism for public data products and services in accordance with the relevant national, provincial and municipal requirements.

Basic public data products and services provided by the operating institution that are used for public governance or public-welfare undertakings shall be used free of charge where conditions permit; operational products and services used for industrial or sectoral development for which a charge is genuinely necessary shall be subject to government-guided pricing.

**Article 20.** The authorized operation of public data resources shall, on the principle of "who invests, who contributes, who benefits," establish a fair and reasonable revenue-distribution mechanism and protect the lawful rights and interests of all participants. The operating institution is encouraged to support, lawfully and compliantly and by way of technology, products and services, proceeds and other means, the data governance and informatization construction of municipal departments, counties (cities) and districts, and development zones.

**Article 21.** The implementing institution and the operating institution shall, in accordance with regulations, periodically disclose to the public information on the authorized operation of public data resources and accept public supervision.

**Article 22.** The operating institution shall strengthen the internal management of costs, revenues and expenditures relating to public data products and services, manage the financial receipts and payments relating to public data products and services in accordance with the existing financial management system, and accept supervision in accordance with law. During the term of operation, it shall submit to the implementing institution an annual operating report on the authorized operation of public data resources, covering the authorized storage, processing, analysis and mining, integrated utilization and market operation of its data resources, and shall cooperate with the implementing institution in the assessment and evaluation of the authorized operation of public data resources; it shall not refuse, conceal or under-report.

## Chapter V Operation Management

**Article 23.** The implementing institution shall establish and improve management systems for security review, risk assessment and monitoring and early warning, together with security emergency-response plans; strengthen data governance; improve data quality; implement the classified and graded data protection system and the technical standards for security protection; strengthen technical support and data security management; strictly control the direct entry into the market of raw public data resources that have not been made public in accordance with laws and regulations; and periodically conduct internal-control audits and assessment and evaluation of the operating institution in respect of the authorized operation of public data resources.

**Article 24.** The operating institution shall, on the principle that "whoever operates is responsible and whoever uses is responsible," perform its primary responsibility as operator and for data security; carry out the operation of public data in accordance with laws and regulations; establish and improve an efficient technical-protection and operation-management system; strengthen internal-control, technical, personnel and other full-lifecycle security management of public data, ensuring that data sources are traceable, destinations ascertainable, conduct leaves a record and responsibility can be pursued; and shall not leak, tamper with or damage public data, shall not use public data resources beyond the scope of authorization, shall strictly guard against data security risks in the links of data processing, handling, operation and service, and shall not provide the public data under authorized operation to third parties.

**Article 25.** Other business entities are encouraged to re-develop the public data products and services delivered by the operating institution, integrate multi-source data and enhance the value of data products and services.

The operating institution and business entities shall effectively protect personal information rights and interests, intellectual property rights, trade secrets and the like from infringement, and shall not use public data resources beyond the scope of authorization. Public data involving personal information shall be anonymized, or obtained after the data source subject to which the relevant data points has given authorization and consent in accordance with law.

**Article 26.** The Municipal Coordination Working Group for the Authorized Operation of Public Data Resources shall periodically conduct a comprehensive assessment of the authorized operation of public data resources across the Municipality, effectively identify and control the security hazards arising from improper operations in the conversion of data into assets and the capitalization of data assets, and effectively prevent and defuse all kinds of risks.

The Municipal Government Affairs and Data Bureau shall supervise and administer the implementing institution's conduct of the authorized operation of public data resources, establish an evaluation mechanism for the operation of public data, evaluate annually the implementing institution's conduct of the authorized operation of public data resources, and file the evaluation results with the Municipal Coordination Working Group for the Authorized Operation of Public Data Resources for the record.

The implementing institution's annual internal-control audit and assessment and evaluation of the operating institution in respect of the authorized operation of public data resources shall serve as an important basis for the termination or revocation of the operating institution's authorization or for its re-application for authorized operation.

**Article 27.** The data industry shall be actively developed, the layout of the data industry coordinated and the technological innovation system improved. Public welfare and inclusiveness shall be advocated, supporting small, medium and micro enterprises and private enterprises in using data conveniently and efficiently and reducing enterprises' cost of using data. Industry departments shall strengthen the planning and layout of application scenarios, promote innovative data applications, and cultivate public data resource development entities and grow the data services industry through policy support, incentive measures and industrial-development carriers.

## Chapter VI Supplementary Provisions

**Article 28.** The people's governments of the counties (cities) and districts and the administrative committees of the development zones shall implement these Measures by reference.

**Article 29.** These Measures shall come into force on the date of issuance. The *Changchun Municipality Measures for the Administration of Authorized Operation of Public Data* (长府规〔2023〕3号) issued on August 28, 2023 are repealed at the same time.

Where the State or the Province makes new provisions on the administration of the authorized operation of public data resources, those provisions shall prevail.