Start your day with intelligence. Get The OODA Daily Pulse.
Why China’s Push to Shape Global Data Rules Should Concern the United States
China’s ambition in cyberspace has evolved well beyond stealing intellectual property for economic gain and decision-making advantage, expanding its 5G infrastructure imprint, or developing advanced artificial intelligence (AI). Beijing now seeks something arguably more valuable and with far-reaching implications: the ability to shape the rules governing the world’s data. This represents the next stage of China’s long-term digital strategy – not just competing in the digital space but redefining it to suit its interests.
The creation of the World Data Organization (WDO) demonstrates this strategic evolution. Officially presented as a multilateral platform designed to promote international cooperation, bridge the global data divide, and facilitate trusted cross-border data flows, the organization reflects China’s larger effort to position itself as the focal point for future global data governance rather than merely a participant within that space.
For years, China has steadily pursued influence across the digital ecosystem. Whether via the Digital Silk Road Initiative, leadership in technical standards bodies, or its Global Initiative on Data Security, Beijing has consistently tried to help shape international norms related to technology. From that perspective, it’s easy to see that the WDO represents the lates tstep in that effort.
Data Governance as Strategic Competition
It wasn’t too long ago that geopolitical competition primarily involved energy resources, maritime trade routes, and manufacturing. Today, data has become an equivalent strategic resource due to its incorporation in AI, digital commerce, biotechnology, and national security, to name a few areas. What’s become clear is that the government that controls data governance will hold substantial sway in controlling innovation.
Beijing recognizes that future geopolitical influence will depend on how data is collected, transferred, stored, and shared across state borders. Instead of trying to challenge the West with these issues, Beijing is building alternatives in which it can set its own agenda from the outset. This is consistent with China’s other efforts (e.g., cyber norms of state behavior) that propose alternative solutions to Western-led options.
Beijing’s concept of “cyber sovereignty” has remained remarkably consistent. Unlike the Western model that favors relatively open cross-border data flows and privacy protections, China’s interpretation supports the state’s right to control data within its borders, empowering it to determine how that data is exchanged internationally. This philosophy has become the basis for China’s international proposals on digital governance.
China Wants to Write the Rules
Influencing global data governance provides China with multiple strategic advantages that go beyond just cybersecurity. First, it boosts economic competitiveness, as setting international standards helps determine which technologies become globally adopted. If Chinese specifications can be included in international governance frameworks, Chinese tech companies will ostensibly gain an advantage. Countries generally align procurement decisions using those standards.
Second, favorable governance frameworks could provide China with access to large volumes of data, which can support AI with diverse, quality datasets. This would allow China to develop more capable and accurate systems that could be used to enhance its capabilities in manufacturing, technology, military, intelligence, and any other strategic industry. Essentially, the country that influences the rules regulating data flows can gain a competitive advantage in training next generation AI.
Third, nations seeking digital modernization, particularly in regions looking to upgrade their infrastructure, could embrace governance promoted by China, especially if by doing so, they will get not only infrastructure investment but also technical assistance in maintaining it.
Finally, if it accomplishes its goal in becoming a principal leader in global data governance, Beijing achieves global legitimacy. Leadership in international institutions allows Beijing to portray itself as a responsible steward of emerging technologies while advancing governance principles that align with their centralized state authority model.
Cybersecurity Implications
From a cybersecurity perspective, global data governance directly affects the security of digital infrastructure. Standards influence encryption requirements, architecture, identity management, data policies, AI governance, supply chain security, and even critical infrastructure resilience. Should China be able to influence data governance, the West may find itself operating within an ecosystem that reflects some of China’s preferences, whether it likes it or not.
Perhaps even more disconcerting is China’s ability to aggregate large-scale datasets. Beijing has garnered a reputation for sucking up data for economic and intelligence purposes. This tactic is only enhanced with the continued advancements of AI and quantum computing. This practice strengthens both economic intelligence collection and national security decision-making.
In this capacity, controlling data governance can expand opportunities to influence how global information is generated, shared, protected, and ultimately, exploited.
Recommendations for the United States
The United States must recognize that competing with China in the digital domain requires leadership to shape the international rules that will govern the global data economy. Beijing will capitalize on any pause or stumble. Reinforcing partnerships with international organizations (e.g., G7, NATO, regional organizations, etc.) will help build consensus and demonstrate global – not just Western – interest in privacy-centric governance.
Furthermore, the United States must more robustly participate in international standards-setting organizations to ensure its values and expertise are represented in future technological standards. While these bodies may not receive the attention of more high-profile international summits, they are best positioned to determine how new technologies are designed, deployed, and secured.
The United States should also commit to developing nations seeking to modernize their digital infrastructure. Many countries lack the resources and expertise necessary to build their own secure, digital ecosystems. Therefore, they may be tempted to adopt cheap Chinese technologies and governance models. Washington can offer trusted alternatives that strengthen partner nations while reducing their dependence on Chinese-led digital initiatives.
At the same time, U.S. policymakers must treat data governance as an important component of national cybersecurity and not dismiss it as a regulatory or economic issue. Decisions regarding cross-border data transactions, encryption standards, etc., all have significant ramifications for national security. Integrating these policy areas into broader cybersecurity planning will help the United States respond to an increasingly interconnected threat landscape.
The quiet battle over global data governance poses a greater long-term geopolitical threat than the disruptive cyberattacks that dominate headlines. If China succeeds in helping determine these digital standards, it will establish a state-centric model of cyberspace that directly challenges Western democratic principles and strategic interests. The faster the United States takes a proactive role in data governance, the more effectively it can focus international standards on privacy rather than state surveillance. The definition of digital sovereignty is being written today, and Washington cannot afford to leave its seat at the table empty, because the rules of the road will matter far more than the weapons deployed along them.