Promulgated by: General Office of the Xianyang Municipal People’s Government (咸阳市人民政府办公室).
Document No.: 咸政办函〔2025〕48号 (Xian Zheng Ban Han [2025] No. 48).
Issued June 18, 2025. Effective July 20, 2025 (valid for two years).
Translation note — DCC. Translated in full from the official Chinese text of the issuing notice and the Measures (local normative document, currently in force). Article 12 incorporates by reference Article 14 of the national Implementation Specifications for Authorized Operation of Public Data Resources (Trial); the pricing clause tracks the national pricing-mechanism notice. Terminology follows DCC’s bilingual glossary.
Notice of the General Office of the Xianyang Municipal People’s Government on Issuing the Xianyang Municipal Measures for the Administration of Authorized Operation of Public Data Resources (Interim)
To the people’s governments of all counties, county-level cities and districts, and all working departments, dispatched agencies and directly subordinate public institutions of the Municipal People’s Government:
The Xianyang Municipal Measures for the Administration of Authorized Operation of Public Data Resources (Interim) have been deliberated and adopted at the 59th executive meeting of the Municipal Government and are hereby issued to you. Please implement them conscientiously in light of your respective circumstances.
General Office of the Xianyang Municipal People’s Government
June 18, 2025
Xianyang Municipal Measures for the Administration of Authorized Operation of Public Data Resources (Interim)
Chapter I General Provisions
Article 1. These Measures are formulated in accordance with the Data Security Law of the People’s Republic of China, the Personal Information Protection Law of the People’s Republic of China, the Shaanxi Provincial Big Data Regulations and other laws and regulations and the spirit of other documents, in light of the actual conditions of this Municipality, in order to regulate the administration of the authorized operation of public data resources across the Municipality, promote the sharing, opening and utilization of public data, release the value of public data, accelerate the cultivation of the data factor market, better leverage the role of data as a factor of production, and support the high-quality development of Xianyang’s digital economy.
Article 2. These Measures apply to the authorized operation of public data resources and related activities within the administrative area of this Municipality.
Article 3. The meanings of the following terms in these Measures are:
(I) “Public data” refers to data generated by Party and government organs at all levels and by enterprises and public institutions in the course of performing their duties in accordance with law or providing public services.
(II) “Data products and services” refers to data sets, data models, data interfaces, data services, data reports, business services and the like formed from public data after processing and having economic and social value.
(III) “Authorized operation” (授权运营) refers to the activity of authorizing qualified operating institutions, in accordance with laws, regulations and relevant requirements, to govern and develop public data resources held by local people’s governments at or above the county level or by national sectoral competent departments, and to provide data products and technical services fairly to the market.
(IV) “Operating institution” refers to a legal-person organization that has obtained authorization through standardized procedures and that develops and operates the public data resources within the scope of the authorization.
(V) “Public data development entity” refers to an operating entity that carries out data application, product development or similar activities relying on the public data authorized-operation service platform (hereinafter, “development entity”).
Article 4. The authorized operation of public data resources shall follow the principles of legality and compliance, fairness and impartiality, public-interest priority, reasonable returns, and security and controllability.
Article 5. The Municipal Data Bureau shall, together with the cyberspace administration, development and reform, public security, finance, market regulation and other departments, establish and improve a working mechanism, be responsible for the overall administration of authorized-operation work within the administrative area, and coordinate the resolution of major issues in authorized-operation work such as data supply and supervision and regulation.
Article 6. The Municipal Data Bureau is responsible for taking the lead in formulating the public data resource authorized-operation implementation plan and supporting norms; for supplying data to the operating institution; for guiding and supervising the construction and operation of the public data resource authorized-operation platform; for guiding the preparation of the data resource catalogue; for promoting the publication of the data product catalogue; for establishing a disclosure mechanism for the state of public data resource authorized operation; and for promoting the coordinated optimization, reuse for greater efficiency, and integrated innovation of data elements.
Sectoral competent departments are responsible for supplying the data of their sectors to the Municipal Data Bureau; for urging the public management and service institutions of their sectors to carry out data provision, quality management and related work so as to ensure the authenticity, accuracy, completeness and timeliness of the data; for guiding the preparation of the data resource catalogues of their sectors; and for promoting innovation in typical cross-domain application scenarios.
Chapter II Authorization Procedure
Article 7. The Municipal Data Bureau shall take the lead in organizing, or shall guide the various implementing institutions in the region in, the preparation of public data resource authorized-operation implementation plans. An implementation plan shall balance economic and social benefits and ensure that it can be implemented and put into effect.
Article 8. A public data resource authorized-operation implementation plan shall be implemented after it has been deliberated and approved in accordance with the requirements of the “three majors and one large” (三重一大) decision-making mechanism. Data administration departments at or above the county level shall be responsible for, or shall assist in, submitting the implementation plans of their regions to the people’s government at the same level for deliberation.
Article 9. The authorization of public data resources shall adopt the overall-authorization model, implemented by the Municipal Data Bureau, and other authorized-operation models such as scenario-based authorization shall be explored progressively.
Article 10. The Municipal Data Bureau shall, on the basis of the examined and approved implementation plan and in accordance with the requirements of laws and regulations, select the operating institution through fair-competition methods such as public bidding, invited bidding or negotiation. The content of the bidding, procurement and negotiation documents relating to the authorized-operation agreement shall fully solicit the opinions of all parties.
Article 11. The operating institution shall possess the management and technical service capacity required for the processing and operation of data resources, have sound business and credit standing, and comply with the State’s data security protection requirements.
Article 12. The authorized-operation agreement shall include the operating term, asset ownership, renewal or exit mechanism, liability for breach of contract and the other content provided for in Article 14 of the Implementation Specifications for Authorized Operation of Public Data Resources (Trial).
Article 13. Where the operating institution breaches the authorized-operation agreement, the Municipal Data Bureau shall suspend or terminate the authorized operation of public data in accordance with the agreement.
Article 14. The operating institution shall conduct business within the scope of the authorization in accordance with laws and regulations, and shall not directly or indirectly participate in the further development of public data products and services already delivered within the authorized scope. The operating institution shall select development entities for data development and utilization according to the application conditions and application scenarios, and enter into authorization agreements with them.
Article 15. The selection of development entities shall adhere to market principles and to fair, open and competitive selection on merit, without restriction as to geography, sector or form of ownership; qualified operating entities shall be encouraged, supported and guided to participate broadly.
Chapter III Data Operation
Article 16. The operating institution shall perform its primary responsibility for data security, strengthen internal-control management, technical management and personnel management, shall not use public data resources beyond the scope of the authorization, and shall strictly guard against data security risks at the stages of data processing, handling, operation and service. The operating institution shall, through management and technical measures, strengthen the identification and control of risks from data correlation and aggregation, and safeguard data security.
Article 17. The use of public data shall follow the principles of scenario-driven and intensive utilization; shared data shall be applied for as needed and used within the scope of the authorization; data shall not be used, or used in disguised form, for other purposes; and raw data shall not be provided externally in any form.
Article 18. The prices of public data products and services shall be implemented in accordance with the relevant national price policies, and conditional paid use of public data used for industrial development and sectoral development shall be explored.
Article 19. The Municipal Data Bureau shall, together with the relevant departments, jointly establish a data-quality evaluation mechanism and a level-by-level traceback and feedback mechanism for data quality, so as to improve the accuracy, regularity, consistency, completeness, timeliness and accessibility of data. Data-providing units shall, within the scope of their duties, promptly handle data-quality problems and provide feedback.
Article 20. The operating institution shall make public the list of public data products and service capabilities, regularly disclose to society the state of use of public data resources, and accept social supervision.
Article 21. The operating institution shall compile the data products released by development entities into a catalogue and update it dynamically.
Chapter IV Supervision and Administration
Article 22. The authorized operation of public data resources shall adhere to the principle that “whoever authorizes supervises, and whoever operates is responsible,” and shall implement data security responsibility and compliance responsibility.
Article 23. The Municipal Data Bureau shall strengthen supervision of the operating institution, urge implementation of the requirements for the classified and graded management of public data, and promote the regulated operation of public data.
Article 24. The Municipal Data Bureau shall, jointly with the cyberspace administration, public security, State security and other departments, strengthen supervision and inspection of data security. A monitoring and early-warning mechanism for tracing data leakage and for data tampering and non-compliant use shall be established to ensure data security. The operating institution shall cooperate with inspections, promptly rectify problems found in inspections, and guard against data security risks.
Article 25. The operating institution shall conduct business within the scope of the authorization in accordance with laws and regulations, shall not engage in monopolistic conduct such as reaching monopoly agreements with other operating entities or abusing a dominant market position, and shall not engage in acts of unfair competition.
Chapter V Supplementary Provisions
Article 26. Where laws, regulations or other higher-level documents provide otherwise on the matters set out in these Measures, those provisions shall apply.
Article 27. These Measures take effect from July 20, 2025 and are valid for two years.