CGRCC / requirement
Article 7(3)
REQ-be26153c6c755675a45d · LEGACY_INTERPRETATION · source version a6a1bf3fdf49809c
Covered GenAI service providers must establish a lawful basis for training on personal information
Meaning & implementation context
Catalog material requires organizational applicability review. Reported support, approval and maturity are statements from the source, not current enforcement verification.
- Source Id
- cn-genai-interim
- Control
- Article 7(3)
- Source Version
- Order 15; effective 2023-08-15
- Url
- https://www.cac.gov.cn/2023-07/13/c_1690898327029107.htm
- Actor
- Covered GenAI service providers
- Modality
- must
- Action
- establish
- Object
- a lawful basis for training on personal information
- Condition
- Consent or another legal basis
- Exception
- Article 2 scope and cross-referenced Chinese laws apply
- Timing
- Not recorded
- Authority
- binding-within-scope
- Jurisdiction
- China
- Checked At
- 2026-10-03
- Status
- interpretation-needs-review
- Examples
- { "meetsRule": "Covered GenAI service providers performs the required action \"establish\" for a lawful basis for training on personal information within these source conditions: Consent or another legal basis, and retains evidence.", "doesNotMeetRule": "Covered GenAI service providers omits the required action \"establish\" for a lawful basis for training on personal information while those source conditions apply.", "outOfScope": "The actor, activity, jurisdiction, or applicability conditions in this source variant do not match." }
Source-reported relationships
1 associations retained with their original context.
SUPPORTED BY SOURCE REQUIREMENT · AIR-231E86FCF1@f84f67f595b58984
SOURCE_REPORTED_REVIEW_REQUIRED
{
"sourceKey": "cn-genai-interim@d7fc895a372e",
"locator": "Article 7(3)"
}Inspect target record ↗Owner interpretation review
Append a catalog review decision. The source record remains immutable.
Versioned CGRCC JSON
{
"key": "REQ-be26153c6c755675a45d@a6a1bf3fdf49809c",
"id": "REQ-be26153c6c755675a45d",
"version": "a6a1bf3fdf49809c",
"kind": "requirement",
"lifecycle": "LEGACY_INTERPRETATION",
"title": "Article 7(3)",
"statement": "Covered GenAI service providers must establish a lawful basis for training on personal information",
"family": "Privacy",
"body": {
"sourceId": "cn-genai-interim",
"control": "Article 7(3)",
"sourceVersion": "Order 15; effective 2023-08-15",
"url": "https://www.cac.gov.cn/2023-07/13/c_1690898327029107.htm",
"actor": "Covered GenAI service providers",
"modality": "must",
"action": "establish",
"object": "a lawful basis for training on personal information",
"condition": "Consent or another legal basis",
"exception": "Article 2 scope and cross-referenced Chinese laws apply",
"timing": null,
"authority": "binding-within-scope",
"jurisdiction": "China",
"checkedAt": "2026-10-03",
"status": "interpretation-needs-review",
"examples": {
"meetsRule": "Covered GenAI service providers performs the required action \"establish\" for a lawful basis for training on personal information within these source conditions: Consent or another legal basis, and retains evidence.",
"doesNotMeetRule": "Covered GenAI service providers omits the required action \"establish\" for a lawful basis for training on personal information while those source conditions apply.",
"outOfScope": "The actor, activity, jurisdiction, or applicability conditions in this source variant do not match."
}
},
"versions": [
{
"version": "a6a1bf3fdf49809c",
"key": "REQ-be26153c6c755675a45d@a6a1bf3fdf49809c"
}
],
"provenance": [],
"relationships": [
{
"id": "MAP-4176bf7b867cd930e5dd7283",
"from": "AIR-231E86FCF1@f84f67f595b58984",
"to": "REQ-be26153c6c755675a45d@a6a1bf3fdf49809c",
"kind": "SUPPORTED_BY_SOURCE_REQUIREMENT",
"status": "SOURCE_REPORTED_REVIEW_REQUIRED",
"body": {
"sourceKey": "cn-genai-interim@d7fc895a372e",
"locator": "Article 7(3)"
},
"fromKeys": [
"AIR-231E86FCF1@f84f67f595b58984"
],
"toKeys": [
"REQ-be26153c6c755675a45d@a6a1bf3fdf49809c"
],
"resolution": "RESOLVED_REFERENCE_REVIEW_REQUIRED"
}
]
}