Facebook fiasco spooks China which wants AI pole position

Beijing

THE scandal over the alleged abuse of Facebook Inc's user data is unfolding a long way from China, and yet privacy regulators in Beijing have been watching intently.

Their interest shows how all three big players in the technology world - the Americans, Chinese and Europeans - are feeling their way to balance the demands of consumers for privacy and of governments for security.

But they're also competing to shape the rules of the game for Internet companies and, for the US and China in particular, to maximise access to data for a bigger goal: to dominate Artificial Intelligence, the next frontier in machine learning.

"All of these governments and companies are in the middle of trying to figure out what data governance should look like," said Samm Sacks, senior fellow in the technology programme at the Center for Strategic and International Studies, a Washington think tank. "And this is happening in a global context that will have implications for trade and for research and development in AI."

Tighter rules

New Chinese privacy standards take effect on May 1. The European Union's sweeping General Data Protection Regulation will be enforced just over three weeks later.

Now the prospect of tighter data privacy legislation in the US just got a little closer too. Facebook chief executive officer Mark Zuckerberg is preparing to testify to Congress on how Cambridge Analytica, a company that worked on then candidate Donald Trump's election campaign, secured the data of 50 million Facebook users. That news helped to send tech stocks tumbling in the US and China, a rout that's continued into this week.

"This Facebook incident sounded the alarm for Chinese data regulators and controllers," said Lu Chuanying, a cybersecurity researcher at the Shanghai Institute for International Studies who helped draft the new data privacy standard for China's tech companies.

"If that's a problem for the largest social network platform in the US, then that can be a problem for Chinese companies," as they wrestle with potential responsibility for third-party data abuse, he said.

AI has exploded in recent years as ever more datasets become available to be mined by algorithms.

From robotics, to language and image recognition, to heathcare and military applications, many expect AI to drive future economic growth and define great power competition. As Russian President Vladimir Putin put it last year, "The one who becomes the leader in this sphere will be the ruler of the world".

China's President Xi Jinping has set out an ambitious plan to dominate in AI by 2030, overtaking the US. It would see gross output from China's AI industry increase 10-fold within the next three years, to 150 billion yuan ($31.2 billion), and to 1 trillion yuan by 2030.

Mr Lu said that vision plays a part in drafting regulation. He described the stringency of China's current data-privacy rules as falling deliberately somewhere between the US and the EU. That's partly because of competitive concerns over access to big data. The US government's goal is to maintain its global lead in AI development. The EU, which has no big data-collecting corporations on the scale of Facebook, Amazon.com Inc, or Chinese giant Tencent Holdings Ltd, has said it wants to lead in the ethical use of data. It too, though, is beginning to worry about getting left behind on AI.

A study by Jeffrey Ding for Oxford University's Future of Humanity Institute published this month found that China currently trails the US in AI capabilities on most metrics, though not on access to big data or the supercomputers to crunch it.

That's the result of heavy government investment, a 1.4 billion strong population, a higher e-commerce saturation than the US, and intrusive government databases that would be politically difficult to maintain in the West.

China is trying to manage access to online information and restrict data exports while legislating for greater privacy rights for consumers in the commercial sector. The tension between those goals is reflected in China's privacy legislation, said Richard Bird, a Hong Kong-based partner in the law firm Freshfields Bruckhaus Deringer.

Though in some ways at least as strict as the EU's, China's new privacy standard is non-binding, he said. Meanwhile, the most developed measures to protect personal privacy are, tellingly, in the National Cyber Security law.

Adopted last year, it required companies to store and process locally all personal data as well as any other data that China considers "important". The US filed a complaint at the World Trade Organization that such a vaguely worded restriction will be used to discriminate against foreign companies.

China's digital plank

Then there are the penalties. While the alleged misuse of data in the Facebook-Cambridge Analytica case would breach Chinese law, the potential fine would be capped at 10 times any unlawful gain, said Mr Bird, adding that in practice that means one of up to about US$150,000 would be more typical.

Chinese tech companies have issues with the Cyber Security law, too. The government wants commercial Internet champions such as Alibaba Group Holding Ltd, Baidu Inc and Tencent to expand abroad, adding a digital plank to Mr Xi's One Belt One Road strategy of building infrastructure around the world to expand China's trade links and influence.

Those same companies have been "pushing back on data localisation because they see it potentially hurting them globally," said Mr Sacks, the US analyst.

Alibaba, for example, might not be able to serve its Chinese customers abroad. Chinese financial institutions could be hobbled by domestic bureaucracy as they try to make international transactions. The tech companies also want clearer privacy regulation to help win the trust of the foreign governments and consumers they need to expand abroad, according to Mr Sacks.

The companies see international growth as important for data access as well as profit. BLOOMBERG