Lightning Talk #65 Enhancing Digital Trust From Rigidity to Elasticity

23 Jun 2025 15:40h - 16:00h

Lightning Talk #65 Enhancing Digital Trust From Rigidity to Elasticity

Session at a glance

Summary

This discussion at the UN Internet Governance Forum focused on enhancing digital trust by transitioning from rigid to elastic frameworks in global cybersecurity and data governance. The session was organized by multiple Chinese organizations and moderated by Susan Ning, bringing together perspectives from China and international business communities.


The Deputy Director General of China’s Cybersecurity Association opened by arguing that traditional rigid approaches to digital trust, which rely on strict rule-setting and network isolation, are becoming inadequate in today’s complex digital environment. She advocated for resilient digital trust systems that emphasize flexibility, adaptability, and collaboration to respond swiftly to technological changes while accommodating different countries’ distinct digital ecosystems. China’s efforts in this area include developing comprehensive legal frameworks through data security and personal information protection laws, promoting blockchain technology applications, and launching the Global Initiative on Data Security to foster international cooperation.


Arne Byberg from Weibo Japan provided a business perspective, highlighting how multinational companies struggle with the lack of predictable regulatory frameworks. He noted that while Europe offers more cohesive AI regulation, the US lacks federal AI standards, forcing businesses to develop multiple compliance strategies across different regions, which increases costs and inefficiency. CUI Jie from the China Internet Development Foundation discussed their organization’s work in digital adoption, internet security education, and digital village construction projects.


The session concluded with emphasis on establishing a robust global data compliance system built on universal principles of privacy, security, transparency, and accountability, requiring international cooperation to create seamless and secure data governance frameworks.


Keypoints

**Major Discussion Points:**


– **Shift from rigid to elastic digital trust frameworks**: The need to move away from traditional rigid rule-setting and strict network isolation toward more flexible, adaptable, and collaborative digital trust systems that can respond to rapidly evolving technologies and diverse global contexts.


– **Regulatory fragmentation and business challenges**: The lack of harmonized international regulations, particularly in AI governance, creates significant challenges for multinational businesses who must navigate different regulatory frameworks across regions, leading to costly duplicate compliance efforts.


– **China’s comprehensive digital governance approach**: China’s multi-faceted strategy including legal frameworks (Data Security Law, Personal Information Protection Law), technological innovation (blockchain applications), and international cooperation initiatives (Global Initiative on Data Security).


– **Digital inclusion and social responsibility**: Efforts to bridge the digital divide through programs targeting vulnerable populations like the elderly and youth, including anti-fraud education, digital literacy initiatives, and responsible internet usage programs.


– **Global data compliance system necessity**: The urgent need for universally recognized principles governing data privacy, security, transparency, and accountability, supported by international cooperation and harmonized regulations while respecting national differences.


**Overall Purpose:**


The discussion aimed to explore strategies for building enhanced digital trust in an increasingly complex global digital environment, focusing on the transition from rigid regulatory approaches to more flexible, collaborative frameworks that can accommodate diverse national contexts while maintaining security and promoting international cooperation.


**Overall Tone:**


The discussion maintained a consistently formal, diplomatic, and collaborative tone throughout. Speakers emphasized cooperation, shared challenges, and mutual benefit rather than competition or conflict. The tone was forward-looking and solution-oriented, with participants presenting their perspectives as complementary contributions to a shared global challenge rather than competing viewpoints.


Speakers

– **Susan Ning(F)**: Session moderator


– **Deputy Director General for China Cybersecurity Association**: Deputy Director General for China Cybersecurity Association (also referred to as “Madame Duanyin”)


– **Arne Byberg**: From Oslo Law Firm, Weibo Japan Tech Practice, serves multinational customers


– **CUI Jie**: Deputy Secretary General from China Internet Development Foundation


Additional speakers:


– No additional speakers were identified beyond those in the provided speakers names list.


Full session report

# Comprehensive Report: Enhancing Digital Trust Through Elastic Frameworks in Global Cybersecurity and Data Governance


## Executive Summary


This discussion at the UN Internet Governance Forum examined the critical transition from rigid to elastic frameworks in global cybersecurity and data governance to enhance digital trust. The session was organized by the China Cybersecurity Association, China Internet Development Foundation, China Daily, and King Edward Madison’s law firm, and moderated by Susan Ning. The discussion brought together perspectives from China’s cybersecurity establishment and the international business community to address the evolving challenges of digital governance in an increasingly interconnected world.


The central thesis of the discussion revolved around the inadequacy of traditional rigid approaches to digital trust, which rely heavily on strict rule-setting and network isolation. Speakers advocated for a paradigm shift towards resilient digital trust systems that emphasize flexibility, adaptability, and international collaboration while maintaining security and accommodating diverse national digital ecosystems.


## Key Participants and Their Perspectives


### Deputy Director General for China Cybersecurity Association (Madame Duanyin)


The Deputy Director General opened the discussion by establishing the theoretical foundation for the session’s central theme. She argued that traditional approaches to building digital trust, characterized by “rigid rule-setting, strict network isolation, and one-way regulatory mirrors,” are becoming increasingly inadequate as global connectivity deepens and digital environments grow more complex.


Her presentation emphasized that “the shift toward a resilient digital trust framework has become an inevitable divergence,” highlighting the need for systems that can respond swiftly to technological changes while accommodating different countries’ distinct digital ecosystems. She positioned China’s approach as comprehensive and forward-thinking, encompassing legal frameworks through the Data Security Law and Personal Information Protection Law, technological innovation through blockchain applications, and international cooperation through initiatives such as the Global Initiative on Data Security.


### Arne Byberg – International Business Perspective


Byberg, from Weibo Japan Tech Practice, provided a crucial business perspective that grounded the theoretical discussion in practical realities. His contribution highlighted the significant challenges multinational companies face due to regulatory fragmentation, particularly in artificial intelligence governance. He noted that “businesses are increasingly looking for predictability,” while acknowledging that “the technology is moving really, really fast, faster than the regulation.”


His most striking observation concerned the economic inefficiencies created by inconsistent regulatory frameworks: “We see businesses starting to build up double and triple AI initiatives simply to cope with the various regulations of the different regions. And as everyone understands, that is costly and a lot of time wasted, actually.” This comment effectively illustrated how the lack of harmonized international regulations creates tangible costs and operational complexity for global enterprises.


Byberg’s analysis revealed contrasts between regulatory approaches across regions, noting differences between Europe’s AI regulation approach and the United States, where federal AI standards have been affected by recent political changes, forcing businesses to develop multiple compliance strategies across different jurisdictions.


### CUI Jie – Digital Development and Social Responsibility


CUI Jie, Deputy Secretary General from the China Internet Development Foundation, delivered his presentation in Chinese and focused on the practical implementation of digital inclusion initiatives and social responsibility programs. The China Internet Development Foundation, established in June 2015 as a 5A national public-private partnership, has undertaken comprehensive efforts to bridge the digital divide.


His presentation covered three main areas: supporting digital adoption plans to help elderly citizens overcome digital barriers, implementing youth internet anti-addiction programs and cybersecurity education initiatives, and investing in digital village construction projects in locations including Lingyuan in Liaoning and Fuping in Shaanxi to integrate smart agriculture and e-commerce platforms for rural development.


### Susan Ning – Moderator


Susan Ning served as the session moderator, providing brief introductions and transitions between speakers. Her role was limited to facilitating the discussion, with contributions such as “Ladies and gentlemen, it’s my great honor to moderate this session,” “Thank you very much, Madame Duanyin. Our next speaker is Mr. Arne Byberg,” and “Thank you, Mr. Byberg. Our next speaker will be Mr. CUI Jie.”


## Major Discussion Points and Arguments


### The Paradigm Shift from Rigid to Elastic Frameworks


The discussion’s central theme focused on the fundamental inadequacy of traditional rigid approaches to digital trust. The Deputy Director General for China Cybersecurity Association established this framework by arguing that conventional methods relying on strict rule-setting and network isolation are becoming obsolete in today’s complex digital environment.


The proposed alternative—resilient digital trust frameworks—emphasizes flexibility, adaptability, and collaboration as essential characteristics for responding to rapid technological changes. This approach recognizes that different countries have distinct digital ecosystems that require tailored solutions while maintaining interoperability and security standards.


### Regulatory Fragmentation and Business Challenges


A significant portion of the discussion addressed the practical challenges created by inconsistent regulatory frameworks across different regions. Byberg’s contribution was particularly valuable in highlighting how regulatory fragmentation creates substantial costs and inefficiencies for multinational businesses.


The lack of harmonized international regulations, especially in AI governance, forces companies to develop multiple compliance strategies, leading to duplicated efforts and wasted resources. This challenge is exacerbated by the varying approaches taken by different regions and the changing political landscape affecting regulatory stability.


### China’s Comprehensive Digital Governance Strategy


The discussion highlighted China’s multi-faceted approach to digital governance, which encompasses legal, technological, and international cooperation dimensions. The comprehensive legal framework includes the Data Security Law and Personal Information Protection Law, while technological innovation focuses on blockchain applications and other emerging technologies.


China’s international cooperation efforts, particularly through the Global Initiative on Data Security, represent an attempt to foster collaborative approaches to global digital governance while promoting Chinese perspectives and solutions.


### Digital Inclusion and Social Responsibility


The discussion addressed the importance of ensuring that digital development benefits all segments of society. CUI Jie’s presentation highlighted specific programs targeting vulnerable populations, including elderly citizens struggling with digital barriers and youth requiring protection from internet addiction.


These initiatives reflect a broader understanding that digital governance must address social equity and inclusion alongside technical and regulatory challenges. The digital village construction projects represent an attempt to extend digital benefits to rural areas through integrated smart agriculture and e-commerce platforms.


## Key Insights and Observations


### Economic Impact of Regulatory Fragmentation


Byberg’s revelation about businesses building “double and triple AI initiatives” to cope with various regional regulations effectively illustrated the concrete costs of regulatory fragmentation. This insight demonstrated how the lack of harmonized international regulations creates tangible economic consequences and operational complexity for global enterprises.


### Paradigm Shift Recognition


The Deputy Director General’s observation about the inevitable shift from rigid to resilient digital trust frameworks provided the conceptual foundation for the entire discussion. This insight reframed digital governance challenges as requiring fundamental paradigm shifts rather than incremental improvements to existing approaches.


### Comprehensive Approach to Digital Development


CUI Jie’s presentation demonstrated how digital governance extends beyond technical and regulatory considerations to encompass social responsibility and inclusion. The China Internet Development Foundation’s work illustrates practical approaches to ensuring digital development benefits all segments of society.


## Areas Requiring Further Development


### Implementation Mechanisms


While speakers agreed on the need for international cooperation and more flexible regulatory frameworks, specific mechanisms for achieving these goals across different legal systems and cultural contexts require further development.


### Business-Regulatory Balance


The tension between the need for regulatory flexibility to accommodate rapid technological change and businesses’ requirements for predictable regulatory environments remains an ongoing challenge requiring creative solutions.


### Technical Standards


The discussion highlighted the need for interoperable technologies and advanced cybersecurity measures but did not address specific technical standards or implementation details required for practical deployment.


## Conclusion


This discussion at the UN Internet Governance Forum successfully identified critical challenges in contemporary digital governance while proposing conceptual frameworks for addressing them. The session brought together diverse perspectives from regulatory authorities, business communities, and civil society organizations to examine the transition from rigid to elastic approaches in digital trust frameworks.


The speakers demonstrated consensus on fundamental principles, including the need for international cooperation, comprehensive legal frameworks, and inclusive approaches to digital development. However, the discussion also revealed important challenges, particularly the tension between regulatory flexibility and business predictability, and the practical difficulties of implementing harmonized approaches across diverse national contexts.


The session’s emphasis on building flexible, secure, and inclusive digital frameworks provides a constructive foundation for future policy development. The recognition that traditional rigid approaches are inadequate for contemporary digital challenges, combined with practical insights about business needs and social inclusion requirements, offers valuable perspectives for advancing digital governance discussions.


*Note: The transcript indicates that an additional speaker may have presented content about global data compliance systems, but the attribution of this content is unclear from the available materials.*


Session transcript

Susan Ning(F): Ladies and gentlemen, it’s my great honor to moderate this session to discuss the enhanced digital trust, from rigidity to elasticity. And this session is organized by the China Cybersecurity Association, China Internet Development Foundation, China Daily, and King Edward Madison’s, the law firm. Now our first speaker is Madame Duanyin, who is the Deputy Director General for China Cybersecurity Association.


Deputy Director General for China Cybersecurity Association: Ladies and gentlemen, good afternoon. On behalf of the Cybersecurity Association of China, it gives me great honor to attend the IGF and have an exchange with you all on the important topic, enhancing digital trust from rigidity to elasticity. In today’s world, digital technologies are reshaping economic and social life at speed and scale. However, alongside the opportunities, come growing challenges to digital trust. Traditional approaches to build trust tend to rely on the rigid rule-setting, strict network isolation, and one-way regulatory mirrors. Such mechanisms have proven necessary and effective at a certain stage of development and in specific contexts. However, as global connectivity continues to deepen, the digital environment is becoming increasingly complex, and modern techniques are rapidly evolving and becoming deeply incorporated. Evidence in digital governance, philosophies, legal frameworks, and technology capabilities among countries and regions are becoming evident. Really, the digital trust architectures are revealing limitations explicitly. As a result, the shift toward a resilient digital trust framework has become an inevitable divergence and a pricing challenge for global digital governance. A resilient digital trust system emphasizes flexibility, adaptability, and collaboration, such as responding swiftly to changes brought about by new technologies and applications. The trust framework should align with the distinct characteristics of each country or region’s digital ecosystem. Given the different stages of digital economic development, cultural backgrounds, and legal foundations around the world, a resilient system should meet these needs through different trust streets and governance mechanisms. This underscores the importance of cooperation among all stakeholders in building digital trust on a global scale. China has undertaken extensive efforts and explorations in advancing the development of a resilient digital trust framework. China has been continually improving its policy and regulatory system for digital governance while also placing emphasis on maintaining policy flexibilities in the area of data security. The data security law and the personal information protection law provide the foundation legal framework for data governance. On the technological innovation front, China has been actively promoting the research and development of key digital trust technologies, such as applications of blockchain in supply chain finance. In terms of international cooperation, China has taken an active role in growing rulemaking for digital governance prospects. The global initiative on data security upholds the principles of openness, equality, and mutual benefit to build a peaceful, secure, open, and cooperative cyberspace. This initiative provides an important cooperation framework for the global development of a resilient digital trust system. As a national, industry-based, and non-profit social organization formed vocabulary by institutions, enterprises, and individuals engaged in cybersecurity-related industry, education, research, and application in China, the Cybersecurity Association of China maintains a broad collaboration connection with all sectors involved by cyberspace security. We remain committed to promoting technological application, improving industry self-regulation, and facilitating exchange and cooperation in order to create a more trustworthy digital world. Let us work together to build a safer, more trusted, and more prosperous global cyberspace with resilient digital trust as our shared foundation. Thank you.


Susan Ning(F): Thank you very much, Madame Duanyin. Our next speaker is Mr. Arne Byberg from the Oslo Law Firm, Weibo Japan. Arne. Is this on?


Arne Byberg: Yeah, it is. Thanks for having me. Yeah, so I’m Arne Byberg from Weibo Japan Tech Practice. We basically serve multinational customers. And I think what I’d like to share and augment to the Chinese perspective here is that businesses are increasingly looking for predictability. The technology is moving really, really fast, faster than the regulation. We see in the US, for instance, they have still no federal AI regulation. It was, they had one, it was starting to come along, but it was revoked by the current president. Hence, we are basically stuck with the sectorial regulation and state regulation, which makes it hard to navigate. In Europe, it’s a little bit easier to navigate because at least there is some cohesive regulation when it comes to AI Act and the Council of Europe Convention, et cetera. So that is helpful. But what we see is that there is still a lot of dependency on humans in the chain. So sort of having AI actually perform at a level where you can derive direct value is going to be challenging going forward. So I think in terms of international businesses, the multinational businesses, we see them struggle. They are certainly looking for some predictability. Whether that can be achieved through governance in the internet space and organizations and events like this, or collaborations on the AI front, I don’t know. But we hope and would welcome developments in that space because currently we see businesses starting to build up double and triple AI initiatives simply to cope with the various regulations of the different regions. And as everyone understands, that is costly and a lot of time wasted, actually. So with short end to that, that is my input. Thank you. Cheers.


Susan Ning(F): Thank you, Mr. Byberg. Our next speaker will be Mr. CUI Jie, who is the Deputy Secretary General from China Internet Development Foundation. Now Mr. Cui, yeah.


CUI Jie: I speak in Chinese. Hello, everyone. It is a great honor to be able to discuss with you on the UN Internet Governance Forum. On behalf of the China Internet Development Foundation, I would like to express my sincere gratitude to the UN Internet Governance Forum and my sincere greetings to all of you. With digitalization, networkization, and smartness continuing to advance and develop, public services are deeply integrated with the internet. The Internet Project is a new form of public-private partnership where public-private partnerships are based on the Internet and develop public-private partnerships through the use of Internet technology. The China Internet Development Fund, which is the leading social organization in the field of Internet public-private partnerships, was established in June 2015 and is a 5A national public-private partnership. We have always insisted on studying and integrating Xi Jinping’s new era Chinese characteristics and socialist ideas, especially Xi Jinping’s cultural ideas, as well as Xi Jinping’s important ideas on Internet power, focusing on Internet content construction, Internet security, informationization, and global Internet governance. We have established a special fund to support the healthy development of China’s Internet industry, promote Internet positive energy transmission, promote national Internet security and information development, promote Internet-related international and Hong Kong-Macao-Taiwan areas and make active contributions to the development of Internet power. With this opportunity, I would like to share with you some of our key work. In terms of improving digital adoption, we are committed to combining the digital red loop and the national development concept to support the implementation of the digital adoption and public-private partnership plan, combining online and offline to promote anti-fraud and anti-fraud content and help the elderly to cross the digital red loop. This year, we will also implement the Youth Internet Anti-Addiction Plan to help youth establish the correct concept of online and develop good habits of using the Internet. In terms of serving Internet security, we will support the implementation of the Internet Security College Student Innovation Support Plan to promote universities to support innovation and industrial development and improve the ability of students to solve practical problems. In addition, we will support the national Internet Security Standards Week to promote the broad agreement on Internet security standards, improve the standard quality level, promote standard implementation, and promote the standardization of Internet security and high-quality development. We will support the development of digital village to develop innovative Internet security talents. In terms of promoting digital village construction, we will invest in a special fund to support the implementation of digital village distance actions. We will build demonstration villages in ten locations, such as Lingyuan in Liaoning, Fuping in Shaanxi, and Fuping County in Shaanxi Province. The county relies on good ecological tourism resources and regional advantages. We will focus on Lenshuiyu, Longcaoping Village, Lenshuiyu and Mifeng Farming Base, Yingchang Village, and Dianshang Fuhua Base. We will build smart agriculture, produce and sell integrated, comprehensive improvement projects, build industrial development models, and drive the rapid transformation and upgrade of the whole industry. Ladies and gentlemen, these are the key points that I would like to share with you. With this opportunity, I would like to introduce the first project, the Internet of China Public Service Action. This project is aimed at uniting the power of the Internet industry to promote the development of the Internet public service industry and to spread the positive energy of the Internet, and to use the resources and advantages of the public service project to serve the network industry and to promote the security and information development of the national Internet. Last year, we successfully held the first Internet of China Public Service Action. Through technological adaptation, ecological construction, and regional practice, we have created an innovative form of artificial intelligence and public service. We have demonstrated the potential of artificial intelligence technology and provided valuable experience for the digital transformation of the Internet public service industry. This year, we will focus on the two groups, one large and one small, to clean up and refine the experience to help the elderly better use the Internet, and to help young people develop good habits of using the Internet so that they can better enjoy the results of digital development. Here, we call on everyone to pay attention and participate in the 2025 Internet of China Public Service Action. We hope that everyone will integrate with the Internet public service industry from different interfaces and jointly write a new chapter in the digital age of public service. Thank you.


Susan Ning(F): The rapid proliferation of data has also brought unprecedented challenges, including privacy violations, including the misuse of personal information and data breach. It is imperative that we establish a robot global data compliance system to address these challenges and ensure that data serves humanity in a responsible and ethical way. First and foremost, the foundation of a global data compliance system must be built upon a set of universally recognized principles. These principles shall include data privacy, data security, transparency, accountability, and the protection of human rights. Every country, regardless of its size and level of development, must adhere to these principles to create a level playing field for all stakeholders in the digital ecosystem. To achieve this, international cooperation is essential. Data does not recognize national borders. It flows freely across the globe, connecting people and systems in ways we could never have imagined. Therefore, we must work together to harmonize our data protection laws and regulations. This does not mean that we should eliminate all the differences, but rather we should strive for compatibility and interoperability. By doing this, we can create a seamless and secure environment for data economy. Moreover, we need to foster a culture of data responsibility. This involves educating individuals, businesses, and governments about the importance of data compliance. It means promoting best practices in data management and encouraging the development of ethical guidelines for data use. We must also empower citizens to take control of their own data, ensuring that they have the right to access, correct, and delete their own personal information. In addition, the role of technology cannot be overstated. As we develop new technologies, we must also develop the means to secure and protect the data. This includes investing in advanced cybersecurity measures, promoting the use of privacy computing, and encouraging the development of privacy-enhancing technologies. We must also stay ahead of emerging threats such as artificial intelligence and machine learning, which can both enhance or undermine the data security and privacy. Ladies and gentlemen, the global data compliance system is not just a regulatory framework. It is a collective commitment to safeguard the digital future of our planet. It’s a commitment to ensure that data is used for the greater good, that it respects the rights and the freedom of individuals, and that it fosters innovation and economic growth in a sustainable and responsible manner. As we move forward, let’s remember that we are all stakeholders in this digital revolution. Governments, businesses, civil society, and individuals all have a role to play. Together, we shall build a global data compliance system that is resilient, inclusive, and forward-looking. Together, we can create a digital world that is both secure and open, where data flows freely but responsibly. Thank you so much. Thank you.


D

Deputy Director General for China Cybersecurity Association

Speech speed

92 words per minute

Speech length

501 words

Speech time

324 seconds

Traditional rigid approaches to digital trust are becoming inadequate as global connectivity deepens and digital environments become more complex

Explanation

The speaker argues that traditional trust-building mechanisms that rely on rigid rule-setting, strict network isolation, and one-way regulatory measures are showing limitations. As global connectivity increases and digital environments become more complex with rapidly evolving technologies, these rigid approaches are no longer sufficient for modern digital governance needs.


Evidence

Evidence includes the growing complexity of digital environments, rapid evolution of modern techniques, and evident differences in digital governance philosophies, legal frameworks, and technology capabilities among countries and regions


Major discussion point

Digital Trust Framework Evolution


Topics

Cybersecurity | Legal and regulatory


A shift toward resilient digital trust frameworks emphasizing flexibility, adaptability, and collaboration is necessary to respond to new technologies and applications

Explanation

The speaker advocates for moving from rigid to resilient digital trust systems that can adapt to changes and collaborate across different contexts. This approach should align with distinct characteristics of each country’s digital ecosystem and accommodate different stages of development, cultural backgrounds, and legal foundations.


Evidence

The need is supported by the requirement to respond swiftly to changes from new technologies, accommodate different stages of digital economic development, cultural backgrounds, and legal foundations around the world


Major discussion point

Digital Trust Framework Evolution


Topics

Cybersecurity | Legal and regulatory


Agreed with

– Susan Ning(F)

Agreed on

Need for international cooperation in digital governance


Disagreed with

– Arne Byberg

Disagreed on

Regulatory approach – flexibility vs predictability


China has developed comprehensive legal frameworks including data security law and personal information protection law while promoting blockchain applications and international cooperation through initiatives like the global data security framework

Explanation

The speaker presents China’s multi-faceted approach to building resilient digital trust, which includes establishing foundational legal frameworks for data governance, investing in technological innovation, and leading international cooperation efforts. This demonstrates practical implementation of the resilient trust framework concept.


Evidence

Specific evidence includes China’s data security law and personal information protection law as foundational legal frameworks, blockchain applications in supply chain finance, and the global initiative on data security that upholds principles of openness, equality, and mutual benefit


Major discussion point

Digital Trust Framework Evolution


Topics

Legal and regulatory | Human rights | Cybersecurity


Agreed with

– Susan Ning(F)

Agreed on

Importance of comprehensive legal frameworks for digital governance


A

Arne Byberg

Speech speed

128 words per minute

Speech length

293 words

Speech time

137 seconds

Businesses are struggling with lack of predictability due to inconsistent AI regulation across regions, with the US having no federal AI regulation and Europe providing more cohesive frameworks

Explanation

The speaker highlights the regulatory fragmentation problem where multinational businesses face uncertainty due to inconsistent AI regulations across different regions. While Europe offers more cohesive regulation through the AI Act and Council of Europe Convention, the US lacks federal AI regulation, relying instead on sectoral and state-level regulations.


Evidence

The US has no federal AI regulation after the previous one was revoked by the current president, leaving businesses to navigate sectoral and state regulations, while Europe has more cohesive regulation with the AI Act and Council of Europe Convention


Major discussion point

Regulatory Challenges and Business Predictability


Topics

Legal and regulatory | Economic


Disagreed with

– Deputy Director General for China Cybersecurity Association

Disagreed on

Regulatory approach – flexibility vs predictability


Multinational companies are forced to build multiple AI initiatives to comply with different regional regulations, resulting in increased costs and wasted resources

Explanation

The speaker explains that the lack of regulatory harmonization forces businesses to create duplicate or triplicate AI systems to meet varying regional requirements. This regulatory fragmentation leads to inefficient resource allocation and increased operational costs for multinational corporations.


Evidence

Businesses are building double and triple AI initiatives to cope with various regulations of different regions, which is costly and results in wasted time


Major discussion point

Regulatory Challenges and Business Predictability


Topics

Economic | Legal and regulatory


C

CUI Jie

Speech speed

146 words per minute

Speech length

756 words

Speech time

308 seconds

The China Internet Development Foundation focuses on combining digital development with national concepts, supporting digital adoption plans and helping elderly citizens overcome digital barriers

Explanation

The speaker describes the foundation’s approach to digital inclusion by integrating digital development with national development concepts. They specifically focus on helping elderly citizens cross the digital divide through combined online and offline programs, including anti-fraud education and digital literacy initiatives.


Evidence

Implementation of digital adoption and public-private partnership plans, combining online and offline approaches to promote anti-fraud content and help the elderly cross the digital divide


Major discussion point

Digital Development and Public Service Integration


Topics

Development | Sociocultural


Implementation of youth internet anti-addiction programs and cybersecurity education initiatives to promote healthy internet usage and develop cybersecurity talent

Explanation

The speaker outlines educational initiatives targeting both youth internet addiction prevention and cybersecurity talent development. These programs aim to establish proper online habits among young people while building cybersecurity capabilities through university partnerships and innovation support.


Evidence

Youth Internet Anti-Addiction Plan to help youth establish correct online concepts and develop good internet habits, Internet Security College Student Innovation Support Plan to promote university innovation and improve students’ practical problem-solving abilities


Major discussion point

Digital Development and Public Service Integration


Topics

Cybersecurity | Sociocultural | Development


Investment in digital village construction projects across multiple provinces to integrate smart agriculture and e-commerce platforms for rural development

Explanation

The speaker describes comprehensive rural digitalization efforts through the digital village construction initiative. This involves building demonstration villages that integrate smart agriculture, e-commerce platforms, and comprehensive development projects to drive industrial transformation and upgrade in rural areas.


Evidence

Building demonstration villages in ten locations including Lingyuan in Liaoning and Fuping in Shaanxi, focusing on smart agriculture, integrated production and sales, and comprehensive improvement projects to build industrial development models


Major discussion point

Digital Development and Public Service Integration


Topics

Development | Economic


S

Susan Ning(F)

Speech speed

97 words per minute

Speech length

575 words

Speech time

353 seconds

A robust global data compliance system must be established based on universally recognized principles including data privacy, security, transparency, accountability, and human rights protection

Explanation

The speaker argues for the necessity of establishing a comprehensive global framework for data governance built on fundamental principles. This system should ensure that all countries, regardless of size or development level, adhere to these core principles to create equitable conditions for all digital ecosystem stakeholders.


Evidence

The foundation must include data privacy, data security, transparency, accountability, and protection of human rights, with every country adhering to these principles to create a level playing field


Major discussion point

Global Data Compliance System


Topics

Human rights | Legal and regulatory | Cybersecurity


Agreed with

– Deputy Director General for China Cybersecurity Association

Agreed on

Importance of comprehensive legal frameworks for digital governance


International cooperation is essential to harmonize data protection laws while maintaining compatibility and interoperability across different regulatory frameworks

Explanation

The speaker emphasizes that since data flows freely across borders, international collaboration is crucial for creating compatible regulatory frameworks. Rather than eliminating all differences, the goal should be achieving compatibility and interoperability to enable a seamless and secure global data economy.


Evidence

Data flows freely across the globe connecting people and systems, requiring harmonized data protection laws and regulations while striving for compatibility and interoperability rather than eliminating all differences


Major discussion point

Global Data Compliance System


Topics

Legal and regulatory | Human rights


Agreed with

– Deputy Director General for China Cybersecurity Association

Agreed on

Need for international cooperation in digital governance


Technology development must include advanced cybersecurity measures and privacy-enhancing technologies to address emerging threats from AI and machine learning

Explanation

The speaker stresses that technological advancement must be accompanied by corresponding security and privacy protection measures. This includes investing in cybersecurity, promoting privacy computing, and staying ahead of emerging threats posed by AI and machine learning technologies that can both enhance and undermine data security.


Evidence

Need for advanced cybersecurity measures, privacy computing, privacy-enhancing technologies, and staying ahead of emerging threats from artificial intelligence and machine learning which can both enhance or undermine data security and privacy


Major discussion point

Global Data Compliance System


Topics

Cybersecurity | Human rights | Infrastructure


Agreed with

– Deputy Director General for China Cybersecurity Association

Agreed on

Technology development must be accompanied by security measures


Agreements

Agreement points

Need for international cooperation in digital governance

Speakers

– Deputy Director General for China Cybersecurity Association
– Susan Ning(F)

Arguments

A shift toward resilient digital trust frameworks emphasizing flexibility, adaptability, and collaboration is necessary to respond to new technologies and applications


International cooperation is essential to harmonize data protection laws while maintaining compatibility and interoperability across different regulatory frameworks


Summary

Both speakers emphasize the critical importance of international collaboration in building effective digital governance frameworks, whether through resilient trust systems or harmonized data protection laws


Topics

Legal and regulatory | Cybersecurity


Technology development must be accompanied by security measures

Speakers

– Deputy Director General for China Cybersecurity Association
– Susan Ning(F)

Arguments

China has developed comprehensive legal frameworks including data security law and personal information protection law while promoting blockchain applications and international cooperation through initiatives like the global data security framework


Technology development must include advanced cybersecurity measures and privacy-enhancing technologies to address emerging threats from AI and machine learning


Summary

Both speakers agree that technological advancement must be paired with robust security frameworks and legal protections to ensure safe digital development


Topics

Cybersecurity | Legal and regulatory | Infrastructure


Importance of comprehensive legal frameworks for digital governance

Speakers

– Deputy Director General for China Cybersecurity Association
– Susan Ning(F)

Arguments

China has developed comprehensive legal frameworks including data security law and personal information protection law while promoting blockchain applications and international cooperation through initiatives like the global data security framework


A robust global data compliance system must be established based on universally recognized principles including data privacy, security, transparency, accountability, and human rights protection


Summary

Both speakers advocate for comprehensive legal frameworks that establish clear principles and regulations for digital governance, whether at national or global levels


Topics

Legal and regulatory | Human rights | Cybersecurity


Similar viewpoints

Both speakers recognize that traditional approaches to digital governance are insufficient for current challenges and advocate for new, more comprehensive frameworks

Speakers

– Deputy Director General for China Cybersecurity Association
– Susan Ning(F)

Arguments

Traditional rigid approaches to digital trust are becoming inadequate as global connectivity deepens and digital environments become more complex


A robust global data compliance system must be established based on universally recognized principles including data privacy, security, transparency, accountability, and human rights protection


Topics

Legal and regulatory | Cybersecurity | Human rights


Both speakers identify regulatory fragmentation as a major challenge and implicitly support the need for more harmonized approaches to digital regulation

Speakers

– Arne Byberg
– Susan Ning(F)

Arguments

Businesses are struggling with lack of predictability due to inconsistent AI regulation across regions, with the US having no federal AI regulation and Europe providing more cohesive frameworks


International cooperation is essential to harmonize data protection laws while maintaining compatibility and interoperability across different regulatory frameworks


Topics

Legal and regulatory | Economic


Unexpected consensus

Flexibility in digital governance approaches

Speakers

– Deputy Director General for China Cybersecurity Association
– Arne Byberg

Arguments

A shift toward resilient digital trust frameworks emphasizing flexibility, adaptability, and collaboration is necessary to respond to new technologies and applications


Businesses are struggling with lack of predictability due to inconsistent AI regulation across regions, with the US having no federal AI regulation and Europe providing more cohesive frameworks


Explanation

Despite representing different perspectives (regulatory authority vs. business), both speakers converge on the need for more adaptive and flexible approaches to digital governance, though from different angles – one advocating for resilient frameworks and the other highlighting the problems of rigid, inconsistent regulation


Topics

Legal and regulatory | Economic


Human-centered approach to digital development

Speakers

– CUI Jie
– Susan Ning(F)

Arguments

The China Internet Development Foundation focuses on combining digital development with national concepts, supporting digital adoption plans and helping elderly citizens overcome digital barriers


A robust global data compliance system must be established based on universally recognized principles including data privacy, security, transparency, accountability, and human rights protection


Explanation

Both speakers, despite focusing on different aspects (domestic digital inclusion vs. global data governance), share a human-centered approach that prioritizes protecting and empowering individuals in the digital space


Topics

Human rights | Development | Sociocultural


Overall assessment

Summary

The speakers demonstrate significant consensus on the need for international cooperation, comprehensive legal frameworks, and human-centered approaches to digital governance, while recognizing the inadequacy of traditional rigid regulatory approaches


Consensus level

High level of consensus on fundamental principles with complementary perspectives from different stakeholders (regulatory authorities, business, and civil society). This strong alignment suggests potential for collaborative solutions in global digital governance, particularly around building flexible, secure, and inclusive digital frameworks that balance innovation with protection of rights and interests.


Differences

Different viewpoints

Regulatory approach – flexibility vs predictability

Speakers

– Deputy Director General for China Cybersecurity Association
– Arne Byberg

Arguments

A shift toward resilient digital trust frameworks emphasizing flexibility, adaptability, and collaboration is necessary to respond to new technologies and applications


Businesses are struggling with lack of predictability due to inconsistent AI regulation across regions, with the US having no federal AI regulation and Europe providing more cohesive frameworks


Summary

The Chinese representative advocates for flexible and adaptive regulatory frameworks that can respond to technological changes, while the business representative emphasizes the need for predictable, cohesive regulation that businesses can rely on for planning and compliance


Topics

Legal and regulatory | Economic


Unexpected differences

Scale and scope of regulatory solutions

Speakers

– Arne Byberg
– Susan Ning(F)

Arguments

Multinational companies are forced to build multiple AI initiatives to comply with different regional regulations, resulting in increased costs and wasted resources


International cooperation is essential to harmonize data protection laws while maintaining compatibility and interoperability across different regulatory frameworks


Explanation

While both speakers acknowledge the problems caused by regulatory fragmentation, they propose different solutions – Byberg focuses on the business impact and need for predictable frameworks, while Susan Ning proposes a comprehensive global compliance system. This disagreement is unexpected because both should theoretically support harmonization, but they approach it from different perspectives and with different priorities


Topics

Legal and regulatory | Economic


Overall assessment

Summary

The main areas of disagreement center around regulatory philosophy (flexibility vs predictability), the scope of solutions (national vs global approaches), and priorities in digital governance (business efficiency vs comprehensive protection)


Disagreement level

The level of disagreement is moderate but significant for policy implications. While speakers generally agree on the need for better digital governance and international cooperation, their different approaches – China’s emphasis on flexible national frameworks, business community’s need for predictability, and calls for universal global principles – reflect fundamental tensions between sovereignty, economic efficiency, and universal standards in digital governance


Partial agreements

Partial agreements

Similar viewpoints

Both speakers recognize that traditional approaches to digital governance are insufficient for current challenges and advocate for new, more comprehensive frameworks

Speakers

– Deputy Director General for China Cybersecurity Association
– Susan Ning(F)

Arguments

Traditional rigid approaches to digital trust are becoming inadequate as global connectivity deepens and digital environments become more complex


A robust global data compliance system must be established based on universally recognized principles including data privacy, security, transparency, accountability, and human rights protection


Topics

Legal and regulatory | Cybersecurity | Human rights


Both speakers identify regulatory fragmentation as a major challenge and implicitly support the need for more harmonized approaches to digital regulation

Speakers

– Arne Byberg
– Susan Ning(F)

Arguments

Businesses are struggling with lack of predictability due to inconsistent AI regulation across regions, with the US having no federal AI regulation and Europe providing more cohesive frameworks


International cooperation is essential to harmonize data protection laws while maintaining compatibility and interoperability across different regulatory frameworks


Topics

Legal and regulatory | Economic


Takeaways

Key takeaways

Digital trust frameworks must evolve from rigid, rule-based approaches to flexible, resilient systems that can adapt to rapidly changing technologies and diverse global contexts


There is an urgent need for international regulatory harmonization, particularly in AI governance, as inconsistent regulations across regions create significant compliance burdens and costs for multinational businesses


China has established comprehensive legal frameworks for digital governance while emphasizing flexibility and international cooperation through initiatives like the global data security framework


Digital inclusion efforts must address both ends of the demographic spectrum – helping elderly citizens overcome digital barriers while protecting youth from internet addiction and promoting healthy online habits


A global data compliance system based on universal principles (privacy, security, transparency, accountability, human rights protection) is essential for responsible data governance in an interconnected world


Technology development must be coupled with robust cybersecurity measures and privacy-enhancing technologies to address emerging threats from AI and machine learning


Resolutions and action items

Call for participation in the 2025 Internet of China Public Service Action to promote digital public service integration


Continued implementation of digital village construction projects across multiple Chinese provinces


Ongoing support for cybersecurity education initiatives and youth internet programs


Promotion of international cooperation frameworks for digital governance and data security


Unresolved issues

How to achieve practical regulatory harmonization across different legal systems and cultural contexts while respecting national sovereignty


Specific mechanisms for creating predictable regulatory environments for multinational businesses operating across multiple jurisdictions


Technical standards and implementation details for interoperable privacy-enhancing technologies


Concrete steps for establishing universal data compliance principles that can be effectively enforced globally


How to balance the need for regulatory flexibility with business requirements for predictability and consistency


Suggested compromises

Striving for compatibility and interoperability in data protection laws rather than complete harmonization, allowing for regional differences while maintaining functional cooperation


Maintaining policy flexibility in data security areas while providing foundational legal frameworks


Balancing openness with security in cyberspace governance through collaborative international initiatives


Thought provoking comments

Traditional approaches to build trust tend to rely on the rigid rule-setting, strict network isolation, and one-way regulatory mirrors… However, as global connectivity continues to deepen, the digital environment is becoming increasingly complex… the shift toward a resilient digital trust framework has become an inevitable divergence.

Speaker

Deputy Director General for China Cybersecurity Association


Reason

This comment is insightful because it frames the entire discussion by identifying a fundamental paradigm shift in digital governance – moving from rigid, static approaches to flexible, adaptive frameworks. It acknowledges that traditional security models are becoming inadequate for our interconnected digital reality and introduces the core theme of ‘rigidity to elasticity.’


Impact

This comment established the conceptual foundation for the entire session, setting up the central tension between security and flexibility that subsequent speakers would address. It provided the theoretical framework that other participants could build upon or respond to.


Businesses are increasingly looking for predictability. The technology is moving really, really fast, faster than the regulation… we see businesses starting to build up double and triple AI initiatives simply to cope with the various regulations of the different regions. And as everyone understands, that is costly and a lot of time wasted, actually.

Speaker

Arne Byberg


Reason

This comment is particularly thought-provoking because it introduces the practical business perspective and highlights a critical inefficiency in the current system. It reveals how the lack of harmonized regulation is creating real economic costs and operational complexity for multinational companies, adding a concrete dimension to the abstract discussion of digital trust.


Impact

Byberg’s comment shifted the discussion from theoretical policy frameworks to practical implementation challenges. It introduced the business stakeholder perspective and highlighted the economic consequences of fragmented regulatory approaches, which influenced the moderator’s subsequent focus on global harmonization and practical solutions.


Data does not recognize national borders. It flows freely across the globe, connecting people and systems in ways we could never have imagined. Therefore, we must work together to harmonize our data protection laws and regulations. This does not mean that we should eliminate all the differences, but rather we should strive for compatibility and interoperability.

Speaker

Susan Ning (Moderator)


Reason

This comment is insightful because it captures the fundamental challenge of governing a borderless digital world with nation-state regulatory frameworks. The distinction between ‘harmonization’ and ‘elimination of differences’ is particularly nuanced, suggesting a middle path that respects sovereignty while enabling cooperation.


Impact

This comment synthesized the previous speakers’ points and elevated the discussion to a more strategic level. It moved beyond identifying problems to proposing a specific approach – seeking compatibility rather than uniformity – which provided a constructive framework for thinking about international cooperation in digital governance.


The global data compliance system is not just a regulatory framework. It is a collective commitment to safeguard the digital future of our planet. It’s a commitment to ensure that data is used for the greater good, that it respects the rights and the freedom of individuals, and that it fosters innovation and economic growth in a sustainable and responsible manner.

Speaker

Susan Ning (Moderator)


Reason

This comment is thought-provoking because it reframes data compliance from a technical/legal issue to a moral and civilizational imperative. It connects digital governance to broader themes of planetary stewardship and collective responsibility, elevating the stakes of the discussion.


Impact

This comment provided a philosophical capstone to the discussion, transforming it from a technical policy debate into a broader conversation about shared values and collective responsibility. It unified the various practical concerns raised by previous speakers under a larger moral framework.


Overall assessment

These key comments shaped the discussion by creating a clear progression from problem identification to solution frameworks. The Chinese representative established the theoretical foundation by identifying the paradigm shift needed in digital trust. Byberg’s business perspective grounded the discussion in practical realities and economic consequences. The moderator then synthesized these perspectives, first by proposing a nuanced approach to international cooperation that balances harmonization with sovereignty, and finally by elevating the entire discussion to a moral and civilizational level. Together, these comments created a comprehensive narrative arc that moved from technical challenges through practical implications to philosophical imperatives, demonstrating how effective moderation can weave together diverse perspectives into a coherent and progressively deeper conversation.


Follow-up questions

How can predictability be achieved for multinational businesses navigating different AI regulations across regions?

Speaker

Arne Byberg


Explanation

Businesses are struggling with inconsistent regulations across different regions, leading to costly duplicate AI initiatives, and there’s uncertainty about whether governance through internet organizations can provide solutions


How can international cooperation effectively harmonize data protection laws while maintaining compatibility and interoperability?

Speaker

Susan Ning


Explanation

She emphasized the need to work together to harmonize data protection laws without eliminating all differences, but the specific mechanisms for achieving this compatibility remain unclear


How can we stay ahead of emerging threats from AI and machine learning that can both enhance and undermine data security?

Speaker

Susan Ning


Explanation

She identified AI and machine learning as dual-nature technologies that present both opportunities and threats to data security, requiring proactive approaches that weren’t fully explored


What specific governance mechanisms can effectively address the limitations of rigid digital trust architectures?

Speaker

Deputy Director General for China Cybersecurity Association


Explanation

While she identified that traditional rigid approaches are showing limitations in complex digital environments, the specific alternative mechanisms for resilient trust frameworks need further development


How can different countries align their distinct digital ecosystems while maintaining their unique characteristics?

Speaker

Deputy Director General for China Cybersecurity Association


Explanation

She noted that trust frameworks should align with each country’s distinct digital ecosystem characteristics, but the practical methods for achieving this alignment require further exploration


Disclaimer: This is not an official session record. DiploAI generates these resources from audiovisual recordings, and they are presented as-is, including potential errors. Due to logistical challenges, such as discrepancies in audio/video or transcripts, names may be misspelled. We strive for accuracy to the best of our ability.