Insights市场洞察 October 20262026年10月

The US data rule every Chinese software and IoT maker should know中国软件与物联网厂商必须了解的美国数据新规

Since April 2025, giving China-based companies access to bulk US personal data is restricted. Robot fleets, smart devices and apps are in scope.自2025年4月起，向中国企业提供大规模美国个人数据的访问受到限制。机器人车队、智能设备与App都在适用范围内。

What it is这是什么规定

The US Department of Justice Data Security Program took effect on April 8, 2025, with due diligence and annual audit requirements from October 6, 2025. It names China, including Hong Kong and Macau, among the countries of concern.美国司法部“数据安全计划”于2025年4月8日生效，尽职调查与年度审计要求自2025年10月6日起实施。中国（包括香港和澳门）被列为“受关注国家”。

Who it reaches适用于谁

Companies headquartered in China or at least 50% owned by such companies are covered persons, and so are their non-US employees. US companies that give them access to covered data through vendor, employment or investment agreements may do so only under federal security requirements, with due diligence and an annual independent audit.总部位于中国或被此类企业持股50%以上的公司属于“受管辖人员”，其非美国籍员工亦然。美国公司若通过供应商、雇佣或投资协议向其提供受管辖数据的访问，必须满足联邦安全要求，并开展尽职调查和年度独立审计。

The thresholds数据规模门槛

The rule applies to bulk data collected over twelve months: precise location from 1,000 US devices, biometric identifiers of 1,000 people, health or financial data of 10,000 people, or personal identifiers such as device IDs combined with other data for 100,000 people. A robot fleet or a popular app can cross these lines quickly.规定针对12个月内累计的大规模数据：1,000台美国设备的精确位置、1,000人的生物识别信息、10,000人的健康或财务数据，或100,000人的个人标识符（如设备ID与其他数据的组合）。一个机器人车队或一款热门App很快就会触及这些门槛。

What it means for your product对产品意味着什么

Design the product so that overseas teams cannot reach bulk US personal data: North American hosting, access controls, logs and a support path that runs through North America. Expect US buyers to ask about it in due diligence. Civil penalties reach about $375,000 per violation or twice the transaction value, and willful violations are criminal.在产品设计上确保海外团队无法访问大规模美国个人数据：北美托管、访问控制、日志记录，以及经由北美团队的支持流程。美国买家会在尽职调查中问到这一点。民事罚款可达每次违规约37.5万美元或交易金额的两倍，故意违规将承担刑事责任。

General information, current as of the date above. It is not legal advice; rules change, and we confirm each product with licensed counsel.本文为截至上述日期的一般性信息，不构成法律意见。规则可能变化，我们会就每个产品与持牌律师确认。