Governance research on internet governance, cyber identity, privacy, surveillance, data protection and digital rights — presenting current policy in the PRC (Mainland), the evidence and observed outcomes, and the Third Republic alternative.
Scope
This hub collects the Free China Movement’s governance research on the rules that decide who may speak online, under what name, with what data collected about them, and who can compel that data to be revealed. It covers real-name authentication and the national cyber-ID, platform content obligations, personal-information protection and its enforcement, and the remedies available when identity or data systems are abused. Each topic page in this series follows the same discipline — policy history, the current mainland policy, the evidence and its actual results, the Free China Movement’s assessment, and the governing alternative proposed for a future Third Republic.
What this research examines
- Real-name authentication for internet services, and the 2025 national cyber-ID credential
- The line between identity assurance for high-risk transactions and identity systems as general speech control
- Personal-information protection: consumer rights, security carve-outs and enforcement gaps
- State access to platform data: unmasking, data requests and their oversight
- Takedowns, account closures, notice and appeal
- The historical record of digital publication and censorship, including the movement’s own
Current policy and evidence
Since 2015, mainland internet governance has expanded real-name authentication, account-management rules and content obligations. The 2025 national cyber-ID rules make use of the national cyber-ID credential voluntary and require equal service for users who authenticate through other lawful methods, while the broader real-name authentication requirement for covered internet services remains mandatory; official one-year implementation reporting stated 90 million cyber-ID app downloads, 40 million applicants and 280 million authentications. Separate 2026 personal-information enforcement reported checks of more than 20,000 apps and SDKs, more than 4,000 rectifications, more than 1,100 public violation notices, and more than 400 removals or penalties. These are implementation and enforcement outputs; they do not by themselves prove parity for users who decline the credential, independent controls over state access or unmasking, or political-speech neutrality. Mainland legal scholars — among them Tsinghua University’s Lao Dongyan and Peking University’s Shen Kui, in debate reported around the 2024 cyber-ID proposal — have publicly raised the surveillance, data-centralization and chilling-effect side of the trade-off, alongside the privacy rationale of reducing repeated disclosure of full identity information to individual platforms; their criticism is carried here as attributed expert analysis, not as a measure of public opinion.
FCM assessment
The Free China Movement supports targeted identity assurance for high-risk transactions and genuine fraud prevention. It opposes turning identity systems into a general architecture for tracing, chilling or suppressing lawful political, religious, journalistic or civic expression. Identity verification can be legitimate where it is necessary and proportionate; the central governance test is whether privacy-enhancing credentials reduce commercial overcollection without making lawful public expression easier to trace or suppress. No verified survey establishes that a representative national majority supports or opposes the present system, and this hub makes no such claim.
Third Republic governing alternative
- Protect lawful pseudonymous political, religious, journalistic and civic speech
- Use privacy-preserving identity assurance only where necessary for high-risk services
- Require independent judicial authorization to unmask an account, except in narrowly defined emergencies
- Require notice and meaningful appeal for takedowns and account closures
- Publish government data-request, unmasking and censorship statistics
- Create an independent data-protection authority and enforceable remedies for wrongful surveillance or disclosure
Research framework
- Policy history
- Current PRC (Mainland) policy
- Evidence and actual results
- Chinese public and domestic research
- International and expert views
- FCM assessment
- Third Republic alternative
- Measurable success criteria
- Sources
- Continuing updates
Published papers
Internet, Censorship & Data Governance: Separate Identity Security from Political Speech Control — the hub’s founding paper: real-name authentication, the national cyber-ID and personal-information enforcement assessed against the speech-control test, with the Third Republic governing alternative.
Related research
Personal Information Protection and Data Governance: Real Consumer Rights, Security Carve-Outs, and Enforcement Gaps — the Current Policy Watch assessment of the personal-information protection regime and where its rights stop.
From Fax Machines to AI Gatekeepers — Research Access — access page for the full research paper tracing how information control over China research has been exercised from the fax era to AI gatekeepers; the historical record behind this hub includes the movement’s own digital-publication history, with FreeChina.net operating as an FCM public-information platform from the 1998 founding period and recorded as inaccessible in Beijing in 2002 filtering research.
Evidence limits
The implementation figures cited here are official outputs, not independent audits; evidence on non-user parity, on controls over state access and unmasking, and on cyber-ID-specific breach security remains incomplete. The historical record supports a history of digital publication and censorship exposure; it is not evidence of a detailed historical FCM policy on modern cyber-ID, real-name authentication or data protection, and none is claimed.