China opens drafting of sector AI-security guides for finance, health and broadcasting

What TC260 actually did on July 7?

On July 7, 2026, the secretariat of China's National Cybersecurity Standardization Technical Committee, known as TC260, posted three notices on tc260.org.cn. Each one solicits participating units to help draft a guidance technical document. The three titles differ by a single sector name: 《网络安全技术 人工智能应用安全 金融》 for finance, 《网络安全技术 人工智能应用安全 卫生健康》 for healthcare, and 《网络安全技术 人工智能应用安全 广播电视》 for broadcasting and television (all July 7, 2026).

The notices are administrative, not substantive. They do not publish rules. They ask companies, research bodies, and other organizations to apply to sit on the drafting teams, and they route applicants to the China Electronics Standardization Institute in Beijing. That is the important part. The content of each sector document has not been written yet. It is about to be, and TC260 is naming who gets to write it.

Added 21 August 2026: a TC260 item listing six sector documents

Our 11 July report, based on the 7 July participant-recruitment notices, named three sectors: finance, healthcare and broadcasting. A separate TC260 item, published 10 July 2026 and describing a joint kick-off meeting held 8 July 2026, lists six sector documents in active drafting, the same three plus education, emergency management and government affairs.

We have not established whether the three additional sectors were constituted through a different notice track, added after 7 July, or simply omitted from the recruitment-notice reporting chain. Both figures are reported as TC260 stated them, on their respective dates.

The agencies in the room are the useful part for anyone tracking who owns what. TC260's item records attendance and remarks from the information technology and automation standards division of the State Administration for Market Regulation, which handles standards, and from the review and assessment division of the cybersecurity coordination bureau of the Central Cyberspace Affairs Commission Office, which handles security review. Representatives of the Ministry of Emergency Management, the financial regulator, the National Radio and Television Administration and the Ministry of Education also attended, alongside the deputy leader of the AI security standards working group, WG9, and about thirty participants including representatives of all six drafting groups. The meeting was chaired by the director of the cybersecurity research centre at the China Electronics Standardization Institute.

Two named individuals are worth recording only so they can be recognised in future TC260 documents: 张震, deputy leader of WG9, and 姚相振 of the China Electronics Standardization Institute, who chaired. Attendance by an agency does not by itself establish that it owns or will approve a given sector's document, and TC260's item does not say so.

TC260 described the kick-off meeting as implementing the 《加快推动人工智能百项国家标准建设专项行动计划》, a stated plan to accelerate one hundred national AI standards. We have not located or reviewed the plan itself and cannot characterise its scope, timeline, or the six sector documents' place within it.

Why does the move one general guideline to three vertical baselines matter?

TC260 spent the last two years assembling the horizontal layer of China's AI-security work. In January 2026 it circulated the general principles for AI application security, the 人工智能应用安全指引总则 practice guide, as a draft for comment. The May 2026 ethics-focused 人工智能应用伦理安全指引 sat alongside it. Those documents speak to AI generally, across sectors.

The July 7 notices mark the next phase. Instead of one guideline that a bank, a hospital, and a broadcaster all read the same way, TC260 is now writing separate technical documents for each. That matters because the security questions are not the same. An AI model that scores loan applications, one that flags a tumor on a scan, and one that generates broadcast content carry different data sensitivities, different failure modes, and different regulators watching over them. Sector documents let TC260 write governance, data-handling, access-control, and testing expectations that fit each vertical rather than the average of all three.

Why "recommended" guidance still binds in practice?

US general counsel often read the word "guidance" and relax. That reflex is worth examining here, but we are not going to tell you these documents will bind you, because nothing in the record we read supports that. TC260 guiding technical documents are formally recommended. What the TC260 records establish is that six sector documents are in drafting and that drafting groups exist. They do not establish how any regulator, procurement body or enforcement authority will treat the finished texts.

So the honest way to describe the July 7 notices is this: recruitment for documents that have not been written, from a committee whose outputs are formally recommended. Worth watching closely because of where they are aimed, not because anything about their future legal effect has been established.

What this means for a US firm operating AI in China?

Three groups should pay attention now. First, financial institutions and their vendors, including US banks, insurers, asset managers, and the AI and cloud suppliers behind them, whose Chinese operations use AI for credit, fraud, trading, or claims. Second, healthcare and life-sciences firms running clinical, diagnostic, or administrative AI in Chinese hospitals. Third, media and broadcast operators using AI to generate or moderate content that reaches Chinese audiences.

On the 10 July item, education, emergency management and government affairs are also in drafting, which widens the set of organisations with a reason to watch this programme beyond the three sectors named in the July notices.

For each, the July 7 notices answer a question that GCs and CISOs have been asking since 2024: is China going to write AI-security rules that are specific to my sector, or leave me under one broad guideline. The answer is now visible. Vertical documents are coming, and the drafting has started.

The drafting window is the influence window?

There is a practical reason to act during a solicitation rather than after publication. The only point at which an outside organization can shape a Chinese technical document is while it is being drafted. Once TC260 finalizes text, a foreign firm reacts to it. During the participation window, a firm with a qualifying PRC entity can apply to contribute, see the working drafts early, and flag requirements that would be costly or unworkable for how it actually runs AI.

That does not guarantee a seat. Drafting groups are curated, and foreign participation in Chinese standards work carries its own sensitivities that legal and government-affairs teams should weigh. But a firm that ignores the window forfeits the option entirely and learns the requirements only when they are fixed.

What we did not verify

We did not read any of the six sector documents. None has been written or issued, and nothing here describes the content of any of them.

We did not establish why the 7 July notices named three sectors while the 10 July item lists six. We set out both figures as TC260 stated them and reach no conclusion.

We did not read the 《加快推动人工智能百项国家标准建设专项行动计划》. We report only that TC260's item names it as the plan the kick-off implements, and we make no claim about its scope, timeline or content.

TC260's item as published reports attendance and the existence of drafting groups. We do not report any deliberative outcome, agreed timeline or consensus, because the item does not state one.

We did not verify whether attendance by a ministry or regulator carries any formal role in approving a sector document. Nothing here should be read as an allocation of jurisdiction.

The Chinese term rendered here as AI application security is 人工智能应用安全. It is a cybersecurity-standards concept and should not be read as equivalent to the broader policy idea of AI safety used in other jurisdictions.

Related briefings

• China opens drafting on five AI security standards under WG9
• The GB standard on AI security classification and grading
• China's NFRA on safe AI development in banking and insurance
• China's CAC rules for AI in internet information services
• AI Regulation News hub