This chapter traces the incredibly rapid expansion of the platform e-commerce and financial conglomerates Alibaba and Ant Group. It shows how they took advantage of government fragmentation and dependence on the private economy to attract huge foreign investment, using the variable interest entity (VIE) legal loophole, and then to diversify into payment services (Alipay) and finance in conjunction with state financial institutions, attracting hundreds of millions of customers and tens of millions of SME merchants. The chapter analyzes the key struggles between this Alibaba/Ant "corporate ecosystem" and government regulators seeking to protect consumers, finding that reports of a reining in of Chinese private firms by the Chinese Communist Party are premature.

This chapter demonstrates the extent of the data protection problems in China, and the public’s growing concern about loss of privacy and abuse of their personal data. It proceeds to show that under China’s Cyber Security Law, the government has responded to this issue by strengthening ‘data protection’ from abuse by private companies but without shielding ‘data privacy’ from government intervention. In particular, enforced real-name user registration for online services potentially allows the Chinese government to demand access to the local data of any person who uses an online service in China, for national security or criminal investigation purposes. The chapter argues that this internal contradiction within the Cyber Security Law – increased data protection while demanding real-name user registration – may also benefit AI development. This is due, in part, to the vagueness of key terms within the Cyber Security Law, and the accompanying fuzzy logic within the Privacy Standards issued under that law, which allow both tech firms and government regulators considerable discretion in how they comply with and enforce data protection provisions. In the final part of the chapter, it is argued that due to the potential benefits of AI in solving serious governance problems, the Chinese government will only selectively enforce the data privacy provisions in the Cyber Security Law, seeking to prevent commercial abuse without hindering useful technological advances.