Regulation of Neurogenetic Data Commercialization Restrictions in China

1. Introduction

China regulates the commercialization of neurogenetic data through a combination of human genetic resources legislation, personal information protection, data security, biosecurity and civil law. Neurogenetic data includes genetic information associated with neurological conditions, brain development, cognitive traits, psychiatric disorders and inherited neurological diseases. Examples include genomic data concerning Alzheimer's disease, epilepsy, Parkinson's disease and hereditary intellectual disabilities.

The central legal issue is whether companies, hospitals, biotechnology enterprises and research institutions can collect, license, sell, transfer or commercially exploit such information.

China does not impose a blanket prohibition on every commercial activity involving neurogenetic data. Instead, it prohibits the buying and selling of human genetic resources, restricts certain cross-border transfers and requires compliance with consent, ethical review, security and personal information protection rules. Lawful research and biotechnology development remain possible under the applicable regulatory framework.

Mofcom Policy

+1

2. Principal Legal Framework

A. Regulations on the Administration of Human Genetic Resources

The Regulations on the Administration of Human Genetic Resources were promulgated in 2019 and revised in 2024, with the revised provisions effective from 1 May 2024.

These Regulations are particularly important where neurogenetic data originates from human genetic material or constitutes information generated using such material.

Article 2 distinguishes between:

Human genetic resource materials: biological materials such as cells, tissues and organs containing human genetic material.

Human genetic resource information: data and other information generated using human genetic resource materials.

Article 9 requires compliance with ethical principles, applicable ethical review requirements, respect for providers' privacy and prior informed consent.

Most importantly, Article 10 prohibits the buying and selling of human genetic resources. However, the provision permits lawful provision or use for scientific research with reasonable cost payments; such payments are not treated as buying and selling.

Consequently, a company cannot simply purchase Chinese human genomic datasets as unrestricted commodities. However, a properly structured research collaboration, lawful data-processing arrangement or licensed biotechnology project is not automatically prohibited merely because commercial entities participate. Its legality depends on the activity, purpose, compensation structure and applicable approvals.

Mofcom Policy

+1

B. Personal Information Protection Law, 2021

The Personal Information Protection Law (PIPL) establishes additional restrictions on the commercial processing of neurogenetic information.

Article 28: Sensitive personal information includes medical and health information and biometric information. Neurogenetic information that reveals an individual's neurological health or identifiable biological characteristics will generally require heightened protection.

Article 29: Processing sensitive personal information requires separate consent, subject to applicable statutory exceptions.

Article 30: Individuals must generally be informed of the necessity of processing and its effects on their rights and interests.

Article 55: A personal information protection impact assessment is required in specified circumstances, including processing sensitive personal information and providing personal information to overseas recipients.

Therefore, a biotechnology company cannot assume that purchasing data from a hospital or research institution automatically gives it unrestricted commercial exploitation rights.

en.spp.gov.cn

+1

C. Civil Code of China, 2021

Articles 1032–1039 protect privacy and personal information. Article 1034 covers information capable of identifying a natural person, including health information, while Article 1035 establishes requirements concerning lawful, legitimate and necessary processing.

These provisions can support civil claims where a company improperly discloses, exploits or processes identifiable neurogenetic information. Depending on the circumstances, remedies may include cessation of infringement, removal of information, correction and compensation.

D. Biosecurity Law and Data Security Law

The Biosecurity Law establishes broader protections for China's biological resources and national security. The Data Security Law regulates data processing and requires appropriate security measures.

Together with human genetic resources rules, these laws make commercial access to genomic databases a regulatory issue as well as a contractual matter. Cross-border commercial transactions may therefore require several independent compliance assessments.

3. Major Commercialization Restrictions

The principal restrictions operate in four areas:

1. Direct sale of genetic resources: Buying and selling human genetic resources is prohibited under Article 10 of the Human Genetic Resources Regulations. Reasonable research-related cost payments are expressly distinguished from prohibited trading.

2. Commercial profiling: Companies processing identifiable neurological or genetic health data must satisfy applicable purpose, necessity, consent and security requirements. Consent to medical treatment does not automatically authorize unrelated advertising, insurance profiling or AI-model development.

3. Cross-border transfers: Article 37 of the Human Genetic Resources Regulations Implementation Rules identifies circumstances requiring security review before human genetic resource information is provided abroad or made available for foreign use. These include specified genetic pedigrees, particular regional populations and exome or genome sequencing information involving more than 500 individuals, where the relevant statutory conditions apply. PIPL cross-border transfer requirements must also be considered independently.

ncsti.gov.cn

+1

4. Commercial research and AI: Developing diagnostic algorithms or neurological treatments using genetic datasets is not automatically unlawful. However, companies must establish a lawful basis for processing, satisfy applicable research and ethics requirements, and determine whether the proposed transaction constitutes prohibited trading or triggers regulatory review.

4. Relevant Cases and Judicial Developments

Case 1: Criminal case involving human genetic resource materials, 2023

A study of publicly available Chinese cases reports a criminal conviction involving the collection of pregnant women's blood between 2019 and 2022 and sending samples to Hong Kong for fetal sex determination. The defendant received imprisonment and a fine for offences involving smuggling prohibited goods and human genetic resource materials.

The published research account does not establish a definitive case name or judgment number. Nevertheless, the case illustrates that transferring biological samples for a commercial or testing purpose can raise criminal-law concerns independently of ordinary contractual arrangements.

Frontiers

+1

Case 2: Criminal forgery case, 2020

Another reported case involved falsifying hospital and ethics committee seals to obtain an administrative permit for a research project. The defendant was convicted of forging institutional seals.

Its relevance lies in the enforcement of regulatory approval procedures: commercial research cannot lawfully bypass required authorizations through fabricated ethics documentation. This case is not a direct ruling on neurogenetic data commercialization.

Frontiers

+1

Judicial limitation: As of October 2026, the sources reviewed do not establish a reported, authoritative Chinese judgment directly deciding whether a particular commercial transaction involving neurogenetic datasets violates Article 10. The cases above are related precedents, not direct neurogenetic-data rulings.

5. Conclusion

China's framework distinguishes lawful commercial research from prohibited trading in human genetic resources. The legality of a transaction depends on the data's origin, identifiability, intended use, compensation arrangements, consent, applicable approvals and cross-border access.

The central compliance principle is that commercial value does not create unrestricted ownership or exploitation rights over human neurogenetic information. Companies should conduct a human genetic resources assessment, a personal information protection assessment and a cross-border transfer review before licensing or monetizing such datasets.