Regulation of Infectious Disease Genomic Surveillance in China

1. Introduction

Infectious disease genomic surveillance in China involves the collection, sequencing, analysis, storage, and sharing of pathogen genetic information to identify emerging infections, monitor mutations, trace outbreaks, and guide public health interventions. It covers pathogens such as influenza viruses, SARS-CoV-2, tuberculosis bacteria, and other organisms capable of causing communicable diseases.

China regulates this field through a combination of public health legislation, biosafety rules, infectious disease reporting requirements, human genetic resource controls, data protection legislation, and administrative measures governing pathogenic microorganisms. The legal framework seeks to balance early outbreak detection and scientific research against biosecurity, individual privacy, and national security interests.

An important distinction is that pathogen genomic surveillance is not legally identical to human genomic surveillance. Sequencing a virus collected from a patient may involve both pathogen genetic information and identifiable human biological samples or associated clinical data. Different legal requirements may therefore apply to different parts of the same surveillance project.

2. Principal legislation and regulatory framework

A. Biosecurity Law of the People's Republic of China, 2021

The Biosecurity Law, effective from 15 April 2021, is the central framework governing biological risk prevention and control. It addresses emerging infectious diseases, biotechnology research, pathogenic microorganism laboratories, and human genetic resources.

NPC

+1

Its principal implications for genomic surveillance include:

Risk prevention: Surveillance programmes must be designed to identify and manage biological threats.

Laboratory safety: Laboratories handling pathogenic microorganisms must comply with applicable biosafety standards, security requirements, and incident-reporting duties.

Biological resource protection: The collection, preservation, utilisation, and international provision of relevant biological resources are subject to regulatory controls.

Accountability: Concealment, false reporting, or delayed reporting of infectious disease incidents can attract administrative sanctions and, where applicable, other legal liability.

The law is particularly important where genomic surveillance involves high-risk pathogens, specialised laboratories, or the international transfer of biological materials.

B. Revised Law on the Prevention and Control of Infectious Diseases, 2025

The revised law was adopted on 30 April 2025 and took effect on 1 September 2025. It strengthens disease monitoring, early warning, reporting, and coordination among medical institutions and disease-control authorities.

State Council of China

+1

The 2025 framework is directly relevant to genomic surveillance because pathogen sequencing can identify mutations, emerging variants, and previously unrecognised infectious threats.

Disease-control institutions have responsibilities involving surveillance, collection and analysis of monitoring information, pathogen identification, and assessment of epidemic trends. The revised framework also strengthens interdepartmental information sharing while requiring personal information to be protected.

cqtn.gov.cn

Legal significance: Genomic surveillance is increasingly part of an integrated statutory monitoring system rather than merely an optional scientific activity. Nevertheless, the precise duties of a particular hospital, laboratory, or research institution depend on the applicable statutory provisions and implementing rules.

C. Personal Information Protection Law, 2021

The Personal Information Protection Law (PIPL) governs the processing of personal information. Genetic and medical information can constitute sensitive personal information, especially where data can identify a patient or reveal details about their health.

Where genomic surveillance uses identifiable clinical samples, patient records, or linked sequencing datasets, relevant requirements may include:

A lawful basis for processing.

A clearly defined purpose and appropriate limits on data use.

Enhanced protection for sensitive personal information.

Appropriate security measures and access controls.

Compliance with applicable requirements for cross-border data transfers.

Public health responsibilities may provide a lawful basis for certain processing activities without ordinary individual consent, depending on the circumstances and applicable law. This does not create an unrestricted exemption from privacy and security obligations.

D. Human Genetic Resources Regulations

China's Human Genetic Resources Regulations and their implementing rules govern human genetic materials and information originating from such materials. The Ministry of Science and Technology issued implementing rules that took effect on 1 July 2023.

State Council of China

+1

These rules matter when a surveillance programme includes human-derived genetic information, such as host-genome sequencing, or research involving human biological samples.

A critical distinction applies: sequencing a pathogen is not automatically the same as sequencing the human genome. However, a project may trigger human genetic resource requirements when it collects, analyses, preserves, or provides regulated human genetic materials or information.

Foreign collaboration must therefore be assessed carefully, including the nature of the samples, the information transferred, the participating institutions, and any applicable approval, filing, or security-review requirements.

3. Data security and international sharing

The Data Security Law, Cybersecurity Law, and PIPL may apply where genomic surveillance involves networked databases, sequencing platforms, or transfers of genomic datasets.

The principal compliance questions are whether the information constitutes personal information, sensitive personal information, important data, or information subject to national-security controls. These categories are not interchangeable, and the applicable obligations depend on the dataset and the circumstances.

International scientific collaboration does not automatically permit unrestricted transfer of surveillance data. Researchers should distinguish pathogen-only sequence data from human genetic resource information and patient-linked clinical records. They should also assess applicable filing, security-review, data-export, and laboratory-transfer requirements.

4. Relevant case law and judicial decisions

There is no well-established body of reported Chinese judgments specifically devoted to infectious disease genomic surveillance. Nevertheless, related decisions illustrate the legal principles governing biological materials, public health reporting, and research accountability.

A. Shandong Rizhao human genetic resources smuggling case

In a criminal case reported by the Shandong court system, defendants arranged for pregnant women's blood samples to be transported covertly out of mainland China to Hong Kong for fetal sex testing. The court found that the principal defendant's conduct included the unlawful smuggling of human genetic resource materials and imposed criminal penalties.

sdcourt.gov.cn

Relevance: The decision demonstrates that human biological samples can attract independent legal protection even when collected for a commercial testing service. It is relevant to surveillance programmes that seek to transfer patient-derived samples overseas for sequencing or analysis.

Limitation: This was a human genetic resources case, not a pathogen genomic surveillance case. Its principles should not be treated as automatically applicable to pathogen-only sequence data.

B. Beijing No. 2 Intermediate People's Court, 2021 — human genetic resources governance

A 2025 academic study discussing China's genetic governance refers to the Beijing No. 2 Intermediate People's Court in connection with the national-security orientation of human genetic resources regulation.

Frontiers

The reference supports the broader observation that Chinese genomic governance must be understood within a framework combining research regulation, national security, and biological resource protection. However, without a verified case name and judgment text, it would be inappropriate to attribute a specific holding on infectious disease surveillance to this court.

C. Statutory liability for failure to report outbreaks

The Biosecurity Law expressly addresses concealment, false reporting, delayed reporting, and omission of infectious disease reports by medical institutions and specialised institutions. Article 73 provides for corrective orders, warnings, disciplinary consequences, and possible professional sanctions.

NPC

Although this is a statutory provision rather than a judicial precedent, it has direct operational significance: a laboratory or institution should not suppress a material finding about a dangerous pathogen merely because confirmation or publication is pending.

5. Practical compliance requirements

A Chinese genomic surveillance programme should ordinarily establish:

A documented public health purpose and approved surveillance protocol.

Appropriate laboratory biosafety and pathogen-handling procedures.

A lawful basis for collecting samples and processing associated patient information.

Clear rules for access, retention, security, and disclosure of sequencing data.

Review of applicable human genetic resources requirements before international collaboration or transfer.

Timely escalation and reporting of legally reportable findings.

6. Conclusion

China's infectious disease genomic surveillance regime rests primarily on the Biosecurity Law, the revised 2025 Law on the Prevention and Control of Infectious Diseases, human genetic resources regulation, and data protection legislation. Its central legal challenge is coordinating rapid pathogen detection and public health reporting with laboratory safety, genomic-data security, and protection of human biological materials.

The available judicial authorities are indirect rather than a settled body of pathogen-sequencing precedents. Accordingly, the strongest legal analysis combines the applicable statutory duties with carefully distinguished cases concerning human genetic resources and infectious disease reporting.