GB 45438-2025 "Cybersecurity Technology — Labeling Method for AI-Generated and Synthesized Content"
📑 Legal hierarchy: Level 5 · Technical standard — mandatory national standard (prefix “GB”) | Issuance: SAMR / Standardization Administration of China (drafting: TC260) | Released: 2025-02-28 | Effective: 2025-09-01 | Character: hard law (mandatory national standards carry legal compulsion)
⚠️ Hierarchy note: This standard is a mandatory national standard (prefix “GB”, distinguishing it from voluntary “GB/T”). The legal status of mandatory GBs is contested in the scholarly literature —
- Position A: mandatory GBs are supporting technical specifications for departmental rules, and are therefore hard law.
- Position B: technical standards are not laws, regulations, or departmental rules, and remain soft law (this site adopts this classification as default).
This site categorizes the standard as technical standard (Level 5) while expressly flagging its mandatory character and substantive hard constraint. See Methodology §2.
Chinese Summary
Section titled “Chinese Summary”GB 45438-2025 Cybersecurity Technology — Labeling Method for AI-Generated and Synthesized Content is China’s first mandatory national standard for the technical labeling specification of AI-generated and synthesized content.
Key dates:
- Released 2025-02-28;
- Effective 2025-09-01 (the same day as the Measures for the Identification of AI-Generated and Synthesized Content).
English Title
Section titled “English Title”Cybersecurity technology — Labeling method for content generated by artificial intelligence
Core Positioning
Section titled “Core Positioning”This standard, together with the Labeling Measures, forms a dual “rule + national standard” track:
- The Measures (departmental rule): set out the “what shall be done” duty (dual-track explicit / implicit labels).
- The mandatory national standard: specifies the concrete technical fields — metadata structure, embedding locations, robustness requirements.
This is the first time a Chinese AI-specific rule has adopted the legislative technique of “a departmental rule + a mandatory national standard taking effect on the same day.”
Technical Content (based on the standard’s table of contents and public materials)
Section titled “Technical Content (based on the standard’s table of contents and public materials)”GB 45438-2025 covers:
Implicit-label fields (metadata)
Section titled “Implicit-label fields (metadata)”Defines the fields that must be included in metadata of AI-generated content:
- Service provider name / identifier;
- Content ID;
- Generation date / timestamp;
- Content type (text / image / audio / video);
- Generation-model information (version, algorithm type).
Embedding location and format
Section titled “Embedding location and format”- File metadata (EXIF / audio-video headers / text annotations);
- Content-body (e.g., digital watermark);
- Format-compatibility requirements.
Robustness requirements
Section titled “Robustness requirements”- Resilience to screenshotting, compression, re-editing;
- Verification mechanism.
Explicit-label technical specifications
Section titled “Explicit-label technical specifications”- Text prompts (e.g., “AI-generated”);
- Image corner marks / watermarks;
- Audio-video prompts.
Comparison with International Technical Specifications
Section titled “Comparison with International Technical Specifications”C2PA (Coalition for Content Provenance and Authenticity)
Section titled “C2PA (Coalition for Content Provenance and Authenticity)”- Open standard led by Adobe, Microsoft, Intel, and others;
- Based on the JUMBF container + cryptographic signature;
- A de facto candidate for “machine-readable labeling” under EU AI Act Article 50.
ISO/IEC JTC 1/SC 42
Section titled “ISO/IEC JTC 1/SC 42”- The international AI standards committee’s related work;
- This standard connects in part but stands as its own system.
Differences
Section titled “Differences”| Dimension | GB 45438-2025 | C2PA |
|---|---|---|
| Legal status | Mandatory | Voluntary |
| Cryptographic signature | Not mandated (to be confirmed against the original text) | Based on X.509 |
| Metadata container | Custom | JUMBF |
| Interoperability | Domestic interoperability | International interoperability |
Practical challenge: will content labeled under GB 45438 by domestic services be detectable by overseas platforms (which follow C2PA)? Cross-standard conversion mechanisms remain an open question.
Enforcement Pathway
Section titled “Enforcement Pathway”Legal consequences of a mandatory GB:
- A product or service that fails to comply with a mandatory GB violates the Standardization Law Article 25;
- SAMR / local market-regulation authorities have administrative penalty powers;
- Stacking: the penalty rules of the Labeling Measures (via reference to CSL Article 68).
Source Text and Archival Copies
Section titled “Source Text and Archival Copies”| Source | Link |
|---|---|
| National Public Service Platform for Standards Information | openstd.samr.gov.cn |
| Chinese (archived copy) | — |
| English | — |
| Related | Companion commentary for the Labeling Measures; drafting notes released by TC260 |
Version History
Section titled “Version History”| Date | Event |
|---|---|
| 2025-02-28 | Released |
| 2025-09-01 | Effective (same day as the Labeling Measures) |