CHANG TSI
Insights
On 15 May 2026, China's National Medical Products Administration (NMPA) officially promulgated and brought into effect the Implementing Measures for the Protection of Drug Trial Data (hereinafter the “Implementing Measures”, Announcement No. 47 of 2026). This marks the formal launch of a long-anticipated drug trial data protection regime, representing a significant step in China's broader efforts to reform drug review and approval processes and incentivise pharmaceutical innovation.
The rationale underlying drug trial data protection regime is straightforward: developing an innovative drug typically requires billions of dollars in investment and more than a decade of research. Clinical trial data and other regulatory dossier materials represent the core proprietary assets of the originator. If competitors could rely on those data to obtain marketing approval without conducting their own studies — effectively free-riding on the originator's investment — the incentive to innovate would be severely undermined. Data protection regime addresses this by prohibiting unauthorised 'reliance' on protected data for a defined exclusivity period, creating a non-patent competitive barrier for originators.
The legal basis for the Implementing Measures is the Drug Administration Law of the People's Republic of China and the newly revised Drug Administration Law Implementing Regulations. China's membership of the World Trade Organization requires it, under Article 39.3 of the TRIPS Agreement, to protect undisclosed test data that involved considerable effort to generate, against unfair commercial use. The Implementing Measures give effect to this obligation and bring China's domestic regime into alignment with international standards, applying equally to domestic and foreign pharmaceutical companies operating in China.
Under the Implementing Measures, data protection refers to the regime under which, upon the approval of a qualifying chemical drug or biological product, the NMPA grants protection to the trial data and other data that the applicant independently obtained and that have not been publicly disclosed, for a period of up to six years. The protection period runs from the date on which the drug's marketing authorisation application is approved in China.
The protected data are defined as the complete, non-public regulatory submission data used for the first time in a marketing authorisation application in China. The official policy interpretation provides specific guidance on three key concepts embedded in this definition, each of which directly determines whether data qualify for protection and, if so, whether that protection can be enforced against competitors.
1. "Not Publicly Disclosed"
This is one of the threshold conditions for protection. The official interpretation clarifies that "not publicly disclosed" does not require that the data be kept entirely confidential; rather, it means that the data have not been disclosed in their entirety. Where an applicant has published only partial data — for example, a clinical trial summary or abstract, but not the full study report — the complete submission data as a whole will still be considered undisclosed and will remain eligible for protection.
Practice note: Most major regulatory markets require applicants to publish clinical trial result summaries or conclusions. Under this interpretation, such limited disclosure will not cause forfeiture of data protection eligibility — an important point for multinational companies conducting global multi-centre trials and seeking simultaneous submissions across jurisdictions.
2. "Independently Obtained"
The official interpretation construes "independently obtained" broadly, encompassing three scenarios: (1) data generated by the applicant through its own research; (2) data generated by a third party (such as a CRO) commissioned by the applicant; and (3) data acquired by the applicant through purchase or exclusive licence.
Practice note: Applicants are not required to have conducted all studies themselves. Data acquired through in-licensing or M&A transactions can also support a data protection claim, provided the acquisition was on an exclusive basis. Companies acquiring products through business development transactions should ensure that the exclusivity of data ownership is clearly addressed in the deal documentation.
3. "Reliance"
"Reliance" is the most critical concept in the data protection framework, as it determines which competitors the protection can bar. Under the official interpretation, "reliance" means that other applicants reference or reliy upon trial data generated by the originator marketing authorisation holder to demonstrate the safety and efficacy of its drug, in connection with an application for marketing approval of a modified or generic product, without independently conducting equivalent studies.
A subsequent applicant will be found to have engaged in reliance — and to have "free-riding" on the originator's data — even if it did not directly cite or reproduce the originator's regulatory documents, provided that its application is structurally premised on the originator's data.
Practice note: The protection operates against the act of reliance itself, not against mere access to or knowledge of the originator's data. A subsequent applicant that independently conducts a full clinical programme and submits its own complete dataset does not engage in reliance and is therefore not subject to data protection restrictions, and may lawfully apply for marketing authorization.
The Implementing Measures apply to chemical drugs and biological products. Traditional Chinese medicines are excluded and remain governed by the Regulations on the Protection of Traditional Chinese Medicine Varieties. The protection period runs from the date of marketing approval in China — not from the date of application submission, nor from the date of the data protection grant.
The Implementing Measures establish a tiered system of exclusivity periods and data coverage, differentiated by product category, as follows.
● Innovative drugs (Article 5): Six-year data exclusivity. Full protection coverage, encompassing all trial data relevant to safety, efficacy and quality. Foreign-originated drugs that are already marketed abroad but not yet approved in China are eligible for the same six-year period, with the scope of protection identical to that for domestic innovative drugs. Where a drug subsequently obtains approval for additional indications, each indication is assessed separately by registration category; the protection for a new indication covers only the clinical trial data supporting that indication.
● Modified drugs (Article 6): Four-year data exclusivity. Applies equally to foreign-originated modified drugs. The protected data are limited to the new clinical trial data that demonstrate a meaningful clinical advantage over the reference listed drug (or already-approved biological product). Bioavailability, bioequivalence and vaccine immunogenicity data are expressly excluded from protection.
● New indications not previously approved in any market, filed by the foreign originator in China (Article 7): Six-year data exclusivity, with full coverage of all trial data. Subsequent new indications for the same drug are governed by Article 6, with a four-year data protection period, and the scope of protection identical to that for modified drugs.
● First generic or biosimilar product referencing a foreign-innovative drug (Article 8): Three-year data exclusivity. The protected data are limited to the necessary clinical data supporting approval. Bioavailability, bioequivalence and vaccine immunogenicity data are excluded. This provision is designed to incentivise the first-to-file generic applicant to enter the market promptly.
An application for data protection must be submitted simultaneously with the marketing authorisation application. The two filings must proceed in parallel; data protection cannot be sought after marketing approval has been granted. Companies should therefore assess data protection eligibility and prepare the necessary materials as part of their regulatory submission planning.
For applications already under review at the time the Implementing Measures came into effect, the NMPA has established transitional arrangements. Applications at the technical review stage must submit a data protection request to the Centre for Drug Evaluation (CDE) within 15 days of the announcement date. Applications at the administrative approval stage are subject to the same 15-day deadline; in addition, reliant applications associated with such products will have their acceptance and approval suspended pending public disclosure of the data protection information.
The Implementing Measures also establish an advance filing mechanism to prevent a market vacuum upon expiry of the exclusivity period. Other applicants may submit a reliant application up to one year before the protection period expires; upon completion of technical review by the CDE, the timeline is suspended until the exclusivity period has lapsed, at which point approval may be granted. Separately, the marketing authorisation holder may grant written consent authorising third parties to rely on its data, providing a flexible mechanism to generate commercial returns through licensing arrangements.
Data protection terminates automatically upon revocation, suspension or cancellation of the holder's marketing authorisation, or upon voluntary relinquishment by the holder.
When a competitor files a generic drug marketing authorisation application in China, originators currently have two principal legal tools available: the drug patent linkage system (hereinafter “Patent Linkage”) and the data protection regime. The two systems operate on fundamentally different logic and have different prerequisites; in practice, they are complementary rather than mutually exclusive.
(I) Patent Linkage: Core Logic and Prerequisites
Under Patent Linkage, a generic applicant must, when filing its marketing authorisation application, submit a certification in respect of each patent listed on the China Marketed Drug Patent Information Registration Platform (hereinafter the “Platform”) for the reference listed drug. Four categories of certification are available: Category I (no relevant patent listed on the Platform); Category II (relevant patent has expired, been invalidated, or is licensed); Category III (undertaking not to market until the relevant patent expires); and Category IV (assertion that the relevant patent should be invalidated or that the generic drug does not fall within its scope).
In practice, only a Category IV certification triggers the Patent Linkage mechanism. Upon publication of a Category IV certification on the Platform, the originator must, within 45 days from the date of publication of the generic application, initiate proceedings — either by filing a lawsuit before a court or by requesting an administrative adjudication from the China National Intellectual Property Administration (CNIPA). Upon acceptance of the case, a nine-month review stay is imposed on the generic marketing authorisation application, during which approval is deferred. The nine-month stay applies only to chemical generics; no equivalent stay exists for biosimilars or traditional Chinese medicine products with the same composition. The stay can be imposed only once per generic application and cannot be stacked.
(II) Data Protection Regime: Applicable Scenarios
Data protection regime operates on a fundamentally different basis from Patent Linkage. Patent Linkage requires the originator to take active enforcement steps. Data protection regime, by contrast, is enforced directly by the regulatory authority: during the exclusivity period, the NMPA will not approve any reliant application without the marketing authorisation holder's consent — no action by the originator is required. Data protection must be applied for simultaneously with the marketing authorisation application and cannot be sought retrospectively.
(III) Comparative Analysis and Practical Considerations
Each regime has limitations, and the two should be deployed in combination depending on the circumstances of each product.
Where the innovative drug has been approved in China, data protection has been granted, and relevant patents are listed on the Platform, both tools may be considered in parallel. Patent Linkage can be triggered when the generic applicant submits a Category IV certification, allowing the originator to initiate proceedings and secure a nine-month review stay. Data protection operates automatically through regulatory enforcement, without depending on the type of certification filed by the generic applicant. Together, the two mechanisms provide a layered barrier against generic entry.
Where the innovative drug has no patents registered on the Platform, Patent Linkage cannot be invoked. In that scenario, data protection regime might be the more direct and effective tool.
The promulgation of the Implementing Measures fills a critical gap in China's pharmaceutical regulatory framework and represents a milestone in the development of China's innovation ecosystem. For multinational pharmaceutical companies, the data protection regime provides an independent competitive barrier for both in-China R&D pipelines and imported innovative products, one that operates independently of patent protection and complements Patent Linkage to form a more robust, multi-layered system.
From a practical standpoint, companies should focus on the following priorities:
First, assess the data protection eligibility of products currently under review or planned for submission, and integrate the data protection application into the regulatory filing workflow.
Second, ensure that the exclusivity of data ownership is clearly addressed in contracts governing data acquisition, commissioned research and in-licensing transactions.
Third, develop differentiated protection strategies — combining data protection regime and Patent Linkage as appropriate — based on the specific regulatory status of each product in China.
Fourth, monitor competitors' data protection filings, and factor exclusivity expiry timelines into the assessment of R&D returns when making decisions on generic or modified drug development projects.
