China's 15th Five-Year Plan: Xi Jinping's Vision for Digital Sovereignty

The unveiling of the 15th Five-Year Plan (2026-2030) at the National People's Congress in March 2026 represents the most aggressive push for technological decoupling in China's modern history. President Xi Jinping’s vision, centered on the concept of 'Digital Sovereignty,' moves beyond mere data protection into a comprehensive strategy of 'Total Self-Reliance.' This shift is not merely an economic policy but a national security mandate designed to immunize the Chinese state against Western cyber interference and the potential for 'kill-switch' sanctions that have historically targeted the nation's semiconductor and software dependencies.

Industry context is critical to understanding the weight of this development. While the previous 14th Five-Year Plan focused on 'Dual Circulation' and initial steps toward domestic chip production, the 15th FYP accelerates the 'Xinchuang' (IT Application Innovation) initiative to its logical conclusion. This program now mandates that critical information infrastructure—ranging from the banking sector to the national power grid—must operate on 100% indigenous hardware and software by the end of the decade. This creates a massive, captive market for domestic champions like Huawei, Loongson, and Kylinsoft, while systematically squeezing out global giants like Microsoft, Intel, and Cisco from the Chinese public sector and state-owned enterprises.

“

This program now mandates that critical information infrastructure—ranging from the banking sector to the national power grid—must operate on 100% indigenous hardware and software by the end of the decade.

The implications for global cybersecurity are profound and multifaceted. The 15th FYP elevates the Cyberspace Administration of China (CAC) to a role equivalent to a top-tier economic ministry, reflecting the belief that data security is the foundation of national stability. We are witnessing a transition from 'defensive cybersecurity'—reacting to breaches and vulnerabilities—to 'structural cybersecurity,' where the very architecture of the internet is redesigned to be inherently controllable and resilient. This includes the expansion of the 'Data as a Factor of Production' framework, where the state treats data with the same strategic weight as land or labor, requiring rigorous security audits for any cross-border data movement that could impact national interests.