## 3 Developments of CIM
### Problems Encountered in CIM Development
#### 3.2.1 CIM Data Governance Legitimization Issues  
Data governance constitutes a cornerstone of CIM, ensuring that urban data are systematically collected, processed, stored, and utilized in a manner that is legally compliant, secure, and reliable [16; 43]. Among the critical aspects of CIM's legal framework, data privacy and security have emerged as paramount concerns. The regulatory policies of different jurisdictions exert a profound influence on the legalization of CIM, significantly shaping its adoption and implementation trajectories [51]. However, notable challenges persist: the United States lacks a cohesive legal framework, leading to a fragmented and inconsistent approach to data governance; China has enacted the Data Security Law and the Personal Information Protection Law, yet disparities in local policy interpretations and enforcement mechanisms remain unresolved; in contrast, Singapore has established a robust governance model through its Smart Nation Plan, serving as a benchmark for effective implementation. To address these disparities, the advancement of CIM necessitates the development of enhanced data governance frameworks, strengthened cross-departmental collaboration, and the establishment of international standardization protocols. Such measures are essential to safeguarding data privacy and security, ensuring the legal compliance and operational efficacy of CIM applications.  
Legalization remains a pivotal challenge in the development of CIM, particularly in addressing the issues related to data privacy, ethics, and ownership. Data privacy, a multifaceted yet critical concern, encompasses the collection, processing, and storage of sensitive information, including personal identity, behavioral patterns, and health data. To ensure robust privacy protection, nations must implement comprehensive data protection mechanisms and rigorously enforce the relevant legal frameworks. A prominent example is the European Union's General Data Protection Regulation (GDPR), which establishes stringent privacy standards and regulatory requirements. Consequently, privacy protection must be embedded at the foundational stages of CIM implementation, incorporating techniques such as data anonymization, de-identification, and multi-layer encryption to mitigate the risks of data breaches. Beyond privacy, data ethics necessitates the adherence to the principles of fairness, transparency, and accountability throughout the entire data lifecycle--from collection and analysis to application. The handling of sensitive data requires maintaining ethical integrity to prevent bias, discrimination, or misuse, thereby safeguarding public trust. To address these concerns, it is imperative to develop international data ethics standards, promote the legislative enforcement of ethical principles, and establish national ethics review committees to oversee CIM projects. Moreover, data ownership represents a fundamental pillar of CIM governance, encompassing contributions from a wide array of stakeholders, including governments, enterprises, and individuals. Establishing clear and unambiguous ownership rights, coupled with well-defined usage regulations, is imperative for ensuring rational data management and maximizing its effective utilization. To address this challenge, it is essential to develop public-private data sharing platforms, supported by robust legal frameworks that explicitly delineate the ownership, access control, and usage rights. These measures will not only enhance the transparency and legal integrity of data-sharing agreements but also foster equitable benefits for all the stakeholders involved.