Navigating China's rapidly expanding regulatory state — from anti-dumping investigations and export controls to data localization, FX repatriation, and the simultaneous compliance demands of China's Anti-Foreign Sanctions Law and Western sanctions regimes.
China's regulatory environment has undergone a generational transformation in the past decade. From a relatively light-touch regime focused primarily on investment approval and foreign exchange administration, China has built a sophisticated — and increasingly assertive — regulatory apparatus spanning trade remedies, technology transfer controls, data security, export controls, and counter-sanctions. For foreign companies, compliance is no longer a back-office function; it is a board-level concern with criminal-law consequences.
The regulatory instruments now confronting foreign businesses in China include the PRC Foreign Trade Law (对外贸易法), the Anti-Dumping and Countervailing Duty Regulations, the PRC Export Control Law (出口管制法, effective December 2020), the Personal Information Protection Law (个人信息保护法, PIPL, effective November 2021), the Data Security Law (数据安全法, DSL, effective September 2021), the Cybersecurity Law (网络安全法, CSL, effective June 2017), the PRC Anti-Foreign Sanctions Law (反外国制裁法, effective June 2021), and the Rules on Counteracting Unjustified Extra-Territorial Application of Foreign Legislation (the "Blocking Statute," 阻断办法, effective January 2021).
These laws do not operate in isolation. A foreign company importing technology into China must simultaneously comply with China's export control restrictions (on what the Chinese counterparty can export), China's technology import regulations (on what the foreign party can receive and how), PIPL/DSL/CSL requirements (if the technology involves personal or important data), and potentially the Anti-Foreign Sanctions Law (if the transaction touches sanctioned persons or sectors). A violation in any one of these areas can cascade into parallel investigations, administrative penalties, and in some cases criminal liability for responsible officers.
MOFCOM initiates an anti-dumping or countervailing duty investigation targeting your product category — imposing provisional duties, demanding extensive questionnaire responses, conducting on-site verifications, and threatening to exclude your products from the Chinese market through high definitive duties.
Your technology transfer or license to a Chinese entity is flagged as falling within China's Catalogue of Technologies Prohibited or Restricted from Export. The contract requires MOFCOM approval that was never obtained. The technology transfer is voidable — and the foreign party may face restrictions on further dealings with the Chinese counterparty.
Your China operations transfer employee data, customer data, or operational data to headquarters or a regional hub outside China without completing the required PIPL security assessment, standard contractual contract (SCC) filing, or certification — triggering an investigation by the Cyberspace Administration of China (CAC) and potential penalties of up to RMB 50 million or 5% of annual revenue.
Your China subsidiary has accumulated profits but SAFE (State Administration of Foreign Exchange) or the designated foreign exchange bank is refusing to process profit repatriation to the parent company — citing incomplete documentation, capital verification issues, or undeclared historical transactions. Profits are trapped in China.
Your company is subject to US, EU, or UN sanctions that prohibit dealing with a designated Chinese entity — but China's Anti-Foreign Sanctions Law prohibits compliance with foreign sanctions that target Chinese persons or entities. You face the impossible choice of violating one jurisdiction's laws or the other's.
Your Chinese supplier is found to have violated environmental regulations or labor standards in a manner that exposes your company to supply chain due diligence liability under home-country legislation (e.g., EU CSDDD, German LkSG) — while simultaneously triggering a Chinese regulatory investigation that may disrupt production and shipments.
Foreign companies operating in China may find themselves subject to irreconcilable legal obligations: US/UN sanctions prohibiting dealings with a designated Chinese entity, and China's Anti-Foreign Sanctions Law prohibiting compliance with those very sanctions. The Blocking Statute adds a further dimension — if MOFCOM issues a prohibition order against a foreign sanctions regime, compliance with those sanctions within China becomes itself unlawful. Navigating this requires careful legal structuring and, often, engaging with regulatory authorities in multiple jurisdictions.
China is one of the world's most active users of trade remedies. MOFCOM currently maintains over 200 anti-dumping duty orders — many targeting products from the EU, US, Japan, South Korea, and other major trading partners. A foreign exporter named in a MOFCOM anti-dumping investigation faces a process that is procedurally similar to but substantively distinct from US DOC or European Commission proceedings.
The PRC Export Control Law (2020) represents China's first unified, comprehensive export control statute — moving beyond the previous fragmented system of administrative regulations. Key features:
The PIPL (effective November 2021) imposes specific requirements for the cross-border transfer of personal information. Foreign companies with operations in China that transfer employee data, customer data, or operational data containing personal information outside China must comply with one of three transfer mechanisms:
Since 2023, the CAC has conducted targeted investigations into cross-border data transfer compliance, particularly in the technology, financial services, and healthcare sectors. Notable enforcement actions have resulted in penalties exceeding RMB 8 billion (in one high-profile case against a major technology platform). The CAC's focus on cross-border data compliance is expected to intensify.
While China has progressively liberalized its current account — and profit repatriation is classified as a current account item, which is in principle freely convertible — in practice, foreign companies regularly encounter obstacles when attempting to repatriate profits from their Chinese subsidiaries:
Foreign companies with operations in China or with Chinese counterparties face an increasingly acute sanctions trilemma. Simultaneous compliance with US/UK/EU/UN sanctions regimes and Chinese counter-sanctions legislation is, in some scenarios, legally impossible:
We conduct a comprehensive audit of your China operations against the applicable regulatory framework — anti-dumping exposure (are you at risk of being named in a petition?), export control classification of your products and technologies, data mapping for PIPL/DSL/CSL compliance (what personal and important data is collected, where is it stored, where is it transferred?), SAFE compliance history (are there gaps in historical FX declarations or capital verification?), and sanctions exposure (do you deal with counterparties, sectors, or regions implicated by any sanctions regime applicable to your business?). The audit output is a prioritized risk matrix with remediation recommendations.
When a regulatory investigation is initiated — whether a MOFCOM anti-dumping proceeding, a CAC data compliance inquiry, a SAFE audit, or a customs investigation — we coordinate the response: preparing and submitting questionnaire responses, managing on-site inspections and verification visits, engaging economic experts (for trade remedy injury analysis) or technical experts (for export control classification disputes), and representing the company in hearings and meetings with regulatory authorities. Early engagement and a cooperative posture generally yield better outcomes than adversarial resistance.
Where a regulatory determination is adverse — an anti-dumping duty order, a denial of an export license, a SAFE penalty, a CAC enforcement action — we pursue administrative appeals (行政复议) within the relevant agency and, where appropriate, judicial review (行政诉讼) before the competent People's Court. While the success rate of challenges to trade remedy determinations is low globally, procedural irregularities and manifest errors in factual findings or legal interpretation do provide viable grounds for challenge — and the filing of an appeal or review application can create leverage for a negotiated resolution.
The most cost-effective regulatory engagement is proactive. We design compliance systems — data governance frameworks, export control compliance programs, sanctions screening protocols, and SAFE documentation management processes — that are tailored to your China operations and integrated with your global compliance infrastructure. A well-designed compliance system not only reduces the risk of regulatory violations; it also demonstrates good faith and may serve as a mitigating factor in the event of an investigation or enforcement action.
Represented a European specialty chemicals manufacturer in a MOFCOM anti-dumping investigation targeting imports from the EU and US. Coordinated the questionnaire response (over 2,000 pages of data and narrative), managed the on-site verification at the company's European headquarters and two production facilities, prepared the injury defense (establishing that the Chinese domestic industry's difficulties were attributable to overcapacity and declining downstream demand, not dumped imports), and negotiated a price undertaking in lieu of definitive duties. The undertaking enabled the client to continue exporting to China without the prohibitive duty rate imposed on non-cooperating exporters.
Advised a multinational technology company on PIPL compliance for the cross-border transfer of employee and customer data from its Chinese WFOE to global HR and CRM systems hosted in Singapore and the US. Conducted data mapping to identify personal information flows, determined that the transfer volume triggered the mandatory CAC security assessment, prepared and submitted the security assessment application, and managed the CAC's review process (including responding to three rounds of supplementary questions). The security assessment was approved, enabling the company to continue its global data integration while maintaining full PIPL compliance.
Whether you are facing a MOFCOM investigation, planning PIPL compliance, resolving SAFE repatriation obstacles, or navigating sanctions conflicts, we bring the deep regulatory expertise and practical experience your business needs. Contact us for a confidential discussion.
Contact Danny Luo