China expands controls on overseas tech, data transfers

State Council rules require authorization for exports and extend review to indirect transfers via staffing, training or guidance; effective July 1.
China’s State Council has published rules expanding oversight of overseas transfers involving Chinese investors, restricted goods, technology, services and related data. The regulations take effect July 1 and introduce authorization requirements for exports of controlled items.
The rules extend scrutiny to indirect transfers that occur through cross-border staffing, consulting, training or similar service arrangements. Providing technical guidance, sending engineers to overseas affiliates or offering training that conveys controlled know-how can be treated as an export if it involves restricted items or sensitive information.
The measures follow an order issued about a month earlier to unwind an acquisition of an AI startup, a decision that drew attention to how Chinese-developed technology and data can move abroad. Officials described the rules as closing gaps that could allow expertise and data to leave the country via corporate structures or service agreements rather than through physical shipments.
Transactions that may face review include cross-border acquisitions, joint ventures, technology licensing deals, services agreements and overseas expansions involving Chinese entities or Chinese-origin technology and data. The rules identify sectors flagged for closer scrutiny, including artificial intelligence, semiconductors, advanced manufacturing, cloud services and data infrastructure.
Legal and compliance teams will need to assess whether proposed arrangements involve restricted goods, technologies, services or data before proceeding. Companies that rely on engineers, consultants or technical teams to transfer expertise abroad should reassess staffing plans, contractual terms and due-diligence processes. Under the new framework, arrangements that give de facto access to restricted capabilities may require prior authorization even when no physical technology crosses the border.







