China's First Comprehensive Overseas Investment Regulatory New Rules: Reshaping Cross-Border Transaction Compliance Framework and Security Review Logic

Upgrading of China's Outbound Investment Supervision: A Structural Shift from "Ex-post Approval" to "Penetrative Review"

The effective date of the "Measures for the Administration of Outbound Investment" (State Council Order No. 837) issued by the State Council on June 1, 2026, marks a new phase in China's cross-border investment supervision, dominated by administrative regulations. This upgrade in the regulatory framework is not just a raising of the rule level; it is a fundamental restructuring of the regulatory logic from the traditional "ex-post approval" model to a "penetrative and proactive" risk control model.

I. Administrativeization and Enhanced Penetration of the Regulatory Structure

The major significance of this regulation lies in its integration of rules previously scattered across different departments (such as the National Development and Reform Commission (NDRC) and the Ministry of Industry and Information Technology (MOFCOM)) into a single administrative regulatory system. This brings about two core shifts:

1. **Elevation of Legal Effect:** Administrative regulations are at a higher level than departmental rules, allowing for the direct imposition of administrative penalties for violations for the first time, greatly enhancing the binding enforcement power of the supervision. 2. **Compliance Integration:** By incorporating existing frameworks for outbound direct investment (ODI) and foreign trade control regulations into a unified regulatory system, enterprises are required to operate under multi-dimensional, multi-level compliance requirements.

II. Core Risk Points: Implementation of the Outbound Investment Security Review System (OISR)

The newly established "Outbound Investment Security Review System (OISR)" is the most forward-looking measure in this regulatory system. It is granted broad, vaguely defined powers aimed at comprehensively reviewing investments that "may affect national security."

**1. Expansion and Penetration of Review Scope:** OISR not only covers initial investments but also extends to the subsequent transfer and disposal of assets. More critically, it explicitly includes **indirect transfers** within the scope of supervision. This means that technology and knowledge transfers through mechanisms such as licensing agreements, overseas dispatch of key technical personnel, or employee secondments may trigger OISR review if they involve restricted technologies.

**2. Focus Industry Sectors:** Although the specific technology lists are not yet fully detailed, based on the logic derived from existing technology control regulations, strategic emerging industries such as **Artificial Intelligence (AI), semiconductors, critical minerals, electric vehicle batteries, and certain biotechnologies** will become key areas of OISR review. As demonstrated by recent actions by China on acquisitions of specific AI startups, the supervision will adopt a "substance-over-form" review path, tracking the actual flow of technology and data rather than relying solely on the company's place of registration.**3. Comprehensive Inclusion of Cross-Border Transaction Models:** The scope of OISR has expanded beyond traditional direct equity investment to explicitly cover **offshore restructuring (such as "Singapore money laundering" operations)**, **disposal of overseas assets**, and **technology transfer through licensing or personnel movement**. When companies engage in cross-border M&A or technological cooperation, they must anticipate whether these steps constitute "outbound investment" and prepare corresponding security review materials in advance.

III. Extension of Regulatory Boundaries: Synchronous Regulation of Individual Investors and Data Flows

This regulatory update has made key extensions to the definition of investment subjects and transaction elements, reflecting the regulator's intention to achieve comprehensive coverage of global capital flows.

**1. Inclusion of Individual Investors:** For the first time, **individual investors within mainland China** have been included under the scope of outbound investment supervision. Previously, many individual investors relied on certain frameworks of SAFE, but the new regulations require NDRC and MOFCOM to develop specific implementation rules to provide clear compliance paths for individual investors. This foreshadows that in the future, individual investments relying on specific offshore structures (such as red-channel structures) will face higher compliance risks.

**2. Superimposition of "Three-Layer Compliance" for Technology and Data Flows:** Investment compliance is no longer a single ODI declaration process. When conducting cross-border transactions, enterprises must simultaneously address three interwoven regulatory systems: * **ODI/OISR System:** Investment security and national security review. * **Export Control System:** Restrictions on the cross-border transfer of controlled technologies, services, and data. * **Data Security System:** Compliance requirements for cross-border data flows involving Personal Information Protection Law (PIPL) and Data Security Law, etc.

This means that a seemingly compliant investment transaction may still face the risk of multiple regulatory superimpositions at the level of technology transfer and cross-border data flow.

IV. Policy Response Mechanisms: From Compliance to Power Shift in Bargaining

New regulations grant regulatory authorities more proactive tools to respond to actual or anticipated investment barriers.

* **Investigation and Response:** Departments such as MOFCOM have the right to investigate investment obstacles and take response measures, including adjusting regional investment policies or restricting specific imports and exports. * **Countermeasures:** Against unfair restrictions on Chinese investments by foreign institutions or individuals, the government has the right to implement countermeasures under the "Anti-Foreign Sanctions Law," including placing them on a sanctions list or restricting their transactions and cooperation in China.

Conclusion: The New Normal for Chinese Investment Under Global Capital Restructuring

The upgrading of outbound investment supervision marks China's construction of a more refined, secure, and penetrating cross-border investment governance system while deepening its opening-up.### Conclusion: The New Normal of Chinese Investment Under Global Capital Restructuring

The upgrading of regulations for outbound investment in China signifies that China, while deepening its opening up to the outside world, is building a more refined, secure, and penetrating cross-border investment governance system. For multinational enterprises, this means that the traditional strategy of "outrunning approval speed" is being replaced by a deeper level of "building compliance resilience." The future focus of competition will no longer be solely on the speed of capital inflow, but on whether enterprises can achieve substantive and secure integration of their business under the interwoven complexities of OISR, export controls, and cross-border data regulation. Investment decisions must be comprehensively upgraded from a purely economic return perspective to a structural anticipation of regulatory risks.