Investing abroad from Mainland China

Briefing note No.24 · 21 September 2026 · Mainland China

Download this note as a PDF

Since 1 July 2026, a company, an organisation or a resident individual established in Mainland China that acquires an interest in an entity outside the mainland — Hong Kong included — acts under a single national regulation for the first time. Decree No. 837 does not replace the NDRC and MOFCOM filings in force since 2014 and 2017: it sits above them, and adds a security review, an express reach over technology and people, and a scale of fines that ministerial rules could not create. It also treats an intragroup loan or guarantee as an outbound investment in its own right.

What does the decree change?

Outbound investment had until now been governed by ministerial orders and policy guidance: the NDRC measures on outbound investment by enterprises (Order No. 11 of 2017), the MOFCOM measures on outbound investment (Order No. 3 of 2014), the foreign-exchange registration rules of SAFE, and the 2017 State Council guidance sorting projects into encouraged, restricted and prohibited. Decree No. 837, adopted on 17 April 2026, signed by Premier Li Qiang on 5 May 2026 and published on 1 June 2026, raises the subject to the rank of an administrative regulation.

Three consequences follow, and the third is the one that changes behaviour. The regulation gathers into one text what was scattered across ministries. It brings in matters that were previously elsewhere — export control, security review, cross-border data, countermeasures. And it creates a penalty regime, which ministerial orders had no power to enact.

Who is an investor, and what is an investment?

Article 2 answers both questions, and answers them broadly. An investor is an enterprise, another organisation or a resident individual established in Mainland China. The express inclusion of resident individuals is new at this level of norm; their specific regime is left to the implementing measures, and in the meantime their existing SAFE registration obligations continue to apply.

An outbound investment is any activity by which an investor obtains, directly or indirectly, ownership, control, management rights or other rights over enterprises or assets located in other countries or regions — whether by contributing assets or equity, or by providing financing or a guarantee. Article 33 extends the text to investments in foreign financial markets and to the reinvestment abroad of assets and rights arising from an earlier outbound investment: an operation carried out from an existing offshore subsidiary stays inside the perimeter.

Does the regulation reach Hong Kong?

Yes. Under article 32, investments made in the Hong Kong and Macao Special Administrative Regions and in Taiwan are administered by reference (参照) to the regulation, save where a law, an administrative regulation or the State Council provides otherwise. A Chinese company subscribing for shares in a Hong Kong company, lending to it or guaranteeing its obligations is therefore within the text, and within the NDRC, MOFCOM and SAFE formalities that article 12 preserves. « By reference » is not the same as direct application — it leaves room for the arrangements already specific to these destinations — and the implementing measures are expected to say how far it goes. Until they do, the prudent working assumption is that the full set of obligations applies.

Which formalities apply, and to whom?

Article 12 creates no new procedure. It requires the existing ones to be completed, the documents supplied to be accurate, and the investor to submit to supervision. In practice four formalities have to be checked before any operation.

What about technology, people and data?

Article 13 is the most commented provision of the text. In the course of an outbound investment, the investor may not export or use goods, technologies, services or data whose export is prohibited, nor those whose export is restricted without a licence. What makes the article unusual is that it names transfers carried by people: cross-border secondment of technical staff, sending personnel to work in another country, technical assistance provided remotely, and training staff abroad.

This matters for groups that move engineers rather than files. A secondment programme, a remote support arrangement or a training cycle run outside the mainland is capable of being a controlled technology transfer, and the catalogue of technologies prohibited or restricted for export is the document against which it has to be read. Article 14 then refers to the special regimes that continue to apply in their own right — foreign exchange, import and export of goods and technologies, cross-border trade in services, cross-border data flows, exit and entry of persons, merger control, export control, cybersecurity, taxation and state-owned assets.

Evidence and documents produced abroad

Article 22 concerns any organisation or individual established in China that must produce evidence or documents outside China in an arbitration, in litigation connected with an outbound investment, or in an investigation conducted by a foreign judicial or enforcement authority. It creates no new authorisation: it restates those that exist — in particular article 36 of the Data Security Law and article 41 of the Personal Information Protection Law, which make the competent authority’s consent a condition of handing data stored in China to a foreign judicial or enforcement authority. The practical consequence is a filtering step, and a documented one, before any production.

When is a security review triggered?

Article 15 establishes a review of outbound investments that affect or may affect national security, conducted by the NDRC and MOFCOM with the ministries concerned. Two features deserve attention. The review bears not only on the initial investment but on disposals and other acts of disposition of the assets and rights arising from it — so a group reorganisation, a sale or a transfer of an offshore holding can fall within it years after the original operation. And those concerned must cooperate, may not refuse or obstruct, and must comply with the decision.

The criteria and the procedure are not set by the decree; they are left to the implementing measures. Until those are published, the timing of a review cannot be estimated from the text, which is itself a reason to raise the question early in any reorganisation calendar.

What must the investor put in place?

Article 16 requires the investor and its foreign enterprises to have governance, a compliance function, internal control, security rules and crisis management, and to devote the necessary resources to them. Article 17 prohibits damaging the commercial reputation of other investors, infringing trade secrets, dumping without legitimate reason, obtaining advantages through corruption or fraud, and disturbing the order of the outbound investment market. Article 5 adds respect for the law, international usage, local custom, the environment, workers’ rights and the country’s image. These are conduct obligations rather than filing obligations, and they are the part of the text most easily overlooked, because nothing about them falls due on a date. Article 29 nevertheless attaches a consequence to a breach of article 17: rectification, and where damage is caused, a ban on investing abroad of one to three years.

What happens if the rules are not followed?

The decree creates a graduated scale that the ministerial orders did not have. Fines on the investor are calculated in per mille of the amount invested, and are accompanied by personal fines on the directors and staff directly responsible. Amounts below are converted at 1 USD ≈ 6.70 CNY (rate of 21 September 2026).

An additional penalty runs alongside them: under article 27, applications for approval or filing may be refused for three years, or investing abroad prohibited for one to three years. Civil liability, administrative police sanctions and ordinary criminal liability are reserved by article 30.

Two further breaches carry no fine calculated on the amount invested — and are the more serious for it, because what they carry instead is the ban.

What should be done now?

The regulation applies since 1 July 2026 with no transitional provision, which means it reaches operations already under way as well as new ones. Four steps follow from that, in order.