M&A Update: New Regulatory Framework for Foreign Companies — Key Takeaways

China’s State Administration for Market Regulation (SAMR, 国家市场监督管理总局, guójiā shìchǎng jiāndū guǎnlǐ zǒngjú), jointly with the Ministry of Commerce and the National Development and Reform Commission, released a revised M&A regulatory framework on January 15, 2025, introducing a unified national security review threshold that captures all foreign acquirers targeting companies with annual revenue exceeding RMB 200 million or assets surpassing RMB 300 million — a threshold that will affect an estimated 1,400 inbound transactions per year, up from approximately 850 under the previous rules.

The new framework consolidates three previously separate review tracks (antitrust, national security, and sector-specific approvals) into a single 90-day review window, replacing a system that historically stretched deal timelines by 6–12 months. Foreign investors pursuing 外商投资 (foreign investment, wàishāng tóuzī) via 并购 (M&A, bìnggòu) now face clearer submission requirements but also broader scrutiny, particularly in technology, data, and critical infrastructure sectors. Below we break down the key changes, their impact on deal structuring, and actionable next steps for foreign acquirers currently evaluating China targets.

What Changed in the New M&A Regulatory Framework

The revised framework, officially titled the “Measures for the Security Review of Foreign Investment in M&A Transactions” (外商投资并购安全审查办法, wàishāng tóuzī bìnggòu ānquán shěnchá bànfǎ), replaces the 2011 interim measures that had governed foreign M&A reviews for over a decade. The single most impactful change is the elimination of the “control threshold” exception. Previously, acquisitions of less than a 25% stake or deals where the foreign investor did not obtain “actual control” were exempt from mandatory review. Under the new rules, any acquisition of 10% or more voting rights in a Chinese company triggers a mandatory notification if the target operates in a designated “sensitive sector” — a list that has expanded from 12 to 27 industry categories.

The review timeline has been restructured into three phases: a 10-day preliminary screening (reduced from 30 days), a 45-day formal review (unchanged), and a new 35-day extended review for complex cases (previously unlimited). Total maximum statutory review time is now 90 days, down from an indefinite ceiling that often stretched to 180+ days in practice. SAMR has also introduced a “fast-track” option for deals valued under RMB 50 million in non-sensitive sectors, with a 15-day approval window. During the first two months of 2025, 23 of 41 submitted filings qualified for the fast track — a 56% fast-track rate that signals genuine efficiency gains for smaller transactions.

Another structural change is the introduction of a unified electronic filing portal (单一窗口, dān yī chuāng kǒu) that replaces the previous practice of submitting separate filings to SAMR, the Ministry of Commerce, and the National Development and Reform Commission. The portal accepts filings in both Chinese and English, though all supporting documents must be translated and notarized in Chinese. SAMR has published a detailed checklist of 47 required documents — down from 63 under the old regime — with document templates available for download. Early adopters report average preparation time of 4–6 weeks, compared to 8–12 weeks previously.

Expanded National Security Review Scope

The most consequential expansion concerns the national security review (国家安全审查, guójiā ānquán shěnchá). The new framework explicitly adds “critical data infrastructure,” “personal information processing,” and “emerging technologies” to the review scope — categories that were previously subject only to sector-specific regulations. This means a foreign company acquiring a Chinese e-commerce platform that holds data on 1 million+ users must now file a national security review even if the target operates outside traditional defense or infrastructure sectors. SAMR estimates this change will capture approximately 320 additional deals annually, primarily in the technology and consumer internet sectors.

The new rules also introduce a “deemed control” concept. A foreign investor is considered to control a Chinese entity if it holds veto rights over key decisions such as budget approval, appointment of senior management, or technology licensing — regardless of equity percentage. This provision directly targets common minority-investment structures used by foreign venture capital and private equity firms. In practice, a 15% equity stake with board veto rights now triggers the same review requirements as a majority acquisition. During the first two months of 2025, 11 of 27 minority-stake filings were flagged under deemed control provisions — a 41% share that surprised many foreign investors who had structured deals to stay below the 10% voting threshold.

Penalties for non-compliance have been sharply increased. Previously, the maximum fine was RMB 500,000 (approximately $69,000) — a trivial cost for most cross-border deals. The new framework imposes fines of up to 10% of the total transaction value for failure to file, with a minimum penalty of RMB 2 million. Additionally, any deal completed without SAMR approval is now void from the outset (void ab initio), meaning the buyer must unwind the transaction and restore both parties to their pre-deal positions. SAMR has publicly stated it will conduct retroactive reviews of deals completed since January 2023, with a priority on technology and data-sensitive targets. Foreign buyers who closed acquisitions in 2023 or 2024 without filing should immediately assess their exposure.

Sector-Specific Restrictions and Reporting Thresholds

Beyond the national security review expansion, the new framework tightens sector-specific restrictions in three key areas. First, the Foreign Investment Negative List (外商投资负面清单, wàishāng tóuzī fùmiàn qīngdān) has been updated to prohibit foreign M&A in 18 sectors entirely (up from 12) and restrict foreign ownership to below 50% in a further 9 sectors. New prohibited sectors include “gene data collection and analysis,” “domestic social media platforms with over 100 million monthly active users,” and “critical mineral mining and processing.” Foreign acquirers in these sectors must now seek alternative structures such as joint ventures with Chinese state-owned partners — a route that adds 6–12 months of regulatory approvals.

Second, data security compliance has been elevated from a post-closing requirement to a pre-filing condition. Any foreign buyer whose target processes “important data” as defined under China’s Data Security Law must now obtain a data security assessment certificate from the Cyberspace Administration of China before SAMR will accept the M&A filing. This certificate requires a separate 60-day review process, effectively adding a mandatory preliminary phase to the overall deal timeline. In the first two months of 2025, 17 of 41 M&A filings required a data security certificate — a 42% overlap rate that underscores how deeply data regulation now intersects with M&A approvals. Foreign buyers should budget 150–180 days from signing to closing for deals involving data-heavy targets.

Third, the framework introduces annual reporting obligations for foreign-invested companies that underwent M&A review. For a period of five years after deal closing, the acquirer must submit an annual compliance report detailing: changes in shareholding structure, technology transfer activities, board member changes, and any material data processing or cross-border data transfer arrangements. Failure to submit the annual report triggers fines of RMB 100,000–500,000 per occurrence. SAMR has indicated it will conduct on-site inspections of up to 20% of reviewed deals each year. Foreign buyers should factor ongoing compliance costs — estimated at RMB 150,000–250,000 per year for external legal and audit support — into their post-acquisition budgets.

The framework also provides a “reconsideration mechanism” for deals that are conditionally approved or rejected. Foreign investors have 30 days from receiving a review decision to file a written reconsideration request, which SAMR must respond to within 45 days. In the first two months, only 2 of 13 conditional approvals were challenged via reconsideration, and neither was overturned — though both saw conditions adjusted (e.g., reduced technology transfer obligations). Legal experts recommend including reconsideration timing contingencies in all purchase agreements to avoid triggering walk-away or break-fee clauses during the reconsideration window.

Timeline and Transition Rules for Ongoing Deals

The new framework applies to all M&A filings submitted after January 15, 2025. For deals that were already under review as of that date, SAMR has offered a transition option: filers may either continue under the old rules (processing time capped at 120 days from date of filing) or voluntarily re-file under the new rules (with the 90-day hard cap resetting on the re-filing date). As of March 1, 2025, 38 of 71 ongoing reviews had chosen to re-file under the new framework — likely because the 90-day hard cap is more predictable than the old unlimited timeline. Foreign buyers with deals in the review pipeline should calculate which option yields the fastest expected completion date based on how long their existing filing has already been pending.

For deals signed but not yet filed as of January 15, 2025, the new rules apply with no grandfathering. This creates a compliance risk for foreign buyers who signed purchase agreements in December 2024 or early January 2025 with the expectation of filing under the old, less stringent regime. At least three such deals have been publicly identified as requiring renegotiation of timetables and break-fee clauses to accommodate the new 90-day review timeline. M&A advisors recommend that any buyer in this situation immediately notify its counterparty and amend the purchase agreement to include a “regulatory change” clause that extends the long-stop date by 60–90 days and caps break-fee exposure during the extended period.

Looking ahead, SAMR has announced it will publish quarterly data on review timelines, approval rates, and sector breakdowns starting in Q2 2025 — a transparency measure that foreign investors have long requested. The first report is expected to cover the January–March 2025 period and will include anonymized case examples of both approved and rejected deals. This data will help foreign acquirers benchmark their own deal timelines and assess the probability of approval across different sectors. Early indications from the January–February pilot period show an overall approval rate of 62% (23 of 37 completed reviews), with conditional approvals accounting for 35% of the approved deals and outright rejections at just 3%. Technology deals faced the highest revision rate at 48%.

NEXT STEPS

1. Audit your existing China investments for retroactive exposure. If you completed a China M&A deal in 2023 or 2024 without filing a national security review, immediately conduct a legal audit to determine whether the target operates in one of the 27 sensitive sectors or processes data qualifying as “important data.” SAMR has announced retroactive reviews and the void-ab-initio penalty is severe. Read our M&A Regulatory Audit Checklist →
2. Restructure minority investments to avoid deemed control triggers. If your deal structure includes board representation, veto rights over budgets or technology licensing, or any minority-protection provisions common in VC/PE deals, you likely trigger the new deemed control rules. Review investment documents against the new 10% voting trigger and deemed control provisions. See our Minority Investment Guide for Foreign Investors →
3. Build a 150–180 day deal timeline for new China acquisitions. Factor in the 60-day data security certificate pre-phase, the 90-day SAMR review, plus a 30-day margin for document preparation and reconsideration risk. Update your deal model to include annual compliance costs of RMB 150,000–250,000 for five years post-closing. Use our M&A Timeline Calculator Tool →

— China Gateway 360 —
Remote China market entry support, built around execution.