Direct Answer / Overview

Foreign AI companies operating in China face mandatory algorithm filing under the Internet Information Service Deep Synthesis Management Regulations — affecting over 170 regulated deep synthesis service providers as of mid-2024 — with penalties reaching RMB 100,000 or more per violation, service suspension, and potential criminal liability for non-compliant firms.

Direct Answer / Overview

China’s Internet Information Service Deep Synthesis Management Regulations (互联网信息服务深度合成管理规定, Hùliánwǎng Xìnxī Fúwù Shēndù Héchéng Guǎnlǐ Guīdìng), effective January 10, 2023, impose sweeping compliance obligations on any entity that provides deep synthesis services within Chinese territory. For foreign AI applications, the regulations create a dual burden: they must meet substantive technical requirements (data labeling, content watermarking, deepfake identification) and procedural requirements (algorithm filing with government authorities). The regulations are administered by the Cyberspace Administration of China (CAC, 国家互联网信息办公室, Guójiā Hùliánwǎng Xìnxī Bàngōngshì), which has demonstrated increasing enforcement capacity since the rules took effect.

These regulations are part of a broader regulatory ecosystem that includes the Algorithm Recommendation Management Provisions (effective March 1, 2022) and the more recent Generative AI (GAI) Interim Measures (effective August 15, 2023). Foreign companies that fail to comply face escalating penalties: administrative warnings, fines of up to RMB 100,000 (approximately USD 14,000), suspension of services, and — in severe cases involving harm to national security or public interest — criminal prosecution under China’s Cybersecurity Law and Criminal Law.

Regulatory Basis: The Deep Synthesis Provisions

The Deep Synthesis Regulations were jointly issued by the CAC, the Ministry of Industry and Information Technology (MIIT), and the Ministry of Public Security. They consist of 25 articles organized into five chapters: General Provisions, Normative Requirements, Self-Management Obligations, Legal Liability, and Supplementary Provisions. Below is a summary of the key regulatory categories and their corresponding requirements.

The regulations define “deep synthesis technology” broadly under Article 2 to include: text-to-image generation, voice cloning (voice synthesis), video synthesis (including face swapping), text-to-speech conversion, virtual avatar generation, and any technology that uses deep learning to generate or substantially edit content. This definition captures virtually all modern generative AI tools, whether marketed as “AI image generators,” “AI voice assistants,” or “real-time face filters.”

Key Requirements for Foreign AI Applications

Foreign AI companies face four structural challenges under the Deep Synthesis Regulations that do not apply equally to domestic Chinese firms:

1. Legal Entity Requirement (Article 16). Only entities legally registered in China may file algorithms. A foreign headquarters cannot file directly. This forces foreign AI companies to establish a wholly foreign-owned enterprise (WFOE) or joint venture in China before they can legally offer deep synthesis services. The WFOE must assume legal liability for all AI-generated content produced through its services.
2. Cross-Border Data Transfer Restrictions. While not explicit in the Deep Synthesis Regulations themselves, the Personal Information Protection Law (PIPL, 个人信息保护法, gèrén xìnxī bǎohù fǎ) and the Data Security Law (DSL, 数据安全法, shùjù ānquán fǎ) impose strict controls on transferring user data — including biometric data used by deep synthesis systems — outside China. A foreign AI application that processes Chinese users’ facial images or voice samples must either store and process that data within China or undergo a security assessment to export it.
3. Content Moderation Obligations (Article 9). Foreign AI applications must implement content moderation that complies with China’s internet content rules, which prohibit generated content that “endangers national security, harms national honor or interests, subverts state power, undermines national unity, or promotes terrorism, extremism, ethnic hatred, or pornography.” This creates tension with Western free-expression principles and requires foreign companies to implement China-specific content filters that may conflict with their global content policies.
4. Renewal and Amendment Filing (Article 17). Algorithm filings must be updated whenever the algorithm’s core functions, data sources, or application scenarios change. This creates an ongoing compliance burden for foreign companies that iterate rapidly — each new feature release that touches deep synthesis may trigger a re-filing requirement with a review period of 10–20 working days.

These requirements apply to any foreign AI application that is “provided to the public in China” (Article 2). The CAC interprets this broadly to include not only services hosted on Chinese servers but also services accessible from China via the internet, even if hosted overseas. Foreign companies cannot avoid compliance simply by hosting infrastructure outside China.

The Algorithm Filing Process (算法备案流程)

The algorithm filing process is the central compliance mechanism of the Deep Synthesis Regulations. Foreign companies must follow this multi-step procedure:

1. Corporate Registration: Establish a Chinese legal entity (WFOE or JV) with a business scope that includes “internet information services.” This typically takes 4–8 weeks.
2. Technical Self-Assessment: Conduct a security assessment covering algorithm transparency, data provenance, content moderation capabilities, watermarking implementation, and bias/fairness testing. The assessment must be documented in a report that follows the template published by the CAC.
3. Submit Application via the Algorithm Filing System: File online through the CAC’s official Algorithm Filing System (算法备案系统, suànfǎ bèi’àn xìtǒng) at beian.cac.gov.cn. Required materials include: (a) the security self-assessment report, (b) a basic information form describing the algorithm type, purpose, and data sources, (c) a corporate registration certificate of the Chinese entity, and (d) a letter of commitment signed by the legal representative.
4. Public Notice and Filing Number: Approved algorithms receive a filing number and are published on the CAC’s public algorithm registry. The filing must be prominently displayed on the service’s website or application interface. The CAC reports processing times of 10–20 working days for straightforward applications, though complex cases involving multiple data sources or high-risk applications may take longer.
5. Annual Renewal: Algorithm filings must be renewed annually. Any material change to the algorithm — including changes to training data, model architecture, or application scope — requires a new filing within 10 working days of the change (Article 17).

The practical impact on foreign AI applications can be summarized as follows:

• Voice Cloning (AI Voice Synthesis): Must obtain explicit, written consent from the voice owner before any use (Article 6). Generated voice outputs must carry watermarks. Foreign companies offering voice cloning APIs must implement China-specific consent flows that comply with PIPL biometric data requirements.
• Video Synthesis / Face Swapping: Real-time face-swapping tools face the strictest scrutiny. Article 11 requires that any deep synthesis content that could “cause confusion or misunderstanding” must be clearly labeled. Foreign face-swap apps must disable or geo-fence access from Chinese IP addresses unless they complete the full filing process.
• Text-to-Image Generation: Training data pipelines must be audited for China-prohibited content. Generated images must carry invisible digital watermarks (Article 12). Foreign text-to-image platforms that allow Chinese users must implement content filters for China-specific prohibited topics.
• Real-Time Face Filters: Consumer-facing applications (e.g., AR beauty cameras, live-streaming filters) must comply with both the Deep Synthesis Regulations and the PIPL. User facial data must be processed within China unless a cross-border data transfer security assessment has been completed.

Penalties and Enforcement

The Deep Synthesis Regulations establish a graduated enforcement framework that gives regulators substantial discretion. Under Article 22 of the regulations, non-compliance can trigger the following penalties:

Enforcement is not merely theoretical. As of early 2025, the CAC had published multiple batches of algorithm filings, and regulatory inspections have resulted in enforcement actions against both domestic and foreign-invested technology companies. In one notable case reported in late 2023, a foreign-invested AI avatar company was ordered to suspend services for two weeks for failing to properly watermark generated video content. Companies that operate without a filing number after being flagged by the CAC face escalating fines and potential blacklisting, which can affect their ability to do business with Chinese partners across all sectors.

Beyond administrative penalties, the regulations create exposure under China’s broader legal framework. Article 24 states that where deep synthesis is used to commit crimes such as fraud, defamation, or infringement of trade secrets, the responsible individuals face criminal liability under the Criminal Law. Given the increasing use of deepfake technology in financial fraud — a major concern for China’s fintech sector — foreign AI fintech applications face heightened scrutiny and should expect proactive regulatory oversight.

Practical Compliance Steps for Foreign Companies

Foreign AI companies seeking to offer deep synthesis services in China — or whose globally available services are accessible from China — should implement the following compliance roadmap:

1. Establish a Chinese legal entity. This is the non-negotiable first step. Without a registered WFOE or JV, algorithm filing is impossible. Engage a China-focused corporate services firm to expedite registration (typically 6–10 weeks). The entity must have a business license that explicitly covers “internet information services.”
2. Conduct a gap analysis. Map your AI application’s features against the six regulatory categories in the table above. Identify which of your deep synthesis use cases are captured (text-to-image, voice cloning, video synthesis, etc.) and assess current compliance with data labeling, watermarking, and user consent requirements.
3. Implement technical compliance measures: Add machine-readable watermarks to all AI-generated outputs (visible or invisible, per Article 12). Build content moderation filters that comply with China’s prohibited content list. Implement consent management for biometric data collection. Set up audit logging of all deep synthesis operations.
4. Prepare the security self-assessment. Draft a comprehensive assessment report covering algorithm transparency, data governance, security measures, and content moderation capabilities. This is the most time-consuming step and may require engaging a Chinese law firm or compliance consultancy with CAC filing experience.
5. Submit the algorithm filing. Use the CAC’s online system through your Chinese entity. Budget for 15–30 working days for processing. Plan product launches and feature releases around filing timelines.
6. Establish ongoing compliance monitoring. Assign a China compliance officer (within the Chinese entity) responsible for tracking regulatory updates, managing annual renewals, and handling any regulatory inquiries. Monitor the CAC’s public algorithm registry for changes in filing requirements.

Foreign companies that cannot meet these requirements within a reasonable timeframe should consider geo-blocking access from China for their deep synthesis services until compliance is achieved. However, geo-blocking is not a permanent solution — the CAC has indicated it expects all services “accessible from within China’s territory” to comply, and enforcement actions have targeted services that were remotely accessible even without a physical China presence.

Where to Go From Here

Based on what you just read:

• Ready to act? Read [guide: SLUG-TO-BE-FILLED]
• Still comparing? See [comparison: SLUG-TO-BE-FILLED]
• Need numbers? Try [tool: SLUG-TO-BE-FILLED]

— China Gateway 360 —
Remote China market entry support, built around execution.