M&A (bìnggòu)

1 What is the current state of M&A in China?

China’s M&A market in 2024–2025 is characterised by selective consolidation and a shift toward quality over quantity. Total announced M&A value in China reached approximately USD 380 billion in 2024 (refinitiv data), down roughly 12% from the 2021 peak but still the second-largest market in Asia after the US. Cross-border inbound M&A—deals where foreign companies acquire Chinese targets—accounted for about USD 42 billion, with particular activity in advanced manufacturing, healthcare, and clean energy.

Foreign executives should note that the era of rapid, highly leveraged buyouts is being replaced by strategic, operationally focused acquisitions—often in sectors aligned with China’s “New Quality Productive Forces” (新质生产力 xīn zhì shēngchǎn lì) policy framework.

2 Which regulatory approvals do foreign buyers need?

A typical China M&A deal involving a foreign acquirer triggers up to four parallel review streams:

① National Security Review (国家安全审查 guójiā ānquán shěnchá) – administered by the Office of the National Security Review Mechanism (jointly led by NDRC and MOFCOM). Mandatory for deals in defence, critical infrastructure, data security, and key technologies. In 2024, the review scope expanded to include “sensitive personal data” and “critical information infrastructure operators.”

② Anti-monopoly Review (反垄断审查 fǎn lǒngduàn shěnchá) – conducted by the State Administration for Market Regulation (SAMR, 国家市场监督管理总局). Any transaction meeting SAMR’s turnover thresholds (e.g. global turnover > CNY 10 billion, or China turnover > CNY 2 billion) must be notified. Average review timeline: 90–180 days.

③ Sector-specific approvals – for industries such as finance (CBIRC), securities (CSRC), telecoms (MIIT), or healthcare (NMPA).

④ Foreign Investment Negative List – if the target operates in a restricted sector, the acquirer must comply with equity caps or additional licensing (see Q3).

Practical tip: Most foreign acquirers appoint a local regulatory counsel 6–9 months before signing.

3 How does the Negative List affect deal structuring?

The Special Administrative Measures (Negative List) for Foreign Investment Access (外商投资准入负面清单 wàishāng tóuzī zhǔnrù fùmiàn qīngdān) is the single most important document for foreign M&A structuring. The 2024 edition reduced restricted items to 31 (from 48 in 2017). Key restricted sectors include:

• Telecommunications – value-added services capped at 50% foreign ownership (exceptions for certain pilot zones).
• Education – compulsory education remains prohibited.
• Media & publishing – foreign equity generally limited to 49%.
• Healthcare – hospitals can be 100% foreign-owned in most regions, but with operational restrictions.

For unrestricted sectors, 100% foreign acquisition is allowed, but the deal still requires standard registration with MOFCOM and the local Administration for Market Regulation. A common workaround for restricted sectors is the VIE (Variable Interest Entity) structure (可变利益实体 kě biàn lìyì shítǐ), though regulatory uncertainty around VIE has increased since 2023.

4 What does SAMR focus on in M&A reviews?

The State Administration for Market Regulation (SAMR) applies a competition test similar to the EU and US, but with a distinct Chinese flavour. In 2024, SAMR reviewed 342 transactions, approving 330 unconditionally, 10 with remedies, and blocking 2. Key focus areas:

• Market concentration – if the merged entity holds >40% share in a relevant market, remedies (e.g. divestiture, firewalling) are likely.

• Industrial policy alignment – SAMR increasingly considers whether the deal supports “national strategy” (国家战略 guójiā zhànlüè) such as semiconductor self-sufficiency or carbon neutrality. Deals in AI, EVs, and biotech get enhanced scrutiny.

• Procedural compliance – failure to notify a notifiable transaction can result in fines up to 10% of the undertaking’s annual turnover in China. At least two foreign firms were fined in 2024 for gun-jumping.

5 How has the National Security Review evolved?

The National Security Review (NSR) regime was tightened by the Regulations on the Security Review of Foreign Investment (2020, amended 2023). The 2023 amendments expanded jurisdiction to include:

• Acquisitions involving personal data of more than 1 million users.
• Investments near military or dual-use facilities.
• Deals that give a foreign investor the ability to control or materially influence a Chinese company’s operations.

In 2024, roughly 15% of foreign M&A deals by value triggered an NSR filing. The review timeline is officially 120 working days, but can extend to 180 days. Practically, deals that raise national security concerns often proceed with mitigation agreements (e.g. data localisation, no cross-border technology transfer).

6 What due diligence areas are unique to China?

Beyond legal, financial, and commercial due diligence, foreign acquirers in China must prioritise:

• Regulatory compliance (合规 héguī) – verify that the target holds all required ICP licences, data security filings, and sector-specific permits. Licence gaps are common in tech and healthcare.

• Data and cybersecurity – under the Personal Information Protection Law (PIPL, 个人信息保护法) and the Data Security Law (数据安全法), any target processing significant

Official Sources

• Cyberspace Administration of China: Personal Information Protection Law
• Cyberspace Administration of China: official policy and regulatory portal
• National Information Security Standardization Technical Committee

Management and Implementation Framework

Work on china m&a regulatory and deal-structuring guide should begin with a documented business objective, not a form or provider quotation. The team should identify the China activity, responsible entity, location, expected start date, transaction or employee population and internal risk tolerance. These facts determine which approvals, records and controls are proportionate.

Sequence the implementation

A practical sequence moves from fact confirmation to option selection, document preparation, authority or counterparty review, implementation and post-launch verification. Dependencies should be visible. No team should assume that registration, a signed contract or a successful system submission proves operational readiness; bank, tax, HR, finance and local operating steps often have separate completion evidence.

Control ownership and evidence

Management control depends on assigning decisions before deadlines become urgent. For china m&a regulatory and deal-structuring guide, the accountable group normally includes the deal lead, investment committee, legal and tax counsel and integration owner. Responsibility should be divided between preparation, approval and independent checking. The core file should contain deal thesis, target diligence, valuation, approval analysis, transaction documents, closing evidence and integration plan. Evidence should be dated, attributable to a named owner and linked to the decision or filing it supports. Verbal confirmation is not a substitute for a retained authority notice, counterparty response or approved internal record.

The control calendar should reflect the target screening, diligence, valuation and structuring, signing, regulatory approval, closing and integration review. Dependencies and cut-off dates need to be visible to every function that supplies data. Any external provider should receive a written scope, required inputs, response timetable and escalation route. The company remains responsible for reviewing outputs even when execution is outsourced. Known failure modes include incomplete ownership evidence, hidden liabilities, approval delay, weak valuation assumptions and failure to plan post-closing control; each should have a preventive check and a named reviewer.

Management review and escalation

The review meeting should focus on exceptions and unresolved assumptions. The status pack should show the decision required, facts confirmed, assumptions still open, monetary or operational exposure, next deadline and responsible owner. Items that depend on local discretion should be labelled clearly. Escalation should occur when an authority rejects a filing, a counterparty requests materially different evidence, a cost or timing threshold is exceeded, or actual operations no longer match the approved setup.

Before go-live, the responsible executive should confirm that legal form, contracts, system configuration, payment authority and record retention are aligned. A short post-implementation review after the first operating cycle should compare planned and actual time, cost and exceptions. That review is where recurring controls are corrected and where lessons become part of the company standard rather than remaining with an individual adviser.

Practical completion checklist

• State the business decision, scope, city, entity and target date.
• Confirm the current official rule and any local implementation requirement.
• Assign preparation, approval and independent review to named owners.
• Retain the documents, calculations and correspondence supporting the decision.
• Test cost, timing and operational assumptions against a downside case.
• Record unresolved issues and the threshold for management escalation.
• Verify the first completed operating cycle and update the control calendar.

Execution Record and Handover

The final record for china m&a regulatory and deal-structuring guide should allow another manager to understand what was decided, which evidence was relied on and which obligations remain open. The handover pack should identify the current operating assumption, the approving executive, the external authority or counterparty involved, the effective date and the next mandatory review. It should also explain any local interpretation, exception or temporary workaround so that it is not mistaken for a permanent rule.

For m&a, continuity depends on preserving deal thesis, target diligence, valuation, approval analysis, transaction documents, closing evidence and integration plan. Files should use a consistent naming convention and access should follow the company’s authority matrix. Critical dates belong in a controlled calendar rather than an individual’s inbox. Where a provider holds original submissions or account credentials, the contract and exit plan should guarantee prompt return of records in a usable format.

A quarterly control check should sample one completed transaction or employee cycle, reconcile it to the approved process and record exceptions. Material deviations should be assigned to an owner with a due date; repeated deviations should trigger a process redesign rather than another informal reminder. This creates a defensible link between policy, daily execution and management oversight while keeping the control proportionate to the actual China operation.