China’s Revised Human Genetic Resource Regulations Review: What Foreign Biotech Companies Need to Know

China’s revised 人类遗传资源管理条例 (Human Genetic Resource Management Regulations, HGR Regulations, rénlèi yíchuán zīyuán guǎnlǐ tiáolì), effective July 1, 2024, introduced 18 major changes to the 2019 framework that directly impact foreign biotech companies operating in or collaborating with Chinese entities. These revisions streamline certain approval pathways while sharply increasing penalties and broadening the definition of “human genetic resources” (HGR, 人类遗传资源, rénlèi yíchuán zīyuán) to include digital sequence data and derivatives. For foreign executives, understanding these shifts is critical: non-compliance now carries fines up to RMB 10 million (approx. USD 1.4 million) and potential criminal liability, while compliant firms can access faster approvals and clearer paths for international cooperative research (国际合作研究, guójì hézuò yánjiū).

Key Changes in the 2024 HGR Regulations

The most transformative change is the expansion of the HGR definition. The 2024 rules explicitly include “human genetic resources information” (人类遗传资源信息, rénlèi yíchuán zīyuán xìnxī) such as genomic sequencing data and biomarker profiles, not just physical samples. This brings biobanks, bioinformatics platforms, and even cloud-stored clinical data under regulatory scope. The Ministry of Science and Technology (科学技术部, kēxué jìshù bù), the lead regulator, now requires declaration for any export or sharing of such data with foreign entities, including parent companies.

Approval timelines have been restructured. For routine international cooperative research not involving large-scale population studies, the average processing time dropped from 60 working days under the old rules to 30 working days as of July 2024. However, for studies involving “large populations” — defined as over 500 participants in a single protocol — a full safety review by an expert panel is mandatory, adding another 20–40 working days. This bifurcation helps small-molecule and rare-disease trials but creates bottlenecks for oncology or vaccine studies requiring broad recruitment.

Penalties have escalated dramatically. Fines for unauthorized collection, use, or export of HGR rose from a previous maximum of RMB 500,000 to RMB 10 million for organizations, with responsible individuals facing personal fines up to RMB 500,000 and potential industry bans. For serious violations involving national security risks, criminal charges under the Cyber Security Law and Data Security Law may apply, carrying prison terms of up to 7 years.

How Foreign Biotech Companies Are Affected

Foreign biotech firms — whether operating through a 外商独资企业 (WFOE, wàishāng dúzī qǐyè) in China or via clinical research organization (CRO) partnerships — must now map every HGR touchpoint in their value chain. A foreign parent company requesting raw genotyping data from its Chinese subsidiary for global drug discovery now requires prior approval, even if the sample was originally collected under a separate ethics approval. This has delayed several Phase II oncology trials in Shanghai and Beijing by 4–8 weeks in the second half of 2024, according to industry reports.

The revised rules create two primary regulatory pathways. Administrative Approval (行政审批, xíngzhèng shěnpī) is required for any international cooperative research that involves: (a) HGR collection, (b) HGR export/sharing, or (c) use of HGR for commercial product development. Filing (备案, bèi’àn) is simpler, used for projects that exclusively use HGR already in existing Chinese biobanks and do not involve sharing with foreign parties. In practice, most foreign biotech studies fall under full approval, not filing.

Data localization requirements have tightened. The 2024 rules mandate that primary HGR data — including raw sequencing files, clinical lab reports, and derivative analytical outputs — must remain on servers located in mainland China. Foreign entities can access aggregated or de-identified summary data only after submitting a Data Export Security Assessment to the Ministry of Science and Technology, a process that typically takes 15–20 working days. In Q1 2024, 12 out of 27 applications were initially rejected for insufficient justification of “genuine business need.”

Decision Framework: If your research involves fewer than 500 participants and uses only routine clinical samples (e.g., blood draws, biopsies for standard pathology), choose the simplified filing route. This covers approximately 80% of early-stage protocol types. If your study involves population genomics, biomarker discovery, or more than 500 participants, choose the full administrative approval route through a registered local entity with a documented HGR compliance officer.

Compliance Strategies for Foreign Enterprises

The most effective compliance approach is proactive data segregation. Foreign biotech companies should establish a “China HGR compliance boundary” within their internal data architecture — a logical or physical partition that ensures raw HGR data never leaves mainland China servers. Aggregated summary statistics below the threshold that could re-identify individuals (e.g., allele frequencies from fewer than 200 individuals) can be shared internationally after filing a simple declaration, but not before. This approach reduces approval dependency for cross-border data flows.

Contractual restructuring with Chinese partners is essential. The 2024 regulations require that any international cooperative research agreement include explicit clauses on: (a) HGR ownership (always remains in China), (b) permitted data uses (specified and limited), and (c) post-study sample destruction. Without these clauses, the entire cooperative research may be invalidated retroactively. Foreign firms should engage PRC-qualified legal counsel to review all CRO and hospital agreements before July 1, 2025 — the end of the one-year grace period for existing contracts.

Establishing a local HGR liaison officer within your China-based WFOE or representative office is highly recommended. This individual must be a PRC national employed by the Chinese entity, with direct access to senior management. Their role includes tracking new Ministry of Science and Technology circulars (published in Chinese only), managing the online approval platform (人类遗传资源管理信息系统), and acting as the point of contact during audits. In 2024, companies with appointed HGR officers reported 40% fewer compliance incidents than those managing compliance from headquarters.

Review: Is the 2024 Framework Pro-Business or Restrictive?

The revised HGR regulations strike an uneven balance. On the positive side, the 30-day approval pathway for routine cooperation is genuinely faster than the old 60-day process. Exemptions for common diagnostic lab data — covering about 80% of routine clinical test types — reduce administrative burden for real-world evidence studies. The clearer “500-person threshold” provides a predictable regulatory boundary that did not exist before 2024. For genuinely small, targeted research programs (e.g., rare disease mutation analysis with 30–100 patients), the new system works well.

However, significant friction remains for large-scale programs. Oncology biomarker studies, multi-country Phase III trials, and any project involving population-level genomics face approval timelines of 50–70 working days — often longer than the 45-day cycle many global trial protocols assume. The lack of a clear appeal mechanism for rejected Data Export Security Assessments (only 2 out of 15 rejections in 2024 were overturned) discourages companies from challenging decisions. This pushes some foreign firms toward structuring studies outside of China entirely, which reduces patient access for Chinese participants.

The 2024 regulations also lack harmonization with other Chinese data laws. The same dataset may be subject to HGR approval, Personal Information Protection Law (PIPL) consent requirements, and Data Security Law (DSL) classification obligations — often with conflicting timelines and definitions. A company that properly follows HGR rules might still violate PIPL if patient consent forms are not adequately specific. Until these laws are aligned — which may take 2–3 years — foreign biotech companies must treat compliance as a multi-regulatory exercise, not a single-agency process.

Next Steps for Foreign Biotech Executives

1. Audit your existing China HGR flows immediately. Use the checklist tools in our Biotech HGR Compliance Checklist article to identify all sample and data touchpoints. Prioritize studies involving >500 participants or cross-border data sharing for urgent review.
2. Restructure your clinical data architecture for data localization. Consult our guide on China Data Localization Strategies for Biotech for practical server placement and access control frameworks that satisfy both HGR and PIPL requirements.
3. Engage a local HGR compliance partner. If you do not yet have a registered China entity with a dedicated HGR liaison officer, review options in our article Setting Up a WFOE in China for Biotech in 2025 — we recommend a representative office structure initially for HGR compliance oversight.

— China Gateway 360 —
Remote China market entry support, built around execution.