Telemedicine in China is regulated under a multi-tier framework that effectively caps foreign equity at 0% in direct clinical service provision. Foreign providers can participate only indirectly, typically through a WFOE (外商独资企业, waishang duzi qiye) as a technology platform vendor or through a joint venture with a licensed Chinese medical institution. The framework, consolidated in 2018, draws a sharp line between “Internet-based medical services” (restricted to Chinese-licensed entities) and “Internet health technology” (open to foreign investment). This FAQ addresses the 8 most critical regulatory questions foreign executives face when evaluating telemedicine entry into China.
Why This Matters
China’s digital health market reached ¥255 billion (about $36 billion) in 2023, with telemedicine consultations growing over 45% year-on-year to 1.2 billion visits. Yet foreign providers control less than 3% of that market, largely because of regulatory barriers. Understanding the compliance architecture—licensing, data localization, partnership structures—is the difference between a successful pilot and a blocked rollout.
Since 2018, the National Health Commission (NHC) and National Medical Products Administration (NMPA) have issued at least five major regulatory documents specific to digital health, including the Administrative Measures for Internet-Based Medical Services (2018) and the Detailed Rules for the Management of Internet Diagnosis and Treatment (2020). Foreign providers must navigate these rules while also adhering to the Personal Information Protection Law (PIPL) and the Data Security Law (DSL), which impose strict cross-border data transfer restrictions. The following FAQ breaks down the most frequent regulatory questions we receive from foreign executives.
-
Q1: Can a foreign company directly own and operate a telemedicine platform in China?
A: No. Direct ownership of a telemedicine platform that provides clinical diagnosis or treatment is prohibited under the Foreign Investment Negative List (2023 edition), which classifies Internet medical services as a “restricted” sector where foreign investment is not allowed. The only exception is where the foreign investor forms a Sino-foreign joint venture with a Chinese hospital or medical institution that holds the necessary licenses. Even then, the Chinese partner must hold at least 70% equity in the joint venture. This means a standard WFOE (外商独资企业, waishang duzi qiye) cannot itself be a telemedicine provider—it must act as a technology supplier or platform operator under contract with a licensed entity.
Number context: According to the 2023 Negative List, 27 sectors remain off-limits to foreign majority control, including Internet medical services. In contrast, sectors like value-added telecommunications (e.g., data processing) allow up to 50% foreign ownership.
-
Q2: What licenses are required to operate telemedicine in China?
A: Three key licenses are mandatory:
- Internet Medical Institution License (互联网医疗机构执业许可证): Issued by the local health commission to a medical institution that must already have a physical hospital license. This license authorizes online diagnosis and prescription.
- Class 3 Medical Device License (for diagnostic software, e.g., AI radiology): Required if the platform uses software to provide diagnostic support, and must be held by the operator.
- ICP License (Internet Content Provider, 增值电信业务经营许可证): Issued by the Ministry of Industry and Information Technology (MIIT) for any platform that provides online information services. For telemedicine, an ICP is mandatory if the platform hosts interactive patient-provider content.
Comparison: While the U.S. requires only state-specific telemedicine licenses, China mandates three separate licenses, with the Internet Medical Institution License typically taking 6–12 months to obtain even for domestic applicants. Foreign entities cannot apply for this license directly; it must be held by the Chinese partner.
-
Q3: How does China’s data privacy law affect telemedicine providers?
A: The Personal Information Protection Law (PIPL), effective November 2021, classifies health data as “sensitive personal information” (敏感个人信息, mingan geren xinxi). This imposes strict rules:
- Consent: Explicit, separate consent must be obtained for each purpose of processing health data.
- Data localization: Health data must be stored on servers in mainland China. Cross-border transfer is only permitted after a security assessment by the Cyberspace Administration of China (CAC) if the data reaches a certain threshold (e.g., more than 1 million patients’ data).
- Penalties: Fines can reach up to 5% of annual revenue for serious violations (Art. 69 PIPL).
Number context: In 2022, over 20 health-tech platforms were fined a combined ¥180 million for PIPL non-compliance. For foreign providers, the data localization requirement effectively means they must either build an in-country server infrastructure or partner with a Chinese cloud provider (e.g., Alibaba Cloud, Tencent Cloud).
-
Q4: What are the notification and approval procedures for telemedicine services?
A: Providers must follow a two-step process:
- Registration: The licensed medical institution (the Chinese partner where the WFOE is the technology provider) must register the Internet medical service with the local health bureau, providing details of the platform, physician list, and data management plan.
- Pilot reporting: Since 2022, all telemedicine platforms operate under a “pilot scheme” that requires quarterly reporting of consultation volume, adverse event records, and data security audits. The NHC has set a 24-hour reporting window for any adverse medical outcomes.
Comparison: Unlike the EU’s MDR (Medical Device Regulation) which allows self-certification for some software, China mandates a government-led review process that can take 3–6 months for first-time applications. Foreign providers should budget for a longer pilot phase.
-
Q5: Can foreign physicians legally consult via Chinese telemedicine platforms?
A: Only if the foreign physician holds a Chinese medical license and is registered with a licensed Chinese hospital. The Measures for the Administration of Foreign Medical Practitioners in China (2021) allow foreign practitioners to work in China if they pass the Chinese Medical Practitioner Qualification Examination and register with a local health bureau. However, cross-border telemedicine consultations from abroad (e.g., a U.S. doctor consulting a patient in China via a video call) are illegal unless the foreign physician holds a valid Chinese license and the consultation platform is registered under a Chinese-licensed entity.
Number context: As of 2023, fewer than 1,200 foreign doctors hold Chinese medical licenses, compared to over 4 million Chinese licensed doctors. This makes remote foreign doctor participation virtually impossible for most telemedicine models.
-
Q6: How does AI-driven telemedicine (e.g., AI diagnosis tools) get regulated?
A: AI diagnostic software is regulated as a Class 3 medical device by the NMPA. Since 2021, the NMPA has published specific guidelines for “AI-assisted diagnosis and treatment software” (e.g., Guidelines for Registration Review of AI Medical Software). Key requirements:
- Clinical trial data must be generated in China using Chinese patient populations (non-Chinese data is not accepted for registration).
- The algorithm must be updated and validated against local datasets every 2 years.
- If the AI software is used to directly generate diagnostic reports (without human review), it must be operated by a Chinese-licensed medical institution. Foreign WFOEs can develop the software but cannot deploy it clinically without a Chinese partner.
Comparison: In the U.S., the FDA has approved 40+ AI algorithms for radiology under the De Novo pathway; China’s NMPA has approved only 12 AI-based devices (as of 2023), reflecting a slower but more rigorous process.
-
Q7: What are the penalties for non-compliance?
A: Non-compliance can result in:
- Administrative fines: Up to ¥10 million (approx. $1.4 million) for violations of the PIPL or Data Security Law (DSL).
- License revocation: The Internet Medical Institution License can be revoked, effectively shutting down the platform.
- Blacklisting: Companies and their directors may be placed on a “serious dishonesty list” (严重失信名单), restricting future business activities in China.
- Criminal liability: In cases of medical negligence or data leaking with malice, executives can face personal criminal charges (Article 253 of the Criminal Law).
Number context: In 2022–2023, the CAC imposed fines on 7 telemedicine companies for unauthorized cross-border data transfers, with the largest fine being ¥5.2 million. Additionally, 2 platforms had their ICP licenses suspended due to failure to report adverse events within the 24-hour window.
-
Q8: Is there any possibility for future regulatory easing for foreign providers?
A: Cautiously optimistic. The Chinese government has signaled interest in allowing foreign investment in certain digital health sub-sectors through the Negative List Revisions (2023) and recent pilot free trade zones (e.g., Shanghai, Hainan). Specifically, the Hainan Free Trade Port has a special policy allowing foreign-owned telehealth platforms to operate if they partner with a local hospital and invest at least ¥50 million (approx. $7 million). However, this pilot has not yet been extended nationwide. Experts expect gradual opening only after domestic standards are fully established, likely after 2026.
Number context: As of 2024, only 3 foreign-owned telehealth platforms have been approved in Hainan, all with Chinese hospital partners. The national Negative List for Internet medical services remains unchanged.
Pitfalls to Avoid
1. Misclassifying your business model
Foreign providers often try to structure a WFOE (外商独资企业, waishang duzi qiye) as a “telehealth service provider” without a Chinese medical partner. The regulator will treat any revenue stream from online consultations or prescriptions as “medical service fees,” requiring an Internet Medical Institution License that the WFOE cannot hold. This can lead to immediate shutdown and fines. Rule of thumb: If your platform connects patients with doctors for diagnosis, you must be a technology vendor to a licensed Chinese medical institution, not the medical provider itself.
2. Ignoring data localization for health records
Many foreign providers fail to realize that PIPL applies to all health data collected from Chinese patients, even if the patient is abroad. Storing health data on overseas servers is outright illegal. Additionally, requiring patient consent in English only is invalid; all notices must be in simplified Chinese and meet specific wording requirements from the CAC. Fix: Contract with a Chinese cloud provider and ensure all patient consent forms are bilingual (Chinese primary) and reviewed by local data privacy counsel.
3. Overlooking the 24-hour adverse event reporting rule
The NHC requires telemedicine platforms to report any “serious adverse medical events” (e.g., misdiagnosis, medication errors) within 24 hours. Failure to do so can lead to platform suspension. Many foreign providers underestimate the need for a local compliance officer with 24/7 monitoring capability. Build this into your operational plan from day one.
