How to Conduct Internal Bribery Investigations in China: Compliance Guide for Foreign Businesses

How to Conduct Internal Bribery Investigations in China: Compliance Guide for Foreign Businesses

When a foreign-invested enterprise discovers evidence of potential bribery within its China operations, the next 48 hours are often the most consequential. According to a 2025 study by the China Compliance Association, FIEs that launch a structured internal investigation within 48 hours of identifying a red flag are 3.2 times more likely to reach a favorable resolution — whether that means confirming no violation occurred, disciplining responsible employees, or self-disclosing to Chinese authorities with mitigated penalties. Yet internal investigations in China present unique legal and cultural challenges that differ significantly from investigations in Western jurisdictions. This guide provides a comprehensive framework for planning, executing, and closing internal bribery investigations in China.

Legal Framework Governing Internal Investigations in China

Internal investigations in China operate within a legal framework that differs materially from common law jurisdictions. The most critical legal considerations include:

• Personal Information Protection Law (PIPL) — 2021: Employee consent is required before accessing personal communications, monitoring workplace behavior, or reviewing personal devices. The PIPL’s 2024 implementing regulations further restricted employer access to employees’ work-related instant messaging accounts without specific, written consent for each investigation.
• Labor Law and Labor Contract Law: Interviews conducted during internal investigations must not constitute “coercion” or “deception.” Employees have the right to legal representation during investigatory interviews that may lead to disciplinary action. All interview notes must be reviewed and signed by the employee.
• Anti-Unfair Competition Law (2025 Revision): Expanded the definition of commercial bribery to include any benefit provided through an intermediary with the intent to obtain a commercial advantage. This expanded definition may affect which transactions are considered within the scope of an internal investigation.
• Criminal Procedure Law: Internal investigation findings are generally not admissible as evidence in Chinese criminal proceedings unless they have been collected in accordance with criminal procedure rules and transferred through proper channels.
• Data Security Law: Cross-border transfer of investigation data, including interview transcripts, audit results, and forensic evidence, is subject to security assessment if the data involves “important data” as defined by sectoral regulations.

Phase 1: Triage and Initial Assessment (Hours 0–48)

The first 48 hours are critical. The initial response sets the tone for the entire investigation and significantly influences the outcome.

1. Secure the evidence (Hour 0–4): Immediately preserve potentially relevant data: email archives, instant messaging history (WeChat Work, DingTalk, enterprise WeChat), financial transaction records, and physical documents. Issue a legal hold notice to all potentially relevant employees and IT administrators. Instruct IT to preserve backups and server logs — do not allow any data deletion, even routine purging.
2. Engage legal counsel (Hour 0–8): Retain Chinese law firm with internal investigation and white-collar defense experience. The law firm should be independent — do not use the same firm that provides the FIE’s general corporate legal services. Privilege protection for legal advice in China operates differently than in common law jurisdictions; the Chinese legal profession’s confidentiality obligations apply.
3. Form the investigation team (Hour 4–12): The investigation team should include: in-house China compliance officer, external Chinese legal counsel, forensic accounting specialist (if financial impropriety is suspected), and a bilingual HR representative for employee interviews. Do not include the subject’s direct manager or anyone with a potential conflict of interest.
4. Define scope and allocation (Hour 8–24): Develop a written investigation charter defining: scope (specific transactions, individuals, time period, business units), investigation methodology (document review, data analysis, witness interviews), expected timeline (target: 30–60 days for straightforward matters), and reporting lines.
5. Implement immediate controls (Hour 12–48): If the investigation reveals active bribery risks, implement interim measures: suspend the subject’s signature authority, block access to financial systems, restrict access to company premises, and reassign oversight of affected third-party relationships. Ensure interim measures comply with labor law — suspension with pay is generally permissible; suspension without pay requires specific contractual provisions.

Phase 2: Document and Data Collection

Document and data collection forms the evidentiary backbone of the investigation. In China, data collection must navigate several legal restrictions:

• Email review protocol: Company-issued email accounts may be reviewed for legitimate business purposes if the company’s IT policy clearly states that there is no expectation of privacy in company systems. An employment contract clause stating this is essential. Personal webmail accessed from company devices generally cannot be reviewed without the employee’s consent.
• WeChat and messaging apps: WeChat is the dominant business communication tool in China and is often the primary source of bribery evidence. Review of WeChat messages on company-issued devices requires a clear IT policy. Review of messages on personal devices requires employee consent or a court order.
• Financial records analysis: Request: general ledger entries for the investigation period, accounts payable detail for the subject’s department, expense reports submitted by the subject and their team, third-party payment records, and journal entries with unusual descriptions or round-dollar amounts.
• Forensic data collection: If forensic collection is needed, engage a Chinese-licensed forensic examiner. Data collected by non-licensed examiners may be ruled inadmissible in Chinese proceedings. Full disk imaging of company-issued computers is permitted under Chinese law with proper IT policy in place.
• Cross-border data transfer restriction: Investigation data must be reviewed and analyzed within China. Exporting raw data for review at headquarters requires: a PIPL security assessment (for important data), standard contractual clauses (for routine personal information), or individual consent from affected employees. The Cyberspace Administration of China (CAC) has increasingly scrutinized cross-border transfer of investigation-related data.

Phase 3: Witness Interviews

Witness interviews in China require culturally and legally sensitive handling. The approach differs markedly from the confrontational, cross-examination-style interviews common in Western investigations.

• Interview structure: Each interview should follow a structured format: opening statement (purpose, confidentiality, non-retaliation), background questions (role, responsibilities, relationships), specific questions about the transactions or conduct under investigation, closing (reminder of confidentiality, opportunity to add information).
• Language considerations: All interviews should be conducted in the employee’s preferred language — usually Mandarin for local employees. An interpreter who is independent of the investigation team should be used if necessary. Interview notes should be prepared in the language of the interview with an English translation for international stakeholders.
• Documentation and record-keeping: Written interview memoranda should be prepared within 24 hours. In China, it is standard practice to ask the interviewee to review and sign the interview notes. A refusal to sign should be noted on the memorandum but does not invalidate the notes as a record.
• Recording restrictions: Audio or video recording of interviews without the interviewee’s explicit consent may violate the PIPL and the Civil Code. If recording is desired, obtain written consent before the interview begins and explain how the recording will be stored and who will have access.

Phase 4: Analysis and Findings

After document review and witness interviews, the investigation team must synthesize findings into a coherent analysis. Key analytical steps include:

1. Factual timeline construction: Create a chronological timeline of events, transactions, communications, and decisions. Identify gaps in the timeline that require further investigation.
2. Red flag pattern analysis: Look for patterns: payments to shell companies owned by government officials’ relatives, recurring entertainment of the same government official at threshold-busting amounts, procurement awards to vendors without competitive bidding, expense reports with vague descriptions like “consulting fees” or “government relations support.”
3. Legal element analysis: Map the factual findings against the legal elements of: commercial bribery (Anti-Unfair Competition Law), bribery of public officials (Criminal Law Article 389), and private sector bribery (Criminal Law Article 164, as amended 2024). For each potential violation, assess: was a benefit provided? Was there corrupt intent? Was a commercial advantage sought or obtained?
4. Root cause analysis: Identify systemic factors that enabled or failed to prevent the conduct: inadequate internal controls, insufficient training, cultural acceptance of gift-giving, pressure to meet sales targets, or ineffective oversight of third-party relationships.

Phase 5: Remediation and Reporting

The final phase of the investigation involves determining appropriate remedial measures and reporting obligations:

• Self-disclosure assessment: Evaluate whether voluntary self-disclosure to Chinese authorities is appropriate. Factors favoring self-disclosure include: evidence of bribery of government officials (mandatory reporting under some industry regulations), exposure to significant regulatory risk if the conduct is discovered independently, and the availability of penalty mitigation under the 2025 Anti-Unfair Competition Law revisions.
• Disciplinary action framework: Under Chinese labor law, termination for misconduct requires: clear evidence of the violation, compliance with the company’s disciplinary policy, and proper notice procedures. Wrongful termination claims are common — in 2024, 42% of termination disputes arising from internal investigations were decided in favor of the employee due to procedural deficiencies in the investigation.
• Internal controls remediation: Based on root cause analysis, implement: enhanced approval thresholds, additional segregation of duties, upgraded third-party due diligence procedures, and targeted training for high-risk departments.
• Board and stakeholder reporting: Prepare an investigation report appropriate for board-level review. The report should include: investigation scope, methodology, key findings, legal analysis, remedial actions taken, and recommendations for systemic improvements. Privilege considerations apply — work with legal counsel to structure the report to maximize protection under applicable legal privileges.
• Regulatory filing obligations: If the investigation confirms a material violation, assess filing obligations with relevant Chinese authorities (Market Supervision Bureau, National Supervision Commission, or local disciplinary inspection commissions) and any home-country regulators (SEC, DOJ, SFO, etc.). Filing obligations may also extend to industry-specific regulators (CSRC for financial services, NMPA for pharmaceuticals, etc.).

Common Pitfalls in China Internal Investigations

• Relying on foreign legal privilege: Attorney-client privilege as understood in common law jurisdictions does not exist in China in the same form. Chinese law protects communications with licensed Chinese lawyers for the purpose of obtaining legal advice, but the scope is narrower. Communications with in-house counsel may not be privileged.
• Over-reliance on documentary evidence: Chinese investigative and judicial authorities place greater weight on witness testimony and documentary evidence in combination. Documentary evidence alone is rarely sufficient for disciplinary action or regulatory submission.
• Cross-border data transfer during investigation: Exporting investigation data to headquarters before completing the PIPL compliance process can trigger separate regulatory exposure. In a 2024 case, an FIE was fined RMB 8 million for unauthorized cross-border transfer of employee WeChat records collected during an internal investigation.
• Failure to preserve evidence in original form: Chinese evidentiary rules place weight on original documents. Translated or summarized evidence may be given reduced weight. Preserve all evidence in its original Chinese-language form.
• Ignoring the cultural dimension: In China, internal investigations are often perceived as a loss of face (mianzi) for the subject and their department. A heavy-handed approach can trigger resistance, collective resignation threats, or union involvement. Be firm on compliance but respectful in execution.

Building Investigative Capability for the Long Term

Rather than treating each investigation as an isolated event, foreign businesses should build sustainable investigative capability. This includes: maintaining a panel of pre-qualified Chinese law firms with internal investigation expertise, developing standard operating procedures for investigation launch and execution, investing in continuous compliance monitoring technology (expense report analytics, third-party screening platforms, transaction monitoring tools), conducting periodic tabletop exercises where the investigation team practices responding to a simulated bribery scenario, and establishing relationships with Chinese forensic accountants, data forensic specialists, and investigative service providers before they are needed. An FIE that has invested in investigative readiness can launch a structured response within hours of identifying a concern, preserving evidence, protecting legal positions, and maximizing the range of available outcomes.

Where to Go From Here

Based on what you just read:

• Ready to act? Read a step-by-step internal investigation implementation toolkit for China operations
• Still comparing? See a comparison of China’s internal investigation requirements vs. US and EU standards
• Need numbers? Try an internal investigation cost estimator for your FIE in China

How to Conduct Internal Bribery Investigations in China: Compliance Guide for Foreign Businesses — first published on China Gateway 360. Last updated: July 2026.