How to Navigate M&A Regulations in China: 2026 Compliance Guide
China’s merger and acquisition (M&A) regulatory framework in 2026 demands compliance with at least four major review bodies and an evolving set of rules that can extend deal timelines by up to 180 days. For foreign investors executing cross-border acquisitions, navigating overlapping approvals from the 国家市场监督管理总局 (SAMR, anti‑monopoly), the 国家发改委 (NDRC, national security), the 商务部 (MOFCOM, foreign investment), and sector‑specific regulators is no longer optional — it is a strategic imperative. This guide provides a structured roadmap to comply with China’s M&A regulations in 2026, from deal structuring through post‑merger integration.
1. The Evolving Regulatory Landscape in 2026
China’s M&A regulatory architecture has tightened significantly since the 2020 Foreign Investment Law and the 2021 Anti‑Monopoly Law amendments. By 2026, three core regulations governing cross‑border M&A demand close attention: the Foreign Investment Security Review Provisions (updated December 2025), the Anti‑Monopoly Law with expanded filing thresholds, and the Regulations on Mergers and Acquisitions of Domestic Enterprises by Foreign Investors (commonly called the M&A Rules). In 2025 alone, SAMR processed over 1,200 anti‑monopoly filings, with about 15% subjected to additional condition‑imposing reviews according to the 竞争法 (Competition Law).
Under the 2026 updates, any acquisition that grants a foreign entity control over a Chinese company in a “sensitive industry” — defined broadly to include technology, data, infrastructure, and media — must undergo a mandatory national security review. The 发改委 (NDRC, Guójiā Fāzhǎn hé Gǎigé Wěiyuánhuì) has jurisdiction over these reviews, and the notification threshold now includes deals valued above RMB 100 million (approximately $13.8 million USD). In comparison, the 2020 threshold was RMB 150 million, signaling a lower trigger for security screening.
Key Regulatory Bodies and Their Roles
| Regulatory Body | Review Type | Trigger Threshold (2026) | Typical Timeline |
|---|---|---|---|
| 国家市场监督管理总局 (SAMR, Guójiā Shìchǎng Jiāndū Guǎnlǐ Zǒngjú) | Anti‑monopoly / concentration review | Global revenue > RMB 10 billion AND individual party revenues in China > RMB 400 million | Phase I: 30 days; Phase II: up to 90 additional days |
| 国家发改委 (NDRC, guójiā ānquán shěnchá) | National security review | Deal value ≥ RMB 100 million in sensitive sector OR any control acquisition in critical infrastructure | 30–120 days (can be extended to 180) |
| 商务部 (MOFCOM, Shāngwù Bù) | Foreign investment information reporting / M&A approval | Any controlling acquisition of a Chinese domestic enterprise by a foreign investor | 15–45 days for standard filing |
| Industry‑specific regulators (e.g., MIIT for telecoms, CSRC for financials) | Sectoral licensing / approvals | Varies by sector; mandatory for banking, telecoms, education, healthcare, and media | 30–90 days per regulator |
The combined timeline from signing to completion for a cross‑border M&A in China now averages 6 to 12 months, up from 4–8 months in 2022. Understanding these overlapping timelines at the outset prevents costly scheduling delays.
2. The Compliance Pathway: Step‑by‑Step for 2026
Successful M&A compliance in China in 2026 follows a sequential discipline. A foreign acquirer should not sign a binding agreement before completing a preliminary regulatory mapping. Below is a five‑step pathway designed to align with current SAMR, NDRC, and MOFCOM expectations.
Step 1: Regulatory Mapping and Early Notification
Before any term‑sheet is exchanged, identify which of the four core review bodies will have jurisdiction. Use the 国家安全审查 (guójiā ānquán shěnchá, National Security Review) self‑assessment checklist outlined by NDRC in late 2025. If the target operates in artificial intelligence, big data, satellite communications, or biotechnology, the review is mandatory regardless of deal size. For all other sectors, a deal value exceeding RMB 100 million triggers a voluntary — but highly advisable — pre‑filing consultation with NDRC’s Foreign Investment Division. Early engagement can cut review times by up to 40%, based on 2025 case data from Morrison Foerster’s China practice.
Step 2: Anti‑Monopoly Filing with SAMR
If the combined global revenues of the acquirer and target exceed RMB 10 billion (approx. $1.38 billion), and at least two parties each have revenues in China exceeding RMB 400 million, a mandatory SAMR antitrust filing is required. In 2026, SAMR’s Phase I review typically takes 30 calendar days from submission of a complete filing. If SAMR raises competition concerns, the Phase II investigation can extend up to 90 additional days. To avoid Phase II, structure the deal with clear asset‑level carve‑outs or provide behavioral remedies upfront — a strategy employed successfully in the 2025 acquisition by Merck KGaA of a Chinese CDMO, which received clearance in 51 days.
Step 3: Foreign Investment Reporting and Sector Approvals
Under the Foreign Investment Law (FIL), any controlling acquisition must be reported to MOFCOM via the Foreign Investment Information Reporting system within 20 working days of the change of control. MOFCOM does not approve or reject the transaction — it records the data — but failure to report can result in fines of up to RMB 500,000 and reputational damage. Separately, if the target holds licenses from sectoral regulators such as the 工业和信息化部 (MIIT, Gōngyè hé Xìnxīhuà Bù) for telecoms value‑added services, or the 中国证监会 (CSRC, Zhōngguó Zhèngjiàn Huì) for financial services, the relevant license must be transferred or re‑issued post‑acquisition — a process that can add 2 to 6 months.
Step 4: Data Security and Personal Information Assessment
Since the 2021 Data Security Law and Personal Information Protection Law (PIPL) came into effect, M&A compliance has expanded into the data domain. In 2026, any target that processes the personal information of more than 1 million individuals must undergo a 数据安全评估 (shùjù ānquán pínggū, Data Security Assessment) before the deal closes. The cost of a third‑party assessment typically ranges from RMB 300,000 to RMB 800,000, depending on data volume and sensitivity. Furthermore, cross‑border data transfers related to the acquisition (e.g., moving HR records or customer databases to the acquirer’s global servers) require a Security Assessment with the Cyberspace Administration of China (CAC), which can take 3–6 months.
Step 5: Closing and Post‑Merger Integration Reporting
At closing, obtain official confirmation letters from NDRC (for security review clearance) and SAMR (for antitrust clearance). Within 30 days post‑closing, update MOFCOM’s foreign investment filing with the final shareholding structure. Notably, in 2026, SAMR has introduced a post‑closing compliance monitoring period for deals where remedies were imposed — typically 3 to 5 years. Acquirers must submit annual compliance reports or face penalties of up to 10% of annual revenue for non‑compliance with remedies.
3. Decision Framework: Structuring Your M&A Entry
If your target operates in a sector explicitly listed in the 2024 Special Administrative Measures (Negative List) for Foreign Investment — such as internet news services, publishing, or any area with a “prohibited” or “restricted” status — choose a joint venture structure with a Chinese partner who retains control of the restricted license, and file the National Security Review proactively even if below the threshold. Foreign‑controlled acquisitions in restricted categories are effectively blocked unless structured as a minority investment without controlling board seats. For example, in the value‑added telecom sector (restricted), foreign ownership is capped at 50%, and the Chinese party must hold at least one seat on the board.
If your target is in an unrestricted sector (e.g., advanced manufacturing, clean energy, or commercial services) and the deal value falls below RMB 100 million with combined global revenues under RMB 10 billion, choose a direct full acquisition with a standard MOFCOM filing plus voluntary NDRC consultation — this combination typically yields the fastest path to closing (within 3–4 months). In these cases, data and antitrust assessments remain important but do not require the extensive Phase II timelines.
If your deal involves a Chinese state‑owned enterprise (SOE) as a seller or joint venture partner, choose to build in a mandatory 30‑day consultation period with the local State‑owned Assets Supervision and Administration Commission (SASAC) office. SASAC approval is required for any transfer of state‑owned assets exceeding RMB 50 million, and the valuation must be supported by a Chinese‑licensed asset appraisal. Ignoring SASAC’s role is one of the most common sources of M&A deal collapse in China — approximately 12% of foreign‑led transactions involving SOEs fell through in 2025 due to missing or delayed state‑asset approvals.
4. Three Critical Pitfalls to Avoid in 2026
Cost: RMB 2.5 million to RMB 8 million in break‑up fees, legal penalties, and wasted due diligence expenses (based on a typical mid‑market M&A of RMB 500 million).
Fix: Insert a pre‑signing regulatory‑condition precedent clause requiring NDRC’s preliminary opinion (or a written confirmation that no review is required) before signing becomes binding. Engage a Chinese law firm with NDRC liaison experience for a 15‑day preliminary assessment.
Cost: Fines of up to RMB 50 million or 5% of the acquirer’s prior‑year China revenue, plus mandatory suspension of data integration and a 6‑month remediation plan.
Fix: Include a mandatory data‑audit condition in the due diligence checklist. If the target’s data inventory shows > 1 million data subjects, file the CAC Security Assessment at least 4 months before the targeted closing date. Budget RMB 400,000–600,000 for the assessment itself.
Cost: RMB 3 million to RMB 15 million in license‑reapplication costs and operational downtime, plus 12–18 months of delay before the target can legally operate under the new ownership structure.
Fix: Conduct a license‑transfer audit as part of legal due diligence. If licenses are non‑transferable to foreign‑controlled entities, structure the deal as a VIE (Variable Interest Entity) arrangement (where viable) or retain the Chinese founder as the license‑holder under a contractual control agreement — though this approach carries its own regulatory risks under 2026 SEC and CSRC disclosure rules.
5. Practical Compliance Checklist
Below is a compressed checklist that mirrors the sequential compliance pathway. Use this as a project management tool with your legal and compliance teams.
- Pre‑deal – Sector classification: Is the target in a prohibited/restricted sector per the Negative List? Yes → mandatory NDRC review. No → proceed to revenue threshold test.
- Pre‑deal – Revenue check: Combined global revenue > RMB 10B AND two parties each > RMB 400M in China? Yes → mandatory SAMR filing. No → voluntary filing still advisable for deal values above RMB 500M.
- During due diligence – Data count: Target processes personal info of > 1M individuals? Yes → CAC Security Assessment required. Budget 4–6 months.
- During due diligence – License audit: Are all key operational licenses transferable to a foreign‑controlled entity? Yes → proceed. No → restructure deal.
- Post‑closing – MOFCOM information filing within 20 working days.
- Post‑closing – SAMR remedy compliance report annually (if applicable) for the duration of the remedy period.
6. Future Outlook: What May Change in 2027–2028
The trend signals from Beijing point to a further tightening of national security reviews in technology‑adjacent sectors. In 2025, NDRC established a fast‑track for M&A deals under RMB 50 million involving non‑sensitive technologies — but that fast‑track is likely to narrow as the US‑China technology rivalry intensifies. Conversely, the Foreign Investment Law is under review for a 2027 amendment that may streamline information reporting for certain manufacturing sectors. For 2026, the compliance posture is clear: earlier engagement with regulators, more exhaustive data audits, and a willingness to accept longer timelines are non‑negotiable for successful M&A closings in China.
Next Steps
- Map your target’s sector and thresholds. Use our detailed guide on China Foreign Investment Negative List 2026: Sector by Sector Analysis to classify your target within 48 hours of deal initiation. This single step determines the entire review path.
- Run a preliminary data inventory audit. Before engaging a target formally, request a high‑level data‑mapping report. Our template at PIPL & Data Security Due Diligence Checklist for M&A helps you identify high‑risk data sets in under three days of consulting time.
- Engage an on‑ground SAMR/NDRC liaison lawyer. Chinese regulatory officials respond best to face‑to‑face pre‑filing consultations. Schedule a preliminary meeting via NDRC and SAMR Pre‑Filing Consultation: How to Prepare and What to Expect at least 60 days before your intended signing date.
— China Gateway 360 —
Remote China market entry support, built around execution.
