Summary: July 2026 brought major operational changes for foreign companies entering China: a nationwide one-stop online WFOE registration system (BizChina One), an expanded R Visa program for entrepreneurs and digital nomads, and stricter cybersecurity certification requirements (MLPS 2.0 Level 3) for digital-platform firms — lowering entry barriers while raising compliance floors.
The Good: BizChina One Portal
On July 1, the State Administration for Market Regulation launched BizChina One, a unified nationwide online system for WFOE registration. The changes are structural: paperless submission for all standard WFOE types (consulting, trading, manufacturing, technology); automatic pre-approval of company name, business scope, and articles of association within one working day when using standard templates; and integration with tax registration, producing a single Business + Tax Registration Certificate instead of the previous two separate processes. Capital verification at registration is eliminated — companies now declare capital within five years.
What this means in practice: The standard WFOE setup timeline drops from approximately 30 days and 15 steps to roughly 10 days and 5 steps. Hardcopy notarization is no longer required for most cases. This is the most significant procedural reform since China’s 2020 Company Law revision and directly addresses a longstanding foreign investor complaint about registration friction.
The Expanded: R Visa Program
The National Immigration Administration’s July 12 circular expanded Foreign Talent (R) Visa eligibility to include foreign founders of startups incorporated in China for less than three years with a minimum investment of $500,000, and foreign “digital nomads” employed by overseas companies but living in China (maximum 12-month stay, renewable). R Visa holders with three consecutive years of residency can now apply for Permanent Residence without the standard four-year physical presence requirement. Spouses receive automatic work authorization.
Additionally, MOHRSS Decree No. 45 (effective August 1) exempts foreign employees holding Permanent Residence from mandatory pension and unemployment insurance contributions, while maintaining medical and work injury insurance requirements. This reduces the cost of employing long-term expatriates by roughly 15–20% on the employer contribution side.
The Challenging: MLPS 2.0 Level 3 Compliance
The Ministry of Public Security’s July 5 guidelines clarify that all WFOEs operating digital platforms — including e-commerce, SaaS, online education, and fintech — must achieve Level 3 Multi-Level Protection Scheme certification by December 31, 2026 (new companies must comply before launch). Requirements include on-premises servers or China-hosted cloud with physical security inspection, SM2/SM4 encryption, and a dedicated cybersecurity officer (full-time for companies with over 100 employees).
Certification costs are estimated at $20,000–$50,000 upfront plus annual maintenance. While this adds significant cost, it provides something the market has lacked: legal clarity. Companies that invest now will have a clear compliance path rather than the operational ambiguity that has characterized China’s cybersecurity enforcement since 2021.
New Incentive: CCPIT Compliance Certification for SMEs
The China Council for the Promotion of International Trade launched a voluntary compliance certification for foreign-invested SMEs (fewer than 200 employees or revenue under CNY 50 million). Certified companies receive priority access to government procurement, reduced inspection frequency (every three years instead of annually), and eligibility for Innovation Vouchers worth up to CNY 100,000 for legal and compliance consultancy. Application fee: CNY 5,000.
Comment: A Net Positive, but the Bar Rises
The July reforms are net positive for foreign market entrants. BizChina One reduces the single biggest friction point for first-time investors. The R Visa expansion opens talent channels that were previously limited to large multinationals. The social insurance exemption for Permanent Residence holders makes long-term expatriate assignments more cost-effective.
However, the MLPS 2.0 Level 3 requirement is a significant cost increase for any digital-platform business — and most modern WFOEs have some digital component. A consulting firm with a client portal, a trading company with an ERP system, or a manufacturer with IoT-connected equipment may all fall under the requirement. The six-month compliance window (through December 31) is tight; companies should start the certification process now, not in November.
Practical recommendation: combine the CCPIT SME certification with MLPS 2.0 compliance in a single compliance project. The application costs are modest, and the reduced inspection frequency alone justifies the investment for any company planning a multi-year China presence.
