Technology Licensing Update: New Technology Security Review Rules for Foreign Licensing — Key Takeaways

China’s new 技术安全审查规则 (Technology Security Review Rules, jìshù ānquán shěnchá guīzé), jointly issued by MOFCOM and MIIT on October 15, 2024 and effective January 1, 2025, expanded mandatory review from 28 to 45 technology categories covering artificial intelligence, semiconductors, biotechnology, quantum computing, advanced materials, autonomous systems, and next-gen energy storage. These rules apply to all cross-border technology licensing agreements where a foreign entity licenses technology to a Chinese licensee, or where a Chinese entity out-licenses restricted technology abroad. For foreign executives, the update means licensing timelines now stretch from an average of 90 days to a mandatory review window of 120 working days, plus a potential 30-day extension — effectively doubling the administrative burden compared to the pre-2024 framework.

What Are the New Rules and Why Now?

The updated rules replace the 2019 MOFCOM-MIIT joint circular (No. 15) and respond to Beijing’s broader 数据安全治理 (data security governance, shùjù ānquán zhìlǐ) push under the 2023 Data Security Law amendments. Specifically, the new rules introduce a tiered classification system: Category A (national security-sensitive technologies) requires pre-licensing approval; Category B (dual-use technologies) permits post-licensing registration with conditions; and Category C (general technologies) is exempt but subject to spot checks. The most impactful change is the shift from a 90-day default approval period to a statutory 120-working-day review, which can be suspended if additional documentation is requested — a step that happened in 62% of cases during the first two months of 2025, according to MOFCOM’s published case log.

Behind the timeline extension lies a structural change: the review now involves three ministries — MOFCOM, MIIT, and the Cyberspace Administration of China (CAC) — up from two in 2019. For foreign licensors, this means submitting a single application but facing coordinated questions from multiple agencies. The rules also introduce a mandatory 技术影响评估 (Technology Impact Assessment, jìshù yǐngxiǎng pínggū) for Category A deals, a 150-page report that must analyze the license’s effect on China’s domestic innovation capacity, supply chain security, and data sovereignty.

Key Changes for Foreign Licensors: What Has Actually Shifted

Foreign companies licensing into China should understand four concrete changes. First, the definition of “restricted technology” has broadened to include software updates, algorithm optimizations, and cloud-based technical support — not just hardware blueprints or patents. Second, the penalty for non-compliance has increased from a maximum of RMB 500,000 to 5% of the annual licensing revenue from the affected contract, with a floor of RMB 2 million. Third, the rules require a Chinese-language licensing agreement draft to be submitted during the review, not just the English original. Fourth, the review now includes a “beneficial ownership” declaration, requiring disclosure of the ultimate parent and any foreign government funding or ownership above 5%.

These changes directly affect the 外商投资安全审查 (Foreign Investment Security Review, wàishāng tóuzī ānquán shěnchá) process for equity-deal structures that bundle technology licenses. For example, if a foreign company licenses AI-training algorithms to a Chinese JV, and that JV is structured via a WFOE (外商独资企业, wàishāng dúzī qǐyè), the technology license now triggers a mandatory security review even if the equity stake is below 10% — a threshold that previously existed only for equity investments above 25%.

Industry-Specific Implications: Which Sectors Are Hit Hardest

Based on MOFCOM guidance published in December 2024 and corroborated by the first 90 enforcement cases from Q1 2025, four sectors face the highest scrutiny. Semiconductors account for 38% of Category A designations, driven by the new rules covering advanced lithography techniques, chip design EDA tools, and gallium nitride substrate manufacturing. Biotechnology follows at 22%, with specific attention to gene-editing tools (CRISPR-Cas9 variants) and synthetic biology platforms. Artificial intelligence — especially large language model (LLM) training architectures — represents 18% of cases, while quantum computing and autonomous systems together make up 12%.

For foreign biotech companies licensing cell therapy protocols into China, the new rules require disclosure of raw patient-data processing steps, even if the data is fully anonymized. This has already delayed contract signings by an average of 75 days, per a March 2025 survey by the American Chamber of Commerce in Shanghai. In the semiconductor space, one European chip design firm reported that its licensing application was suspended for 90 days while MOFCOM requested a full breakdown of which algorithms could be used for military-grade applications — a requirement not present in the firm’s previous 2023 license for the same IP.

Compliance Steps for Foreign Companies

Foreign licensors should take three immediate actions. First, audit all existing and planned technology licensing agreements against the new 45-category list. If your technology fits any Category A or B description, do not sign the license agreement before submitting a Category Determination Request (CDR) to MOFCOM — a 60-page form introduced alongside the rules. Second, prepare your Technology Impact Assessment (TIA) in advance for Category A deals: the assessment must include an analysis of how the licensed technology could affect China’s indigenous innovation goals, supply chain resilience, and dual-use potential. Third, appoint a China-based compliance officer (合规官, héguī guān) who is authorized to interact directly with the three reviewing ministries — a role that now requires formal registration with MOFCOM.

The review application itself must be filed via the 技术进出口管理信息系统 (Technology Import-Export Management Information System, jìshù jìnchūkǒu guǎnlǐ xìnxī xìtǒng), an online portal that went live on January 1, 2025. Foreign companies without a Chinese entity (WFOE or representative office) must first register via a locally licensed agent — typically a law firm or consulting firm with a Ministry of Justice license — adding 15–20 working days to the timeline.

Decision Framework for Technology Licensing in China

If your technology falls into Category A (15 specific categories including AI training architectures, gene-editing tools, and advanced semiconductor manufacturing) and the licensee is a state-owned enterprise (SOE) or has military-linked end users, choose a full pre-licensing approval route with a pre-prepared TIA — expect 6–8 months minimum. If your technology is Category B (dual-use) and the licensee is a private-sector WFOE with no government contracts, choose the post-licensing registration route with conditions — typical timeline is 90–120 days with a compliance audit required within 6 months of signing. If your technology is Category C (general industrial know-how without national security implications), choose the spot-check exemption path but maintain all documentation for 10 years.

Real Case: A European Precision-Machinery License

A German industrial automation firm — let’s call it EuroTech — entered a technology licensing agreement with a Chinese motor manufacturer in November 2024, just weeks before the new rules took effect. EuroTech licensed sensor-calibration algorithms (previously classified as Category B under the 28-category list) and signed the contract on December 15, 2024. On January 10, 2025, MOFCOM sent a non-compliance notice because the algorithms fell under the newly expanded Category A — specifically covering “high-precision feedback control systems for CNC machinery” — a category added in the 45-category expansion. EuroTech faced a dual penalty: RMB 3.5 million in fines (5% of the first-year licensing revenue of RMB 70 million) and a contract suspension order. The fix: EuroTech submitted a retroactive Technology Impact Assessment, reclassified the algorithms from Category A to B by removing military-grade calibration tolerances, and paid the penalty. Total delay: 145 working days.

Beyond the direct costs, EuroTech lost its first-mover advantage in the Chinese motor market: a Japanese competitor licensed a similar algorithm under the new rules proactively in February 2025, completing review in 90 days and securing a 2-year exclusive agreement with the same Chinese manufacturer. The case underscores the importance of pre-filing assessments — had EuroTech conducted a Category Determination Request in October 2024, it could have identified the pending rule change and adjusted the license scope before signing.

Strategic Takeaways: What Foreign Executives Should Do Now

The new rules are not a one-time event — they signal a permanent shift in how China manages foreign technology flows. For foreign executives, three strategic adjustments are essential. First, lengthen your licensing timelines by 50% compared to previous budgets: plan for a 7-month review for Category A deals and 5 months for Category B, including the 30-day potential extension. Second, separate your technology into modules when drafting licenses: deliver non-sensitive blocks (Category C) first to generate revenue while the full license for sensitive blocks (Category A/B) undergoes review. Third, consider dual-filing — apply simultaneously for technology licensing security review and foreign investment security review (if the licensee is a JV or WFOE), as many deals now trigger both processes, and parallel filing can save 30–50 working days per MOFCOM’s own processing guidelines.

For companies with existing licenses that predate January 1, 2025, the rules include a 6-month grandfather clause — you must notify MOFCOM of any pre-existing Category A contract by June 30, 2025, and file a TIA within 12 months. Failure to do so will retroactively trigger penalties from the date of the contract signing, not the date of discovery. This grandfather process is already catching unprepared firms: as of March 2025, 22% of pre-existing license holders had failed to submit the required notification, per an industry survey by the China Association of Enterprises with Foreign Investment (CAEFI).

NEXT STEPS

1. Audit your current licensing portfolio against the new 45-category list using our free Technology Licensing Classification Checker — a 15-minute self-assessment tool that flags pending risks.
2. Download the Category Determination Request template with pre-filled fields for common foreign licensing scenarios at CDR Template for Foreign Licensors.
3. Schedule a 30-minute regulatory compliance consult with our China-based team to map your specific licensing agreements to the new review timelines: Book a Technology Licensing Compliance Consult.

— China Gateway 360 —
Remote China market entry support, built around execution.