The central task is not only negotiating an SPA. It is identifying which gates must be cleared before signing, closing, registration, operational handover and remittance. This 2026 transaction map separates statutory rules, regulatory gates and practical deal controls.
Related specialist guides
Use this page as the transaction map, then open the specialist rule set.
FDI, security and competition
Data, tax and operations
1. China M&A at a glance
| Question | Typical issue | Primary authority or regulator | When to test |
|---|---|---|---|
| Can a foreign buyer acquire the target? | Negative List and sector restrictions | NDRC, MOFCOM and sector regulator | Before term sheet |
| Could national-security review apply? | Sector, location and actual-control analysis | NDRC/MOFCOM review mechanism | Before signing |
| Is merger notification required? | Concentration, control and turnover | SAMR | Initial structuring |
| Can licences and contracts remain or transfer? | Change-of-control, consent and transferability | Sector regulator and counterparties | Due diligence |
| What happens to employees? | Employer continuity, transfer or rehiring | Employment law and local authorities | Structure and diligence |
| Can target data be disclosed offshore? | Minimisation, lawful basis and outbound transfer | CAC and data laws | Before opening the data room |
| How will price or exit proceeds cross the border? | Tax, banking and foreign-exchange documents | Tax authorities, banks and SAFE framework | Structure stage |
Transaction principle: Trigger - Rule - Authority - Consequence - Action - Timing - Exception. Run each gate separately; there is no single universal “China M&A approval.”
2. Scope and legal framework
Legal authority diagram: what controls a China transaction?
Read from top to bottom. A lower layer implements or allocates risk under the higher layers; it cannot contract out of mandatory law.
A deal may sit under every layer. Corporate approval does not replace competition clearance; Negative List access does not answer national-security review; and registration does not prove that licences, chops, bank access or data permissions have transferred.
The 2024 national Negative List took effect on 1 November 2024 and removed the remaining national foreign-investment access restrictions in manufacturing. Sector licensing and the other gates above still require separate analysis.
3. China M&A regulatory gatekeeper
Decision flowchart: may the transaction proceed to closing?
- Check the Negative List and licences before structure is frozen.
- Foreign-investment security review is a trigger analysis, not a formality.
- SAMR merger control can apply to minority or offshore deals if thresholds and control tests are met.
- Closing waits on the conditions precedent those gates create.
Apply every branch. A “no” answer usually removes only that gate; it does not clear the other regimes.
- Is the buyer or investor foreign? If yes, screen the applicable Negative List. If an activity is listed, determine whether it is prohibited or restricted. If no, continue to competition, sector, data and other generally applicable rules.
- Does the investment concern defence or another specified important sector? If yes or uncertain, test foreign-investment security review and actual control before implementation.
- Is there a concentration? A merger, acquisition of control through equity or assets, or control/decisive influence by contract can qualify. If yes, calculate turnover under the SAMR rules.
- Are notification thresholds met? If yes, notify before implementing the concentration. If no, preserve the analysis: SAMR may require a below-threshold filing where evidence indicates possible exclusion or restriction of competition.
- Is the target regulated or licensed? Identify consent, change-of-control, shareholder qualification and licence implications.
- Will diligence or integration disclose China-origin personal information or important data? Apply minimisation, lawful-processing and outbound-transfer analysis before disclosure.
- Will consideration or exit proceeds cross the border? Build tax, bank and foreign-exchange documents into the timetable.
Statutory trigger matrix
| Gate | Trigger or test | Consequence | Authority |
|---|---|---|---|
| SAMR: worldwide limb | Combined prior-year worldwide turnover exceeds RMB 12 billion and China turnover of at least two parties each exceeds RMB 800 million | Pre-implementation notification | State Council Order No. 773, Art. 3(1) |
| SAMR: China limb | Combined prior-year China turnover exceeds RMB 4 billion and China turnover of at least two parties each exceeds RMB 800 million | Pre-implementation notification | Order No. 773, Art. 3(2) |
| SAMR: below threshold | Evidence of actual or potential exclusion or restriction of competition | SAMR may require notification | Order No. 773, Art. 4 |
| Security review: defence | Investment in defence-related fields or specified surrounding areas | Report before implementation | NDRC/MOFCOM Order No. 37, Art. 4(1) |
| Security review: important sectors | Investment in a listed important field plus acquisition of actual control | Report before implementation | Order No. 37, Art. 4(2) |
| Judicial dissolution | At least 10% voting rights, serious operational difficulty, substantial shareholder loss and no other solution | Eligible shareholder may petition the court | PRC Company Law, Art. 231 |
“Exceeds” is intentional: the 2024 regulation uses a strict greater-than formulation. Special turnover rules apply to banking, insurance, securities, futures and other specified sectors.
Foreign-investment security-review sequence
This is not a guaranteed 105-working-day maximum. Time used to supplement materials is excluded; special review may be extended; and modifying the investment plan restarts the review clock.
4. Choose the transaction structure
- A share deal buys the company with its history.
- An asset deal can cherry-pick assets but usually not licences.
- Employees move under different mechanics in each structure.
- Tax and successor liability follow the structure, not the press release.
| Issue | Share acquisition | Asset acquisition | Statutory merger |
|---|---|---|---|
| Target entity | Typically survives | Typically survives | Depends on absorption or new-merger structure |
| Historic liabilities | Remain in the target | Greater ability to define perimeter, subject to mandatory law | Succession requires detailed analysis |
| Employees | Employer normally remains the target | Transfer or rehiring issues commonly arise | Statutory and transaction-specific analysis |
| Contracts | Usually remain, subject to change-of-control terms | Assignment or novation often required | Structure and contract specific |
| Licences | Stay with entity, subject to regulatory rules | Often cannot simply transfer | Sector specific |
| Assets and land | Remain in company | Individual transfer mechanics apply | Structure dependent |
| Tax focus | Equity-transfer analysis | Potentially broader asset taxes | Restructuring eligibility and administration |
| Typical use | Acquire an operating business | Select assets or a business perimeter | Consolidation or group restructuring |
Deal point: There is no universally “better” route. Model regulatory access, licence continuity, employees, tax, liability perimeter and implementation before selecting one.
5. Practical workflow: perimeter to integration
- Transaction perimeter: identify buyer, seller, target, beneficial ownership, industry, geography and assets.
- Regulatory screening: Negative List, security review, SAMR, sector approvals and data.
- Preliminary structuring: share, asset or merger; onshore and offshore elements; financing and payment.
- Due diligence: corporate, licences, contracts, employment, tax, IP, disputes, real estate, data and compliance.
- Signing architecture: agreement, price, conditions precedent, covenants, risk allocation, termination and long-stop date.
- Filings: sequence or run regulatory filings in parallel where legally and practically appropriate.
- Pre-closing remediation: capital, licence, employee, data, related-party and consent issues.
- Closing: payment, approvals, documents, chops, bank access and physical/system handover.
- Registration and control transfer: registration, directors, legal representative, beneficial-owner information, banks and licences.
- Integration: people, contracts, data access, tax, treasury, controls and licence maintenance.
Indicative transaction sequence
| Phase | Core output | Timing dependency | Do not assume |
|---|---|---|---|
| Pre-term sheet | Gate screen and structure options | Sector and control facts | A foreign buyer can acquire simply because the target is already foreign-invested |
| Pre-signing | DD, data protocol, approvals map and agreement | Information access and red flags | An offshore data room is legally neutral |
| Signing to closing | Clearances, consents and remediation | Regulator and counterparty clocks | A calendar long-stop equals a statutory deadline |
| Closing | Funds and control package | Bank, registration and handover readiness | SPA execution alone transfers operational control |
| Post-closing | Registration and integration | Licence and system changes | All risks end when consideration is paid |
6. China M&A due-diligence matrix
| Workstream | Key question | Red-flag example |
|---|---|---|
| Corporate | Ownership, capital, authority and registrations | Unpaid or defective capital |
| Licences | Validity, transferability and change of control | Core licence depends on current shareholder |
| Contracts | Assignment, control-change and termination | Major customer can terminate |
| Employment | Contracts, social insurance, dispatch and disputes | Material historic contribution exposure |
| Tax | CIT, VAT, withholding and restructuring | Unresolved assessment or filing position |
| IP | Ownership, licences and employee creation | Founder owns core IP personally |
| Real estate | Title, lease and permitted use | Operations at non-compliant premises |
| Litigation | Claims, enforcement and preservation | Undisclosed enforcement measure |
| Data | PIPL basis, important data and outbound transfer | Unminimised personal data in offshore room |
| Compliance | Anti-bribery, sanctions, export and sector controls | Undocumented or unusual payments |
| Chops and control | Custody, authority, bank tokens and systems | Seller-controlled company chop |
| Related parties | Loans, guarantees and transfers | Undocumented affiliate guarantee |
Data-room decision tree
- Employee and customer personal information needs a PIPL route.
- Possible important data should not be dumped into a foreign VDR.
- Redaction and subsets are often the workable path.
- An onshore room is the fallback when outbound transfer is not available.
- Will China-origin data enter the room? If no, document that result. If yes, classify it before uploading.
- Does it contain personal information? If yes, minimise, redact or anonymise first where feasible, then establish the lawful processing/disclosure basis and safeguards.
- Is important data involved? Check applicable identification or notification. Do not label all commercial data “important data” by default.
- Will the server or reviewer be outside China? If yes, assess the applicable outbound-transfer route and exemptions before access.
- Will access expand after closing? Re-test permissions, purpose, minimisation and access controls during integration.
Law: The CAC’s 2024 cross-border data rules address security assessment, standard contracts and certification. They also state that data not identified or notified as important data need not be treated as important data for outbound security-assessment purposes.
7. Annotated China acquisition agreement structure
| Section | What it must settle | China implementation question |
|---|---|---|
| 1. Parties and ownership | Legal and beneficial owners; authority | Do registry and diligence records align? |
| 2. Transaction perimeter | Shares, assets, entities, branches, IP and licences | What cannot transfer automatically? |
| 3. Price and adjustment | Fixed price, accounts or locked-box mechanics | How will payment, tax and FX evidence align? |
| 4. Conditions precedent | Competition, security, sector and third-party approvals | Who bears clearance risk and on what efforts standard? |
| 5. Pre-closing covenants | Operating restrictions and information | Do covenants create premature control risk? |
| 6. Warranties | Capital, tax, labour, IP, compliance, data and disputes | Are disclosures specific and locally verifiable? |
| 7. Indemnities | Known diligence risks | Is recovery practical and secured? |
| 8. Closing mechanics | Payment, documents, chops, bank access and handover | What proves operational control? |
| 9. Termination and long-stop | Failure of conditions and regulatory delay | Do excluded or restartable review periods affect the date? |
| 10. Disputes | Law, forum, interim relief and enforcement | Where are assets and evidence located? |
“Control transfer” is not synonymous with signing the SPA. Registration, board and legal-representative changes, chop possession, bank authority, licences and systems access can each have separate operational significance.
8. Governance after acquisition and JV control
| Control layer | Minimum design question | Failure mode |
|---|---|---|
| Capital | What is due, when and from whom? | Acceleration, liability or transaction obstacle |
| Board and shareholder powers | Which matters require approval or veto? | Unworkable reserved-matter threshold |
| Legal representative | Who may serve and how are acts supervised? | Uncontrolled representative or delayed change |
| Chops and bank access | Who holds each item and what dual controls apply? | Payment or document hostage risk |
| Information rights | What reporting, audit and systems access exists? | Investor cannot see cash or compliance |
| Deadlock and exit | Escalation, mediation, put/call, sale or dissolution? | Perpetual deadlock with no executable route |
Use the five-year capital guide, legal-representative guide, chop guide and JV deadlock guide for the detailed rules and controls.
9. Seller preparation and restructuring
- Reconcile the cap table, registered capital, beneficial ownership and historic corporate approvals.
- Build a licence and change-of-control schedule before marketing the target.
- Clean the data room: remove duplicates, minimise personal data and separate privileged or restricted material.
- Quantify tax, employment, related-party, guarantee and capital exposures.
- Map consideration, withholding, bank evidence and remittance.
- Prepare a disclosure process and a closing control-handover plan.
STA Announcement No. 13 of 2026 updated administration of enterprise-restructuring income-tax treatment. Among its rules, it addresses qualifying merger or division scenarios where resident-enterprise shareholders representing an aggregate holding above 50% reach the required agreement. Eligibility for special tax treatment must be tested separately from corporate-law validity.
10. Exit-route decision tree
- A share sale still needs buyer, approvals and any security or merger analysis.
- Buy-back or capital reduction follows Company Law capital rules.
- Liquidation is a statutory sequence with creditor notice.
- Deregistration waits on tax and, where relevant, customs clearance.
- Is there a buyer for the equity? If yes, evaluate a share sale, including access, security, competition, tax and remittance gates.
- If not, does the business or selected assets have standalone value? If yes, test an asset/business sale, including licences, employees, contracts and asset taxes.
- If not, is the company solvent and able to wind down? If yes, consider voluntary dissolution, liquidation and deregistration.
- If the company cannot pay due debts and lacks sufficient assets or payment capacity: obtain insolvency advice rather than using ordinary liquidation as a substitute.
- Is the problem JV deadlock? Test contractual escalation, put/call or buyout mechanisms, negotiated transfer and statutory remedies. A qualifying 10%-plus voting shareholder may seek judicial dissolution only where the Company Law test is met.
Exit route comparison
| Route | Best fit | Main workstreams | Key limitation |
|---|---|---|---|
| Share sale | Viable business and buyer | Buyer gates, DD, tax, closing and remittance | Buyer inherits target risk |
| Asset/business sale | Selected operations have value | Transfers, consents, employees, licences and tax | Many items may need individual implementation |
| Merger or division | Group reorganisation | Corporate procedure, creditors, tax and registration | Statutory and tax conditions differ |
| Voluntary liquidation | Solvent orderly wind-down | Employees, creditors, tax, assets and deregistration | Not an insolvency shortcut |
| Bankruptcy route | Insolvent enterprise | Court-led bankruptcy analysis | Control and distributions follow insolvency law |
Company liquidation statutory sequence
Then inventory assets and liabilities, settle employees and social insurance, taxes and debts, prepare the liquidation report, distribute any lawful surplus, complete company deregistration, and close tax, bank, customs and other registrations as applicable.
The six-authority Enterprise Deregistration Guidelines (2025 Revision) describe the ordinary sequence as dissolution decision, liquidation/distribution and deregistration. SAMR’s compulsory deregistration measures, effective 10 October 2025, address companies whose licences were revoked or that were ordered closed or revoked and that then fail to seek deregistration for three years, subject to statutory conditions and exceptions. Compulsory deregistration is not a clean substitute for settling liabilities.
11. Transaction risk matrix
| Issue | Likelihood pattern | Potential impact | Test by |
|---|---|---|---|
| Foreign-investment restriction | Deal specific | Very high | Before term sheet |
| National-security review | Sector and control specific | Very high | Before signing |
| Merger control | Control and turnover dependent | Very high | Initial structuring |
| Licence/change of control | Sector specific | Very high | Due diligence |
| Unpaid capital | Target specific | High | Due diligence |
| Tax exposure | Common diligence issue | High | Due diligence |
| Employment liabilities | Common | Medium to high | Due diligence |
| Data transfer | Data-heavy deals | High | Before data room |
| Chop, legal rep and bank handover | Common implementation issue | High | Agreement and closing |
| FX/remittance | Cross-border deals | Medium to high | Structure stage |
Likelihood and impact labels are CLP editorial assessments, not statutory classifications.
12. Common mistakes
- Selecting share or asset structure before regulatory screening.
- Treating the Negative List as the only foreign-investment test.
- Testing SAMR thresholds too late, or assuming minority percentage means no control.
- Assuming below-threshold means no competition review risk.
- Uploading employee or customer data to an offshore room without data analysis.
- Assuming business licences automatically follow assets.
- Ignoring unpaid subscribed capital in diligence and price allocation.
- Treating SPA completion as equivalent to operational control.
- Leaving chops, bank tokens and legal-representative handover until after closing.
- Starting liquidation only after employees, landlords, tax authorities or creditors become contentious.
13. Action checklist
Before signing
- Identify the ultimate buyer, beneficial ownership and control rights.
- Confirm target business scope, activities and licences.
- Screen the Negative List, security review, merger control and sector approvals.
- Compare share, asset and merger structures.
- Set the diligence and data-room protocol before uploading information.
- Model tax, consideration and cross-border payment flows.
- Identify corporate and third-party approvals.
Before closing
- Obtain required clearances and consents; satisfy or waive conditions lawfully.
- Complete agreed capital, employee, data and related-party remediation.
- Confirm payment, withholding, banking and FX documents.
- Prepare registration, director and legal-representative changes.
- Inventory every chop, bank token, licence, record, password and system right.
- Use a signed handover record and escalation path for missing control items.
After closing
- Complete registration, beneficial-owner and licence updates.
- Change bank mandates, secure chops and remove former access.
- Integrate employees, contracts, accounting, tax and treasury.
- Re-test data permissions, outbound transfers and system access.
- Resolve legacy guarantees and related-party balances.
- Track post-closing covenants, claims and regulatory conditions.
14. When to instruct counsel
Seek transaction-specific PRC advice early where a foreign buyer, sensitive or licensed sector, possible control change, material turnover, China-origin personal/important data, unpaid capital, employee transfer, JV deadlock, cross-border remittance or insolvency issue is present. Specialist competition, tax, data and sector counsel may need to work alongside corporate counsel.
Find M&A lawyers or use Ask a Lawyer for triage.
15. Frequently asked questions
16. Primary authorities and source cards
Merger-control thresholds
Instrument: State Council Regulation on Notification Thresholds for Concentrations of Undertakings, Order No. 773.
Provisions: Arts. 2-4.
Rule covered: concentration, RMB 12bn/RMB 4bn/RMB 800m thresholds and below-threshold power.
Official SAMR text
Foreign-investment security review
Instrument: NDRC/MOFCOM Order No. 37.
Provisions: Arts. 2, 4 and 7-11.
Rule covered: transaction scope, advance reporting and 15/30/60-working-day stages.
Official NDRC text
Company governance and liquidation
Instrument: PRC Company Law (2023 revision, effective 1 July 2024).
Provisions: Arts. 231-239 for dissolution and liquidation; Art. 232 for liquidation obligors and the 15-day rule.
Official NPC text
Enterprise deregistration
Instrument: Enterprise Deregistration Guidelines (2025 Revision), SAMR Announcement No. 52 of 2025.
Rule covered: dissolution, liquidation/distribution, creditor notices and deregistration workflow.
Official SAMR text
Compulsory deregistration
Instrument: Measures for Implementing Compulsory Deregistration of Company Registration.
Effective: 10 October 2025.
Rule covered: statutory trigger, procedure and exceptions.
Official SAMR text
Cross-border data
Instrument: Provisions on Promoting and Regulating Cross-Border Data Flows.
Issued: 22 March 2024.
Rule covered: outbound mechanisms, exemptions and important-data treatment.
Official CAC text
2026 restructuring tax
Instrument: STA Announcement No. 13 of 2026.
Rule covered: administration of enterprise-restructuring income-tax treatment.
Official tax authority text
2024 national Negative List
Instrument: Special Administrative Measures for Foreign Investment Access (Negative List) (2024 Edition).
Effective: 1 November 2024.
Official NDRC release
Evidence key: “Law” identifies a black-letter proposition; “regulatory practice” should be supported by official guidance or decisions; “deal point,” “red flag” and “CLP practitioner note” identify implementation judgments rather than statutory classifications.
City guides and M&A counsel
Coordinate national gates with local registration, sector and operational work:
Editorial status: Substantively updated 11 August 2026 by China Legal Portal Editorial. Primary-source links were checked for this revision. No named external legal reviewer is claimed. This guide is general information, not advice on a specific transaction.
