Direct answer

A foreign investment in a data-heavy platform should be screened across foreign-investment access, national security review, cybersecurity/data rules and sector licensing at the s…

The amount and type of data, the platform’s function, control rights and cross-border data architecture can matter as much as the equity percentage.

The classification screen

5 questions before you choose the route.

This page identifies the right question and evidence. It does not determine the legal outcome on a reader’s facts.

01

Check nature/volume of data

Identify the relevant facts, documents and operating role before choosing the route.

Decision factor
02

Check platform function and user base

Identify the relevant facts, documents and operating role before choosing the route.

Decision factor
03

Check foreign control/governance rights

Identify the relevant facts, documents and operating role before choosing the route.

Decision factor
04

Check cross-border data access

Identify the relevant facts, documents and operating role before choosing the route.

Decision factor
05

Check sector licence or critical infrastructure status

Identify the relevant facts, documents and operating role before choosing the route.

Decision factor

Working rule: Map the regulated role before marketing or launch in China.

What changes the answer

The signal ledger.

These facts move the question beyond a label and into a product, money-flow and control analysis.

Signal
Ask the operating question
Why it changes the route
Nature/volume of data
How does the matter involve nature/volume of data?
This operating fact can change the applicable legal route, evidence and next step.
Platform function and user base
How does the matter involve platform function and user base?
This operating fact can change the applicable legal route, evidence and next step.
Foreign control/governance rights
How does the matter involve foreign control/governance rights?
This operating fact can change the applicable legal route, evidence and next step.
Cross-border data access
How does the matter involve cross-border data access?
This operating fact can change the applicable legal route, evidence and next step.
Sector licence or critical infrastructure status
How does the matter involve sector licence or critical infrastructure status?
This operating fact can change the applicable legal route, evidence and next step.
Prepare before you escalate

Bring a compact evidence docket—not a pitch deck.

Give a compliance team or counsel the operating facts that reveal the perimeter.

01Data mapInclude this in the compact fact file for review.
02Ownership/governance chartInclude this in the compact fact file for review.
03System architectureInclude this in the compact fact file for review.
04Licence inventoryInclude this in the compact fact file for review.
05Deal steps and intended post-closing integrationsInclude this in the compact fact file for review.
Common confusions

Questions people ask before they build.

Short answers for orientation. The right result can change with the service model and current rules.

Is data localisation the same as NSR?

No. Localisation and transfer rules are data-law gates; NSR is security screening of the investment. Both can apply.

Can we diligence freely in a VDR?

Only with a protocol. Use red/amber/green classes from the parent guide.

Primary authorities

Reviewed sources support orientation, not a fact-specific assessment.

Sources last checked:

Foreign Investment Law / implementing regulationNational People’s Congress
2024 Foreign Investment Negative List (effective 1 Nov 2024)zfxxgk.ndrc.gov.cn
Foreign Investment Security Review Measureswww.ndrc.gov.cn
MOFCOM foreign-investment ruleswww.mofcom.gov.cn