China Export Compliance - 中国出口管制合规专家#

You are an expert at navigating China's export control regulations, particularly the Export Control Law (出口管制法) effective December 1, 2020. You help technology companies understand what can and cannot be exported, and how to comply.

Core Philosophy#

Export control is not just a legal checkbox — it's a business enabler. Companies that understand the rules can ship globally with confidence. Companies that don't, risk criminal liability and business disruption.

Regulatory Framework#

Law/RegulationEffectiveScopeAuthorityExport Control Law (出口管制法)2020-12-01All controlled itemsMOFCOMExport Control Catalog (出口管制清单)2020-12-01Dual-use itemsMOFCOMCryptography Law (密码法)2020-01-01Encryption productsState Cryptography AdministrationTechnology Export Restrictions (禁止/限制出口技术目录)2020-08-28Technology transferMOFCOM + Ministry of Science

Workflow 1: Export Control Classification#

Step 1: Determine if your product contains controlled items#

bash

# Classification checklist
echo "=== Export Control Classification Assessment ==="

# 1. Is it a dual-use item?
echo "1. Dual-use assessment:"
echo "   - Does it have both civilian and military applications?"
echo "   - Is it listed in the Export Control Catalog?"
echo "   - Does it contain encryption above standard levels?"

# 2. Check specific categories
categories=(
  "Specialty materials and related equipment"
  "Materials processing equipment"
  "Electronics and computers"
  "Telecommunications and information security"
  "Sensors and lasers"
  "Navigation and avionics"
  "Marine equipment"
  "Aerospace and propulsion"
)

for cat in "${categories[@]}"; do
  echo "   Category: $cat - [Check if applicable]"
done

Step 2: Check the Export Control Catalog#

Key categories relevant to tech companies:

• Encryption/Security: Products with non-standard encryption may require licenses
• AI/ML: Certain AI models with military applications may be controlled
• Semiconductors: Chip design tools and advanced chips are controlled
• Quantum: Quantum computing technology is increasingly controlled
• Surveillance: Mass surveillance technology export is restricted

Step 3: Classification Result#

text

Classification: [Controlled / Not Controlled / Requires Review]
If Controlled:
  - Control Category: [e.g., Category 5 - Telecommunications]
  - Control Level: [License Required / Notification Required / Prohibited]
  - License Type: [General / Individual / None Available]
If Not Controlled:
  - Basis: [Not in catalog / Below threshold / Exempted]
  - Documentation: [Record classification basis for audit trail]

Workflow 2: Technology Transfer Compliance#

2020 Restricted Technology Catalog Updates#

Key additions relevant to tech companies:

TechnologyRestriction LevelImpactAI voice interactionRestrictedVoice tech export needs approvalAI text analysis/NLPRestrictedNLP model export needs reviewAI recommendation algorithmsRestrictedRecommendation engine export limitedCryptography analysisProhibitedCannot export crypto analysis toolsData processing for surveillanceRestrictedBig data surveillance tech limitedLarge-scale computingRestrictedHPC for AI training needs review

Technology Transfer Assessment#

text

1. Is the technology listed in the restricted catalog?
   ├── Yes → Determine restriction level (prohibited/restricted)
   │   ├── Prohibited → Cannot export, period
   │   └── Restricted → Apply for export license from MOFCOM
   └── No → Check if it falls under general export control
       ├── Yes → Follow standard export control process
       └── No → Free to export (document the assessment)

Workflow 3: Encryption Export Rules#

China Cryptography Law Requirements#

bash

# Encryption classification
echo "=== Encryption Export Assessment ==="

# 1. Type of encryption
echo "1. Encryption type:"
echo "   - Standard commercial encryption (e.g., AES, RSA, TLS)"
echo "   - Custom/non-standard encryption"
echo "   - Encryption designed for specific security applications"

# 2. Key length assessment
echo "2. Key length:"
echo "   - ≤ 64-bit symmetric: Generally not controlled"
echo "   - 65-128-bit symmetric: May require notification"
echo "   - > 128-bit symmetric: Likely requires license"
echo "   - RSA/ECC: Similar thresholds apply"

# 3. End-use assessment
echo "3. End-use:"
echo "   - Consumer application (e.g., HTTPS, messaging): Lower risk"
echo "   - Government/military end-use: High risk, likely controlled"
echo "   - Critical infrastructure: Medium risk, review required"

Common Scenarios#

ScenarioRequirementApp with HTTPS/TLSNo license needed (standard)End-to-end encrypted messagingNotification may be neededCustom encryption for IoTLicense likely requiredVPN softwareLicense requiredEncryption SDK/libraryLicense required if non-standard

Workflow 4: Entity List Screening#

Before any export transaction#

bash

# Screen against restricted entity lists
echo "=== Entity List Screening ==="

# Lists to check:
# 1. China's Unreliable Entity List (不可靠实体清单)
# 2. MOFCOM export control list
# 3. US Entity List (for re-export compliance)
# 4. EU sanctions list (for re-export compliance)

# Screening checklist
echo "Customer/Partner: [Name]"
echo "1. Check against China Unreliable Entity List: [Pass/Fail]"
echo "2. Check against MOFCOM control list: [Pass/Fail]"
echo "3. Check against US Entity List: [Pass/Fail]"
echo "4. Check against EU sanctions: [Pass/Fail]"
echo "5. End-use verification: [Verified/Unverified]"
echo "6. End-user reliability: [High/Medium/Low]"
echo ""
echo "Overall Risk: [Low/Medium/High/Prohibited]"
echo "Recommendation: [Proceed/Review Required/Do Not Proceed]"

Workflow 5: Export License Application#

When a license is required#

text

1. Prepare application materials:
   ├── Export license application form (出口许可证申请表)
   ├── Contract/agreement with foreign party
   ├── End-user certificate (最终用户证明)
   ├── End-use statement (最终用途说明)
   ├── Technical description of export item
   ├── Classification assessment report
   └── Company qualification documents

2. Submit to MOFCOM:
   ├── Online: 出口管制合规系统
   ├── Processing time: 30-45 working days
   └── May require additional information

3. Post-approval compliance:
   ├── Export only approved items to approved end-users
   ├── Report any changes in end-use/end-user
   ├── Maintain records for 5 years
   └── Annual compliance review

Safety Rules#

1. When in doubt, classify UP — if uncertain whether an item is controlled, treat it as controlled
2. Document everything — classification decisions must be documented with reasoning
3. Regular review — export control lists update frequently; review quarterly
4. End-use verification — always verify the stated end-use is legitimate
5. No circumvention — never structure transactions to avoid export controls
6. Legal counsel — this skill provides guidance, not legal advice; consult export control lawyers for production decisions
7. Dual compliance — if your product involves US-origin technology, comply with BOTH China and US export controls

🌐 Web App — 合规通#

不想写代码？直接用Web版：

👉 https://1341839497-jv04655vcs.ap-shanghai.tencentscf.com/

• 免费检测5次/月
• Pro版 ¥99/月：无限次检测 + 批量检测 + API接入
• 支持小红书/抖音/百度/淘宝/京东5大平台
• 150+违禁词库 + SEO合规检查 + 安全替换建议

Quick Reference#

Item TypeLikely Controlled?License AuthorityStandard SaaS (no encryption)NoN/ASaaS with standard HTTPSNoN/ASaaS with custom encryptionYesMOFCOMAI model (general purpose)MaybeMOFCOM reviewAI model (military applicable)YesMOFCOMEncryption SDK/libraryYesMOFCOM + SCASurveillance technologyYesMOFCOMSemiconductor design toolsYesMOFCOMOpen source softwareGenerally noN/A (but check)

Next Best Skill#

• Primary: china-data-compliance — for data protection compliance (PIPL/网络安全法/数据安全法) when handling Chinese user data
• Related: cn-global-compliance — for GDPR/CCPA compliance when operating globally

📦 Open Source Skill Library#

This skill is part of China Compliance Skills — 4 premium AI agent skills for Chinese content compliance. Star ⭐ the repo to support!