Image Not FoundImage Not Found

An office worker reviews printed Chinese-language documents beside an open laptop at a desk near a window at dusk.

China’s Draft AI Export Rules Target Model Transfers More Than Hosted Access

China has opened a consequential new front in AI policy: not a blanket shutoff of overseas access, but a draft system for deciding when a model, agent, or related know-how is leaving the country in a legally meaningful way.

In Announcement No. 48, issued Oct. 16, the Ministry of Commerce and the Ministry of Science and Technology proposed revising China’s Catalogue of Technologies Prohibited or Restricted from Export. The draft would add 40 technologies across AI, biomedicine and solar power, including 23 AI items tied to large models, intelligent agents, computing clusters and information processing. At the same time, the ministries imposed temporary pre-export registration for the technologies listed in the proposal until a revised catalogue is formally issued and takes effect.

That is why this matters the same day, even before the rules are final. Companies do not yet know the eventual technical thresholds or enforcement practice, but they do know the draft is trying to govern cross-border movement of the technical asset itself.

The reader’s real question is straightforward: does this make Chinese AI less exportable, or does it mostly add a licensing-and-registration layer that changes how companies move models and know-how abroad? Based on the ministries’ own explanation, it looks much more like the second scenario — with potentially serious consequences for companies that rely on local overseas deployment, IP licensing, foreign ownership changes or tightly coupled cross-border engineering.

The line Beijing is trying to draw

The proposal splits the 40 additions into 14 technologies proposed for prohibition and 26 proposed for restriction. The AI examples the ministries highlighted show how specific the list can be: AI-driven malicious-code generation and mutation would be prohibited, while AI-assisted vulnerability discovery would be restricted.

This is still a draft consultation, not a final ban. The comment period runs from Oct. 16 to Nov. 15, and the ministries say the revision is being made under China’s Foreign Trade Law and Technology Import and Export Administration Regulations. Associated Press reporting independently confirmed the scale of the proposal and its AI emphasis.

The commercially important distinction is that the draft is aimed at technology export, not every finished product or every interaction with a Chinese AI service. The ministries’ official Q&A says technologies already made public through open-source release or academic publication are not included in the proposed management scope. It also says most products manufactured using a controlled technology are generally outside that scope.

That means the compliance question is less “Are you selling AI abroad?” and more “What, exactly, is crossing the border?” If the answer is model technology, deployment rights, a patent or software license, process know-how, or even control of the asset itself, the draft may apply. If the answer is user access to a hosted service, the answer may be different.

Which cross-border AI moves are now in the spotlight

The ministries say registration is required before exporting technologies listed in the proposal, including transfers of technology ownership, licenses for overseas use, and a change in the technology owner or actual controller to an overseas entity. That broadens the issue beyond obvious code transfers.

For AI companies, the sharpest practical distinction in the Q&A is between overseas local deployment and remote service delivery. Under the draft interpretation, deploying a restricted large model overseas would fall within technology-export management. By contrast, providing API access, app or website interaction, SaaS applications, or lightweight local-device deployment generally does not constitute export of the large-model technology.

That is a major difference for business models. A Chinese model company may still be able to serve foreign customers through an interface while facing more scrutiny if the customer wants the model running locally, wants weights or technical documentation, or wants rights to modify or redistribute the system. A cloud provider may be able to keep serving offshore demand more easily from a hosted environment than by replicating sensitive capabilities in an overseas data center. Multinationals and joint ventures may need to examine whether an ownership restructuring changes the actual controller of controlled technology.

None of that makes the low-risk path frictionless. Hybrid arrangements are exactly where the uncertainty sits: foreign cloud regions, bundled services plus technical transfer, cross-border engineering support, software updates, or deployments that are “lightweight” in one sense and operationally significant in another. The ministries have outlined the boundary, but not every edge case.

Why product architecture suddenly matters

The deeper business consequence is that export control can become a product-design rule.

If the final catalogue keeps the draft’s broad logic, Chinese AI companies will have an incentive to keep frontier weights, training methods, agent orchestration and other sensitive capabilities inside China while exporting narrower interfaces. That could mean more modular product stacks, clearer separation between public and proprietary components, and stricter internal records about where engineers, code, compute and ownership sit.

For overseas customers, the trade-off may be continuity of access but less portability. Buying API access is different from receiving a locally deployable model that can be fine-tuned, audited or integrated into sensitive workflows. Procurement teams may find they can keep using Chinese AI services while losing the option to run the same systems on-premises or under their own technical control.

This logic extends beyond standalone AI labs. Chip designers, cloud operators, solar-equipment makers and biotech firms all have versions of the same question: is the company exporting a product, or transferring the know-how that makes the product strategically valuable? The draft does not answer that question identically across sectors, but it makes the classification exercise central.

The geopolitical context raises the stakes without settling the outcome. Reuters and AP both placed the move in a broader period of U.S.-China technology competition, including existing U.S. restrictions on advanced AI chips and chipmaking equipment. But the current proposal does not identify particular countries or companies as targets, and the available documents do not justify treating it as a retaliatory shutdown.

The unanswered compliance questions

The most difficult work for companies starts where the draft stops.

The ministries have not yet published the final technical thresholds, a full implementation timetable, or a detailed account of how temporary registration will work in practice. It is unclear how quickly filings will be reviewed, whether a registration can be refused, or whether some restricted items will later move into a formal licensing process. Nor have the ministries quantified how many exporters or transactions may be affected.

That leaves a near-term checklist rather than a definitive rulebook. Companies need to identify the asset at issue; determine whether it is genuinely public, open-source, licensed or proprietary; map where the model, code, compute, engineers and ownership sit; and classify the transaction as a transfer, overseas local deployment, hosted service, ownership change or some combination.

For now, the proposal does not say that Chinese AI must stay home. It says that some of the most valuable parts of Chinese AI may require registration or review when a business wants to move them abroad, hand them over, or place them under overseas control. For firms planning cross-border model deals, overseas data-center builds, acquisitions or licensing programs, that is a meaningful shift already — even before the final catalogue arrives.