- Foreign-invested companies are governed by the 2023 Company Law like any other PRC company: shareholders' meeting on top, a board (or single director) below, and flexibility to replace supervisors with a board audit committee.
- The legal representative is China's most misunderstood corporate role: one named individual whose signature binds the company and who carries personal exposure. Choose deliberately, control the chops, and plan the replacement mechanics before a dispute starts.
- Two annual filings matter to every FIE: the AMR annual report (with the foreign-investment information report, generally due 1 January–30 June each year) and the corporate income tax annual reconciliation (generally due by 31 May).
- Data compliance is now a baseline for ordinary trading companies, not just tech firms — the PIPL reaches employee and customer data, and cross-border transfers to your headquarters need a lawful route (standard contract, certification or CAC assessment), with relaxations for low-volume scenarios under current rules.
- Officer duties tightened in the 2023 revision: directors and senior managers owe codified duties of loyalty and diligence, with personal liability for breach — governance paperwork is no longer decorative.
The governance stack after the 2023 Company Law 治理结构
Legacy joint-venture governance — the board as supreme organ, unanimous-consent lists, no shareholders' meeting — died with the old FIE laws; the transition period ended 31 December 2024, so every FIE should now run on Company Law organs: a shareholders' meeting as the supreme organ; a board of directors (or, for smaller companies, a single director); and supervision either through supervisors or, under the 2023 revision, an audit committee of the board replacing supervisors entirely — a welcome simplification for wholly-owned subsidiaries. A single-shareholder WFOE can operate with remarkably lean paperwork, but the paperwork must exist: shareholder decisions in writing, board resolutions where the charter requires them, and a charter (articles of association) actually customised to your control preferences rather than copied from the registry template.
For joint ventures, the charter and the shareholders' agreement are where control is won or lost: quorum and veto lists, director appointment and removal, deadlock escalation, transfer restrictions and exit pricing. Disputes on these clauses are a practice area of their own — see our Equity desk.
The legal representative, the chops, and who really binds the company 法定代表人与公章
Every PRC company has one registered legal representative whose acts in the company's name generally bind it, and a set of physical chops (company seal, financial seal, invoice seal) that in Chinese practice authenticate documents the way signatures do elsewhere. The combination creates a risk foreign parents routinely underestimate: whoever controls the person and the chops controls the company's ability to act — including against the parent. Standard hygiene: separate custody of chops from the legal representative, keep a chop-use register, and write replacement procedures into the charter so a departing or hostile legal representative cannot hold the company hostage. The 2023 Company Law also codifies that the company bears the consequences of the legal representative's registered-scope acts, and clarifies resignation and replacement mechanics.
The compliance calendar 年度合规日历
| Filing 事项 | Usual window 一般时限 | Notes 要点 |
|---|---|---|
| AMR annual report 市场监管年报（含外商投资信息报告） | 1 Jan – 30 Jun | Filed online; covers basic corporate, shareholder and operational data. Missing it puts the company on the irregular-operations list — visible to banks and partners. |
| CIT annual reconciliation 企业所得税汇算清缴 | By 31 May | Annual corporate income tax true-up for the prior year; related-party transaction forms attach here — transfer pricing documentation obligations start earlier than most groups expect. |
| Statutory audit 年度审计 | Before the above | Annual financial statements audited by a PRC CPA firm are in practice required for profit distribution and expected by banks. |
| Licence renewals 许可证续期 | Per licence | Industry licences, import-export registrations, food/medical permits each carry their own clocks. |
| Individual filings 个税与社保 | Monthly | Payroll withholding of individual income tax and social insurance contributions — see Employment. |
Data compliance: the new baseline 数据合规
Three statutes — the Cybersecurity Law (2017), Data Security Law (2021) and Personal Information Protection Law (PIPL, 2021) — apply to any company processing data in China, which means every company with employees and customers. For an ordinary foreign-invested trading or services company, the working baseline is: a lawful basis (usually consent or contractual necessity) for processing personal information; separate consent for sensitive categories; privacy notices for employees and customers; and vendor management for processors.
The issue that reaches headquarters is cross-border transfer: sending HR records, CRM data or analytics to overseas group systems is a regulated export of personal information. Lawful routes are the CAC standard contract filing, certification, or a security assessment for large-volume and important-data scenarios; rules issued in March 2024 (Provisions on Promoting and Regulating Cross-Border Data Flows) relaxed thresholds and exempted several ordinary-business scenarios, and free-trade zones may run negative lists of their own. Volumes and thresholds under these rules change; check the current text before designing group data flows, subject to current regulations.
Officer liability: the part boards notice too late 董监高责任
The 2023 Company Law sharpened directors' and senior managers' duties of loyalty and diligence, added liability for shareholders' capital deficiencies directors fail to call in, and extended de facto director concepts to controlling shareholders who instruct management. For expatriate directors of China subsidiaries the practical reading is: attend (or properly delegate), document decisions, do not sign what you have not read, and make sure the company maintains D&O-relevant records. Compliance failures that once produced only company fines increasingly carry personal consequences for the responsible individuals.
- Company Law of the PRC (2023 revision, effective 2024-07-01) 《公司法（2023修订）》 —— governance organs, the legal representative and the duties of directors, supervisors and senior officers; supports 治理结构, 法定代表人与公章 and 董监高责任.
- Foreign Investment Law and Implementing Regulation 《外商投资法》及实施条例 —— the framework for foreign-invested enterprises and their investment-information reporting; supports 治理结构 and the reporting entries in 年度合规日历.
- Cybersecurity Law 《网络安全法》 —— baseline network and information-security obligations; supports 数据合规.
- Data Security Law 《数据安全法》 —— data classification and data-handling obligations; supports 数据合规.
- Personal Information Protection Law 《个人信息保护法》 —— processing of personal information and employee data; supports 数据合规.
- Provisions on Promoting and Regulating Cross-Border Data Flows (2024) 《促进和规范数据跨境流动规定》 —— the routes and exemptions for transferring data out of China; supports the cross-border part of 数据合规.
Validity note 效力提示：Annual filing windows follow current national practice; local implementation may vary. Rules cited as in force at the review date; the current official text prevails.
This page is general legal information, not legal advice on any specific matter. 本页为一般性法律信息，不构成对具体个案的法律意见。
