DEV Community

Cover image for China Proposes Export Controls for Large AI Models
Taha Echakiri for NeticsLabs

Posted on Originally published at blog.neticslabs.com

China Proposes Export Controls for Large AI Models

TL;DR

  • China's export control catalogue is the legal list of technologies whose transfer abroad is banned or requires a licence.
  • On 16 October 2026 the Ministry of Commerce and the Ministry of Science and Technology published a draft revision adding 40 technologies across AI, biomedicine and solar power, of which 23 are AI items covering large models, AI agents, computing clusters and information processing.
  • China Daily and Global Times report that 14 of the 40 additions would be prohibited outright and 26 restricted under licence, and the Associated Press reports that models with two trillion parameters or more, or with certain world-leading capabilities, could be restricted.
  • Reuters reports that the draft covers overseas deployment of a restricted model and excludes access through APIs, websites, apps and software-as-a-service. The exclusion comes from Reuters and the threshold from Associated Press; the published ministry notice describes the 40 technologies at category level.
  • Technology already in the public domain through open-source release or academic publication is excluded, and Reuters and China Daily report simplified licensing for open-source exports.
  • Registration of covered transfers applies from 16 October, before the catalogue is final, and public comment closes on 15 November 2026.

What the draft catalogue adds

The two ministries published the draft on Friday 16 October 2026 as a proposed adjustment to the catalogue of technologies whose export is banned or restricted. The additions total 40: 23 in artificial intelligence, 12 in photovoltaics and 5 in biomedicine, according to Global Times' account of the announcement and China Daily's reading of the ministry statement.

The AI items are grouped around large models, AI agents, computing clusters and information processing. Within the 40, China Daily and Global Times report 14 proposed for outright prohibition and 26 for restriction, which in this catalogue means a licence is required before the technology can leave the country. Global Times adds detail that sits in the draft annex: design technologies for 2.5-dimensional and 3-dimensional AI chips and for 3-dimensional flash memory are on the restricted side, alongside AI information processing and voiceprint recognition technologies.

On the prohibition side, the Associated Press reports that exports of core technologies of AI large models trained using sensitive national data would be prohibited, along with AI agents designed for highly sensitive environments such as national defence and critical information infrastructure. The Associated Press adds that a commerce ministry spokesperson called the measure necessary, and that the ministry's statement framed it around reinforcing the security bottom line and keeping AI under human control.

Capture of Xinhua's English report on China's draft export catalogue for AI, biomedicine and photovoltaic technologies

Xinhua's English report of the announcement (english.news.cn, 16 October 2026, captured 2026-10-18), covering the draft restrictions on exports of AI, biomedicine and photovoltaic technologies.

Press reports place the threshold on the model itself

The operative detail for anyone outside China is where the line is drawn, and press reports place it on the model itself. The Associated Press reports that exports of AI models with parameter counts of 2 trillion or above, or with certain world-leading capabilities, could be restricted, and notes that Moonshot's Kimi K3 and Alibaba's Qwen 3.8-Max sit above that parameter count while the proposal names no specific model.

A parameter threshold is a crude instrument. The Associated Press also reports a test based on certain world-leading capabilities, a phrase that supplies no operational measure in the report. The ministry notice confirms a public-domain exclusion. Reuters and Eastern Herald separately report exclusions for APIs, hosted services and lightweight on-device deployment; those exclusions are absent from the notice. The available texts therefore leave unresolved where public weights end, deployment know-how begins and operation of the same model becomes a hosted service; the final rules need to define those boundaries. Reuters reports that the proposals cover the overseas deployment of AI models containing restricted technology, a phrase that reaches the act of running such a model on foreign infrastructure.

The cluster side of the list matters for the same reason. Computing cluster architectures and chip design methods are process knowledge, the kind of material that travels in an engineer's head or in a design file. Global Times reports that the catalogue now names design technologies for 2.5-dimensional and 3-dimensional AI chips and for 3-dimensional flash memory, which puts design knowledge on the list.

Netics editorial diagram on the 23 AI technologies in the draft catalogue

Netics editorial diagram on the scale of the draft: 23 AI technologies out of 40 additions, reported by China Daily and Global Times as 14 proposed prohibitions and 26 licensing requirements, against a comment window that closes on 15 November 2026.

How press reports describe model transfers and hosted access

The carve-out that decides most commercial questions is the treatment of hosted access. Reuters reports that the proposals exclude access through application programming interfaces, websites, apps and software-as-a-service platforms. The Eastern Herald, reading the ministry's question-and-answer note, adds that offering a model through an API, an app, a website or software as a service, or through lightweight on-device deployment, does not count as large-model technology export.

The duties in the draft fall on the Chinese exporter, which must register the transfer and, for a restricted technology, obtain a licence. On these press readings, a transfer of a restricted, unpublished model for deployment abroad is the controlled case, and hosted access to the same model is excluded as drafted. On the same readings, a European organisation that runs open weights already published, and so in the public domain, on its own servers stays outside that scope, and so does an organisation that calls the same model over an API.

Reuters draws the commercial conclusion: the distinction could allow Chinese developers such as DeepSeek and Alibaba to continue expanding internationally. The ministry spokesperson, in China Daily's account, said the proposed controls cover a narrowly defined range of AI technologies and that the vast majority will remain freely exportable once the revision takes effect.

Capture of Global Times' report on the draft revised export catalogue

Global Times' report of the draft revised catalogue (globaltimes.cn, 16 October 2026, captured 2026-10-18), which lists the prohibition and restriction categories and the 23 AI additions.

The registration duty that is already in force

Registration of covered transfers already applies while the catalogue is still a draft. China Daily reports that alongside the consultation, which runs through 15 November, the ministries introduced temporary pre-export registration requirements effective immediately and lasting until the revised catalogue takes effect. Global Times' framing of the same measure calls the update routine and describes restrictions as compatible with continued compliant export.

The Eastern Herald's reading of the notice sets out what registration covers: transferring ownership of the technology abroad, licensing a technology for use overseas, and giving a foreign party ownership or control of the domestic owner. The form asks for the recipient, destination, intended use and estimated value, and exports that have begun but not completed are covered as well.

That last clause is the one with teeth for deal teams. The ministry notice covers exports begun but not completed, and the facilitation measures that the Eastern Herald, Reuters and China Daily describe, namely automatic licensing for a restricted model run on a Chinese firm's own overseas servers and simplified licensing for open-source exports and overseas joint research, remain proposals whose eligibility criteria and procedure require confirmation in the final rules.

The open-source carve-out carries the argument

Every account of the draft carries the same exclusion. Reuters reports that technology already in the public domain through open-source releases or academic papers would be outside the proposed controls. Global Times states the same rule, and China Daily reports that the draft provides for automatic licensing and streamlined procedures for eligible AI exports including open-source releases.

Reuters and Global Times report that technology already in the public domain is excluded, so on their reading a model whose weights are already public falls outside the draft.

Reuters reports that Chinese AI models gained ground abroad on lower prices and improving capabilities since DeepSeek's R1 emerged, a competitive frame worth holding next to the legal text. Omdia's chief analyst Lian Jye Su told the Associated Press that the move can be seen as a response to Western countries posting sovereignty requirements on AI, robotics and telecommunications.

What a European buyer verifies before signing

The first thing to establish is which artefact the contract moves. Contracts may cover support, an API subscription or a transfer of weights, each with a different compliance position. The press readings place the controlled case on the transfer of weights, and the ministry notice lists ownership transfers, overseas licensing and changes of ownership or control as registration cases, so each of the three deserves a check against the notice. Start by reading the agreement's schedule for the word weights, then check the relevant catalogue entry.

The second is the counterparty's own compliance position. A Chinese vendor that must register a transfer has a filing obligation with its own deadline, and a European buyer absorbs that delay. Asking for the registration reference and the vendor's written basis for any claimed automatic-licensing eligibility documents its interpretation during the consultation period.

The third is the deployment plan. An organisation that intends to fine-tune and run a restricted, unpublished model obtained under a transfer agreement depends on its vendor's licence, and it should price that licensing risk into the project before signature. Teams planning sovereign infrastructure and cloud exit projects can settle the question of who holds the artefact before the compute is bought.

Netics editorial comparison of the draft's scope by layer

Netics editorial comparison of the draft's scope by layer, as press reports describe it: models that Associated Press reports could be restricted, sensitive-deployment agents reported by Associated Press, and chip design methods that Global Times places inside, and Reuters reports API and SaaS access outside.

Gary Ng of Natixis told the Associated Press that the world is getting more fragmented in trade and investment, and also in access to technologies. According to those press reports, a model artefact transfer may trigger control. Hosted use may remain available. Public-domain technology is excluded. This structure regulates custody of weights and may leave practical access to capability available through hosted services. Buyer documentation records the resulting uncertainty, and the final rules need to resolve it.


Originally published on the Netics blog.

Top comments (0)