China is quietly requiring foreign tech companies to submit their products to security reviews
HONG KONG — Chinese authorities are quietly scrutinizing technology products sold in China by Apple and other big foreign companies, focusing on whether they pose potential security threats …
Context & Ripple Effects
This report lands at the end of a dense 2015 sequence: January rules forcing banks' tech suppliers to hand over source code, audits, and backdoors, July warnings from industry groups that the new security law could compel encryption keys and code disclosure, and September requests that US firms pledge compliance on user-data sharing and intellectual property. What changes here is scope — scrutiny moves from sector-specific procurement rules to product-level security reviews of consumer offerings like Apple's.
The mechanism also recurs across the decade of coverage: regulators slowing approvals for acquisitions and deals as tensions rose, cybersecurity vetting added for Hong Kong IPOs, and by 2025 dual-use export controls tightening around Apple's supply chain. Quiet, discretionary review is presented not as a one-off crackdown but as a standing instrument of Chinese tech policy.
First-order effects
- Apple and other large foreign vendors now face open-ended security scrutiny of individual products in one of their biggest markets, adding review timelines and disclosure exposure on top of the 2015 banking-sector source-code mandates.
- The compliance pledges Washington firms made in September 2015 acquire an enforcement mechanism: per-product reviews give regulators case-by-case leverage without any published rule to appeal to.
Second-order effects
- Domestic competitors gain a structural timing advantage whenever foreign products sit in discretionary review — the same asymmetry created when deal approvals were slowed for US firms during earlier tensions.
- Industry groups that fought the 2015 security law over backdoors and encryption keys face pressure to negotiate a formal review framework before quiet practice hardens into undocumented requirements like the reported 50% domestic-equipment rule for chipmakers expanding capacity.
Third-order effects
- If the pattern holds, access to China's market becomes conditional on unpublished criteria — the structure already visible in the chipmaking equipment rule — pushing foreign firms toward deeper localization or managed retreat.
- Regulatory discretion becomes a reciprocal instrument in US-China tech friction: reviews, IPO vetting, and export controls form a matching set of access levers each side can tighten without treaty-level confrontation.
The trend: China is institutionalizing quiet, discretionary regulatory review as its primary lever of technology statecraft, scaling from banking-sector source-code rules to product security checks, IPO vetting, and export controls.