China's framework for inbound foreign investment has always moved on two tracks at once. One track opens: each revision of the national and free-trade-zone negative lists has removed restricted sectors, and the most recent cycle continued that trajectory by clearing remaining limits across most of manufacturing and extending pilot openings in value-added telecommunications, healthcare and certain professional services. The other track tightens: national-security review, data-security obligations and sector regulators now examine a wider range of transactions than at any point since the Foreign Investment Law took effect in 2020.
The 2026 revisions sharpen both tracks. For boards weighing China entry or expansion, the practical question is no longer whether China is open to foreign capital in the abstract. It is whether a specific transaction, in a specific sector, with a specific structure, lands on the encouraged side of the line or inside the review perimeter. The distance between those two outcomes, measured in time, conditions and execution risk, has widened.
What the revised negative list changes
The negative list remains the cornerstone instrument. Sectors not listed are, in principle, open to foreign investment on national-treatment terms. The current revision continues three patterns that have held across recent cycles.
First, manufacturing is effectively clear. The removal of remaining manufacturing restrictions means that wholly foreign-owned structures are available across nearly all industrial activity, including segments such as specialty vehicles and certain medical-device categories where joint-venture or equity-cap requirements previously applied.
Second, services liberalisation is real but conditional. Openings in value-added telecom services, wholly foreign-owned hospitals in designated cities, and biotech-adjacent activity arrive through pilot programmes tied to specific zones and municipalities. An investor's eligibility can turn on where the entity is registered, not merely what it does. Site selection has become a legal question, not only a commercial one.
Third, the cultural, media and certain agricultural categories remain firmly restricted, and there is no signal that this will change. Counsel should treat these as structural features of the regime rather than items awaiting the next revision.
The security-review perimeter widens
Running against the liberalising current, the security-review mechanism administered through NDRC and MOFCOM has matured into a routine feature of deal execution. Filings are expected where a foreign investor obtains actual control in fields touching military-adjacent industry, critical infrastructure, key technology, major energy and resources, and important financial services. Two practical developments deserve attention.
The first is timing. A streamlined track now disposes of straightforward cases more quickly, and that is genuinely useful for transactions that clearly fall outside sensitive fields. But the faster track cuts both ways: it reflects a system that expects more filings, not fewer. Parties who once took a no-filing position on marginal cases now face a regulator that has made filing cheap and non-filing conspicuous.
The second is the interaction with data. Where a target processes significant volumes of personal information or data classified as important under the Data Security Law, security review and cybersecurity assessment can run in parallel, each with its own timeline and documentation demands. Deal teams should map both processes at term-sheet stage and reflect them in long-stop dates and conditions precedent.
The distance between an encouraged investment and a reviewed one is now measured in months of execution time, and the line between them is drawn earlier in the deal than most term sheets assume.
Consequences for deal structures
For greenfield entry, the WFOE remains the default vehicle in opened sectors, and registration mechanics are no longer the bottleneck they once were. The constraints that matter now sit upstream: confirming the activity is off the negative list, securing the right registration location for pilot-dependent sectors, and clearing any sector-specific licensing.
For acquisitions, the revisions favour earlier and deeper regulatory diligence. Three structural responses are increasingly common. Buyers are building security-review and antitrust conditionality into long-stop dates with more realistic cushions. Carve-out structures are being used to separate data-heavy or licence-dependent assets from the balance of a target group, allowing the uncontroversial portion to close first. And contingent consideration is reappearing as a bridge where regulatory timing is the principal uncertainty.
For joint ventures, the calculus has shifted in the opposite direction from a decade ago. With equity caps gone in most sectors, a JV is now a choice rather than a requirement, which means the governance terms deserve more scrutiny, not less. A partner chosen for regulatory necessity could once be tolerated; a partner chosen freely must justify the dilution of control. Exit mechanics, deadlock resolution and IP contribution terms remain the provisions that determine whether the venture survives its first serious disagreement.
What counsel should do now
Three actions follow directly from the 2026 posture. Investment committees should refresh sector classifications for any China-facing pipeline, because negative-list and pilot-programme boundaries have moved and prior memoranda may be stale. Deal teams should treat security review and data assessment as default workstreams, scoped at the outset and dropped only on positive confirmation that they do not apply. And operating subsidiaries should confirm that their registered business scope still matches actual activity, since scope mismatches that were once administrative irritants now draw attention in a more closely supervised environment.
China's opening is real, but it is an opening with a narrower aperture and better instruments for watching what passes through it. The investors who do well under this regime will be those who treat regulatory strategy as part of deal design rather than a closing condition to be managed at the end.