China Announces Frontier AI Export Controls — What Changes and Who's Affected

On October 16, 2026, China's Ministry of Commerce (MOFCOM) and Ministry of Science and Technology (MOST) issued Announcement No. 48 of 2026, proposing the addition of 40 technologies to the Catalogue of Technologies Prohibited or Restricted from Export. Of those 40 items, 23 are dedicated entirely to artificial intelligence — watermarks, AI-generated content detection, large models trained on sensitive Chinese data, multi-platform agent architectures, and even automated vulnerability discovery tools.

The measure marks a turning point: for the first time, China officially regulates the export of frontier AI model weights, source code, architectures, and training techniques — precisely the same elements the United States controls since 2023, with the precedent of the Fable 5 model suspended by the Cloud Security Alliance. Now, frontier AI supply chains face formal export controls from both of the world's two largest AI-producing powers.

What the announcement controls

Announcement No. 48 operates with two instruments of distinct legal status:

A draft open for public consultation — the 40 proposed additions are open for comments until November 15, 2026, via email, fax, or post. During this period, the catalogue additions remain proposals.

A pre-export registration requirement already in force — as of October 16, exporters must register on MOFCOM's unified foreign trade platform before any transfer of listed technology, even though the final catalogue is still being formalized.

Among the 40 technologies, 14 proposed are absolute prohibitions (J code) and 26 are restrictions with license (X code). In the AI sector:

- Large models trained on Chinese "core data" (核心数据) are prohibited from export. Models trained on "important data" (重要数据) are restricted — they require a license. - Core large-model technologies — weights, checkpoints, source code, architecture, training optimization techniques and inference acceleration — are restricted if the model meets any of three criteria: ≥10^26 floating point operations (FLOPs), ≥2 trillion parameters, or ranking in the global top 10 on capability rankings at the time of export. - High-performance agents designed for critical infrastructure, defense or core government systems are prohibited. - Multi-agent collaboration with ≥60 concurrent agents, completion time ≤2× the single-agent minimum and ≥85% agreement with reference answers is restricted. - AI-assisted vulnerability discovery tools with ≥75% on authoritative benchmarks, 10× senior-expert efficiency, or autonomous chaining of 2+ low/medium flaws into a working exploit are restricted. - AI detection tools specifically designed for cross-border data security with ≥95% accuracy and recall are prohibited. - AI malicious code generation, adaptive evasion and variant generation are prohibited.

The technical criteria are detailed in a .wps annex whose exact figures were not independently opened — the data was transcribed from CSA AI Safety Initiative and ChinaBriefing research notes.

The practical dividing line: service versus custody

The distinction between service access and physical possession of technology is key to understanding the real exposure of companies. According to MOFCOM, APIs, apps, web interactions, SaaS and lightweight device deployments do not count as exporting a large model. However, local deployment of a restricted model on infrastructure outside China counts as export — although automatic licensing may apply if the infrastructure is Chinese-owned on overseas clouds or data centers.

This means using Chinese models via API remains free. The problem arises when a company decides to host weights locally on a server abroad — especially relevant for Chinese AI developers who are increasingly releasing proprietary models to generate additional revenue, as reported by the South China Morning Post.

Generous exemptions

The announcement also provides broad exemptions designed to maintain international collaboration. AI technologies already in the public domain are exempt. Products manufactured using restricted technologies are not subject to restrictions. Automatic licensing is available for open-source releases, operation of overseas data centers by Chinese companies (or AI deployment on foreign cloud infrastructure they own), overseas semiconductor fabrication, joint research with foreign resources and participation in international standard formulation.

These exemptions mean that many Chinese open-weight models will not be affected by the restrictions — a crucial difference from the US export control, which operates with closed frontier models.

Impact on the global AI ecosystem

The most direct analogy is with the US 2023 export control, when the American government suspended broad availability of the Fable 5 model — the first documented use of export-control authority to contain a commercial frontier model. Now China formalizes its own regime, completing a bilateral control system for AI technology.

For companies operating on both sides of the Pacific, this creates a new compliance landscape. The line between "service" and "possession" will be tested in future courts and regulations. The question that remains: with China increasingly releasing proprietary models for monetization, will export controls become a material factor in global AI development strategy — and how far will Chinese open-weight liberalization survive national security scrutiny?

Sources: Cloud Security Alliance AI Safety Initiative, ChinaTalk, China Briefing

✓ Independent sources cross-checked and verified before publishing