40 Technologies, 23 of Them AI: China Starts Policing Model Exports, With Three Doors Left Open
For years the story was other countries cutting China off from chips; now China is policing its own model weights, and on October 16 the Commerce Ministry and the Science and Technology Ministry put 23 AI technologies on the candidate list for export controls.
Three key facts
The announcement covers 40 technologies, 23 of them AI. On October 16, the two ministries issued Announcement No. 48 of 2026, opening public comment on a revision to the Catalogue of Technologies Prohibited or Restricted from Export. The additions fall into three groups: 23 AI technologies, five in biomedicine, and 12 in solar. Fourteen would be prohibited from export and 26 restricted. The AI list covers large models, agents, computing clusters and information processing.
Registration starts immediately, before the catalogue is final. From the announcement until the revised catalogue takes effect, companies must register with the Commerce Ministry before exporting any listed technology. Exports already underway but not completed are included. Registrable cases include transferring technology ownership abroad, licensing it for use overseas, and changing the actual controller of a domestic technology to a foreign entity. The official examples are specific: AI-driven malware generation and mutation would be prohibited, while AI-assisted vulnerability discovery would be restricted.
The carve-outs are just as explicit. Technologies already in the public domain through open source or published papers are out of scope. Using a restricted model to provide API access, app or web interaction, SaaS, or lightweight on-device deployment does not count as exporting model technology. Localized deployment of a restricted model overseas does fall under the rules. Public comment runs through November 15.
Wang Dou's Take
The headline writers will say "China bans AI exports." They did not read the annex. What is actually being controlled is not "AI" but "picking up the model weights and the know-how and moving both abroad." Open source does not count. API does not count. SaaS does not count. On-device does not count. What is left is model weights, intellectual property, overseas localized deployment and changes of control. In plain language: you can keep selling the food, but you cannot take the recipe and the kitchen and open a branch in someone else's backyard.
The design is clever. Among the 14 proposed prohibitions, the most striking is "AI-driven malware generation and mutation," which can genuinely be used against critical infrastructure. The 26 proposed restrictions are the dual-use stuff: vulnerability research, large models, agents. The official phrase "precise and limited" is not just modesty this time.
More interesting is the multiple-choice question it poses to the industry: already open source and you are out; a listed closed model that wants to go abroad must register. Open source used to be idealism. Now it is also the cheapest compliance path. Expect a sudden wave of companies discovering a love for open source, not because they have seen the light, but because the registration paperwork is cheaper.
Washington controls chips; Beijing controls weights. One squeezes from the top down, the other from the bottom up, and both fences land on the same AI stack. Startups doing overseas localized deployment need to redo their compliance math. Those merely reselling API access can still sleep soundly, for now.
Source: Ministry of Commerce · Xinhua