Internal Investigations and White-Collar Defense in China: What to Do Before the Regulators Do

The following is general information on Chinese law, not legal advice for any specific matter. Rules and thresholds change from time to time, and the treatment of any situation depends on its facts; consult qualified PRC counsel before acting.

Why China white-collar risk is different

In China, white-collar risk attaches to the company as well as the individual. Under the Criminal Law, a "unit crime" (单位犯罪) can be charged against the enterprise itself, and both the unit and the responsible individuals can be punished. A common trigger is commercial bribery — but note that "commercial bribery" is not itself a standalone offence in the Criminal Law; the conduct is charged under the specific crimes it corresponds to, such as offering bribes to a non-state functionary (对非国家工作人员行贿罪) or accepting them (非国家工作人员受贿罪), alongside tax, customs, personal-data and other economic offences. That mapping matters because it determines the elements the prosecution must prove and the defence that is available.

Running the internal investigation

The first reflex of a multinational is often to import its home-country investigation playbook. That can be a mistake. China has no attorney-client privilege in the common-law sense, and documents, emails and interview notes created during an investigation are not automatically protected from disclosure. Work product is best structured under PRC counsel's direction, with the privilege analysis done locally rather than assumed. Data collection must also respect the Personal Information Protection Law and data-security rules — an employee's personal files and communications cannot be swept up without a lawful basis.

Compliance-based non-prosecution

China has built a path that rewards the company that fixes itself. The compliance-based non-prosecution mechanism (涉案企业合规不起诉) began as a pilot in 2020, was rolled out nationwide from April 2022, and was normalised from 2023. Where a unit-crime case meets the conditions — and the enterprise commits to building a real compliance programme, remedies the harm and passes third-party supervision and a hearing — the procuratorate may decide not to prosecute. It is not a discount for good behaviour after the fact; it is a structured process with a supervisory period and a measurable programme. The practical lesson: a credible, documented compliance programme is not just good governance, it is the single most valuable asset the company has if a case is opened.

When the authorities arrive

If the matter has already escalated — a raid, a summons, a detention — the clock runs fast. A suspect in criminal detention has a right to defence counsel, and the first 37 days before arrest approval are the period in which release is most achievable, which is why practitioners call them the "golden 37 days". Statements given early, without counsel, are hard to walk back, so the priority is to secure competent defence counsel immediately and to coordinate the company's response so that an internal remediation effort does not undermine the individual's defence or vice versa.

A practical sequence

1. Freeze and preserve. On the first sign of misconduct, preserve documents, emails and data — and stop the conduct — before the authorities or a whistleblower forces the issue.
2. Privilege-check locally. Engage PRC counsel before creating investigation records, and assume no common-law privilege attaches.
3. Map the offence. Identify which specific crime the conduct corresponds to, because that frames the entire defence.
4. Decide on voluntary disclosure. Weigh a report to the authorities against the compliance-based non-prosecution route, on advice.
5. Build the programme. If pursuing non-prosecution, the compliance programme must be real, supervised and verifiable — not a paper policy.

The procedure and the availability of the non-prosecution mechanism are applied by the procuratorate on the latest official basis and on the facts of each case; the summary above is general information current as of the date of writing. For the corporate-liability and compliance-programme dimension, see our guide to China corporate criminal liability and compliance programs, and for individual suspects, criminal defense for foreign nationals in China.