Industrial Policy & Trade Monitor· 2666 actions· ✨ 90 recent

The Income Tax (Amendment) Act, 2021 (Act No. 43 of 2021), assented 30 December 2021 and in force from 1 January 2022, re-introduces the deductibility of Mineral Royalty Tax (MRT) paid under the Mines and Minerals Development Act, 2015 when computing a mining company's taxable income for corporate income tax purposes. The Act removes mineral royalty from the list of non-deductible expenditures in section 44 of the Income Tax Act, reversing a non-deductibility rule that had applied since a 2015-era amendment and that mining companies and industry stakeholders had argued produced double taxation of the same revenue stream. Deductibility is conditional on the royalty having actually been paid for the charge year.

The US Bureau of Industry and Security (BIS) amended the Export Administration Regulations (EAR) effective November 26, 2021, by adding 28 entries to the Entity List across China (12), Japan (1), Pakistan (13 including 2 individuals), Singapore (1), and Taiwan (1). Designations span three distinct threat clusters: (1) eight Chinese entities supporting military applications of quantum computing, including QuantumCTek Co. and the Hefei National Laboratory for Physical Sciences at Microscale; (2) approximately twelve Pakistani procurement entities and three Chinese suppliers facilitating Pakistan's unsafeguarded nuclear activities and ballistic missile program; and (3) the Corad Technology network across China, Japan, Singapore, and Taiwan that sold Western technology to Iran's military/space programs and North Korean front companies. Additionally, the Moscow Institute of Physics and Technology was added to the Military End-User (MEU) List for producing military products. All Entity List entries carry presumption-of-denial licensing policy with no exceptions available.

The Personal Information Protection Law of the People's Republic of China (中华人民共和国个人信息保护法 — PIPL) was adopted at the 30th meeting of the 13th NPC Standing Committee on 20 August 2021 and entered into force on 1 November 2021, constituting the third and final pillar of China's cybersecurity and data-governance regulatory trinity alongside the Cybersecurity Law (2016) and the Data Security Law (2021). The PIPL is China's comprehensive personal-information statute establishing consent-based and necessity-based legal bases for PI processing, a tiered cross-border personal-data transfer regime (CAC security assessment / PI protection certification / Standard Contractual Clauses), extraterritorial application (Art. 3) to non-Chinese controllers offering services to or analysing the behaviour of PRC residents, and a heightened protection regime for sensitive personal information and data of minors under 14. It mandates data-protection impact assessments, personal-information-protection-officer obligations at designated handlers, breach notification, and a full suite of data-subject rights including access, rectification, deletion, portability, objection, and automated- decision-making opt-out. Article 53 requires overseas controllers to establish a domestic representative or designated entity in China, providing a domestic enforcement counterparty.

The Data Security Law of the People's Republic of China (中华人民共和国数据安全法) was adopted at the 29th meeting of the 13th NPC Standing Committee on 10 June 2021 and entered into force on 1 September 2021, constituting the second pillar of China's cybersecurity and data-governance regulatory trinity alongside the Cybersecurity Law (2016) and the Personal Information Protection Law (2021). The DSL establishes a tiered data-classification regime — "important data" and "national core data" — with escalating security obligations including risk assessment, risk monitoring, breach reporting, and classified-protection requirements for data handlers. It introduces a data-export security review for "important data" generated or collected within China, the statutory parent authority operationalised by the 2024 CAC Cross-Border Data Flow Provisions, and enacts a §36 blocking statute prohibiting Chinese organisations and individuals from transferring data stored in China to foreign judicial or law-enforcement authorities without prior PRC government approval.

The National Security and Investment Act 2021 (c.25), receiving Royal Assent on 29 April 2021 and entering full force on 4 January 2022, created the UK's first standalone investment-screening regime, separating national-security review from the Competition and Markets Authority merger-control process. The Act empowers the Secretary of State to call in any acquisition of "control or influence" over a qualifying entity or asset on national-security grounds, and designates 17 sensitive sectors in which acquisitions crossing 25%/50%/75% share-or-voting-rights thresholds (or material influence) require mandatory pre-completion notification to the Investment Security Unit (Cabinet Office); completion before clearance is void and criminal sanctions of up to 5 years imprisonment apply to non-notifying parties. The Act is the structural peer of US CFIUS/FIRRMA (2018), EU Regulation 2019/452, Germany AWG §§55–62, France Décret 2014-479, Netherlands Wet Vifo, and the broader allied FDI-screening parent-statute lattice, and the enabling statute under which all UK mandatory-notification schedule amendments operate.

The U.S. Bureau of Industry and Security (BIS) added seven Chinese supercomputing entities to the Entity List, imposing a license requirement covering all items subject to the Export Administration Regulations (EAR) with a presumption of denial. The entities were designated for procuring and building supercomputers used by China's military actors, supporting China's military modernization, and aiding the development of weapons of mass destruction (WMD) and hypersonic weapons programs. This was the Biden administration's first Entity List action targeting China's supercomputing sector.