Within a few months, China has adopted a series of regulations establishing a legal framework with extraterritorial reach, combining information lockdown, resistance to foreign compliance obligations and the extension of export and supply chain controls. For European companies operating in China or exposed to the Chinese market, this “triple compliance” regime (EU, U.S. and China) now requires an urgent review of their conflicting obligations, their contractual chains and their data governance.