Which legal rules govern the Micron–China AI chip contest?

Non-advice banner: This record is a compliance research aid, not legal advice. It does not determine product classification, customer status, end use, license availability, Chinese procurement status, or the outcome of any regulator’s review for a specific transaction.

Last verified: August 4, 2026, 00:00 UTC. Legal-background review: Regulation & Ethics legal review desk.

The useful question in the Micron–China AI chip competition/export-controls file is not whether the relationship is hostile. It is whether a lawyer, export-classification lead, procurement manager, or sales team has a binding instruction today. The answer changes by layer. CAC’s Micron finding and the US HBM export-control regime are live compliance constraints. Some Chinese counter-controls are suspended but still need expiry-date tracking. DS615 is a WTO consultation record. The MATCH Act is pending legislation.

The CAC layer: live Chinese restriction, narrow public record

CAC announced the Micron cybersecurity review on March 31, 2023, and on May 21, 2023 said the products at issue had failed that review. Reuters reported CAC’s finding as identifying “serious network security risks” that affected China’s national security and stating that operators of critical information infrastructure in China should stop purchasing Micron products [1][2].

That is an operative restriction for Chinese critical information infrastructure purchasing. It is not, on the public record supplied here, a worldwide prohibition on Micron, a US export-control rule, a sanctions designation, or a court order. For a business team, those distinctions are not academic. They decide who is blocked, which transaction step is constrained, and which regulator’s text must be checked before action.

The stated legal basis matters because it shows the review was not a free-floating political announcement. The source trail identifies China’s 2015 National Security Law Article 59, 2016 Cybersecurity Law Article 35, and the 2021 revised Cybersecurity Review Measures, including Articles 2, 5, 7, 10, and 16, as the relevant cybersecurity-review framework [2][3]. Those provisions are the better starting point for a Chinese-law status check than a headline that says “China bans Micron.”

The same record has important silences. The public materials in the supplied source set do not disclose the technical evidence underlying CAC’s finding, and they do not provide a precise public product-by-product scope. That means counsel should resist two opposite shortcuts: assuming every Micron-related Chinese sale is prohibited, or assuming the restriction is harmless because the public record is incomplete. The correct task is narrower and more laborious: identify the Chinese buyer, test whether it is within the critical information infrastructure category or has received sectoral instruction, confirm the specific product and use, and then check for any later CAC, ministry, or customer-facing notice.

The Didi penalty belongs in the background of the review regime, not as a parallel outcome for Micron. DigiChina described the Didi action as an RMB 8.026 billion administrative fine and treated the Micron review as the first proactive cybersecurity review of a foreign company under this evolving mechanism [3]. That context helps explain why the Micron review drew attention. It does not establish that Micron faced the same penalty type, penalty amount, or enforcement path.

The US HBM layer: live export controls, separate thresholds

The US layer is not a mirror image of CAC’s finding. It is an Export Administration Regulations problem: classification, destination, end user, end use, foreign direct product exposure, license exception eligibility, Entity List status, red flags, and licensing policy.

BIS’s December 2024 semiconductor updates added high-bandwidth memory to the advanced-computing controls. The key control point identified in the source record is ECCN 3A090.c for HBM at memory bandwidth density above 2 GB/s/mm² [4][5]. That number is the classification/control threshold. It should not be rounded into a general “HBM is banned” rule, and it should not be confused with the license-exception threshold.

License Exception HBM, as summarized in the supplied Dec. 5 controls analysis, is available only below 3.3 GB/s/mm² and only under EAR §740.25 conditions [5]. The two figures do different work: one helps determine whether an item falls into the controlled ECCN bucket; the other is a condition for a particular license exception. Treating them as one cutoff can produce the wrong answer in both directions — a shipment held when an exception analysis is still required, or a shipment released when the exception conditions have not been met.

The practical sequence is unforgiving. First classify the item and technology. Then determine EAR jurisdiction, including any foreign direct product rule. Then screen the parties and end use. Then test license exception eligibility. Then look at the current license-review policy. A company that starts with the business label “AI memory” is starting too late in the analysis.

Chinese counter-controls: suspended is not repealed

China’s counter-control layer has to be tracked with dates visible on the same line as the status. Reuters reported that China announced a Dec. 3, 2024 prohibition on exports to the United States of gallium, germanium, antimony, and superhard materials, using the formulation that such exports “in principle” would not be permitted [7]. Fastmarkets later reported that China suspended the export prohibition on gallium, germanium, antimony, and superhard materials to the United States until Nov. 27, 2026 [8].

That suspension date should sit in the matter file, the procurement note, and the contract-risk tracker. A suspended prohibition can still matter for force-majeure drafting, supply continuity, customer notices, and renewal timing. It does not support a statement that the original control disappeared.

The Oct. 9, 2025 package is a separate entry. The supplied record identifies Announcements 55–62, 14 Unreliable Entity List designations, and MOFCOM Order No. 4 of 2020 as the UEL basis, with the package reported as suspended for one year [9]. Separately, the US military end-user prohibition is described in the source record as reportedly retained. The word “reportedly” has work to do here: it signals that counsel should verify the operative Chinese notice before clearing any transaction that touches a US military end user or a listed entity.

DS615 and the MATCH Act do not bind the same way

WTO DS615 is a dispute record, not a shipment instruction. The WTO page records China’s Dec. 12, 2022 request for consultations concerning US semiconductor measures, and the source record identifies the matter as still pending in consultations with the United States invoking a national-security defense [10]. That posture may matter for policy analysis, government-affairs messaging, or future retaliation risk. It does not make a private exporter’s license requirement vanish.

The MATCH Act sits in a different box: pending US legislation. Reuters reported on Apr. 22, 2026 that Micron pushed Congress to crack down on chip-tool sales to Chinese rivals, that the House Foreign Affairs Committee advanced the bill, and that there was a possible NDAA amendment path [11]. Congress.gov provides the HR 8170 text [12]. None of that makes the bill current law.

Micron’s reported lobbying is a relevant disclosure point because it tells readers that an interested company was advocating for restrictions that could affect competitors [11]. It still does not convert a committee-advanced bill into a binding export-control rule. A contract clause, compliance hold, or customer communication that treats pending legislation as enacted law is a drafting error with business consequences.

Business exposure can explain urgency, not legal status

Revenue exposure figures help explain why the Micron dispute drew board-level attention, but they should not be used to infer the scope of any legal instrument. WilmerHale’s April 2023 alert described Micron as generating approximately 10% of revenue from China [2]. Reuters, citing Jefferies, reported in May 2023 that Micron had $5.2 billion in China and Hong Kong revenue in 2022, or about 16% of total revenue [1]. CNBC later reported, based on a report citing two people briefed, that Micron would exit the server chips business in China after the ban, and stated that mainland China accounted for $3.4 billion, or 12%, of revenue in the last business year [13].

Those figures are not inconsistent simply because they differ; they use different periods, geographies, and source formulations. They also do not answer whether a given shipment is controlled, whether a Chinese buyer is covered by CAC’s instruction, or whether a suspended minerals control has reactivated. Market context should stay in the context field.

Verification rule before acting

For the Micron–China AI chip file, no single “ban” label is safe enough for compliance work. The file has to be checked layer by layer: CAC for Chinese critical-infrastructure purchasing restrictions; BIS and the EAR for HBM classification, license exceptions, FDPR exposure, party screening, and license policy; MOFCOM and related Chinese notices for suspended counter-controls and any retained military-end-user prohibition; WTO for dispute posture only; and Congress.gov plus enacted-law updates for the MATCH Act.

As of August 4, 2026, two layers are in force, some Chinese countermeasures are suspended with expiry dates, one WTO dispute is procedurally stalled, and one US bill is pending. Before procurement, sales, lobbying, or public communications rely on the file, the live check should record jurisdiction, authority, operative verb, status, effective date, product scope, party scope, and source link. Anything less invites a geopolitical headline to do a lawyer’s job.

References

1. China fails Micron’s products in security review, bars some purchases, Reuters, May 21, 2023
2. China Launches Cybersecurity Review Against Micron, WilmerHale, Apr. 11, 2023
3. Targeting U.S. Chip Firm Micron, China’s Cybersecurity Reviews Continue to Evolve, DigiChina / Stanford, Apr. 7, 2023
4. Commerce Strengthens Export Controls to Restrict China’s Capability to Produce Advanced Semiconductors for Military Applications, Bureau of Industry and Security, Dec. 2, 2024
5. Summary of BIS’s December 5, 2024, Chip Controls, ArentFox Schiff, Mar. 17, 2025
6. Department of Commerce Revises License Review Policy for Semiconductors Exported to China, Bureau of Industry and Security, Jan. 13, 2026
7. China bans export of critical minerals to US, Reuters, Dec. 3, 2024
8. China suspends export prohibition on gallium, germanium, antimony, superhard materials to US, Fastmarkets, Nov. 2025
9. China Expands Rare Earth Export Controls and Adds 14 Entities to the Unreliable Entity List, Crowell & Moring, Oct. 2025
10. DS615: United States — Measures on Certain Semiconductor and other Products, and Related Services and Technologies, World Trade Organization
11. Micron pushes US Congress to crack down on chip tool sales to Chinese rivals, Reuters, Apr. 22, 2026
12. H.R.8170 — 119th Congress, Congress.gov
13. Micron to exit server chips business in China after ban: report, CNBC, Oct. 17, 2025