Table of Contents
A China Employer of Record isn't just a payroll processor — it's the entity legally registering and remitting five insurances and one fund, calculating and withholding Individual Income Tax (IIT) every month under the cumulative withholding method, and holding the employee personal information (PI) that China's Personal Information Protection Law (PIPL) regulates. These three systems run in parallel every pay cycle, each with its own annual reset dates, filing deadlines, and cross-border rules. Understanding what your EOR absorbs — and what your headquarters still has to decide, especially around pulling HR data into foreign systems — is the difference between a compliant China entity-free hiring setup and a quiet accumulation of regulatory exposure. This guide walks through all three, plus a practical "who owns what" table.
Table of Contents
- Why Foreign Employers Face Three Compliance Systems at Once
- Five Insurances and One Fund: Coverage, Contribution Bases, and Employer Cost
- IIT Mechanics: Progressive Rates, Cumulative Withholding, and Annual Reconciliation
- Foreign Employees: Tax Residency, the Six-Year Rule, and Fringe Benefit Exemptions
- PIPL and Cross-Border HR Data: What Changes When You Pull Reports to HQ
- Who Handles What: EOR Responsibilities vs. HQ Decisions
- Common Mistakes Foreign Employers Make
- Frequently Asked Questions
- Glossary of Key Terms
- Related Reading
1. Why Foreign Employers Face Three Compliance Systems at Once
Most foreign companies come to China compliance thinking about payroll as one thing: get the employee paid correctly and on time. In practice, hiring even a single employee in mainland China without a local entity means engaging three separate, mandatory regulatory regimes every single month, each administered by a different authority and running on its own calendar.
Social insurance and housing fund are municipal-level obligations, registered and adjusted city by city. Individual Income Tax is a national tax administered through provincial and local tax bureaus, with monthly withholding and an annual true-up. PIPL is a national data protection law, effective since November 2021, that governs how employee personal information is collected, stored, used, and — most consequentially for a foreign HQ — moved across China's border.
A China Employer of Record exists precisely because a foreign company without a Chinese entity has no legal vehicle to register for any of these three systems on its own. The EOR becomes the local employer of record: it holds the labor contract, runs the registrations, remits the contributions and taxes, and processes the underlying employee data. That consolidation is the value proposition — but it does not mean the foreign HQ has zero remaining obligations. It means the obligations shift in nature, from "who registers and files" to "what does HQ do with the data and reports it receives back."
The rest of this guide treats these three systems as one operating stack, because that is how a China EOR actually runs them month to month — not as three unrelated line items in a services brochure.
2. Five Insurances and One Fund: Coverage, Contribution Bases, and Employer Cost
China's mandatory social insurance system is commonly called "五险一金" — five insurances and one fund. Every employer registered in mainland China, including an EOR acting as employer of record, must enroll each employee and contribute monthly. The five insurances are:
Alongside the five insurances, the housing fund (住房公积金) is a mandatory savings scheme that both employer and employee pay into, which the employee can later withdraw for home purchase, renovation, or rent, or upon retirement.
Contribution bases are set city by city, and they are not static. Each municipality publishes its own minimum and maximum contribution bases, typically tied to the prior year's local average wage, and most cities reset these bases once a year — commonly each July. An employee's actual contribution base is usually their gross monthly salary, subject to that city's floor and ceiling, which means the same job title and salary can generate materially different contribution amounts in Shanghai versus a second-tier city, and the same employee's contribution can rise automatically at the annual reset even if their salary hasn't changed. Foreign HQs budgeting on a static per-employee cost figure are almost always working from stale numbers within twelve months — see our detailed breakdown in EOR China Costs in 2026: How Rising Contribution Bases in Shanghai, Beijing, and Regional Cities Affect Your Payroll Budget.
On the employer side, total mandatory contributions typically run in the range of roughly 28% to 32% on top of gross salary, depending on the city, the specific insurance rates that municipality sets, and the housing fund percentage the employer elects (within a locally permitted band). This is illustrative rather than fixed — Guangzhou, Shenzhen, Beijing, and Shanghai each set their own combined employer rate, and several major cities have raised bases again for 2026, which we track in China EOR Alert: Multiple Chinese Cities Raise 2026 Social Insurance Contribution Bases.
One frequent point of confusion: not every payment to an employee counts toward the social insurance base. Statutory bonuses, allowances, and certain benefits-in-kind are treated differently depending on how they're structured and documented — a distinction that catches out many first-time foreign employers. We cover this in depth in China EOR Guide: What Counts as "Wages" for Social Insurance?
Knit practical tip #1: Don't quote a China hiring cost to your finance team as a single fixed percentage and leave it there. Because contribution bases reset annually (commonly each July) and several cities adjust rates independently, a China EOR should be re-running your employer cost calculation at least once a year per employee, not just at hire date. Build the reset into your annual budget cycle, not your onboarding checklist.
3. IIT Mechanics: Progressive Rates, Cumulative Withholding, and Annual Reconciliation
China's Individual Income Tax on comprehensive income (which includes wages, salaries, and most employment-related compensation) is progressive, running from 3% to 45% across seven brackets. Higher marginal rates apply only to the portion of income within each bracket — a structure similar to many Western income tax systems, but administered through a mechanism that surprises many foreign payroll teams: the cumulative withholding method (累计预扣法).
Under the cumulative method, an employer does not calculate January's withholding independently of February's. Instead, each month the employer calculates cumulative taxable income from January 1 through the current month, applies the progressive rate table to that cumulative figure, subtracts cumulative deductions already claimed (the standard monthly deduction, social insurance contributions, and applicable special additional deductions), and then subtracts tax already withheld in prior months of the same year. The result is that an employee's withheld tax amount is typically low in January and rises through the year as cumulative income climbs into higher brackets — a pattern that looks like an error to anyone unfamiliar with the mechanism, but is simply how the system is designed to work.
For employees who are Chinese tax residents with only one source of employment income and no special circumstances, this monthly cumulative withholding is often close to their final annual liability. But many employees don't fit that simple case, which is where annual reconciliation comes in.
Annual reconciliation (汇算清缴), typically conducted between March and June of the following year, is required for tax residents who: have income from more than one employer, have income types beyond standard wages that need consolidating, want to claim itemized special additional deductions not fully captured during the year, or had withholding that doesn't match their actual annual liability for other reasons. The special additional deductions available under current rules include children's education, housing loan interest or housing rent, care for elderly dependents, continuing education, and medical expenses for serious illness. An EOR's payroll function handles the monthly cumulative withholding as a matter of course; the annual reconciliation filing is a separate process that the employee (with support from a competent EOR or their own tax advisor) typically needs to complete directly with the tax authority.
Knit practical tip #2: If an employee tells your HR team "my take-home pay dropped for no reason" mid-year, the first thing to check is whether cumulative withholding pushed them into a higher effective bracket — not whether payroll made an error. A short explanation of the cumulative method, ideally provided at onboarding, heads off a surprising number of escalations.
4. Foreign Employees: Tax Residency, the Six-Year Rule, and Fringe Benefit Exemptions
Foreign nationals working in China are subject to the same progressive IIT structure, but three rules specifically shape their tax exposure, and getting them wrong is one of the more expensive mistakes a foreign employer can make.
- The 183-day residency test. An individual who is present in mainland China for 183 days or more in a calendar year is generally treated as a Chinese tax resident for that year, which brings China-source income — and potentially certain foreign-source income — into scope for IIT. Someone present fewer than 183 days is generally taxed only on China-source income, subject to further rules on where duties are performed and who pays.
- The six-year rule. Under the current IIT law, a foreign individual who has been a Chinese tax resident (183+ days per year) for six consecutive years, without a single absence from China exceeding 30 days in any of those years, becomes taxable on worldwide income starting in the seventh consecutive resident year. A qualifying break — either a single trip abroad longer than 30 days, or falling below 183 days of residency in any year — resets the six-year count. This rule rewards deliberate travel planning for long-tenured expatriate assignments and is frequently mismanaged by companies that don't track cumulative residency days closely.
- Tax-exempt fringe benefits for qualifying foreign employees. Separately from the special additional deductions available to residents generally, China has maintained a preferential policy allowing qualifying foreign individuals to receive certain employer-provided benefits — housing rental, children's education costs, language training, and home leave (return trips), among others — as tax-exempt fringe benefits rather than taxable cash income, provided they are properly structured, documented, and reported. This policy has been extended multiple times by China's Ministry of Finance and State Taxation Administration rather than made permanent, and as of the most recent confirmed extension it runs through the end of 2027.
- Treat this as a policy to reconfirm at each renewal point, not a fixed feature of the tax code — foreign employers who assume it will simply continue indefinitely have been caught out before when extensions were announced late or came with adjusted conditions.
Knit practical tip #3: For a longer-tenured expatriate, run the six-year clock and the fringe-benefit exemption status as two separate line items in the annual compliance review, not folded into general payroll. They interact with each other (residency status affects which deductions and exemptions are even available) but they expire and reset on independent triggers.
5. PIPL and Cross-Border HR Data: What Changes When You Pull Reports to HQ
China's Personal Information Protection Law (PIPL), effective November 1, 2021, is the country's comprehensive data privacy statute, and it applies directly to the employee personal information an EOR collects to run payroll, social insurance, and IIT — names, ID or passport numbers, bank details, salary history, tax records, health information tied to insurance claims, and more.
Domestic processing of this data inside mainland China — the routine business of running payroll and filing with insurance and tax authorities — is governed by PIPL's general rules on lawful basis, purpose limitation, and data minimization, which a competent, locally licensed EOR builds into its standard operating procedures as a matter of course.
Cross-border transfer is where PIPL becomes materially harder, and where foreign HQs most often assume the problem has been solved for them. Moving employee HR or payroll data — even a routine headcount dashboard, a compensation report, or an HR system sync — from mainland China to servers, systems, or personnel outside mainland China generally requires one of three legal mechanisms, chosen based on data volume and sensitivity:
- A CAC security assessment, required for large-scale processors or transfers involving "important data" or sensitive categories above regulatory thresholds — the most stringent route, involving direct review by the Cyberspace Administration of China.
- Personal information protection certification, obtained from a recognized certification body, generally used by corporate groups moving data within a multinational structure under a consistent internal framework.
- A filed standard contract (China's SCC), the mechanism most small-to-mid-volume employers rely on — a government-template contract between the China-side data handler and the overseas recipient, filed with the provincial cyberspace authority.
Which mechanism applies depends on thresholds tied to how many individuals' data is being transferred and whether any of it is classified as sensitive personal information. Before relying on any of the three mechanisms, the data handler is generally expected to complete a Personal Information Protection Impact Assessment (PIPIA) — an internal risk assessment evaluating the necessity, proportionality, and security of the proposed transfer. In many cases, the transfer also requires separate, explicit consent from the employee specifically for the cross-border transfer — distinct from, and in addition to, the general consent obtained for ordinary domestic HR data processing.
This is the piece foreign HQs most consistently underestimate. An EOR handling payroll locally does not, by itself, make every subsequent movement of that data compliant. The moment HQ's finance team pulls a live payroll export into a global HRIS, or a regional controller builds a headcount dashboard sourced from China payroll data, that transfer is happening — and it needs its own legal basis, regardless of how compliant the underlying China-side processing is.
Knit Client Snapshot: A European industrial equipment manufacturer engaged an EOR to hire a small technical support team in China while its own entity registration was pending. The EOR ran social insurance, housing fund, and monthly IIT withholding correctly from day one. Eighteen months in, the company's global HR system began pulling automated monthly headcount and compensation summaries from China directly into a centralized dashboard used by regional HR business partners across three continents — a workflow set up by IT without HR or legal sign-off. No PIPIA had been conducted for this specific data flow, and no separate cross-border consent had been collected from the China-based employees beyond their original onboarding paperwork. When the company's data protection lead flagged the gap during an unrelated internal audit, the fix required retroactively documenting the transfer mechanism, running a PIPIA, and collecting fresh explicit consent from each affected employee — work that would have taken a fraction of the time if scoped before the dashboard went live. The lesson the company took away: an EOR's compliance covers what happens inside China; anything HQ pulls out still needs its own answer.
6. Who Handles What: EOR Responsibilities vs. HQ Decisions
The clearest way to think about the division of labor is that the EOR is the on-the-ground operator for all three systems, while the foreign HQ retains a smaller but real set of decisions — mostly around what it does with data and reports once it leaves China.
A well-run Compliance Management function, whether provided as part of an EOR engagement or layered on top of one, is what keeps this division from becoming a gap — flagging, for instance, the moment a new internal reporting workflow starts moving China employee data across the border without the paperwork behind it.
7. Common Mistakes Foreign Employers Make
- Assuming the EOR removes all PIPL obligations. An EOR absorbs the PIPL burden for the data processing it performs to run payroll and statutory filings inside China. It does not automatically cover data your own systems pull out of China afterward — that transfer needs its own legal mechanism, PIPIA, and often its own employee consent, regardless of how compliant the underlying EOR relationship is.
- Assuming IIT is a flat rate. China's IIT on comprehensive income is progressive (3%–45%), calculated through the cumulative withholding method rather than a flat monthly percentage. Quoting an employee's "tax rate" as a single number, or assuming January's withholding predicts December's, produces budget and communication errors that surface repeatedly through the year.
- Assuming contribution bases don't change year to year. Most Chinese cities reset social insurance and housing fund contribution bases annually — commonly each July — tied to updated local average wage data. A per-employee cost figure that isn't refreshed at least annually will understate true employer cost, often by a meaningful margin in high-growth cities.
- Treating the foreign fringe-benefit tax exemption as permanent. This policy for qualifying foreign employees has been extended multiple times rather than made a fixed feature of the law. Structuring long-term expatriate compensation around it without a process to reconfirm its status at each extension point creates exposure if the policy lapses or changes conditions.
- Skipping the PIPIA before setting up a new cross-border data flow. Whether it's a new HRIS integration, a compensation benchmarking exercise, or a routine board reporting pack, any new pipeline moving China employee data abroad should trigger an impact assessment and a documented transfer mechanism before it goes live — not after an audit finds it.
8. Frequently Asked Questions
Q1: Does using a China EOR mean my company has zero social insurance or IIT obligations?
Your company has no direct registration or filing obligation — the EOR is the legal employer handling those. What your company retains is the responsibility to structure compensation, bonuses, and benefits in a way the EOR can administer correctly, and to budget for changes like annual contribution base resets.
Q2: How often do social insurance contribution bases change?
Most Chinese municipalities reset contribution bases once a year, commonly each July, based on updated local average wage statistics. Some cities may adjust on a different cycle or mid-year for specific insurance categories, so this should be confirmed against current local rules rather than assumed to be static.
Q3: What is the difference between monthly IIT withholding and annual reconciliation?
Monthly withholding under the cumulative method is calculated and remitted by the employer (or EOR) every pay cycle throughout the year. Annual reconciliation (汇算清缴), typically filed between March and June of the following year, is a separate process — required for employees with multiple income sources, additional deductions to claim, or a mismatch between withheld and actual annual tax liability.
Q4: Is the tax-exempt fringe benefit policy for foreign employees permanent?
No. It has been extended multiple times by China's Ministry of Finance and State Taxation Administration, most recently through the end of 2027 as of the last confirmed extension. It should be treated as a policy to reconfirm at each renewal point, not a permanent feature of the tax code.
Q5: Does PIPL apply even if my company has no legal entity in China?
Yes, in the sense that any data processing happening on the ground in China — which your EOR performs on your behalf — is subject to PIPL regardless of where your company is incorporated. And any transfer of that data outside China, initiated by your company or your EOR, is subject to PIPL's cross-border transfer rules.
Q6: Do I need separate consent for cross-border data transfer, or does general employment consent cover it?
In many cases, separate, explicit consent specifically for the cross-border transfer is required, distinct from general consent to process employee data domestically. This should be assessed transfer by transfer, ideally as part of a documented PIPIA, rather than assumed to be covered by onboarding paperwork.
Q7: What is the six-year rule, and does it apply to short-term assignees?
It applies to foreign individuals who are Chinese tax residents (183+ days per year) for six consecutive years without a qualifying break. Once triggered, worldwide income becomes taxable from the seventh consecutive resident year. Short-term assignees who stay under 183 days per year, or who take a single absence of more than 30 days within the six-year window, generally don't trigger it — but the days need to be tracked deliberately, not assumed.
9. Glossary of Key Terms
- PIPL (Personal Information Protection Law): China's comprehensive data privacy statute, effective November 2021, governing the collection, use, storage, and cross-border transfer of personal information, including employee HR and payroll data.
- IIT Cumulative Withholding Method (累计预扣法): The mechanism Chinese employers use to calculate monthly Individual Income Tax withholding on employment income, based on year-to-date cumulative income and deductions rather than a flat monthly calculation.
- 汇算清缴 (Annual Reconciliation): The annual IIT true-up process, typically conducted between March and June of the following year, reconciling actual annual tax liability against tax withheld during the year for residents with multiple income sources or additional deductions to claim.
- Five Insurances and One Fund (五险一金): China's mandatory social insurance and housing fund system, comprising pension, medical, unemployment, work injury, and maternity insurance, plus the housing provident fund.
- PIPIA (Personal Information Protection Impact Assessment): A required risk assessment evaluating the necessity, proportionality, and security safeguards of a proposed personal information processing activity, particularly before a cross-border data transfer.
- Standard Contract (SCC): China's government-template contractual mechanism for cross-border personal information transfer, filed with the provincial cyberspace authority, generally used for small-to-mid-volume transfers that don't require a full CAC security assessment.
Tax rates, contribution base figures, policy extension dates, and data-transfer thresholds referenced in this article reflect rules understood to be current as of the last update above. Chinese tax, social insurance, and data privacy regulations change at the national and municipal level — sometimes with limited advance notice — and figures such as the fringe-benefit exemption extension date should be independently reconfirmed against current official guidance or with a licensed professional before being relied on for a specific compliance decision.
10. Related Reading
- EOR China Costs in 2026: How Rising Contribution Bases in Shanghai, Beijing, and Regional Cities Affect Your Payroll Budget
- China EOR Guide: What Counts as "Wages" for Social Insurance? A 2026 Compliance Explainer for Foreign Employers
- China EOR Alert: Multiple Chinese Cities Raise 2026 Social Insurance Contribution Bases — What Foreign Employers Must Know
- Hiring in China: What to Know and Why Use an EOR?
About Knit
Knit People is a global compliance employment and payroll provider founded in Canada in 2015, with a leadership and delivery team built around professional accountants. Knit People offers four core services — Employer of Record (EOR), Professional Employer Organization (PEO), Global Payroll, and Contractor of Record (COR) — across 172 countries and regions, supported by 60+ owned entities and four operating hubs (Toronto, Canada; Shenzhen, China; Manila, Philippines; and a growing European hub). Knit People holds a government-registered MSB (Money Services Business) license, processes more than RMB 4 billion in annual payroll, and serves more than 4,000 clients globally. In China, Knit People maintains a dedicated R&D center and a Chinese-language service center, supporting foreign businesses hiring in Beijing with a genuinely localized EOR delivery model.
Website: knitpeople.com | Contact: hello@knitpeople.com
Disclaimer
Knit is not a law firm, and this article is for general informational purposes only.
.jpg)
.svg)
.svg)
.svg)
.svg)
.svg)