Open Source Software IP Compliance Guide in China for Foreign Developers

I. The Nature of Open Source Software Intellectual Property Under China's Legal Framework

Open source software is not an independent legal concept in China, but rather a special licensing model under the framework of copyright law. China's current Copyright Law classifies computer software as a protected type of work, with both source code and object code enjoying copyright protection. This means that even when software is released as "open source," its copyright still belongs to the original author or contributors — open source licenses do not waive rights but grant usage permissions under specific conditions.

For foreign developers, it is important to note that Chinese law also protects foreign works. Article 2 of the Copyright Law explicitly stipulates that works of foreigners or stateless persons are protected under this Law if they enjoy copyright under agreements concluded between their country or habitual residence and China, or under international treaties to which both are party. China is a signatory to the Berne Convention and the Universal Copyright Convention, so open source works from member countries automatically receive protection in China without requiring additional registration.

In Chinese judicial practice, courts have affirmed the legal validity of open source licenses. In 2021, the Supreme People's Court of China confirmed in a relevant case that open source licenses such as the GNU General Public License (GPL) have contractual nature, and that violating license terms constitutes breach of contract or even infringement. This means foreign developers can assert open source licenses as legally binding agreements when enforcing their rights in China.

A key misconception is that "open source equals free." In the context of Chinese law, open source does not mean waiving the right to commercial use, nor does it mean one may use the software arbitrarily without complying with licensing terms. Violating license terms — such as failing to retain copyright notices or failing to disclose modified source code — may expose the violator to both copyright infringement and breach of contract lawsuits in China.

Table 1: Chinese Courts' Attitude Toward Common Open Source Licenses

II. Four Core Red Lines for Open Source Compliance in China

Foreign developers participating in or using open source projects in China should pay particular attention to the following four red lines, which represent key areas prone to disputes in Chinese legal practice.

First, integrity of copyright notices. Nearly all mainstream open source licenses require retaining the original copyright notice. In Chinese judicial practice, deleting or altering copyright notices is considered a clear act of infringement. For example, embedding GPL code in commercial software while removing the original author's copyright notice — even if the defendant claims "lack of knowledge" — courts tend to find the defendant at fault. The correct approach is to clearly display the original author's information and license type in multiple locations such as the software release page, source code header comments, and installation interface.

Second, definition of derivative works and the open source obligation. This is the most complex area of open source compliance in China. Taking the GPL as an example, its "copyleft" clause requires that any derivative work containing GPL code must also be released under the GPL. China's standard for determining "derivative works" differs somewhat from Europe and the United States. Chinese courts tend to assess this from two dimensions: "substantial similarity" and "functional dependency." A typical Chinese case involved a company that used a GPL-licensed Linux kernel driver in its embedded system but released the entire system firmware as closed-source binaries; the court found this violated the GPL and ordered the source code to be disclosed.

Third, compliance with patent clauses. Patent grant provisions in open source licenses (such as Article 3 of Apache 2.0) have legal effect in China. China's Patent Law allows rights holders to grant others the right to practice a patent through licensing, and open source licenses serve as a vehicle for such grants. It is important to note that the determination of "patent infringement" in China applies the "all-elements rule" — if the accused technical solution contains all the technical features recorded in the patent claim, it constitutes infringement. Therefore, if a foreign contributor joins a project using Apache 2.0, the patent grant provisions of that project may automatically cover their patents in China.

Fourth, attribution rights and goodwill protection. China's Copyright Law protects the author's right of attribution — that is, the right to decide whether and how to be credited on the work. In the open source context, if a contributor explicitly requests attribution in a particular place but is ignored, this may constitute infringement of attribution rights. Additionally, China's Anti-Unfair Competition Law protects commercial goodwill, and improper use of an open source project's name or suggesting an official affiliation may trigger an anti-unfair competition lawsuit.

III. Compliance Path for Foreign Developers Contributing and Releasing in China

Foreign developers who wish to release their own open source projects in China or participate in open source projects within the Chinese community should follow a clear compliance path.

Step one, choose an appropriate license. The Chinese developer community has varying levels of understanding of different licenses. MIT and Apache 2.0 have the highest acceptance in China due to their simplicity and clarity, while the GPL family deters many commercial companies due to its "copyleft" clause. If your goal is to maximize adoption in China, MIT or Apache 2.0 are recommended. If you want to ensure that derivative works also remain open source, the GPL should be chosen. It is important to note that once a license is selected, subsequent changes are extremely difficult without the consent of all contributors — a principle also recognized by Chinese courts in civil cases.

Step two, establish a clear Contributor License Agreement (CLA). For open source projects operating in China, especially those with a corporate background, it is strongly recommended to introduce a Contributor License Agreement. The purpose of a CLA is to clarify that contributors grant rights to the project host, avoiding future copyright disputes over someone's contributed code. There have been multiple cases in China where large open source projects lost contributors due to the absence of a signed CLA. It is recommended to execute CLAs through electronic signatures — China's Electronic Signature Law recognizes that reliable electronic signatures have the same legal effect as handwritten signatures.

Step three, be aware of China's content review requirements. Hosting and distributing open source projects within China requires compliance with Chinese laws and regulations, including the Cybersecurity Law and the Data Security Law. Although these laws primarily target network operators, discussion forums, documentation, and code comments in open source projects may contain restricted content. Foreign developers should understand that when publishing projects on Chinese open source platforms such as Gitee, the platform will review content in accordance with Chinese laws and regulations. It is recommended to explicitly include a code of conduct in the project's README and CONTRIBUTING files to avoid politically sensitive, pornographic, violent, or other prohibited content.

Step four, register software copyright with the China Copyright Protection Center. Although copyright arises automatically upon completion of creation, a Software Copyright Registration Certificate is the strongest evidence of rights holder identity and ownership in Chinese litigation. Foreign developers may entrust a Chinese agency to handle this registration. The registration includes source code (30 pages from the beginning and 30 pages from the end) and a user manual, with total fees ranging from approximately RMB 500 to 1,000 yuan and a processing period of approximately 30 to 60 working days. Holding a Chinese Software Copyright Registration Certificate will significantly simplify the burden of proof when enforcing rights in Chinese courts.

IV. Commercial Use Compliance for Open Source Software in B2B Scenarios

Foreign developers who commercially utilize open source software in China — such as embedding it in products, providing SaaS services, or developing commercial versions based on open source projects — need to address the following specific compliance issues.

SaaS and the "Application Service Provider" (ASP) clause. Some open source licenses, such as AGPL 3.0, specifically include provisions for network services, requiring that companies providing services over a network must also disclose their modified source code. Chinese SaaS companies often overlook this requirement. If a foreign developer discovers that a Chinese SaaS competitor is using their AGPL code without disclosing source code, they may assert their rights in accordance with the law. Relevant cases have already entered litigation in China, and although no final judgments have been rendered, the legal community generally expects that AGPL terms will be upheld in Chinese courts.

Supply chain compliance for open source components. When developing commercial software in China that uses multiple open source components, each component's license must be reviewed. China's software supply chain management is still in its early stages, and many enterprises lack systematic open source compliance management systems. For foreign developers, it is recommended to use SBOM (Software Bill of Materials) tools to systematically catalog open source components within their products. China's Cybersecurity Law imposes security review requirements on network products and services procured by operators of Critical Information Infrastructure. If your open source components are used in such scenarios, you need to provide a complete component list and license information.

Separation of commercial and community editions. Many Chinese companies adopt a model of "open source core + commercial plugins." The core compliance requirement for this model is that commercial plugins must constitute clearly independent copyrighted works separate from the open source core, rather than simply closing off features that were originally open source. Chinese courts will examine the degree of functional coupling and code dependency between the two. If a commercial plugin merely calls the internal API of the open source core instead of interacting through a clearly defined interface layer, it may be deemed part of the same derivative work, thereby triggering the GPL's copyleft obligation.

Table 2: License Selection Recommendations by Use Scenario

V. Enforcement Path When Infringement Is Discovered

When foreign developers discover that their open source code is being used infringingly in China, they may adopt a graduated enforcement strategy.

Step one, send a lawyer's letter. When determining damages, Chinese courts consider whether the rights holder fulfilled their notification obligation beforehand. Sending a formal lawyer's letter is not only the starting point for enforcement but also favorable evidence in subsequent litigation. The lawyer's letter should include: proof of rights (e.g., China Software Copyright Registration Number), a description of the infringing act (with screenshots or links as evidence), and specific demands and deadlines for ceasing infringement. The standard format and content requirements for lawyer's letters in China differ from those in Europe and the United States; it is recommended to have the letter issued by a local Chinese law firm.

Step two, file a complaint with the National Copyright Administration of China (NCAC). The NCAC and its local branches accept administrative complaints regarding copyright infringement. The advantages of administrative complaints include high efficiency (results typically issued within 60 days) and low cost (no complaint fee required). Furthermore, an administrative enforcement decision can serve as evidence in civil litigation. The disadvantage is that compensation amounts are typically far lower than those awarded in court judgments.

Step three, file a civil lawsuit. China has specialized intellectual property courts located in cities such as Beijing, Shanghai, Guangzhou, and Shenzhen. Litigation procedures typically include: case filing (decision on acceptance within 7 days), evidence exchange, court hearing, and first-instance judgment (usually within 6 to 12 months). If successful, available remedies include: injunctive relief (ceasing infringement), damages (calculated based on actual losses or infringer's profits, with punitive damages available in serious cases), and elimination of adverse effects. The 2020 revision of the Copyright Law raised the statutory damages cap from RMB 500,000 to 5,000,000 yuan, providing stronger compensation protection for foreign developers enforcing their rights.

Step four, apply for a pre-litigation injunction. In emergency situations, rights holders may apply to the People's Court for a preservation order before filing a lawsuit, requesting that the respondent immediately cease using the infringing software. Chinese courts are increasingly proactive in reviewing pre-litigation injunctions, especially in commercial scenarios where open source code is used in serious violation of license terms. The applicant must provide security, typically in an amount equivalent to the potential loss or the infringer's profits.

VI. Long-Term Strategies for Foreign Developers in China's Ecosystem

Finally, for foreign developers who wish to deeply engage with China's open source ecosystem, the following long-term strategies are worth considering.

Establish a localized legal documentation system. Translating the project's license and development guidelines into Chinese has significant value in Chinese legal practice. Although a Chinese translation does not have legal force, if a defendant in a Chinese court claims they "did not understand the English license terms," the Chinese version can serve as a reference for the judge to understand the meaning of the clauses. A more practical approach is to include a Chinese-language FAQ or License Guide in the project that clearly explains key terms.

Participate in standard-setting within China's open source community. China is gradually building its own open source compliance standard system, such as the group standards led by the China Electronics Standardization Institute. Foreign developers can participate in the discussion and formulation of these standards to ensure alignment between Chinese standards and mainstream international open source practices. Incorporating favorable terms into Chinese standards is far more effective than reacting after the fact.

Monitor compliance requirements for cross-border data transfer. If a foreign developer's open source project involves data processing functions (such as log collection or user behavior analysis), attention must be paid to the cross-border data transfer requirements under the Data Security Law and the Personal Information Protection Law. Designing data processing functions in the code as opt-in and clearly documenting recommended configurations for localized data processing in the documentation can effectively reduce potential risks.

Establish a localized legal support mechanism in China. For maintaining open source projects in China, it is recommended to establish a retainer relationship with a Chinese law firm, typically costing between RMB 30,000 and 100,000 yuan per year. This investment can create value in multiple scenarios: assisting in reviewing contributor agreements, drafting legal disclaimers for project FAQs, helping respond to unexpected infringement incidents, and regularly updating compliance guidelines. In China, IP law firms with experience working with foreign clients are mainly concentrated in Beijing, Shanghai, Guangzhou, and Shenzhen; priority should be given to teams with actual litigation experience in the computer software field.

In summary, China is a market with increasingly stringent intellectual property protection, and the legal status of open source software is being progressively clarified in judicial practice. As long as foreign developers earnestly understand the compliance requirements under China's legal framework and skillfully use the explicit provisions of licenses to protect their rights, they can both safely disseminate technology and obtain the legal protection they deserve in the world's largest software market. Compliance is not a shackle on the path of innovation — it is a passport to a sustainable ecosystem.