Cybersecurity and data-compliance due diligence has evolved from a routine risk-mitigation exercise into a decisive factor that can determine the success or failure of mergers and acquisitions involving Chinese targets. This article examines the legal framework underpinning that shift, identifies five core areas of diligence that buyers must scrutinise, analyses recent enforcement actions and landmark