Article 7: All organisations and citizens must support, assist, and cooperate with national intelligence work.
China's National Intelligence Law (2017) legally requires every Chinese company and citizen to hand over data and provide access to intelligence agencies when asked — with no public court process and no right to refuse.
Article 7: 'All organisations and citizens shall, in accordance with the law, support, cooperate with, and collaborate in national intelligence work.' Article 14 allows intelligence agencies to demand that companies 'provide necessary support, assistance and cooperation.' There is no known mechanism to refuse or appeal.
Any device made by a Chinese company — TP-Link, Xiaomi, Huawei, DJI, Tuya, Roborock — operates under this law. TP-Link routers were identified by CISA as infrastructure in Volt Typhoon, a Chinese state-sponsored campaign targeting US critical infrastructure. Tuya's IoT platform connects 116 million devices globally. The US has banned Huawei and is investigating TP-Link.
TP-Link routers used as attack infrastructure in Volt Typhoon targeting US water, energy, and communications systems (CISA advisory, 2023). Huawei effectively banned from US 5G networks. DJI drones facing US ban. US Executive Order restricts Chinese-origin connected vehicle components from 2027 (software) and 2030 (hardware).