Supplier Debarment, Sanctions and Blacklist Screening on Changzhou Manufacturer Websites: How Should They Be Accepted?

Direct answer: A supplier debarment, sanctions and blacklist screening page is not a line saying "search the company name before cooperating". The website page should state: which lists are checked (business abnormality, serious illegal and dishonest list, dishonest judgment debtors, Unreliable Entity List, dual-use watch/control lists, countermeasure list, foreign sanctions lists required by customers/banks, internal blacklist); who is screened (contracting entity, parent/affiliates, ultimate beneficial owner/directors, subcontractors, payment entity); when (before onboarding, before order/contract, annual review, ownership/name/address/country changes, adverse media); how hits are handled (initial match, false-positive clearance, escalation, suspension/conditional approval/rejection, remediation/exit, reporting); what evidence is kept (query date, list version, search terms, results, reviewer, decision, retention); and what the contract says (representations, change notice, audit, suspension/termination, flow-down). On the law: the Measures for the Administration of the List of Entities with Serious Illegal and Dishonest Conduct in Market Regulation (SAMR Order No. 128 of 2026, effective 15 July 2026) provide for listing (Article 3), management measures (Article 18), information sharing (Article 19), revocation (Article 20) and credit repair (Article 21); the Provisions on the Unreliable Entity List (Articles 2, 10 and 12) provide for measures against foreign entities and special transaction applications; the Regulations on Export Control of Dual-Use Items (Articles 26 to 29) provide for the watch list, control list and transaction restrictions, and Article 27 requires end-user/end-use records to be kept for at least five years; the Provisions on Implementing the Anti-Foreign Sanctions Law (Articles 3, 13, 16 to 18) provide for the countermeasure list, implementation duties, exception applications and the prohibition on executing or assisting foreign discriminatory restrictive measures. Information is current to 2026-11-07. This is a review of public rules and page practice, not legal, sanctions, export-control or compliance advice; the law, list announcements, contract and company policy control.

This guide is for procurement, supplier management, compliance, legal, finance, EHS and website teams at equipment, electronics/electrical, automotive, medical device, hardware, chemical, packaging and export manufacturers in Changzhou and nearby areas. This page most often misses list versions, affiliates, ultimate beneficial owners, false-positive handling and re-screening, ending up as "suppliers must have no illegal or dishonest records".

How does this page relate to export control, AVL, code of conduct, financial risk and exit pages?

The supplier debarment, sanctions and blacklist screening page answers "who is screened, which lists, how often, what happens on a hit and what evidence is kept"; the export control and end-user statement page answers "whether the item is controlled, the customer/end user/end use, licensing and customs"; the supplier onboarding/AVL page answers "qualification, capacity, audit questionnaire and confidentiality"; the supplier code of conduct page answers "labour, safety, environment and ethics requirements"; the financial risk page answers "financial deterioration, supply disruption and exposure"; the exit page answers "termination, notice, last purchase and transition". The screening page is "entity list risk plus evidence chain"; an export-control or onboarding page cannot replace it.

Common breakpoints: only the contracting company is checked, not the parent or ultimate beneficial owner; screening is done once and never reviewed; free search is used without recording the list version; a same-name false positive is rejected outright; there is no basis for suspension/exit after a hit; subcontractors and payment entities are not checked; the contract lacks change notice and audit rights; the public page lists suppliers or screening results. Separate "lists—scope—frequency—hits—evidence—contract"; then procurement, compliance, legal and finance share one playbook.

This page map is editorial; the law, list announcements, contract and company policy control.

Which lists should be checked?

At least five groups: (1) domestic credit and penalties—the business abnormality list, the serious illegal and dishonest list and market-regulation penalties published through the National Enterprise Credit Information Publicity System; (2) court enforcement—judgment debtors and dishonest judgment debtors published through the China Enforcement Information Disclosure Network; (3) trade and export control—the Unreliable Entity List, the dual-use watch list and control list; (4) countermeasures—the countermeasure list and implementing provisions; (5) foreign sanctions/export control—OFAC, EU, UN and other lists required by customers, banks, insurers or destination countries; (6) internal—group blacklist, supplier exit list, prior claims/integrity incidents. The legal effect differs: some lists are a management measure or material consideration, while others directly restrict or prohibit transactions; they cannot be merged into one "blacklist".

Acceptance checks: list name; issuing authority; query channel; covered persons; legal effect; update frequency; internal owner. Common gaps: only "dishonesty" is checked; the serious illegal and dishonest list is treated as a criminal blacklist; the Unreliable Entity List or dual-use lists are not checked; foreign lists rely on third-party summaries; the internal blacklist has no exit/appeal; the list version is not recorded.

This list taxonomy is editorial; the official list, announcement and legal effect control.

Who is within screening scope?

Do not check only the company name on the contract. At minimum cover: the contracting entity; parent/group/affiliates; ultimate beneficial owner, directors, supervisors, senior managers and authorised representatives; subcontractors, labour, logistics, installation and inspection parties actually performing; registered address, operating address, plant/warehouse; payment entity and bank account (to prevent third-party collection); and, for exports, the importer/end user/end use. Former names, brands, trademarks and previous names should also be searched to avoid "shell" evasion. Screening individuals involves personal information; apply minimum necessity, a clear purpose and access control.

Acceptance checks: entity; parent/affiliates; UBO/directors; subcontractors; address; payment entity; former names; end user; personal information compliance. Common gaps: only the contracting company; no parent; no UBO; no subcontractor; payment entity differs from the contract; former names missed; personal data without authorisation or retention.

This scope is editorial; personal information processing follows PIPL minimum necessity and access control.

When is screening done and how often is it reviewed?

At least: before onboarding/first cooperation; before the first order or contract; annual review; on changes of ownership/control/name/address/legal representative; when adding a country/region, bank, currency or end use; on adverse media, penalties, litigation or a whistleblower report; when lists are updated or regulators issue announcements; when a government project/customer/bank requires it; and on payment anomalies or a change of payment account. One screening at onboarding is not enough: lists and ownership change, and suppliers may change shells, banks or subcontractors. Frequency should follow risk tier: high risk quarterly/semi-annually; medium/low risk annually plus event triggers.

Acceptance checks: onboarding; contract/order; annual; change; new country/currency; adverse event; list update; customer requirement; payment anomaly; risk tier. Common gaps: onboarding only; no annual review; ownership change not checked; new country not checked; list updates not monitored; payment change not checked; high-risk frequency too low.

Timing and frequency are editorial; risk tier, contract, customer and regulatory requirements control.

How should a hit be handled?

First distinguish "confirmed hit, possible hit and false positive": compare name, unified social credit code/registration number, address, UBO, identity document/date of birth and country/region; a same-name match is not a reason to reject. For a confirmed hit, escalate according to the list type and measures: for the serious illegal and dishonest list, check the listing facts, whether the penalty was revoked and credit repair; for the Unreliable Entity List, check the announced measures and the special transaction application; for the dual-use control list, check the prohibition/restriction and exception application; for the countermeasure list, check the scope of measures. Options include suspension, conditional approval (alternative supplier, no restricted items, additional audit), rejection, exit, remediation and reporting. Every decision needs a basis, approval and record.

Acceptance checks: initial match; false-positive clearance; escalation; risk tier; suspension/conditional/rejection; remediation/exit; reporting; approval; review. Common gaps: same name rejected outright; no escalation; no false-positive record; open-ended suspension; conditional approval without evidence; exit without alternative; failure to report; decision without approval.

Hit handling is editorial; the measures and reporting duties follow the list announcement, law, contract and regulator.

What evidence should be kept, and for how long?

Each screening should keep at least: query date and time; list name/version/announcement link; search terms (Chinese/English, former names, codes); matching rule (exact/fuzzy); query results (screenshot/export/receipt); initial reviewer and second reviewer; basis for false-positive clearance; risk tier and decision; approver; next review date. For dual-use items, end-user/end-use certificates, contracts, invoices, books, vouchers and business correspondence must be kept for at least five years under Article 27 of the Dual-Use Items Export Control Regulations; other records follow the contract, customer and company policy. A screenshot should include the date, URL and context; a single image cannot prove what was searched.

Acceptance checks: date; list version; search terms; matching rule; results; review; false-positive basis; decision/approval; next review; retention. Common gaps: screenshot only; no list version; no search terms; no second review; no false-positive basis; no approval; retention too short; lost after staff turnover or system change.

This record list is editorial; dual-use records follow Article 27 (at least five years), others follow contract/policy.

What screening clauses should the contract contain?

At minimum: supplier representations and warranties (not on applicable lists, no corruption/fraud/sanctions investigation or penalty); change notice (listing, ownership/control/name/address/bank account change, litigation/investigation); screening cooperation and audit rights; suspension/termination/replacement rights; flow-down to subcontractors and affiliates; liability/indemnity for breach; data and personal information terms; and, if a supplier asks the buyer to comply with foreign sanctions/restrictive measures, an assessment of whether that conflicts with the Anti-Foreign Sanctions Law and its implementing provisions, with legal review and an exception mechanism. Clauses must be enforceable, not just "supplier promises to comply".

Acceptance checks: representations; change notice; cooperation/audit; suspension/termination; flow-down; indemnity; data; foreign measures; exception. Common gaps: only "comply with law"; no change notice; no audit right; no suspension/termination; no flow-down; no review of foreign clauses; no indemnity; no exception.

This clause list is editorial, not a contract template or legal advice; legal/compliance should review it for the transaction.

How should internal governance be split?

Suggested: procurement initiates and collects documents; compliance/legal interprets lists, handles escalations and reviews foreign measures; finance verifies the payment entity/bank; EHS/quality covers subcontractors and site risk; the business owner owns the first line of risk; management approves high-risk cases/exceptions. Use a screening system where available; otherwise use official query channels plus a second reviewer and a register. Metrics: screening coverage, overdue reviews, number of hits, false-positive rate, average handling time, exit/replacement completion. Audit a sample at least annually and ensure records can be reproduced.

Acceptance checks: roles; tools/channels; training; escalation; metrics; audit; management reporting. Common gaps: procurement does everything; no compliance review; no versioned tool; no training; no metrics; never audited; management unaware.

This split is editorial; roles and authorities follow company policy.

How should the website page be written, and what must not be public?

Suggested content: (1) policy statement and scope; (2) supplier types/risk tiers; (3) list sources and query channels (official entry points); (4) screening scope (entity/affiliates/UBO/subcontractors/payment entity); (5) frequency and triggers; (6) hit handling and appeal; (7) declarations/materials suppliers must submit; (8) contact/version/update date. The public page explains "rules and entry points"; it should not publish individual supplier names, screening results, internal blacklists, personal identity documents, bank accounts or pending investigations; after login, suppliers can submit declarations, check status and request review.

Use consistent English terms (supplier screening, debarment, sanctions, blacklist, serious illegal and dishonest list, judgment debtor, Unreliable Entity List, dual-use items, countermeasure list, false positive, re-screening, audit right) and state the review date. Link to export control, AVL and code of conduct pages, but do not turn the screening page into an export-control page.

This structure is editorial; external statements must be truthful and verifiable, per the law, list announcements, contract and company policy.

What must not be written?

High-risk claims: "the supplier has no violations" (not searched or unprovable); "once on a blacklist, cooperation is permanently impossible" (list types, measures and repair differ); "we only check dishonest judgment debtors" (other lists missed); "same name means the same company" (false positive); "foreign sanctions have nothing to do with us" (customers/banks/exports may require them); "a signed compliance promise removes the need to screen" (a promise is not screening); "publish supplier names and screening results" (sensitive information); "we can check every list" (no authority/data source). These are inaccurate or misstate lists, measures or the public boundary.

Safer wording: "This page applies to [supplier type/risk tier]; lists [names/official entry points]; scope [entity/affiliates/UBO/subcontractor/payment]; frequency [onboarding/annual/trigger]; hits [false positive/escalation/suspension/exit]; records [date/version/search terms/review]; contract [representation/notice/audit/termination]; public [no individual results]. The law, list announcements, contract and company policy control."

Go-live acceptance checklist

Ten checks: list inventory; screening scope; frequency/triggers; hit handling; false positive/appeal; records/retention; contract clauses; roles/training; public boundary; page wording and version. Each needs an owner, evidence and review date. The pass condition is not "the page says check the blacklist", but that procurement, compliance, legal and finance can screen completely and accurately, handle hits, keep records and re-review from the page.

Before go-live, run one real (anonymised) supplier through: onboarding → list query → affiliates/UBO → record result → false-positive clearance → approval → contract clauses → annual review → simulated hit escalation. Any step that fails is a gap in the page or the process.

This checklist is editorial; the law, list announcements, contract and company policy control.

Who should read this, who should not, and what decisions does it support?

It suits procurement, supplier management, compliance, legal, finance, EHS and website teams at equipment, electronics/electrical, automotive, medical device, hardware, chemical, packaging and export manufacturers in Changzhou and nearby areas; also companies building a supplier screening programme or handling "same-name false positives, list hits, supplier shell changes, payment entity anomalies". It does not suit teams that do not manage suppliers, have no export/cross-border payments, or want one page to replace legal/sanctions/export-control advice.

Read it if you are building a supplier screening page; only the contracting company is checked; screening is done once; same names are rejected outright; no escalation on hits; subcontractors/payment entities are not checked; records are screenshots only; the contract has no notice/audit/termination. Skip it if you treat "blacklist" as one list, "promise" as screening, "foreign sanctions" as irrelevant, or want to publish supplier screening results. It supports self-review of list inventory, scope, frequency, hit handling, evidence, contract and page wording.

FAQ

If a supplier is on the serious illegal and dishonest list, is cooperation automatically prohibited?

Not necessarily. It depends on the listing facts, whether the penalty was revoked, the management measures, contract/customer requirements and remediation/credit repair. Article 18 of the 2026 Measures makes the list a material consideration in administrative licensing, qualification, government procurement and tendering, and provides for stricter supervision; it does not automatically prohibit every transaction. But for the dual-use control list, Unreliable Entity List and similar lists with transaction restrictions, follow the announcement and legal advice.

How often should screening be done? Is onboarding enough?

No. At least before onboarding, before the first contract/order, annually, and on changes of ownership/control/name/address/legal representative, new country/currency/bank, adverse media/penalty, list updates and payment anomalies. High-risk suppliers may be reviewed quarterly/semi-annually; medium/low risk annually plus event triggers. Follow the risk tier and contract requirements.

Same names are common. How should false positives be handled?

Do not rely on name alone. Compare the unified social credit code/registration number, address, UBO, directors/senior managers, identity document/date of birth, country/region and business scope; record the matching rule and the basis for exclusion, and have a second reviewer. A false positive must also be documented, not dismissed orally.

If the supplier is a foreign company, which lists should be checked?

At least the Unreliable Entity List, countermeasure list and dual-use watch/control lists; then OFAC, EU, UN and other official lists required by customers, banks, insurers and destination countries. Do not rely only on third-party summaries or search engines; keep the list version, query date and results. Where foreign sanctions clauses are involved, assess consistency with the Anti-Foreign Sanctions Law and its implementing provisions.

Can we sign a supplier clause requiring us to comply with foreign sanctions?

Do not sign as-is. First check what the clause requires, its scope, and whether it requires executing or assisting foreign discriminatory restrictive measures against Chinese citizens/organisations; Articles 17 and 18 of the Implementing Provisions provide for interviews, correction orders and litigation in relation to executing/assisting such measures. Legal/compliance should assess it and consider exceptions, carve-outs or approval mechanisms; this is not legal advice.

How long should screening records be kept? Is a screenshot enough?

A screenshot alone is not enough. Keep the query date, list name/version, search terms, matching rule, results, reviewer, decision and next review date; screenshots should include URL/date/context. For dual-use items, end-user/end-use certificates, contracts, invoices, books, vouchers and business correspondence must be kept for at least five years under Article 27 of the Dual-Use Items Export Control Regulations; other records follow the contract, customer and company policy.

One-sentence takeaway

A Changzhou manufacturer's supplier debarment, sanctions and blacklist screening page is not about "checking a blacklist". It should turn list types, screening scope (entity/affiliates/UBO/subcontractors/payment), frequency and triggers, false-positive and hit handling, evidence, contract clauses and the public boundary into a reviewable checklist—so procurement, compliance, legal and finance can screen completely and accurately, handle hits, keep records and re-review.

Method and limitations

This is a review of public rules and page practice, not legal, sanctions, export-control or compliance advice. No undisclosed supplier lists, screening results, personal data, bank accounts or investigation data were used; list taxonomy, tables and acceptance items are editorial, not legal conclusions. The serious illegal and dishonest list follows Articles 3 and 18 to 21 of the Measures for the Administration of the List of Entities with Serious Illegal and Dishonest Conduct in Market Regulation (SAMR Order No. 128 of 2026); the Unreliable Entity List follows Articles 2, 10 and 12 of the Provisions on the Unreliable Entity List; dual-use items follow Articles 26 to 29 and Article 27 of the Regulations on Export Control of Dual-Use Items; countermeasures follow Articles 3, 13 and 16 to 18 of the Provisions on Implementing the Anti-Foreign Sanctions Law; the law, list announcements, contract and company policy control. This article does not determine whether a specific supplier or transaction is restricted; companies should review item by item.

Sources and scope

Information is current to 2026-11-07. The following are official pages; their text controls.

1. Measures for the Administration of the List of Entities with Serious Illegal and Dishonest Conduct in Market Regulation (SAMR Order No. 128, promulgated 25 May 2026, effective 15 July 2026): The State Council of China. Listing (Article 3), management measures (Article 18), information sharing (Article 19), revocation (Article 20), credit repair (Article 21).
2. Provisions on the Unreliable Entity List (MOFCOM Order No. 4 of 2020, effective on promulgation): The State Council of China. Scope (Article 2), measures (Article 10), special transaction application (Article 12).
3. Regulations of the People's Republic of China on Export Control of Dual-Use Items (State Council Order No. 792, promulgated 19 October 2024, effective 1 December 2024): The State Council of China. Watch list (Article 26), records for at least five years (Article 27), control list (Article 28), control measures (Article 29).
4. Provisions on Implementing the Anti-Foreign Sanctions Law of the People's Republic of China (State Council Order No. 803, promulgated and effective 24 March 2025): The State Council of China. Countermeasure list (Article 3), consequences of non-implementation (Article 13), exception application (Article 16), foreign discriminatory restrictive measures (Articles 17 and 18).