CSO Marketing Fees in China Pharma: The Substance Test Before the Invoice Chain Burns You

Life Sciences & Healthcare Blog · Legal cluster hub

CSO structures are not illegal by slogan; they become enforcement stories when money moves without provable promotion work product. This article explains the substance test that pharmaceutical companies should apply to contract sales organization arrangements, the anti-bribery and tax provisions that make the test necessary, and the audit and due diligence protocols that keep a legitimate CSO model from becoming an enforcement exhibit.

Why the CSO model is under pressure

Contract sales organizations, commonly called CSOs, emerged in China as a way for pharmaceutical manufacturers to outsource promotion, market access and hospital-facing services. The model is not unlawful in itself, and legitimate CSOs provide real services that support compliant promotion. The problem is the structural incentive to misuse the model. After the two-invoice system and the volume-based procurement reforms compressed margins, some manufacturers began using CSO structures to move money out of the pricing chain through service invoices that had little or no underlying substance. The money then found its way to physicians, hospital procurement staff or other decision-makers. When the enforcement authority examines the chain, it looks for a simple fact: did the CSO actually perform the services for which it was paid? If the answer is no, the invoice chain becomes the evidence of bribery, tax evasion or both.

Statutory framework

Anti-Unfair Competition Law

The PRC Anti-Unfair Competition Law Article 7 prohibits commercial bribery, and its scope reaches third-party agents. The operator of a business may not give property or other means to a counterparty's staff, or to any entity or individual entrusted with the transaction, in order to obtain a transaction opportunity or competitive advantage. The provision is the basis for vicarious liability: a manufacturer cannot avoid the bribery prohibition by delegating the conduct to a CSO, because the CSO acts for the manufacturer's benefit and the manufacturer controls the funding. The SAMR guidance on commercial bribery enforcement has repeatedly treated CSO payments to physicians or hospital staff as bribery attributable to the manufacturer where the CSO functioned as the manufacturer's sales arm.

Criminal Law invoice provisions

The PRC Criminal Law Articles 163 and 164 address bribery of company personnel and bribery of state functionaries respectively. Article 205 establishes the crime of false issuance of special value-added tax invoices, and it is this provision that converts a CSO misuse from a regulatory problem into a criminal one. Where a manufacturer pays a CSO through invoices that do not reflect actual services, and the CSO issues invoices for services that did not occur, the conduct can be characterized as false issuance or use of false invoices, with penalties that include imprisonment for the responsible individuals. The criminal risk is the reason the substance test is not a diligence nicety; it is the line between a compliance review and a criminal defence.

Tax administration requirements

The State Taxation Administration Announcement 2016 No. 15 requires that expenses be supported by evidence of actual service performance to be deductible for corporate income tax. The announcement was designed to prevent the deduction of fake service fees, and it gives the tax authority a direct interest in the CSO substance question. In practice, tax audits and anti-bribery investigations often run in parallel: the tax authority examines whether the service invoices are genuine, and the market regulation authority examines whether the underlying payments constitute bribery. The manufacturer must satisfy both audiences with the same evidence.

Enforcement context: the Jiangsu CSO conviction

The Jiangsu High Court criminal verdict in 2021 illustrates the pattern. Pharmaceutical executives were convicted after using fake CSOs to issue fraudulent service invoices, siphoning funds that were then used to pay physicians for prescribing behavior. The court examined the substance of the CSO arrangements, found that the service invoices did not correspond to any real services, and applied both the bribery provisions and the false invoice provisions. The case is a template for how enforcement authorities will treat CSO misuse: they follow the money, they test the services, and they attribute the conduct to the executives who controlled the structure. The defence that the CSO was an independent third party failed because the court found the CSO was funded, directed and controlled by the manufacturer in substance.

The substance test

The practical core of the CSO compliance program is a four-part substance test that should be applied before any CSO is engaged and before any payment is made.

Named deliverables

The CSO must commit to named, verifiable deliverables: call plans, materials approved by the medical-legal function, training logs, event reports and market access documentation. A contract that describes the services only as channel support or promotion services without deliverables is a red flag from the start. The deliverables should be described with the specificity that allows an investigator to verify each one independently.

People who exist

The CSO must have staff proportional to the fees it receives. A CSO that bills a manufacturer millions of yuan but employs only a handful of people cannot plausibly perform the services described. The due diligence should verify payroll records, employment contracts and the identity of the individuals who actually perform the work, and the manufacturer should know the CSO's ultimate beneficial owners and management structure.

Documented evidence

Every payment must be supported by contemporaneous evidence of performance: attendance sign-in sheets, event photos with dates, slide decks, survey metrics and call reports. The evidence should be stored in a shared system that the manufacturer can access, because a CSO that refuses to share performance evidence is not a service provider; it is a cash conduit. The four evidentiary requirements that survive scrutiny are event photos, attendee sign-ins, slide decks and survey metrics, and each payment claim should be tied to at least one of these artefacts.

Compliant hospital-facing activity

The CSO's hospital-facing activity must not collapse into individual health care professional benefits. A legitimate CSO supports market access and compliant promotion; it does not pay physicians for prescribing. The manufacturer should require the CSO to certify compliance with anti-bribery rules, should audit the CSO's interactions with hospital staff, and should terminate any CSO whose activity converts into individual benefits.

Red flags that survive everyone does it

Three red flags are so consistent in enforcement cases that they should trigger immediate review. First, fees that track purchase volume more tightly than work hours; the closer the correlation between the CSO payment and the hospital purchase volume, the more the arrangement looks like a per-prescription bribe. Second, shell entities with the same ultimate beneficial owner as distributors or hospital-adjacent individuals; the ownership overlap is the signature of a circular structure designed to move money. Third, WeChat-only performance reports with no artefacts; a CSO whose evidence consists of chat messages and no documents has no evidence at all.

The CSO audit and due diligence protocol

The practical deliverable is a protocol with three components. The pre-contract due diligence component covers the ownership check, the business legitimacy review, the reference check and the written service description. The contracting component requires a master services agreement with named deliverables, evidence obligations, audit rights and termination for cause, plus an annual certification of compliance by the CSO. The monitoring component requires regular audits, payment claim reviews against the evidence, and a documented escalation path for red flags. If the company cannot explain the CSO to a sceptical investigator in three sentences with documents, it should remediate before the next campaign cycle, and the remediation should include an actual review of the payment history rather than a new certification.

The protocol should also address the transition risk. When a manufacturer terminates a non-compliant CSO, the successor arrangement must be put in place before the termination creates a supply or promotion gap, because the gap itself can drive improper behaviour. The successor CSO should be selected through the same due diligence, and the manufacturer should document why the prior CSO was terminated so the file shows a compliance-driven decision rather than a convenience-driven one.

The international dimension adds another layer for foreign manufacturers. A global headquarters often discovers the CSO issue only after the China affiliate has built a network of service providers over years, and the correction requires coordination with the global finance and compliance functions. The headquarters should require the China affiliate to map every CSO relationship, the fees paid in the trailing twelve months, and the evidence held for each payment. Where the affiliate cannot produce the evidence, the headquarters should treat the gap as a potential anti-bribery finding under any applicable foreign law, including the US Foreign Corrupt Practices Act where the company is subject to it. The remediation should be run with the same rigor as a government inquiry, because the government inquiry is usually the event that follows an internal investigation that was not done properly. The China affiliate's compliance committee should meet on a fixed cadence, review the CSO portfolio, approve new engagements only with the substance test satisfied, and maintain the minutes as evidence that the structure was governed rather than tolerated.

Read next: Dawn raid & anti-corruption playbook · Pharma advertising

Part of the life sciences legal cluster · Life sciences blog