China CRO or China EOR: What Does Biotech Need — and When?

A Contract Research Organization and an Employer of Record solve different problems for biotechnology and pharmaceutical companies entering China.

A CRO performs delegated research or clinical-development work. An EOR supplies a local employment structure for suitable employees when the overseas company does not have its own Chinese employing entity.

The short answer is:

• Use a CRO for regulated research and clinical-development services.
• Consider an EOR for suitable commercial, administrative, or support employees.
• Use both when the company needs regulated research execution and a separate internal China team.
• Establish your own entity when the company requires permanent infrastructure, direct employment, licensed operations, local contracting, or a larger organization.

An EOR cannot turn an ordinary employee into an authorized clinical investigator, licensed healthcare professional, laboratory operator, or approved research institution.

What Is a CRO in China?

A Contract Research Organization provides research and development services under contract to a sponsor, pharmaceutical company, biotechnology company, or medical-device company.

Depending on its capabilities and the project, a CRO may support:

• Regulatory strategy
• Clinical-trial applications
• Protocol development
• Site identification
• Site activation
• Clinical monitoring
• Data management
• Biostatistics
• Medical writing
• Pharmacovigilance
• Quality assurance
• Trial-material coordination
• Vendor management
• Project reporting
• Regulatory submissions

Some organizations specialize in preclinical research, central laboratory services, bioanalysis, medical devices, or particular therapeutic areas.

The term “CRO” does not guarantee that one provider is qualified to perform every service. A biotech company must verify the provider’s facilities, personnel, quality system, experience, registrations, subcontractors, and regulatory scope.

The Sponsor Retains Responsibility

A sponsor may delegate clinical-trial work to a CRO, but outsourcing does not eliminate the sponsor’s responsibilities.

China’s Good Clinical Practice requirements provide that a sponsor may outsource some or all clinical-trial tasks to a CRO. However, the sponsor remains ultimately responsible for the quality and reliability of the clinical-trial data and must supervise the CRO.

The outsourcing contract should identify:

• The specific delegated activities
• Applicable standard operating procedures
• Quality-control obligations
• Reporting requirements
• Audit and oversight rights
• Subcontracting conditions
• Subject-injury compensation arrangements
• Data ownership and access
• Record retention
• Escalation responsibilities

Work not clearly delegated generally remains the sponsor’s responsibility.

A CRO is therefore a regulated-service partner—not a mechanism for transferring all trial accountability.

What Is an EOR in China?

An Employer of Record uses its local Chinese entity to employ an individual for an overseas client.

The EOR normally handles:

• A Chinese labor contract
• Payroll
• Individual income tax withholding
• Social insurance
• Housing provident fund
• Statutory leave
• Employment records
• Employee onboarding
• HR administration
• Lawful offboarding

The biotechnology company generally selects the candidate and manages the person’s daily objectives and work.

HROne’s China Employer of Record guide explains the complete responsibility split.

An EOR solves an employment problem. It does not give the overseas company authority to conduct regulated clinical, laboratory, manufacturing, medical, or pharmaceutical activities.

CRO and EOR Compared

The two services are complementary in some cases, but they are not interchangeable.

Which Biotech Roles May Suit an EOR?

Suitability depends on the employee’s real duties—not the job title.

Business-development professionals

A business-development employee may be suitable for EOR employment when the role involves:

• Market research
• Partner identification
• Internal reporting
• Relationship development
• Nonbinding discussions
• Coordination with headquarters

The company should review whether the employee may negotiate final terms, sign contracts, collect revenue, or otherwise bind the overseas company. Broad commercial authority can create separate corporate, tax, or permanent-establishment questions.

Regulatory-strategy personnel

A regulatory professional may support:

• Internal planning
• Document coordination
• Translation review
• Regulatory intelligence
• Vendor management
• Headquarters communication

However, an EOR does not automatically authorize the employee to act as the applicant, sponsor, marketing authorization holder, licensed representative, or regulated establishment.

The proposed responsibilities should be mapped against the applicable NMPA process.

Project and vendor managers

A project manager coordinating headquarters, the CRO, advisers, and internal stakeholders may be suitable for EOR employment.

The role becomes more sensitive if the person:

• Directly manages trial sites
• Performs clinical monitoring
• Handles investigational products
• Makes medical decisions
• Accesses identifiable subject data
• Performs duties assigned to the sponsor, CRO, institution, or investigator

Those responsibilities require a separate regulatory assessment.

Medical-affairs and MSL roles

Medical Science Liaison and medical-affairs positions require careful review.

An EOR arrangement may be possible for an appropriately designed role, but companies should not assume that every MSL position is automatically suitable.

Review whether the employee will:

• Interact with healthcare professionals
• Discuss unapproved products or indications
• Support clinical studies
• Receive adverse-event information
• Access patient information
• Deliver medical education
• Perform promotional activities
• Provide diagnosis or treatment
• Handle samples

The company must establish medical, promotional, pharmacovigilance, privacy, and escalation controls before the employee starts.

Finance, HR and administrative roles

Roles such as finance support, human resources, executive assistance, and general administration may be better EOR candidates when they do not conduct regulated research or licensed business activities.

Nevertheless, their access to health, research, employee, and financial data must be controlled.

Which Roles Usually Need a Research or Institutional Structure?

An EOR should not be treated as the default employer for roles whose work depends on regulated facilities, institutional authority, professional licensing, or research approval.

Examples include:

• Principal investigators
• Sub-investigators
• Treating clinicians
• Trial-site personnel
• Laboratory personnel conducting regulated testing
• Scientists working in controlled facilities
• Personnel handling investigational products
• Staff collecting biological samples
• Clinical monitors operating as part of the CRO or sponsor structure
• Personnel making trial-related medical decisions
• Staff with direct responsibility for trial-subject safety

Some individuals may be employed by a hospital, research institution, CRO, laboratory, sponsor entity, or another appropriately qualified organization.

The answer depends on the study, product, institution, role, location, and applicable rules. It is not enough to label the worker “nonclinical” in an employment contract if the person’s actual work is regulated.

Clinical Trials Require Qualified Institutions

Drug clinical trials must be conducted through institutions that meet the applicable requirements.

The NMPA’s clinical-trial institution filing guidance addresses matters such as:

• Medical-institution qualifications
• Appropriate departments and trial specialties
• Qualified investigators
• Dedicated facilities
• Trial-drug storage
• Records management
• Ethics review
• Standard operating procedures
• Emergency procedures
• Appropriate medical and testing support

Employing a scientist, clinical research associate, or physician through an EOR does not create these institutional capabilities.

Human Genetic Resources Require Separate Review

Biotechnology and clinical-research projects may involve Chinese human genetic resources.

This can include materials or information derived from human genes, genomes, tissues, organs, cells, blood, or other qualifying sources.

Under China’s Human Genetic Resources Regulation, foreign organizations and entities established or actually controlled by foreign organizations or individuals are subject to specific restrictions.

Depending on the project, requirements may include:

• Cooperation with a qualified Chinese entity
• Ethics review
• International scientific-research cooperation approval
• Clinical-trial filing
• Material-export approval
• Prior reporting for external provision of information
• Information backups
• Security review
• Defined ownership and benefit-sharing terms
• Substantive Chinese participation

For certain clinical trials intended to obtain Chinese marketing authorization, approval may not be required where the applicable conditions are satisfied and human genetic resource materials do not leave China. A filing may still be required before the trial begins.

The National Health Commission’s human genetic resources FAQs also clarify that CROs, third-party laboratories, sponsors, medical institutions, and other organizations accessing regulated materials or information can be relevant to the assessment.

An EOR does not replace the required Chinese research partner or become an approved human-genetic-resources participant merely because it employs a worker.

Health and Genetic Data

Biotech employees may encounter:

• Trial-subject data
• Adverse-event records
• Medical histories
• Genomic information
• Laboratory results
• Investigator information
• Healthcare-professional data
• Employee health records

Medical and health information is sensitive personal information under China’s Personal Information Protection Law.

Before giving an EOR employee access, the company should determine:

• Why access is necessary
• Which organization is the data controller or processor
• Where the data will be stored
• Whether data will cross borders
• What consent or other legal basis applies
• Whether human-genetic-resources rules also apply
• How access will be logged
• When access will be removed
• Who responds to an incident

The EOR’s employment contract is only one part of the data-control framework.

When a Biotech Company May Need Both

A combined structure may be appropriate when a foreign biotech company wants to conduct a regulated project and build a small internal team.

For example:

• The CRO manages delegated clinical-development work.
• Qualified trial institutions work with subjects.
• A laboratory performs authorized testing.
• The sponsor retains oversight and final responsibility.
• An EOR employs a China-based business-development or administrative employee.
• Specialist advisers address regulatory, tax, data, and genetic-resource questions.

Each party should have a separate and clearly defined scope.

The EOR employee should not quietly absorb tasks that the CRO, sponsor, institution, investigator, laboratory, or Chinese research partner is legally expected to perform.

When the Company May Need Its Own Entity

EOR is often useful for early hiring, but it is not always the correct long-term structure.

A biotech company should assess establishing its own China entity when it needs to:

• Employ a larger permanent team
• Lease and operate facilities
• Conduct direct local contracting
• Receive Chinese revenue
• Issue local invoices
• Hold laboratory equipment or inventory
• Import or export materials
• Apply for licenses or registrations
• Employ regulated personnel directly
• Maintain a significant fixed operation
• Exercise greater control over intellectual property
• Build permanent commercial infrastructure

Creating an entity does not itself provide every required biotechnology or pharmaceutical authorization. Corporate formation and regulatory licensing remain separate workstreams.

A Practical Decision Process

Step 1: Define the work

List every task the China team or provider will perform.

Avoid relying on broad labels such as “research support,” “medical affairs,” or “regulatory.”

Step 2: Identify regulated activities

Determine whether the work involves:

• Trial subjects
• Healthcare professionals
• Clinical sites
• Investigational products
• Biological samples
• Human genetic resources
• Laboratory testing
• Medical decisions
• Pharmacovigilance
• Product promotion
• NMPA submissions
• Cross-border data transfers

Step 3: Assign each responsibility

Allocate the task to the appropriate party:

• Sponsor
• CRO
• Trial institution
• Investigator
• Laboratory
• Chinese research partner
• EOR
• Client employee
• External adviser

Step 4: Verify qualifications

Check the provider’s:

• Legal identity
• Business scope
• Regulatory status
• Facilities
• Personnel
• Quality system
• Relevant therapeutic experience
• Data controls
• Insurance
• Subcontractors
• Inspection history

Step 5: Align the contracts

The CRO agreement, EOR service agreement, labor contract, protocol, data agreements, vendor agreements, and regulatory submissions should not assign the same responsibility inconsistently.

Step 6: Set a transition point

Decide when headcount, trial activity, revenue, facilities, licensing, or long-term cost will trigger a move to the company’s own China entity.

CRO Due-Diligence Checklist

Before selecting a CRO, review:

• Relevant therapeutic-area experience
• Trial phase and product experience
• China regulatory capabilities
• Site network
• Investigator-management procedures
• Monitoring model
• Quality assurance
• Audit findings
• Inspection history
• Data-management systems
• Computer-system validation
• Pharmacovigilance process
• Human-genetic-resources procedures
• Subcontractor controls
• Data and sample transfers
• Business-continuity arrangements
• Insurance
• Record retention
• Exit and data-return procedures

EOR Due-Diligence Checklist

Before using an EOR for a biotech employee, confirm:

• The identity of the Chinese employing entity
• The proposed employee’s actual duties
• The city of employment
• Payroll and statutory-contribution administration
• Work-permit feasibility for foreign nationals
• Confidentiality and intellectual-property terms
• Health and research-data access
• Working-hour controls
• Expense and travel procedures
• Pharmacovigilance escalation where relevant
• Performance-management procedures
• Termination responsibilities
• Insurance
• Transfer arrangements if a China entity is formed later

For the wider employment framework, see HROne’s China HR compliance guide.

Frequently Asked Questions

Can an EOR run a clinical trial in China?

No. An EOR provides employment administration. Clinical trials require the appropriate sponsor, CRO, institutions, investigators, approvals, ethics review, and quality systems.

Can a CRO hire my internal China team?

A CRO employs personnel to perform its contracted services. That is different from providing client-controlled employees through an EOR.

Can an EOR employ a clinical research associate?

Possibly, but only after careful review. The CRA’s duties, supervision, access to trial data, institutional requirements, and relationship to the sponsor or CRO must be assessed. A CRO or properly structured sponsor team may be more appropriate.

Can an EOR employ an MSL?

Potentially, but the role must be reviewed. Medical interactions, adverse-event reporting, product status, promotional restrictions, data access, and involvement in research all matter.

Does using a CRO transfer the sponsor’s responsibility?

No. A sponsor can delegate work, but it retains ultimate responsibility for clinical-trial data quality and reliability and must supervise the CRO.

Can a biotech company use both?

Yes. A CRO may manage regulated research while an EOR employs suitable non-research or support personnel. The responsibilities must remain clearly separated.

Final Takeaway

A China CRO and a China EOR are not alternative solutions to the same problem.

A CRO supports regulated research and development. An EOR provides a local employment structure for suitable roles.

Many biotech companies may eventually use both, but only after assigning each activity to the correct legal, regulatory, and employment structure.

Start by defining the work. Then determine which activities require a CRO, qualified institution, Chinese research partner, EOR, or the company’s own entity.

To evaluate suitable employment roles, explore HROne’s China EOR services or contact HROne.

This article provides general information and does not constitute legal, medical, regulatory, tax, or clinical advice. Requirements should be verified for the specific product, study, role, institution, data, samples and location.