China simply isn't interested in or understands privacy at the moment. I have some experience with cross border relations with them and getting them to sign and then care about data processing agreements we need for gdpr is something for sure...
My understanding is that there is no malice or incompetence, it's usually just "who cares"