BAIDU✓

As a PRC-headquartered 'national champion' company, Baidu is subject to Chinese cybersecurity, data security and generative-AI content-governance laws that permit state access to data/models and mandate CAC registration and content controls — a sovereignty risk distinct from, but comparable to, CLOUD Act exposure.

Historical litigation (Zhu v. Baidu) found Baidu's cookie-based tracking of a user's browsing history to target ads constituted a privacy infringement under Chinese law.

No EU AI Act compliance statement, GDPR documentation, or DPO contact could be located, leaving EU regulated customers without visibility into Baidu's Article 53 GPAI transparency posture.

Founder Robin Li holds a small minority equity stake but controls a majority of voting power via a dual-class share structure, concentrating strategic control.

Baidu's AI business is subject to US semiconductor export controls restricting access to advanced AI training/inference chips, which the company has partly mitigated via its own Kunlun chip and stockpiling.