It's written in their "anti-espionage law", where all companies based in China have the duty to actively comply with spying requests when asked.