Not true. They have to show that the company is headquartered in or owned by the “sensitive country”.

Giant loophole for American Data vendors and marketers to sell data and targeted advertising to China. (Which is just an algorithm by a different name.)