There is a difference between being required to collect data that they wouldn't otherwise need for a legitimate business purpose, and being required to provide

There is a difference between being required to collect data that they wouldn't otherwise need for a legitimate business purpose, and being required to provide access to data they've already collected to their government. I'm no expert but it seems like a Chinese company could design products that don't collect a bunch of extraneous information, without violating Chinese law.