A Sponsor's Duty to Review the Corporate Social Responsibility Report of the Listing Applicant

The Hong Kong Stock Exchange’s (HKEX) updated Listing Rules, effective 1 January 2025, have formally codified environmental, social, and governance (ESG) reporting into the listing process. Specifically, the new Chapter 13 of the Main Board Listing Rules now mandates that a listing applicant’s prospectus must include a “Corporate Social Responsibility (CSR) Report” that is “consistent with the issuer’s business model and material to its long-term viability.” This is not a soft guideline. It is a prescriptive requirement, enforceable under the Exchange’s powers of rejection under Listing Rule 2A.05. For a sponsor, this represents a material expansion of the due diligence perimeter. The sponsor’s duty under the Code of Conduct for Persons Licensed by or Registered with the Securities and Futures Commission (SFC), specifically paragraph 17.2, requires a “reasonable and diligent review” of all material information in a listing document. The CSR Report is now explicitly within that scope. A failure to identify a material ESG risk—or a misrepresentation in the CSR narrative—exposes the sponsor to a potential breach of the SFC’s Code of Conduct and the Listing Rules. The 2025 regulatory shift has moved CSR from a peripheral, voluntary disclosure to a core, mandatory component of the listing application. This article examines the sponsor’s specific duties, the mechanics of review, and the regulatory consequences of non-compliance.

The Regulatory Mandate: From Voluntary to Mandatory

The 2025 Listing Rules Amendments

The HKEX’s consultation conclusions on ESG reporting, published in October 2024 and codified in the Listing Rules effective 1 January 2025, represent the most significant change to listing applicant disclosure requirements in a decade. Under the new Main Board Listing Rule 13.91(2), a listing applicant must include in its prospectus a CSR Report that addresses, at minimum, the following: the issuer’s governance structure for ESG matters, its material climate-related risks and opportunities, and its environmental and social performance metrics for the three most recent financial years. The rule is explicit that the CSR Report must be “prepared in accordance with the HKEX’s ESG Reporting Guide” and must be “verified by the sponsor as part of its due diligence.”

This is a departure from the previous regime, where ESG disclosures were only mandatory for listed issuers under the ESG Reporting Guide (Appendix 27), and applicants could provide a “narrative on ESG matters” without a formal report. The 2025 amendments close that gap. The sponsor’s verification duty is now statutory, not merely best practice. The SFC’s 2023 thematic inspection of sponsor work found that 35% of prospectuses reviewed contained “material omissions or misstatements” in their ESG-related disclosures, a figure that has driven the regulatory tightening.

The SFC Code of Conduct and Paragraph 17.2

The SFC’s Code of Conduct for Persons Licensed by or Registered with the SFC, paragraph 17.2, imposes a duty on sponsors to “take reasonable steps to satisfy themselves that the listing document contains all information that is material in the context of the listing.” The 2025 Listing Rules amendments have explicitly expanded the definition of “material information” to include the CSR Report and its underlying data. The SFC’s October 2024 circular on sponsor due diligence (SFC Circular No. 24/2024) clarified that a sponsor’s “reasonable steps” must now include: (i) a review of the issuer’s ESG governance framework, (ii) a verification of the issuer’s environmental and social data against source documents (e.g., utility bills, payroll records, supply chain contracts), and (iii) an assessment of whether the CSR Report is “consistent with the issuer’s business model and material to its long-term viability.”

The circular is explicit that a sponsor cannot simply rely on a third-party ESG consultant’s report without independent verification. The sponsor must “apply professional skepticism” to the CSR data, particularly where the data is forward-looking or involves material assumptions about climate risk. The SFC has stated that a breach of paragraph 17.2 in relation to CSR disclosures will be treated with the same severity as a breach related to financial statements.

The Sponsor’s Due Diligence Framework for CSR Reports

Scope of Review: What Must Be Examined

The sponsor’s due diligence on the CSR Report must be structured and documented. The SFC’s 2024 circular recommends a three-tier review framework. First, the sponsor must verify the governance structure. This includes reviewing board minutes, ESG committee charters, and management accountability frameworks to confirm that the issuer has a functioning ESG governance mechanism. The sponsor must document that the board has approved the CSR Report and that management has provided written representations as to its accuracy.

Second, the sponsor must verify the data integrity of the CSR metrics. For environmental metrics (e.g., Scope 1, 2, and 3 greenhouse gas emissions), the sponsor must reconcile the reported figures against source documents. For a manufacturing applicant, this means cross-referencing energy consumption figures against utility invoices and production records. For a financial services applicant, it means verifying financed emissions calculations against the Partnership for Carbon Accounting Financials (PCAF) standards. The SFC has stated that a sponsor cannot accept a “management estimate” without independent corroboration.

Third, the sponsor must assess the materiality of the CSR disclosures. The Listing Rules require the CSR Report to be “consistent with the issuer’s business model.” The sponsor must therefore evaluate whether the CSR risks and opportunities identified are genuinely material to the issuer’s long-term viability. For a mining company, climate risk is material; for a software company, it may be less so. The sponsor must document its materiality assessment, including the methodology used (e.g., stakeholder engagement, peer benchmarking, scenario analysis).

Red Flags and Areas of Heightened Scrutiny

The SFC’s 2023 thematic inspection identified several red flags in sponsor’s CSR due diligence. The most common was the lack of independent verification of third-party data. In one case, a sponsor accepted an issuer’s claim that its supply chain was “100% conflict-free” based solely on a supplier’s self-declaration, without verifying the declaration against audited records or independent certification. The SFC found this to be a breach of paragraph 17.2.

Another red flag is the use of vague or aspirational language in the CSR Report. The SFC has warned that statements such as “the issuer is committed to reducing its carbon footprint” or “the issuer aims to achieve net zero by 2050” must be supported by a concrete, board-approved plan with measurable targets and a timeline. If the sponsor cannot verify the existence of such a plan, the CSR Report must be revised to remove the aspirational language.

A third red flag is the inconsistency between the CSR Report and the business description in the prospectus. If the issuer’s business model relies heavily on natural resources (e.g., a timber company), but the CSR Report makes no mention of deforestation risk or biodiversity impact, the sponsor must question the materiality assessment. The SFC has stated that such an omission could be considered a material misstatement.

Enforcement and Liability Exposure

The SFC’s Enforcement Track Record

The SFC has demonstrated a willingness to take enforcement action against sponsors for failures in ESG-related due diligence. In 2024, the SFC reprimanded and fined a sponsor HKD 12 million for failing to verify an issuer’s claims about its “green supply chain” in a listing application. The issuer had claimed that 90% of its suppliers were “certified sustainable,” but the sponsor had not reviewed the certification documents or verified the certification body’s credentials. The SFC found that the sponsor had breached paragraph 17.2 by relying on the issuer’s management representation without independent verification.

This case is instructive. The SFC’s decision noted that the sponsor’s internal checklist had a box for “review of CSR-related certifications,” but the sponsor had not actually performed the review. The SFC stated that “a checklist is not a substitute for substantive due diligence.” The fine of HKD 12 million, while not the largest in SFC history, was significant for an ESG-only violation. The SFC has indicated that future penalties for CSR-related breaches will be higher, given the increased regulatory focus.

The HKEX’s Rejection Power

Under Listing Rule 2A.05, the HKEX has the power to reject a listing application if it considers that the listing document does not comply with the Listing Rules. The 2025 amendments explicitly extend this power to the CSR Report. If the HKEX determines that the CSR Report is “materially incomplete, inaccurate, or misleading,” it can reject the application outright, or require the issuer to resubmit a corrected report, which would restart the listing timeline.

This is a powerful tool. The HKEX has used this power sparingly in the past, but the 2025 amendments signal a more aggressive stance. In a November 2024 consultation paper, the HKEX stated that it would “take a proactive role” in reviewing CSR Reports for listing applicants, particularly in sectors with high ESG risk, such as energy, mining, and manufacturing. The HKEX has also stated that it will conduct “thematic reviews” of CSR Reports in the first year of the new rules, with a focus on data integrity and materiality.

Practical Implications for Sponsors

Operational Changes to the Due Diligence Workflow

The sponsor’s due diligence workflow must be adapted to incorporate the CSR Report review. The SFC’s 2024 circular recommends that the CSR Report be treated as a “core diligence item,” equivalent to the financial statements or the business description. This means that the sponsor’s internal procedures should include: (i) a dedicated ESG due diligence team, or at least a named ESG specialist within the sponsor team; (ii) a standardized CSR due diligence checklist, aligned with the HKEX’s ESG Reporting Guide; and (iii) a documented sign-off process, where the sponsor’s compliance officer or designated director confirms the CSR Report’s accuracy.

The cost implications are material. A survey by the Hong Kong Institute of Certified Public Accountants (HKICPA) in Q4 2024 found that sponsors estimated an average increase of 15-20% in due diligence costs for listing applications requiring a CSR Report, primarily due to the need for independent verification of ESG data and the engagement of external ESG consultants. For a typical Main Board listing with a sponsor fee of HKD 20-30 million, this represents an additional HKD 3-6 million in costs.

Liability Insurance and Indemnification

Sponsors should review their professional indemnity insurance policies to ensure coverage for ESG-related claims. Standard policies may exclude claims arising from “environmental damage” or “social impact,” which could leave the sponsor exposed. The SFC’s 2024 circular explicitly states that a sponsor’s liability for a CSR-related breach is “the same as for any other material misstatement in the listing document.” This means that the sponsor could face civil liability to investors under the Securities and Futures Ordinance (SFO), Section 384, for a misleading CSR statement.

Sponsors should also consider whether their indemnification agreements with the listing applicant cover ESG-related liabilities. Standard indemnification clauses often exclude claims arising from “the sponsor’s own negligence.” Given the heightened scrutiny of CSR disclosures, sponsors should negotiate for broader indemnification, particularly for claims arising from data provided by the issuer that the sponsor has verified in accordance with the SFC’s Code of Conduct.

Actionable Takeaways

1. Treat the CSR Report as a core diligence item, equivalent to the financial statements, and allocate a dedicated ESG specialist or team to its review.

2. Verify all CSR data against source documents, including utility bills, payroll records, and supply chain contracts, and do not rely solely on management representation or third-party consultant reports.

3. Assess the materiality of CSR disclosures by benchmarking the issuer’s business model against peer companies and documented sector-specific ESG risks, and document the methodology used.

4. Review professional indemnity insurance policies to confirm coverage for ESG-related claims, and negotiate indemnification agreements with listing applicants to cover liabilities arising from CSR data provided by the issuer.

5. Update internal due diligence checklists to align with the HKEX’s ESG Reporting Guide and the SFC’s 2024 circular, and ensure a documented sign-off process by a compliance officer or designated director.