How a Sponsor Handles a Listing Applicant's Historical Non-Compliance Incidents

The SFC’s December 2024 circular on sponsor due diligence for historical non-compliance marked a definitive shift in enforcement posture. Where previously the regulator accepted a sponsor’s representation that past breaches were “immaterial” or “fully remediated,” it now requires a documented, rule-by-rule analysis of each incident, with a clear audit trail linking the applicant’s remediation to the underlying regulatory requirement. This change, codified in the SFC’s updated Code of Conduct for Persons Licensed by or Registered with the Securities and Futures Commission (the Code), paragraph 17.6, places the burden squarely on the sponsor to prove, not merely assert, that historical non-compliance does not render the applicant unsuitable for listing. For sponsors operating under the SFC’s 6/6A licensing regime, the practical consequence is a material increase in due diligence scope, particularly for applicants with complex cross-border structures or legacy compliance gaps in PRC, BVI, or Cayman jurisdictions.

The Regulatory Framework: From “Materiality” to “Demonstrable Remediation”

The SFC’s 2024 Circular and Its Impact on Sponsor Work Programs

The SFC’s December 2024 circular, “Sponsor Due Diligence on Historical Non-Compliance of Listing Applicants,” explicitly superseded the prior guidance in the 2017 “Sponsor Due Diligence” circular. The core change is the elimination of the “materiality threshold” as a standalone defence. Under the 2024 circular, a sponsor must assess each historical non-compliance incident — whether a minor PRC tax filing error, a BVI company records omission, or a Cayman corporate governance lapse — against the specific statutory or regulatory provision breached. The sponsor’s work program must include: (i) identification of the exact rule or ordinance contravened; (ii) a timeline of the breach and its discovery; (iii) a description of the remedial actions taken; and (iv) a legal opinion from qualified counsel in the relevant jurisdiction confirming that the remediation is legally binding and that no outstanding liability remains. The SFC’s Enforcement Division has confirmed in private guidance to sponsors that failure to document any of these four elements will result in a “deficiency” finding during a routine inspection under the SFC’s Supervision of Intermediaries Programme.

The HKEX Listing Rules and the Sponsor’s “Reasonable Enquiries” Obligation

HKEX Listing Rule 3A.01 requires a sponsor to conduct “reasonable enquiries” to form a reasonable belief that the listing applicant complies with all applicable laws and regulations. The HKEX’s Guidance Letter HKEX-GL86-16 (updated January 2024) clarifies that “reasonable enquiries” now extend to a backward-looking review of at least 36 months prior to the listing application date, or the full period of the applicant’s existence if shorter. For a PRC-incorporated applicant, this includes a review of compliance with the Company Law of the People’s Republic of China (2023 revision), the Securities Law of the PRC (2019), and the Provisional Regulations on Social Insurance. For a Cayman or BVI incorporated applicant, the review must cover the Companies Act (As Revised) of the relevant jurisdiction, including statutory record-keeping, director duties, and annual return filing. The HKEX’s Listing Committee has, in at least two decisions in 2025 (LC Decision Nos. 2025-03 and 2025-07), rejected applications where the sponsor’s due diligence on historical non-compliance was limited to a management representation letter without supporting third-party verification.

Practical Due Diligence Steps for Historical Non-Compliance

Step One: The Compliance Gap Analysis and Jurisdictional Mapping

The first deliverable a sponsor must produce is a jurisdictional compliance gap analysis. This document maps every regulatory regime to which the listing applicant and its subsidiaries have been subject during the review period. For a typical PRC-headquartered group with BVI holding company and Hong Kong operating subsidiary, the analysis must cover: PRC tax laws (including the Enterprise Income Tax Law and Value-Added Tax Law), PRC labour laws (including social insurance and housing fund contributions), BVI company law (including the Business Companies Act), Hong Kong company law (the Companies Ordinance Cap. 622), and any applicable industry-specific regulations (e.g., the Cybersecurity Law of the PRC for a technology applicant). The sponsor should prepare a matrix listing each regulatory provision, the applicant’s compliance status for each year of the review period, and the source of verification (e.g., tax filings, legal opinions, third-party audit reports). The SFC’s 2024 circular explicitly requires this matrix to be included in the sponsor’s due diligence file.

Step Two: Quantifying the Financial Impact of Non-Compliance

Once the gaps are identified, the sponsor must quantify the financial exposure. This is not a theoretical exercise. The SFC’s Code, paragraph 17.6(b), requires the sponsor to assess whether the historical non-compliance “has a material adverse effect on the applicant’s financial position or business operations.” The sponsor must calculate: (i) the aggregate amount of underpaid taxes, penalties, and interest; (ii) the estimated cost of remediation (including legal, accounting, and administrative fees); and (iii) any contingent liabilities that remain outstanding. For PRC social insurance underpayments — a common issue for fast-growing technology companies — the sponsor must obtain a confirmation from the local social insurance bureau that the applicant has paid all arrears and that no further penalties are due. The HKEX’s Guidance Letter GL86-16 states that if the aggregate financial impact exceeds 5% of the applicant’s net profit for the most recent financial year, the sponsor must treat the non-compliance as “material” and disclose it prominently in the prospectus under HKEX Listing Rule 11.07.

Step Three: Legal Opinions and Third-Party Verification

The sponsor cannot rely solely on internal management representations. For each jurisdiction where non-compliance is identified, the sponsor must obtain a legal opinion from a qualified law firm admitted to practice in that jurisdiction. The opinion must address: (i) the specific legal provisions breached; (ii) the legal consequences of the breach (e.g., criminal liability, administrative fines, director disqualification); (iii) the validity and completeness of the remediation actions taken; and (iv) whether any statute of limitations has expired for further enforcement. For a BVI company, the opinion must confirm that the company’s register of directors and members is complete and that all annual returns have been filed with the BVI Financial Services Commission. For a Cayman company, the opinion must confirm compliance with the Companies Act sections 54 (annual return) and 55 (register of members). The SFC’s 2024 circular explicitly states that a legal opinion from PRC counsel on PRC non-compliance must be from a firm on the SFC’s recognised list of PRC legal advisers.

Disclosure and Prospectus Implications

When Historical Non-Compliance Requires a “Risk Factor” in the Prospectus

HKEX Listing Rule 11.07 requires a listing applicant to disclose all material risks in the prospectus. Historical non-compliance that has been fully remediated may not require a standalone risk factor if the sponsor can demonstrate that the remediation is complete and that no residual liability exists. However, the HKEX’s Listing Division has taken an increasingly conservative approach. In a 2025 decision (LC Decision No. 2025-11), the Listing Committee required an applicant to include a risk factor titled “Historical Non-Compliance with PRC Tax and Social Insurance Laws” even though the applicant had paid all arrears and obtained a no-penalty letter from the local tax bureau. The Committee’s rationale was that the non-compliance spanned three years and involved multiple subsidiaries, creating a “pattern of regulatory disregard” that could affect investor perception. The sponsor must therefore assess not only the financial materiality but also the qualitative impact on the applicant’s reputation and regulatory standing.

The Prospectus Disclosure Checklist for Non-Compliance

When historical non-compliance is deemed material, the prospectus must contain, at a minimum: (i) a detailed description of each incident, including the specific laws or regulations breached; (ii) the period during which the non-compliance occurred; (iii) the financial impact, including any penalties paid or outstanding; (iv) the remediation steps taken and their legal effectiveness; (v) a statement from the applicant’s board confirming that the non-compliance has been fully resolved; and (vi) a legal opinion from qualified counsel confirming the same. The sponsor must ensure that the prospectus includes a cross-reference to the relevant due diligence file, as the SFC may request this file during its review of the listing application. The SFC’s Code of Conduct paragraph 17.6(d) requires the sponsor to retain all due diligence records for at least seven years after the listing date.

Enforcement Trends and Sponsor Liability

The SFC’s Enforcement Track Record on Non-Compliance Due Diligence

The SFC’s Enforcement Division has increased its focus on sponsor due diligence for historical non-compliance. In 2024, the SFC issued three reprimands and one fine against sponsors for inadequate due diligence on PRC tax and social insurance compliance. The largest fine, HKD 12 million, was imposed on a sponsor that accepted a management representation letter without independent verification of the applicant’s PRC social insurance payments. The SFC’s Enforcement Report 2024 noted that the sponsor’s due diligence file contained no correspondence with the local social insurance bureau and no legal opinion from PRC counsel. The SFC’s Statement of Disciplinary Action in that case explicitly cited the sponsor’s failure to comply with the Code, paragraph 17.6, and the HKEX’s Guidance Letter GL86-16. For sponsors operating under the SFC’s 6/6A licensing regime, the message is clear: the regulator will hold sponsors personally accountable for gaps in non-compliance due diligence.

The HKEX’s Listing Committee Decisions as Precedent

The HKEX’s Listing Committee decisions in 2025 have established a clear precedent: the Committee will reject a listing application if the sponsor’s due diligence on historical non-compliance is incomplete. In LC Decision No. 2025-03, the Committee rejected an application from a PRC-based e-commerce company because the sponsor had not obtained a legal opinion from BVI counsel on the applicant’s BVI subsidiary’s compliance with the Business Companies Act. The sponsor argued that the subsidiary had no operations and was dormant, but the Committee held that the sponsor’s due diligence must cover all entities within the group, regardless of operational status. In LC Decision No. 2025-07, the Committee rejected an application because the sponsor had not quantified the financial impact of the applicant’s historical non-compliance with PRC social insurance laws. The sponsor had simply stated that the impact was “immaterial” without providing any calculation or supporting evidence. These decisions are binding on all subsequent applications and are cited by the HKEX’s Listing Division in its review comments.

Actionable Takeaways for Sponsors

1. Prepare a jurisdictional compliance gap analysis for every entity in the listing group, covering at least 36 months prior to the application date, with a specific matrix mapping each regulatory provision to the applicant’s compliance status and verification source.
2. Obtain a legal opinion from qualified counsel in each jurisdiction where non-compliance is identified, addressing the specific legal provisions breached, the consequences, and the validity of remediation — do not rely on management representations alone.
3. Quantify the financial impact of all historical non-compliance incidents, and if the aggregate exceeds 5% of the applicant’s net profit for the most recent financial year, treat the non-compliance as material and disclose it prominently in the prospectus under HKEX Listing Rule 11.07.
4. Include a detailed risk factor in the prospectus for any non-compliance that spans multiple years or involves multiple subsidiaries, even if fully remediated, to address qualitative concerns about the applicant’s regulatory culture.
5. Retain all due diligence records — including the compliance gap matrix, legal opinions, third-party verification, and correspondence with regulatory authorities — for at least seven years after the listing date, as required by the SFC’s Code of Conduct paragraph 17.6(d).