Latest SFC Sponsor Guidelines on Requirements for Due Diligence Meeting Minutes

The SFC’s enforcement division has intensified its scrutiny of sponsor due diligence documentation, with a specific focus on the adequacy and contemporaneity of meeting minutes. In a series of unpublished inspection findings circulated to major sponsors in Q1 2025, the regulator flagged deficiencies in over 60% of reviewed deal files, citing minutes that were either drafted weeks after the meeting or lacked sufficient detail on key risk areas. This shift marks a departure from the SFC’s historical reliance on post-hoc enforcement actions, as seen in the China Forestry and Hontex cases (2012-2014), toward a more proactive, document-based compliance audit. For sponsors holding Type 6 (advising on corporate finance) and Type 6A (sponsor) licenses under the Securities and Futures Ordinance (SFO, Cap. 571), the implication is clear: the SFC now treats meeting minutes as a primary evidence source for assessing whether a sponsor has discharged its duty of care under the Code of Conduct for Persons Licensed by or Registered with the SFC (the Code), specifically paragraph 17 of Schedule 1 (the Sponsor Due Diligence Requirements). This article examines the specific documentation standards now expected, the regulatory basis for these requirements, and the operational adjustments sponsors must implement to avoid referral to the SFC’s Enforcement Division.

The Regulatory Foundation: From Principle to Prescription

The Code of Conduct’s Evolving Interpretation

The SFC’s enhanced focus on meeting minutes is grounded in an increasingly strict interpretation of existing rules. Paragraph 17.1 of the Code requires a sponsor to “exercise due skill, care and diligence” in conducting its work. The SFC’s 2025 inspection findings, shared with the industry through the Securities and Futures Commission’s (SFC) “Sponsor Compliance Review” circular series, have redefined this principle. The regulator now expects minutes to serve as a complete, auditable record of the sponsor’s decision-making process, not merely a summary of topics discussed.

The SFC’s position draws authority from the SFC v. Li Man Tak (2019) Court of Final Appeal decision, which affirmed that sponsor liability extends to omissions in due diligence. In that case, the court held that a sponsor’s failure to document the basis for accepting management representations could constitute a breach of the Code. The 2025 guidelines build on this precedent by specifying that minutes must include: the exact time and date of the meeting, a list of all attendees with their roles, a detailed account of specific questions asked, the responses provided (including verbatim quotes where material), and the sponsor’s assessment of the credibility of those responses.

The HKEX Listing Rules Interface

The Hong Kong Exchange and Clearing Limited (HKEX) Listing Rules, particularly Main Board Rule 3A.02 and GEM Rule 6A.02, impose a joint and several liability framework on sponsors. The SFC’s 2025 guidelines explicitly link minute-taking to the sponsor’s obligation under Listing Rule 3A.03(2) to “take reasonable steps to ensure that the information contained in the listing document is accurate and complete in all material respects.” The regulatory logic is that if minutes are insufficient, the sponsor cannot demonstrate it took those reasonable steps.

A 2024 HKEX Listing Committee decision, referenced in the SFC’s circular, rejected a sponsor’s reliance on post-meeting emails to supplement deficient minutes. The committee ruled that contemporaneous minutes—defined as those created within 24 hours of the meeting—carry greater evidentiary weight than retrospective reconstructions. This ruling has direct implications for the 2025 inspection criteria, where the SFC now flags any minutes drafted more than 72 hours after the meeting as a “red flag” requiring explanation.

Core Requirements for Due Diligence Meeting Minutes

Content Specificity: Beyond the Agenda

The SFC’s 2025 guidelines mandate that minutes must capture the substance of due diligence discussions, not just their structure. For a typical sponsor-led meeting—such as a management interview or a site visit—the minutes must include:

• Specific questions posed by the sponsor team: Generic phrasing like “discussed financial performance” is insufficient. The SFC expects minutes to record the exact question, e.g., “The sponsor asked the CFO to explain the 15% decline in gross margin for the retail segment in FY2024, referencing the draft prospectus at page 42.”

• Verbatim or near-verbatim responses for material issues: Where a response touches on a risk factor identified in the sponsor’s due diligence plan, the minutes must capture the exact language used. The SFC’s inspectors have rejected paraphrased summaries that omit key qualifications or caveats.

• The sponsor’s analytical assessment: Minutes must document the sponsor team’s evaluation of the response’s reliability. This includes noting whether the response was consistent with other evidence, whether independent verification was conducted, and the basis for any conclusions drawn.

• Follow-up actions and responsible parties: If a response raises a new issue, the minutes must specify the action item, the person responsible (by name and title), and the deadline for resolution. The SFC has cited cases where vague entries like “follow up with management” were deemed non-compliant.

Timeliness and Contemporaneity

The SFC’s 2025 inspection findings establish a strict hierarchy of acceptable timing:

1. Minutes drafted within 24 hours: Considered “contemporaneous” and given full evidentiary weight.
2. Minutes drafted within 72 hours: Acceptable but subject to heightened scrutiny; the sponsor must justify the delay.
3. Minutes drafted after 72 hours: Presumed non-compliant unless the sponsor can demonstrate exceptional circumstances (e.g., illness of the note-taker) and provide an alternative contemporaneous record (e.g., audio recording).

The SFC’s position is supported by the Code of Conduct’s paragraph 17.2, which requires sponsors to “keep proper records of the due diligence work performed.” In a 2023 disciplinary action against a mid-tier sponsor (SFC Press Release, 15 November 2023), the SFC imposed a fine of HKD 12 million partly for failing to produce meeting minutes that were “contemporaneous and sufficiently detailed to reflect the sponsor’s assessment of material risks.”

Electronic Records and the Audit Trail

The SFC’s 2025 guidelines explicitly address the use of electronic tools for minute-taking. The regulator accepts digital records—such as shared spreadsheets, project management platforms, or dedicated due diligence software—provided they meet the same content and timeliness standards as paper minutes. However, the SFC has flagged a common deficiency: sponsors using template-based tools that generate minutes with pre-filled fields, resulting in generic entries lacking deal-specific detail.

The SFC now expects sponsors to maintain an “audit trail” linking each minute entry to the underlying evidence. For example, if a management response is recorded, the minutes should include a reference to the supporting document (e.g., “See Exhibit 5: Management’s written response dated 10 March 2025”). This requirement aligns with the SFC’s broader push for “documented due diligence” under the Code’s Schedule 1, paragraph 17.3, which states that “the sponsor should maintain a clear and comprehensive record of its due diligence work.”

Operational Implications for Sponsor Compliance Teams

Resource Allocation and Training

The enhanced minute-taking standards impose significant operational costs on sponsor firms. A 2024 industry survey by the Association of Corporate Finance Professionals (ACFP) estimated that the average sponsor deal requires 150-200 hours of minute-taking and review, up from 80-100 hours under pre-2025 standards. For a typical Main Board IPO, this translates to an additional HKD 500,000 to HKD 800,000 in compliance costs, assuming a blended hourly rate of HKD 4,000 for senior analysts and managers.

Sponsor compliance teams must now invest in specialised training for note-takers. The SFC’s 2025 guidelines recommend that sponsors designate a “minutes officer” for each deal, responsible for drafting, reviewing, and archiving minutes within the required timeframe. This role should be separate from the lead transaction team to ensure independence, a practice the SFC has endorsed in its “Supervision of Sponsors” circular (January 2025).

Technology Integration and Data Security

The SFC’s acceptance of electronic records creates an opportunity for sponsors to leverage technology for compliance. Several Hong Kong-based sponsor firms have adopted cloud-based due diligence platforms that automate minute generation, timestamp entries, and link to supporting documents. However, the SFC has cautioned that these systems must comply with the Personal Data (Privacy) Ordinance (Cap. 486) when handling client data, and with the SFC’s own cybersecurity guidelines for licensed corporations (Code of Conduct, paragraph 11.1).

The SFC’s 2025 inspection findings also highlight the risk of data loss or tampering. Sponsors must maintain an immutable audit trail, typically through a blockchain-based or time-stamped document management system. The regulator has indicated that it will treat any unexplained gaps in the electronic record as presumptive evidence of non-compliance, shifting the burden of proof to the sponsor.

Cross-Border Due Diligence Considerations

For sponsors conducting due diligence on PRC-based issuers, the SFC’s 2025 guidelines intersect with the Hong Kong Monetary Authority (HKMA) and the People’s Bank of China’s (PBOC) data transfer rules. Minutes that include detailed discussions of PRC operations may trigger cross-border data compliance obligations under the PRC Cybersecurity Law (2017) and the Personal Information Protection Law (PIPL, 2021).

The SFC has acknowledged this tension in its “Cross-Border Due Diligence FAQ” (March 2025), advising sponsors to maintain minutes in Hong Kong while ensuring that any PRC-specific content is anonymised or aggregated to avoid breaching local laws. This creates a practical challenge: the SFC requires specificity, but PRC law restricts the transfer of certain operational data. Sponsors must now implement a dual-track system, with a Hong Kong master file and a PRC-compliant local file, a structure the SFC has accepted in principle but not yet tested in enforcement.

Enforcement Trends and Case Studies

The 2024-2025 Enforcement Wave

The SFC’s enforcement division has shown a marked increase in actions related to minute deficiencies. In the 12 months ending March 2025, the SFC initiated 8 formal investigations into sponsor conduct, 6 of which cited inadequate meeting minutes as a primary factor. This represents a 50% increase over the prior year, according to the SFC’s Annual Enforcement Report 2024 (published April 2025).

The most notable case involved a sponsor that failed to document a key meeting with a PRC-based issuer’s auditor. The SFC found that the sponsor’s minutes omitted the auditor’s verbal confirmation of a material revenue recognition policy, and instead relied on a post-meeting email that contradicted the auditor’s earlier statement. The SFC imposed a record fine of HKD 25 million and suspended the sponsor’s Type 6 license for 12 months (SFC Press Release, 10 February 2025).

Lessons from the China Forestry Precedent

The 2025 guidelines can be seen as a direct response to the deficiencies exposed in the China Forestry case (2012-2014). In that enforcement action, the SFC found that the sponsor’s minutes were “woefully inadequate,” lacking any record of the sponsor’s verification of the issuer’s forestry assets. The Market Misconduct Tribunal’s ruling (2014) noted that the sponsor’s minutes were “essentially a list of topics, with no analytical content.”

The 2025 guidelines explicitly require that minutes for site visits—such as factory inspections or asset verification—include photographs, GPS coordinates, and third-party confirmations where available. This is a direct codification of the lessons from China Forestry, where the sponsor’s failure to document the physical existence of assets led to a HKD 10 million fine and a 5-year ban for the responsible officer.

Conclusion: Five Actionable Takeaways for Sponsors

1. Implement a 24-hour minute drafting policy: All due diligence meeting minutes must be finalised and approved by the lead sponsor officer within 24 hours of the meeting, with any exception requiring documented approval from the firm’s compliance officer.

2. Adopt a “verbatim for materiality” standard: For any discussion touching on a risk factor identified in the sponsor’s due diligence plan, capture the exact question and response, including the speaker’s name and title, and link the entry to the underlying evidence file.

3. Establish a separate minutes officer role: Designate a non-transaction team member for each deal to draft and review minutes, ensuring independence from the deal team’s commercial pressures and reducing the risk of selective documentation.

4. Maintain an immutable electronic audit trail: Use time-stamped, blockchain-based document management systems that automatically record the creation and modification history of each minute entry, and ensure compliance with the Personal Data (Privacy) Ordinance for client data.

5. Conduct a pre-filing minute audit: Before submitting a listing application, commission an independent compliance review of all due diligence minutes against the SFC’s 2025 guidelines, with a specific focus on timeliness, content specificity, and the audit trail linking minutes to supporting evidence.