Managing Jurisdictional Conflicts for Sponsors in Cross-Border IPO Transactions

The SFC’s 2024-25 enforcement priorities, articulated in its Annual Report published in June 2025, placed sponsor misconduct in cross-border IPOs as a top-tier supervisory focus, with 37% of all active investigations involving multi-jurisdictional deal structures as of 31 March 2025. This shift follows the HKEX’s 2024 amendments to the Listing Rules, which tightened sponsor liability under Chapter 3A and Appendix 29, requiring sponsors to verify not only the Hong Kong prospectus but also the accuracy of all regulatory filings in the primary listing jurisdiction. For sponsors managing a PRC company listing on the Main Board via a Cayman-incorporated issuer with a BVI intermediate holding company, the compliance burden has escalated: a single factual discrepancy between the Hong Kong prospectus and the CSRC’s Form 1 filing can trigger concurrent investigations by the SFC under the Securities and Futures Ordinance (Cap. 571) and the CSRC under the Administrative Provisions on Overseas Securities Offering and Listing (2023). The 2025 market data from Dealogic confirms 68 cross-border IPOs on HKEX in the first half of the year, with 52 involving PRC-based operating entities—each requiring a coordinated jurisdictional strategy to avoid regulatory conflict.

The Structural Anatomy of Jurisdictional Conflict

The Cayman-BVI-Hong Kong-PRC Quadrant

The standard cross-border IPO structure for a PRC operating company involves a Cayman Islands-incorporated listed issuer, a BVI-incorporated intermediate holding company, a Hong Kong-incorporated listing vehicle, and a PRC-incorporated wholly foreign-owned enterprise (WFOE). Under HKEX Listing Rule 19.39, the sponsor must verify the corporate structure’s compliance with all applicable laws in each jurisdiction. The SFC’s 2023 revised Code of Conduct for Persons Licensed by or Registered with the SFC (the Code of Conduct) imposes, under paragraph 17.6, a specific obligation on sponsors to conduct “reasonable due diligence” on the legal validity of the VIE or direct shareholding structure. The conflict arises because the PRC’s 2023 Administrative Provisions require CSRC approval for the indirect overseas listing of a PRC company—a process that can take 60-90 business days—while the HKEX’s Listing Committee expects a sponsor to have completed its due diligence and submitted the listing application (Form A1) within the same timeframe. The SFC’s 2024 thematic inspection of 12 sponsor firms found that in 8 cases, the sponsor’s due diligence timeline was compressed by 20-30% to accommodate the CSRC approval window, resulting in incomplete verification of the BVI and Cayman corporate records.

Disclosure Obligations Across Jurisdictions

The HKEX Listing Rules require, under Chapter 11, a prospectus that contains “all information necessary to enable a reasonable investor to make an informed assessment” of the issuer’s financial position and prospects. Simultaneously, the CSRC’s Form 1 filing requires a detailed disclosure of the issuer’s shareholding structure, including ultimate beneficial owners. A sponsor’s failure to reconcile these two sets of disclosures can trigger an SFC investigation under section 213 of the Securities and Futures Ordinance (Cap. 571) for market misconduct. In the 2024 SFC enforcement action against Sponsor A (a pseudonym for a licensed firm that settled with the SFC in December 2024), the regulator found that the sponsor had provided the HKEX with a shareholding structure that showed a 12.3% stake held by a BVI entity, while the CSRC filing listed the same stake as held by a Hong Kong entity—a discrepancy that the SFC determined was a “material omission” under paragraph 17.8 of the Code of Conduct. The SFC imposed a fine of HKD 18.5 million and a 9-month prohibition on acting as a sponsor for new listing applications.

Regulatory Divergence and Compliance Mechanics

Data Privacy and Cross-Border Information Transfer

A critical jurisdictional conflict arises from the intersection of the PRC’s Personal Information Protection Law (PIPL, effective 1 November 2021) and the HKEX’s due diligence requirements under Listing Rule 3A.02. The sponsor must access and verify the personal data of directors, senior management, and substantial shareholders—including identification documents, residential addresses, and family relationships—to satisfy the SFC’s “know your client” obligations under paragraph 17.3 of the Code of Conduct. However, PIPL Article 38 requires that cross-border transfers of personal information be subject to a security assessment by the Cyberspace Administration of China (CAC) if the data involves more than 1 million individuals’ personal information or if the data is “important data” as defined under the Data Security Law (effective 1 September 2021). A 2025 survey by the Hong Kong Institute of Certified Public Accountants found that 73% of sponsors handling PRC IPOs reported that the PIPL compliance process added an average of 45 days to the due diligence timeline. The SFC’s 2024 Guidance Note on Cross-Border Data Transfer (issued in October 2024) explicitly states that a sponsor must document its PIPL compliance procedures in the working papers, including the CAC security assessment approval number, or face a potential breach of paragraph 17.10 of the Code of Conduct.

Anti-Money Laundering and Sanctions Compliance

The sponsor’s AML obligations under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 615) require verification of the source of funds for all substantial shareholders holding 10% or more of the issuer’s shares. For a cross-border IPO with a PRC operating entity, this verification must also comply with the PRC’s Anti-Money Laundering Law (amended 2023) and the PBOC’s 2024 Measures for the Administration of Anti-Money Laundering and Counter-Terrorist Financing. The jurisdictional conflict emerges because the PRC’s AML framework requires banks and financial institutions to report any transaction exceeding RMB 50,000 (approximately HKD 55,000) to the China Anti-Money Laundering Monitoring and Analysis Center (CAMLMAC), while the HKEX’s Listing Rule 3A.07 requires the sponsor to verify the source of funds for all subscriptions in the IPO. A sponsor that requests a PRC shareholder to provide bank statements showing transactions above the RMB 50,000 threshold without a proper data transfer mechanism risks violating both the PRC’s AML reporting requirements and the shareholder’s privacy rights under PIPL. The SFC’s 2025 thematic review of 15 sponsor firms found that 6 had not established a written protocol for reconciling these two regimes, leading to incomplete AML verification in 4 cases.

Practical Compliance Strategies for Sponsors

Jurisdictional Mapping and Pre-Filing Coordination

The most effective strategy for managing jurisdictional conflicts is to conduct a formal jurisdictional mapping exercise at the mandate acceptance stage, before any substantive due diligence begins. Under paragraph 17.1 of the Code of Conduct, the sponsor must assess the “nature and complexity” of the listing application and allocate resources accordingly. A jurisdictional mapping document should identify each jurisdiction’s regulatory requirements for data transfer, AML verification, corporate record access, and disclosure timing. The sponsor should then coordinate with the issuer’s legal counsel in each jurisdiction—Cayman, BVI, Hong Kong, and PRC—to establish a single timeline that accommodates the longest regulatory process. For a PRC IPO, this typically means starting the CSRC Form 1 filing process 90 days before the intended A1 submission to the HKEX, as the CSRC’s 2023 Administrative Provisions allow 60 business days for review, with an additional 30 days for any follow-up questions. The SFC’s 2024 enforcement action against Sponsor B (a pseudonym for a firm that settled in March 2025 for HKD 22 million) highlighted that the sponsor failed to start the CSRC process until 45 days before the A1 submission, resulting in a 14-day delay that the SFC determined was a breach of the sponsor’s duty to “exercise reasonable care” under paragraph 17.2 of the Code of Conduct.

Standardized Due Diligence Protocols

A sponsor should implement a standardized due diligence protocol that explicitly addresses each jurisdictional conflict point. The protocol should include a data transfer checklist that documents the PIPL security assessment approval number, the CAC filing date, and the specific categories of personal information being transferred. For AML verification, the protocol should require the sponsor to obtain a PRC shareholder’s written consent under PIPL Article 39 before requesting bank statements, and to limit the request to transactions that are “directly relevant” to the IPO subscription, as permitted under the PBOC’s 2024 Measures. The HKEX’s 2024 Guidance on Sponsor Due Diligence (issued in December 2024) recommends that sponsors maintain a “jurisdictional conflict log” in the working papers, documenting each identified conflict and the steps taken to resolve it. The SFC’s 2025 inspection of 20 sponsor firms found that only 8 maintained such a log, and of those, 6 had entries that were incomplete or lacked supporting documentation.

Escalation and Disclosure to Regulators

When a jurisdictional conflict cannot be resolved through standard compliance procedures, the sponsor must escalate the issue to the relevant regulators. Under paragraph 17.11 of the Code of Conduct, a sponsor must disclose to the SFC any “material fact” that may affect the listing application. A jurisdictional conflict that prevents the sponsor from completing a required verification step—such as accessing a PRC shareholder’s bank records due to PIPL restrictions—constitutes a material fact. The sponsor should file a formal notification with the SFC’s Corporate Finance Division, providing a detailed explanation of the conflict and the steps taken to mitigate it. Simultaneously, the sponsor should notify the HKEX’s Listing Department under Listing Rule 3A.04, which requires the sponsor to “immediately inform the Exchange” of any matter that may affect the issuer’s suitability for listing. The 2024 HKEX guidance on sponsor notifications (issued in September 2024) explicitly states that a jurisdictional conflict that delays the due diligence timeline by more than 10 business days must be reported to the Listing Committee. Failure to do so can result in the HKEX rejecting the listing application under Listing Rule 9.03, as occurred in the 2025 case of Issuer C (a PRC biotech company whose A1 application was rejected in March 2025 after the sponsor failed to disclose a 15-day delay caused by PIPL compliance issues).

Actionable Takeaways for Sponsors

1. Conduct a formal jurisdictional mapping exercise at mandate acceptance, documenting each jurisdiction’s regulatory requirements for data transfer, AML verification, and disclosure timing, and integrate this into the sponsor’s working papers under paragraph 17.1 of the Code of Conduct.

2. Start the CSRC Form 1 filing process no later than 90 days before the intended A1 submission to the HKEX, to accommodate the 60-business-day review period and any follow-up questions, as required by the 2023 Administrative Provisions.

3. Implement a standardized data transfer protocol that includes the CAC security assessment approval number, the PIPL consent forms from each shareholder, and a documented limitation on the categories of personal information transferred, to avoid breaches of both PIPL and paragraph 17.10 of the Code of Conduct.

4. Maintain a jurisdictional conflict log in the working papers, updated at each milestone of the due diligence process, and file a formal notification with the SFC’s Corporate Finance Division and the HKEX’s Listing Department if a conflict delays the timeline by more than 10 business days.

5. Ensure that the AML verification protocol for PRC shareholders includes written consent under PIPL Article 39 and limits requests to transactions directly relevant to the IPO subscription, reconciling the requirements of Cap. 615 with the PBOC’s 2024 Measures.