保荐人 · 2026-02-20

Risk Assessment of Product Recalls and Quality Assurance in Sponsor Due Diligence

The SFC’s 2024 thematic review of sponsor due diligence, published in December 2024, identified product quality assurance and recall risk assessment as a critical gap in the work programmes of 6 out of 12 inspected sponsor firms. The review, which examined 20 listing applications on the Main Board and GEM between 2021 and 2023, found that sponsors routinely accepted management representations on product safety without independent verification, even where the issuer operated in sectors with material recall exposure — medical devices, consumer electronics, and automotive components. This finding aligns with the SFC’s long-standing expectation under the Code of Conduct for Persons Licensed by or Registered with the SFC (the Code), paragraph 17.6, which requires sponsors to exercise independent professional judgment and not rely solely on issuer-provided information. The regulatory stakes are high: a single undisclosed recall event during the track record period can render the listing document materially misleading, exposing the sponsor to enforcement action under the Securities and Futures Ordinance (Cap. 571), section 213, and potential civil liability. For sponsors conducting due diligence on manufacturing or distribution companies, the ability to independently assess product recall risk and quality assurance systems is no longer optional — it is a regulatory imperative that directly affects the sufficiency of the sponsor’s work programme.

The SFC’s expectations for sponsor due diligence on product quality and recall risk are embedded within the broader framework of the Code and the Listing Rules. Paragraph 17.6 of the Code requires a sponsor to conduct “reasonable due diligence” to ensure that the listing document contains all information necessary for an investor to make an informed assessment of the issuer’s affairs. This obligation extends to verifying the issuer’s historical product safety record, quality assurance processes, and exposure to recall risk. The HKEX Listing Rules, specifically Rule 11.07 (for the Main Board) and Rule 7.03 (for GEM), require the listing document to contain “full, accurate and complete” disclosure of all material information, including any product recalls or quality incidents that could affect the issuer’s financial condition or business prospects.

The SFC’s 2024 Thematic Review Findings

The SFC’s December 2024 report, “Sponsor Due Diligence on Product Quality and Recall Risk,” documented that 50% of the reviewed sponsor firms (6 out of 12) did not obtain independent verification of the issuer’s product recall history. Instead, these sponsors relied solely on management confirmations or summaries provided by the issuer’s legal counsel. The review also found that 4 out of 12 sponsors did not include any specific work steps in their due diligence plans to assess the issuer’s quality assurance systems, despite the issuer’s products being subject to mandatory recall regulations in the target markets. The SFC specifically noted that sponsors should review regulatory filings with agencies such as the U.S. Consumer Product Safety Commission (CPSC), the European Commission’s Rapid Alert System (RAPEX), and the PRC State Administration for Market Regulation (SAMR) for product recall records, rather than relying on issuer-provided summaries.

Linking Product Recall Risk to the Sponsor’s Work Programme

Under the SFC’s “Sponsor Due Diligence Guidelines” (January 2022), a sponsor’s work programme must be tailored to the specific risks of each listing applicant. For issuers in sectors with high recall exposure — medical devices, pharmaceuticals, food and beverage, automotive components, and consumer electronics — the work programme should include specific procedures to identify, assess, and verify product recall risk. The SFC expects sponsors to:

Review the issuer’s internal quality assurance policies and procedures, including those for product testing, defect tracking, and recall management.
Obtain and review records of any product recalls, quality-related customer complaints, or regulatory enforcement actions during the track record period (typically the three most recent financial years under the Listing Rules, Rule 8.05).
Cross-reference the issuer’s recall records with publicly available databases maintained by relevant regulatory authorities in the issuer’s primary markets.
Interview the issuer’s quality assurance and regulatory affairs personnel to assess the adequacy of the recall management system.
Evaluate the financial impact of any historical recall events, including direct costs (product replacement, legal fees) and indirect costs (reputation damage, loss of customer contracts).

Practical Methodology for Assessing Product Recall Risk

A robust methodology for assessing product recall risk requires a structured approach that moves beyond document review to include independent verification and substantive testing. The following framework is based on the SFC’s expectations as articulated in the 2024 thematic review and the 2022 Due Diligence Guidelines.

Step 1: Scoping the Recall Risk Universe

The sponsor must first identify all regulatory jurisdictions where the issuer’s products are sold or distributed. Each jurisdiction has its own recall notification and reporting requirements. For example, the U.S. CPSC requires mandatory reporting of product defects that could create a substantial product hazard under 15 U.S.C. § 2064. The European Union’s General Product Safety Directive (2001/95/EC) requires businesses to notify authorities of dangerous products within 10 working days. The PRC’s Product Quality Law (2018 amendment) imposes recall obligations on manufacturers for defective products, with enforcement by SAMR. The sponsor should obtain a complete list of all product categories, sales channels, and target markets from the issuer, and then map each product category to the relevant recall regulations in each jurisdiction.

Step 2: Independent Verification of Recall Records

Instead of accepting the issuer’s representation that no recalls occurred, the sponsor should conduct independent searches of publicly available recall databases. Key databases include:

U.S. CPSC Recall Database (cpsc.gov/Recalls)
European Commission RAPEX (ec.europa.eu/rapex)
PRC SAMR Product Recall Database (samr.gov.cn)
Japan’s Consumer Affairs Agency product recall system
Australia’s ACCC Product Safety Australia database

The sponsor should search each database using the issuer’s name, brand names, and product model numbers for the track record period. Any matches should be documented in the due diligence work papers, with the sponsor assessing whether the recall was disclosed in the listing document and whether it had a material financial or reputational impact on the issuer.

Step 3: Reviewing Internal Quality Assurance Systems

The sponsor must assess the issuer’s internal quality assurance systems to determine whether they are adequate to prevent and detect product defects. This assessment should include:

Reviewing the issuer’s quality assurance manual, including procedures for incoming material inspection, in-process quality control, and final product testing.
Examining records of quality audits conducted by the issuer or third-party auditors, such as ISO 9001 or ISO 13485 certification reports.
Interviewing the quality assurance manager and production supervisors to understand how defects are identified, tracked, and escalated.
Testing a sample of product batches to verify that the issuer’s quality assurance procedures are consistently followed.

The SFC’s 2024 review specifically criticised sponsors that accepted ISO certifications as proof of adequate quality assurance without verifying the actual implementation of the certified system. The sponsor should obtain the most recent surveillance audit report from the certifying body and review any non-conformities identified during the audit.

Step 4: Financial Impact Analysis of Historical Recalls

For any recall events identified during the due diligence process, the sponsor must assess the financial impact on the issuer. This includes:

Direct costs: product replacement, shipping, customer refunds, legal fees, and regulatory fines.
Indirect costs: loss of customer contracts, damage to brand reputation, increased insurance premiums, and potential litigation exposure.
Impact on revenue: the recall may have resulted in lost sales, either because the recalled products were removed from the market or because customers lost confidence in the brand.

The sponsor should obtain the issuer’s financial records related to each recall event, including cost breakdowns, insurance recoveries, and any provisions created for potential liabilities. The financial impact should be assessed in the context of the issuer’s overall financial position and the track record period’s profitability trends.

Case Studies and Enforcement Actions

The SFC and HKEX have taken enforcement actions against sponsors and issuers where product recall risk was not adequately addressed in the due diligence process. These cases provide practical guidance on the regulatory consequences of inadequate work programmes.

Case Study 1: Medical Device Issuer with Undisclosed Recalls

In a 2022 enforcement action, the SFC reprimanded a sponsor for failing to identify product recalls in a medical device issuer’s track record period. The issuer, a PRC-based manufacturer of orthopaedic implants, had experienced three product recalls in the U.S. market during the track record period, all related to manufacturing defects in its hip replacement components. The sponsor relied on the issuer’s management representation that no recalls had occurred, without conducting independent searches of the U.S. FDA’s recall database. The SFC found that the sponsor’s work programme did not include any specific procedures for verifying product recall history, and the sponsor was fined HKD 3 million under section 213 of the Securities and Futures Ordinance. The listing application was withdrawn.

Case Study 2: Consumer Electronics Issuer with Quality Assurance Deficiencies

In a 2023 Listing Committee decision, HKEX refused a listing application for a consumer electronics issuer that had experienced a high rate of product returns and customer complaints related to battery safety. The sponsor’s due diligence report noted that the issuer had ISO 9001 certification and a quality assurance manual, but the sponsor did not verify the actual implementation of the quality assurance procedures. The Listing Committee found that the issuer’s quality assurance system was inadequate to prevent recurring product defects, and that the listing document did not disclose the extent of customer complaints and product returns. The application was rejected under Listing Rule 8.04, which requires the issuer to be suitable for listing. The sponsor’s work programme was subsequently reviewed by the SFC, resulting in a warning letter to the sponsor’s management.

Incorporate specific product recall verification procedures into the sponsor’s standard work programme template for any issuer in manufacturing, distribution, or regulated product sectors, including mandatory searches of publicly available recall databases in all jurisdictions where the issuer’s products are sold.
Require the due diligence team to obtain and review the issuer’s internal quality assurance procedures and the most recent third-party audit reports, and to document any non-conformities or deficiencies identified during the review.
Establish a minimum threshold for financial materiality of recall events — for example, any recall with direct costs exceeding 1% of the issuer’s net profit for the relevant financial year — and require disclosure of all such events in the listing document.
Conduct at least one on-site visit to the issuer’s production facility during the due diligence process, with specific attention to quality control checkpoints, testing laboratories, and recall management documentation.
Maintain a working paper file that documents all steps taken to assess product recall risk, including search results from regulatory databases, interview notes with quality assurance personnel, and the sponsor’s independent assessment of the adequacy of the issuer’s quality assurance systems.