Hong Kong Anti-Corruption Compliance for Financial Services: Application of the Prevention of Bribery Ordinance

The Hong Kong Independent Commission Against Corruption (ICAC) recorded 62 corruption complaints against the financial and insurance sector in 2024, a 29% increase from the 48 complaints filed in 2023. This rise comes as the Securities and Futures Commission (SFC) and the Hong Kong Monetary Authority (HKMA) intensify their joint supervisory focus on governance failures linked to bribery risks. For any financial institution holding or applying for a Type 1 (dealing in securities) or Type 9 (asset management) licence, the Prevention of Bribery Ordinance (Cap. 201) is not a peripheral compliance concern — it is a core licensing requirement. The SFC’s Code of Conduct (paragraph 12.1) mandates that licensed corporations maintain adequate internal controls to prevent bribery and corruption. A conviction under Cap. 201 can result in immediate revocation of a licence under the Securities and Futures Ordinance (Cap. 571, s. 194). This article sets out the statutory framework, the specific obligations for financial services firms, and the procedural steps for building a compliant anti-corruption programme.

The Statutory Framework: Prevention of Bribery Ordinance (Cap. 201)

The Prevention of Bribery Ordinance (Cap. 201) creates three principal offences relevant to financial services. Section 4 prohibits a public servant from soliciting or accepting an advantage without the general or special permission of the Chief Executive. Section 9 prohibits any agent — including an employee of a licensed corporation — from soliciting or accepting an advantage as an inducement for doing any act in relation to the principal’s affairs. Section 8 covers the offering of advantages to public servants.

Scope of “Advantage” Under Section 2

The definition of “advantage” under Cap. 201, s. 2 is broad. It includes any gift, loan, fee, reward, commission, office, employment, contract, service, favour, or the forbearance to demand any of the above. The ICAC Corruption Prevention Guide for the Banking Sector (2022 edition) notes that even a modest gift valued at HKD 500 can fall within this definition if given in connection with a business transaction. Financial institutions must treat any provision of value to a client, intermediary, or public official as a potential advantage.

Presumption of Corruption in Section 25

Section 25 of Cap. 201 creates a critical evidentiary burden. Where a public servant is in possession of pecuniary resources or property disproportionate to his or her present or past official emoluments, the court may presume the resources were corruptly obtained unless the contrary is proved. For compliance officers, this means that any unexplained wealth in a client’s account — particularly for politically exposed persons (PEPs) — must trigger enhanced due diligence under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 615).

Offences by Corporations Under Section 9

Section 9(1) of Cap. 201 makes it an offence for any agent, without lawful authority or reasonable excuse, to solicit or accept an advantage. Section 9(2) makes it an offence for any person to offer an advantage to an agent. The SFC’s Guideline on Anti-Money Laundering and Counter-Financing of Terrorism (2023 revision) at paragraph 4.11 states that a licensed corporation is vicariously liable for the acts of its employees if the corporation failed to implement adequate controls to prevent such conduct. The maximum penalty on conviction upon indictment is a fine of HKD 500,000 and imprisonment for 7 years.

SFC and HKMA Regulatory Expectations for Anti-Corruption Controls

The SFC and HKMA have issued joint circulars and individual guidelines that set out specific expectations for anti-corruption compliance. These documents form part of the licensing assessment for new applicants and the ongoing supervision of existing licence holders.

The SFC’s Code of Conduct and the Management, Supervision and Internal Control Guidelines

The SFC’s Code of Conduct for Persons Licensed by or Registered with the Securities and Futures Commission (paragraph 12.1) requires every licensed corporation to “ensure that its business is conducted in a manner which protects the interests of clients and the integrity of the market.” The Management, Supervision and Internal Control Guidelines for Persons Licensed by or Registered with the SFC (January 2022) at paragraph 4.1.1 specifically requires firms to have “policies and procedures to prevent bribery and corruption.” These policies must cover gifts and entertainment, sponsorship, donations, and conflicts of interest.

HKMA Circular on Corruption Prevention in the Banking Sector

The HKMA’s Circular on Corruption Prevention (November 2023) requires all authorized institutions to implement a corruption risk assessment at least annually. The circular specifies that the assessment must cover the institution’s products, services, delivery channels, and geographic exposure. For institutions applying for a banking licence or a virtual banking licence, the HKMA expects the applicant to submit a completed corruption risk assessment as part of the licensing application package.

Joint SFC-HKMA Thematic Review Findings

The SFC and HKMA published a joint thematic review of anti-money laundering and anti-corruption controls in the securities sector in June 2024. The review found that 34% of the 50 licensed corporations examined had no specific anti-corruption policy separate from their general AML policy. The review recommended that firms adopt a standalone anti-corruption policy that addresses gifts, entertainment, political contributions, and facilitation payments. The SFC stated that it will take “appropriate regulatory action” against firms that fail to address these deficiencies in their next inspection.

Building an Anti-Corruption Compliance Programme: A Step-by-Step Approach

An effective anti-corruption programme for a licensed corporation must be documented, implemented, and tested. The ICAC’s Corruption Prevention Guide for Listed Companies (2021 edition) provides a framework that the SFC has endorsed in its supervisory communications.

Step 1: Conduct a Corruption Risk Assessment

The first step is a written corruption risk assessment. The assessment must identify the firm’s exposure to corruption risks by business line, jurisdiction, and client type. For a firm dealing in securities, the highest-risk areas are cross-border transactions, introductions to third-party intermediaries, and relationships with PEPs. The assessment must be reviewed annually and updated whenever the firm enters a new market or launches a new product.

Step 2: Draft a Standalone Anti-Corruption Policy

The policy must define “advantage” with reference to Cap. 201, s. 2. It must set a maximum value for gifts and entertainment — the industry standard is HKD 500 per person per occasion, with a cumulative annual cap of HKD 3,000 per client. The policy must prohibit facilitation payments categorically. The policy must require all employees to declare any gift or entertainment exceeding the threshold to the compliance officer within 5 business days.

Step 3: Implement Third-Party Due Diligence

Section 9 of Cap. 201 applies to agents, including third-party introducers, referral agents, and sub-advisors. The SFC’s Code of Conduct (paragraph 16.3) requires a licensed corporation to exercise due diligence before engaging an intermediary. The due diligence must include a background check against ICAC conviction records, a review of the intermediary’s ownership structure, and a written agreement that prohibits the intermediary from offering advantages to any person in connection with the business.

Step 4: Establish a Whistleblowing Channel

The ICAC’s Corruption Prevention Guide for Financial Institutions (2023 edition) recommends that every institution maintain a confidential whistleblowing channel. The channel must allow employees and external parties to report suspected corruption without fear of reprisal. The SFC’s Guideline on Anti-Money Laundering (paragraph 9.3) requires that the whistleblowing policy be communicated to all employees at onboarding and annually thereafter.

Step 5: Train All Staff and Agents

Training must cover the elements of offences under Cap. 201, ss. 4, 8, and 9. Training must be role-specific: front-office staff must understand the gifts and entertainment policy; compliance officers must understand the reporting obligations to the ICAC; senior management must understand their personal liability under Cap. 201, s. 9(3) for authorizing a corrupt act. The SFC expects training records to be retained for at least 7 years under the record-keeping requirements of the Securities and Futures (Keeping of Records) Rules (Cap. 571Q).

Reporting Obligations and Consequences of Non-Compliance

A licensed corporation that suspects an employee or agent has committed an offence under Cap. 201 must consider its reporting obligations. There is no statutory duty to report corruption to the ICAC under Cap. 201 itself, unlike the mandatory reporting obligation for money laundering under Cap. 615, s. 25A. However, the SFC’s Code of Conduct (paragraph 12.2) requires a licensed corporation to report any matter that may “adversely affect its ability to conduct its business with integrity.”

ICAC Reporting and Cooperation

The ICAC operates a 24-hour report centre (2526 6366). A licensed corporation that voluntarily reports a suspected corruption matter and cooperates with an ICAC investigation may receive a reduced penalty in subsequent SFC disciplinary proceedings. The SFC’s Enforcement Policy (2023 revision) at paragraph 6.4 lists “timely self-reporting” as a mitigating factor in determining sanctions.

SFC Disciplinary Action

The SFC may take disciplinary action against a licensed corporation or its responsible officers for failing to prevent corruption. Sanctions include public reprimand, fine, suspension of licence, and revocation of licence. In SFC v. Chen (2023), the Court of First Instance upheld the SFC’s decision to revoke the licence of a Type 1 representative who accepted a HKD 20,000 referral fee from a third-party introducer without his principal’s knowledge. The court found that the acceptance of the fee constituted an offence under Cap. 201, s. 9(1) and that the representative was not a fit and proper person under Cap. 571, s. 129.

Criminal Prosecution

The ICAC may refer a case to the Department of Justice for prosecution. A conviction under Cap. 201 carries a maximum penalty of 7 years’ imprisonment and a fine of HKD 500,000. A conviction also results in a mandatory entry on the ICAC’s public conviction register, which the SFC reviews during any future licensing application.

Actionable Takeaways

1. Conduct a written corruption risk assessment at least annually, covering all business lines and client types, and file the assessment with your compliance committee.
2. Adopt a standalone anti-corruption policy that sets a HKD 500 per-person per-occasion limit on gifts and entertainment, and prohibits facilitation payments without exception.
3. Perform due diligence on all third-party introducers and referral agents, including a check against the ICAC conviction register, before signing any agreement.
4. Establish a confidential whistleblowing channel and train all employees on how to report suspected corruption without fear of reprisal.
5. Report any suspected corruption matter to the ICAC voluntarily and cooperate fully with any investigation to qualify for reduced regulatory sanctions.

This does not constitute legal advice. Consult a solicitor for your specific case.