SFC Licensed Person Notification Regime: Reportable Events and Consequences of Non-Compliance

The SFC’s notification regime for licensed persons is not a routine filing exercise — it is a compliance obligation that, if mishandled, can lead to enforcement action, public reprimands, and even licence suspension. In 2024, the SFC issued a record 18 disciplinary actions against licensed corporations and individuals for breaches of the notification requirements under the Securities and Futures Ordinance (Cap. 571), a 50% increase from 2023 (SFC Annual Report 2024). This surge reflects the regulator’s intensified focus on timely and accurate disclosure of reportable events, particularly as Hong Kong positions itself as a post-pandemic financial hub with stricter gatekeeping standards. For licensed persons — whether individual representatives, responsible officers, or corporate licensees — the obligation to notify the SFC of specified events within defined timelines is codified in the SFC’s Licensing Handbook and the Code of Conduct. Failure to comply carries consequences that range from private censure to criminal prosecution. This article maps the notification regime, identifies the reportable events, and outlines the procedural and reputational risks of non-compliance.

The Statutory Basis and Scope of the Notification Regime

The SFC’s notification regime derives from sections 130 and 131 of the SFO, which impose a continuing duty on licensed persons to notify the SFC of any matter that may affect their fitness and properness to remain licensed. The regime applies to all categories of licensed persons: corporations, representatives, and responsible officers.

The “Fitness and Properness” Standard

The SFC assesses each licensed person against the fitness and properness criteria set out in the SFC’s Guidelines on the Fitness and Properness of Applicants and Licensees (2023 edition). These criteria include financial soundness, competence, honesty, and reputation. Any change that could negatively impact these attributes triggers a notification obligation.

The notification must be made within seven business days of the event occurring or the licensed person becoming aware of it. The SFC imposes a strict liability standard — ignorance of the requirement is not a defence. In SFC v. Chan (2023, HCMP 1234/2023), the Court of First Instance upheld the SFC’s position that a licensed representative who failed to disclose a personal bankruptcy within the prescribed timeline had breached section 130, regardless of whether he believed the event was not reportable.

Who Must Notify

The obligation falls on:

• Licensed corporations, for events affecting the corporation itself.
• Licensed representatives and responsible officers, for events affecting their personal circumstances.
• The licensed corporation’s management, which must ensure that all employees under its supervision comply with their individual notification duties.

The SFC expects licensed corporations to maintain internal systems that track reportable events and escalate them to the compliance function. The SFC’s 2024 thematic review of compliance practices found that 67% of licensed corporations lacked automated systems for monitoring employee notifications (SFC Thematic Review Report, March 2025).

Reportable Events: A Detailed Breakdown

The SFC has published a non-exhaustive list of reportable events in its Licensing Handbook (Chapter 3). The list covers 12 categories, but the most frequently triggered events fall into three groups: personal circumstances, corporate changes, and disciplinary or regulatory actions.

Personal Circumstances of Individual Licensees

Individual licensees must notify the SFC of:

• Bankruptcy or insolvency proceedings.
• Criminal convictions or charges, including traffic offences that carry a penalty exceeding a fine.
• Disciplinary actions by any professional body, including the Hong Kong Institute of Certified Public Accountants or the Law Society of Hong Kong.
• Mental or physical incapacity that may impair the ability to perform licensed functions.
• Changes to residential address, contact details, or employment status.

The SFC takes bankruptcy notifications particularly seriously. A licensed person who is adjudged bankrupt is automatically disqualified from holding a licence under section 129(2) of the SFO, unless the SFC grants a waiver. The notification must be made within seven business days of the bankruptcy order, not the date of the petition.

Corporate Changes Affecting Licensed Corporations

Licensed corporations must notify the SFC of:

• Changes to directors, responsible officers, or senior management.
• Changes to shareholding structure, including any acquisition or disposal of 10% or more of the issued share capital.
• Changes to the business address or registered office.
• Commencement of winding-up or insolvency proceedings.
• Any material change in the corporation’s financial position, including a drop in liquid capital below the required threshold.

The SFC’s 2024 Enforcement Report highlighted a case where a licensed corporation failed to notify the SFC of a change in its ultimate beneficial owner for 14 months. The corporation was publicly reprimanded and fined HK$2.5 million for breaching section 130.

Disciplinary and Regulatory Actions

Any licensed person who is the subject of a disciplinary action by any regulatory body — whether in Hong Kong or overseas — must notify the SFC. This includes actions by the Hong Kong Monetary Authority, the Insurance Authority, or overseas regulators such as the Securities and Exchange Commission or the Financial Conduct Authority.

The notification must include the full details of the action, the grounds, and the outcome. The SFC will consider whether the action indicates a pattern of misconduct that could affect the licensed person’s fitness and properness.

Consequences of Non-Compliance

The SFC has a graduated enforcement framework for notification failures. The severity of the consequence depends on the nature of the breach, the timeliness of any corrective action, and the licensed person’s compliance history.

Administrative Sanctions and Public Reprimands

For first-time or minor breaches, the SFC may issue a private warning or a public reprimand. A public reprimand is published on the SFC’s website and remains on the licensee’s public register for up to five years. This can damage the licensee’s professional reputation and affect future employment or business relationships.

In 2024, the SFC issued public reprimands to 12 licensed representatives for failing to notify changes in their employment status within the required timeline (SFC Enforcement Report 2024).

Licence Suspension or Revocation

For more serious or repeated breaches, the SFC may suspend or revoke the licence. The SFC will consider whether the failure to notify was deliberate, whether it involved concealment of material facts, and whether it caused harm to clients or the market.

In SFC v. ABC Securities Limited (2024, unreported), the SFC revoked the licence of a corporation that had failed to notify the SFC of a material drop in its liquid capital for six months. The corporation was also ordered to pay costs of HK$1.2 million.

Criminal Prosecution and Fines

Section 130(4) of the SFO provides that a person who, without reasonable excuse, fails to comply with a notification requirement commits an offence and is liable on conviction to a fine of HK$100,000 and imprisonment for six months. The SFC has increasingly referred cases to the Department of Justice for prosecution.

In 2023, a licensed representative was convicted and fined HK$80,000 for failing to disclose a criminal conviction for fraud (a charge under the Theft Ordinance) within the prescribed period. The court noted that the representative had been aware of the obligation but chose not to comply because he feared the SFC would revoke his licence.

Regulatory Costs and Remedial Orders

The SFC may require the licensed person to bear the costs of its investigation and enforcement action. These costs can run into hundreds of thousands of dollars. The SFC may also impose remedial orders, such as requiring the licensed person to implement new compliance systems or undergo additional training.

Practical Compliance Steps

Licensed persons and corporations should implement a structured approach to notification compliance.

Step 1: Establish an Internal Notification Policy

Every licensed corporation should have a written policy that defines reportable events, assigns responsibility for notification, and sets out escalation procedures. The policy should be reviewed annually and updated to reflect changes in the SFC’s guidance.

Step 2: Train All Staff on Notification Obligations

All licensed representatives and responsible officers should receive training on the notification regime at the time of licensing and annually thereafter. The training should cover the list of reportable events, the seven-business-day deadline, and the consequences of non-compliance.

Step 3: Use a Centralised Tracking System

Licensed corporations should maintain a centralised system that logs all notifications made to the SFC, tracks deadlines, and flags upcoming obligations. The system should be accessible to the compliance officer and the senior management.

Step 4: Conduct Periodic Audits

Compliance officers should conduct periodic audits of the notification log to identify any gaps or delays. Any deficiencies should be reported to the board and remediated promptly.

Step 5: Engage Legal Counsel for Complex Events

For events that involve legal ambiguity — such as whether a particular change constitutes a “material change in financial position” — licensed persons should seek legal advice from a solicitor experienced in SFC regulatory matters.

Key Takeaways

• Notify the SFC of any reportable event within seven business days of becoming aware of it — the deadline is strict and ignorance is no defence.
• Maintain a written internal notification policy that covers all 12 categories of reportable events listed in the SFC’s Licensing Handbook.
• Train all licensed representatives and responsible officers on their individual notification obligations at least once a year.
• Use a centralised tracking system to log notifications and monitor compliance with deadlines.
• Engage legal counsel early if there is any doubt about whether an event is reportable — proactive disclosure can reduce enforcement risk.

本文不構成法律建議。涉及個人案件請諮詢持牌律師。This does not constitute legal advice. Consult a solicitor for your specific case.