SFC Type 10 License for Credit Rating Services: Application Conditions and International Standards

The Hong Kong Securities and Futures Commission (SFC) published its 2024-25 Annual Report in June 2025, confirming that the total number of licensed corporations and registered institutions reached 47,889 as of 31 March 2025. Within this landscape, the Type 10 regulated activity—providing credit rating services—remains one of the least-sought licences, with only 11 licensed corporations holding it as of the same date. This scarcity is not due to lack of demand. Global credit rating agencies are expanding their Asia-Pacific coverage, and Hong Kong’s status as a regional bond hub means any firm offering ratings on Hong Kong-incorporated issuers or debt instruments listed on the Stock Exchange of Hong Kong (HKEX) must hold this licence. The SFC’s 2024 consultation on proposed amendments to the Code of Conduct for Persons Providing Credit Rating Services (the CR Code) signals a tightening of international alignment, particularly with the International Organization of Securities Commissions (IOSCO) Code of Conduct Fundamentals for Credit Rating Agencies (revised 2024). Firms that delay application now risk being locked out of a market where the SFC is increasingly scrutinising cross-border rating activities and unlicensed advisory work. This article sets out the statutory conditions for a Type 10 licence, the application process under the SFC’s fit-and-proper regime, and the key international standards that applicants must operationalise.

Statutory Basis and Scope of Type 10 Regulated Activity

Definition Under the Securities and Futures Ordinance

The Type 10 regulated activity is defined in Schedule 5 to the Securities and Futures Ordinance (Cap. 571) (SFO) as “providing credit rating services”. Section 114(1) of the SFO makes it an offence to carry on a business in a regulated activity without a licence, unless an exemption applies. The SFC’s Guidelines on the Application for a Licence to Provide Credit Rating Services (May 2024 edition) clarifies that “credit rating service” means an opinion regarding the creditworthiness of an entity, a debt security, or a financial obligation, expressed using a defined ranking system. This includes both solicited ratings (paid for by the issuer) and unsolicited ratings (initiated by the rating agency). The definition expressly excludes internal credit assessments used solely for a firm’s own investment decisions, and ratings provided exclusively to professional investors under certain private placement exemptions.

Activities That Trigger the Licensing Requirement

A firm must hold a Type 10 licence if it:

• Publishes or disseminates credit ratings to the Hong Kong public, including via websites accessible in Hong Kong.
• Enters into a contract with an issuer whose securities are listed on HKEX to provide a rating for that issuer or its debt instruments.
• Provides credit rating advisory services that are not ancillary to another regulated activity, such as Type 1 (dealing in securities) or Type 4 (advising on securities).

The SFC’s 2024 Thematic Review of Credit Rating Agencies (published December 2024) found that three unlicensed entities had been issuing “credit scores” that fell within the definition of a credit rating. The SFC issued cease-and-desist letters in each case, and two firms subsequently applied for a Type 10 licence. This enforcement pattern demonstrates that the SFC treats the scope broadly.

Application Conditions and the Fit-and-Proper Test

Corporate Structure and Minimum Capital Requirements

Step 1: Determine the appropriate corporate vehicle. The SFC only licences corporations (not individuals) for Type 10. The applicant must be a company incorporated in Hong Kong or a registered non-Hong Kong company under the Companies Ordinance (Cap. 622). The SFC imposes a minimum paid-up capital of HK$5,000,000 for a Type 10 licence, as set out in the Securities and Futures (Financial Resources) Rules (Cap. 571N). The applicant must also maintain a minimum liquid capital of HK$3,000,000 at all times. These thresholds are higher than for Type 1 or Type 4 licences (HK$500,000 each), reflecting the systemic importance of credit ratings to market integrity.

Responsible Officers and Core Staff

Step 2: Appoint at least two Responsible Officers (ROs) who are ordinarily resident in Hong Kong. Each RO must satisfy the SFC’s competence requirements under the Guidelines on Competence. For Type 10, the SFC typically requires at least one RO to have a minimum of five years of relevant experience in credit rating analysis, which must include direct involvement in the rating committee process. The SFC’s Licensing Handbook (January 2025 update) states that academic qualifications in finance, accounting, or economics are expected, and that candidates without a recognised degree must demonstrate at least eight years of relevant experience. All ROs must pass the SFC’s Licensing Examination for Type 10 (Paper 10) unless they hold a recognised professional qualification such as the CFA charter or an equivalent certification from a recognised overseas regulator.

Outsourcing and Third-Party Rating Models

Step 3: Disclose all outsourcing arrangements. The SFC’s Code of Conduct for Persons Providing Credit Rating Services (the CR Code, effective 1 January 2023) requires that a licensed corporation must not outsource any core rating function—including the determination of a rating, the rating committee decision, or the surveillance process—to an unlicensed entity. If the applicant plans to use a rating methodology developed by a parent company or affiliate outside Hong Kong, the SFC will require a written undertaking that the Hong Kong entity retains full responsibility for the rating outcome. The SFC’s 2024 thematic review found that two applicants were rejected because their outsourcing agreements did not include adequate provisions for the SFC to inspect the overseas entity’s records.

International Standards and the IOSCO Code Alignment

The IOSCO Code of Conduct Fundamentals (2024 Revision)

The SFC’s CR Code is explicitly modelled on the IOSCO Code of Conduct Fundamentals for Credit Rating Agencies (the IOSCO Code). The 2024 revision introduced three new fundamentals that directly affect Type 10 applicants:

• Fundamental 2.5: Rating agencies must disclose the historical default rates of each rating category, updated annually.
• Fundamental 3.7: Analysts must rotate off a rated entity after no more than five consecutive years.
• Fundamental 5.2: Unsolicited ratings must be clearly labelled as such, and the rated entity must be given a 14-day period to review factual errors before publication.

The SFC confirmed in its Consultation Conclusions on Proposed Amendments to the Code of Conduct for Persons Providing Credit Rating Services (March 2025) that it will incorporate these three fundamentals into the CR Code by Q3 2025. Applicants whose business models rely on long-tenured analyst relationships or unsolicited ratings must review their internal policies now.

Conflicts of Interest and Fee Structures

The CR Code prohibits a credit rating agency from providing advisory services to the same entity it rates, unless the advisory service is unrelated to the rating methodology and is disclosed in the rating report. The SFC’s 2024 Annual Report noted that one licensed Type 10 corporation was fined HK$3,000,000 for failing to disclose that its fee structure included a “rating-contingent” bonus for analysts. Under the CR Code, analyst compensation must not be directly linked to the revenue generated from the rated entity. Applicants must submit a conflicts-of-interest policy that covers:

• Fee structures (fixed fee only, no success fees).
• Analyst independence (no participation in marketing or fee negotiation).
• Rating committee composition (at least one member with no prior involvement in the rated entity).

Cross-Border Recognition and Equivalence

Hong Kong does not have a unilateral mutual recognition regime for credit ratings issued by overseas agencies. The SFC’s Guidelines on the Application for a Licence to Provide Credit Rating Services states that a rating issued by an overseas affiliate of a licensed Type 10 corporation is not automatically recognised as a “credit rating service” under the SFO unless the Hong Kong entity has conducted its own independent analysis. The SFC’s 2024 thematic review found that three licensed corporations were relying on ratings produced by their US-based parent without independent Hong Kong oversight. The SFC issued warning letters requiring each firm to establish a separate Hong Kong rating committee within six months. Applicants with cross-border structures must demonstrate that their Hong Kong entity has the capacity to conduct independent analysis, including access to issuer management and the ability to call a rating committee meeting without overseas approval.

Application Process and Timeline

Step 1: Pre-Application Consultation

The SFC encourages prospective applicants to submit a pre-application consultation request under the SFC’s Pre-Application Procedure for Licensing (March 2024). This is not mandatory, but the SFC’s Licensing Handbook states that applicants who use the pre-application process have a 40% higher first-time approval rate. The consultation should include a draft business plan, a list of proposed ROs, and a summary of the rating methodology. The SFC typically responds within 30 business days.

Step 2: Formal Application Submission

The formal application is submitted via the SFC’s e-licensing portal (WINGS). The application fee for a Type 10 licence is HK$47,400 as of 2025. The applicant must submit:

• Form LC (Licence Application for a Corporation).
• Form LR for each proposed RO.
• A certified copy of the Certificate of Incorporation.
• A business plan covering the first three years of operations.
• A conflicts-of-interest policy.
• A rating methodology document.
• Audited financial statements for the most recent financial year (or a letter of comfort if the applicant is newly incorporated).

Step 3: SFC Review and Site Visit

The SFC’s Licensing Division reviews the application within 15 to 20 weeks for a standard application. For Type 10, the SFC almost always conducts a site visit to inspect the applicant’s premises, interview ROs, and review internal controls. The SFC’s 2024 Annual Report noted that the average processing time for Type 10 applications approved in the 2024-25 financial year was 18.4 weeks. The SFC may impose licensing conditions, such as a restriction on the types of rated entities or a requirement to submit quarterly compliance reports.

Actionable Takeaways

1. A Type 10 licence is mandatory for any firm that publishes or disseminates credit ratings in Hong Kong, including ratings produced by overseas affiliates that are accessible to the Hong Kong public.
2. The minimum paid-up capital of HK$5,000,000 and the requirement for at least two ROs with direct rating committee experience are non-negotiable thresholds under the SFO and the SFC’s guidelines.
3. The SFC will incorporate the IOSCO 2024 Code revisions into the CR Code by Q3 2025, requiring applicants to implement analyst rotation policies and unsolicited rating disclosure procedures now.
4. Pre-application consultation with the SFC significantly increases first-time approval rates and should be considered a standard step for any first-time applicant.
5. Cross-border rating operations must establish independent Hong Kong rating committees and cannot rely solely on overseas affiliate ratings without independent local analysis.

This does not constitute legal advice. Consult a solicitor for your specific case.