SFC Onsite Inspection

The Securities and Futures Commission (SFC) uses onsite inspections as a key component of its regulatory framework for licensed corporations. These inspections allow the regulator to gain a deep understanding of a company's business model, risk management framework, and internal controls, and to assess its overall compliance with relevant laws and regulatory requirements.

Onsite inspections are mainly divided into the following categories: routine inspections, special inspections, thematic inspections, and prudential visits.

According to informal statistics, licensed corporations receive an onsite inspection notice approximately every 5 to 7 years. In addition to regular routine inspections, the SFC may also conduct thematic inspections to deeply review specific high-risk areas, products, or business models in the industry; or conduct prudential visits to assess the company's financial stability and risk-bearing capacity.

We provide professional compliance support services specifically for licensed corporations and financial institutions holding SFC Type 1 to 10 regulated activity licenses. Our solutions cover various key stages of the regulatory cycle, assisting institutions preparing for inspections, undergoing onsite inspections, or in the post-inspection follow-up and rectification stages to meet regulatory requirements.

Generally, when a licensed corporation is selected for an onsite inspection, the SFC will issue a formal "invitation" to the company. This invitation letter usually includes a detailed document checklist specifying the various materials the regulator intends to review. After receiving the invitation, the company needs to start preparing the relevant documents. The SFC will identify the company's major potential risk areas and formulate an inspection plan through macro understanding of the company's business activities, operations, systems, and controls, as well as future development directions based on the analysis of collected information and subsequent discussions with senior management.

The inspection process officially begins with an opening meeting held at the company's office, with participants including the company's Responsible Officers, relevant Heads of Core Functions, and the SFC team. During and after the meeting, the SFC will request further information or in-depth review of specific business areas based on the preliminary review. The licensed corporation needs to respond in a timely manner and submit supplementary documents as requested.

Based on our experience, the entire inspection process (from receiving the preliminary invitation to the SFC completing the onsite work) usually takes several months, the actual length depends on the scope and complexity of the inspection.

When the SFC discovers non-compliance, control deficiencies, or poor financial risk management during an inspection, it will inform the company of the relevant findings. The required follow-up actions depend on the severity of the identified issues. Potential consequences can be summarized by severity levels as follows:

Level 1: Remedial Action and Regulatory Feedback

For minor cases, the SFC may end the inspection by issuing a closure letter, indicating no further action is required. Alternatively, it may issue a compliance advice letter to remind of areas needing improvement, or request the company to submit a review report to resolve specific issues.

Level 2: Significant Non-compliance and Disciplinary Action

If significant non-compliance is discovered, the SFC may initiate further inquiries or investigations. This may lead to formal disciplinary actions, including public reprimand, revocation or temporary suspension of license, and fines.

Level 3: Serious Cases and Safeguard Measures

For cases with poor internal controls that may endanger client assets, the SFC may request the company to appoint external consultants for review. It may also impose new licensing conditions, or issue notices in emergencies to restrict the company's business operations or asset handling methods.

Explanation:

The classification of consequences above is for ease of understanding only, aiming to help readers more clearly understand various potential regulatory outcomes. This classification is not an official category or statement issued by the SFC. For authoritative information, please refer directly to the SFC website.

SFC - Supervisory Actions: https://www.sfc.hk/en/Regulatory-functions/Intermediaries/Supervision/Supervisory-actions