Hong Kong: Banking & Finance

The Hong Kong Monetary Authority (the “HKMA”) is the central banking institution in Hong Kong. The Banking Ordinance (Cap. 155) (“BO”) empowers the HKMA to the authorisation, suspension and revocation of licensed banks, restricted licence banks and deposit-taking companies (collectively referred to in Hong Kong, “Authorised Institutions” or “AIs”).

The HKMA issues regulatory guides such as Circulars, Guidelines and Supervisory Policy Manual (“SPM”) for regulating and supervising the AIs from time to time, and acts as the resolution authority to implement the resolution regime for the AIs under the Financial Institutions (Resolution) Ordinance (Cap. 628) (“FIRO”).

BO establishes a three-tier system of AIs in Hong Kong, comprising of (i) licensed banks, (ii) restricted licence banks and (iii) deposit-taking companies.

Licensed banks are entitled to carry out banking business as defined under BO, including (i) operating current and savings accounts, (ii) accepting deposits of any size and maturity from the public and (iii) paying or collecting cheques drawn by or paid in by customers.

Restricted licence banks are entitled to take deposits of any maturity of HK$500,000 or above. Generally, restricted licence banks engage in merchant banking and capital market activities.

Deposit-taking companies are entitled to take deposits of HK$100,000 or above with an original term of maturity of at least three months. Their business mainly relates to various specialised activities, such as consumer finance, commercial lending and securities business.

Any person or company (including its directors and managers) carrying on the above business in Hong Kong without an AI licence may be subject to criminal prosecution.

Different banking services may be carried out by a licensed bank, a restricted licence bank or a deposit-taking company as described in Response 2 above and each institution has a specific licence in accordance with the specific tier of AI it belongs.

Securities-related activities are regulated under the Securities and Futures Ordinance (Cap. 571) and the Securities and Futures Commission (the “SFC”) requires that a company shall apply for a corresponding licence before carrying out the following 12 types of regulated activities:

However, AIs are automatically permitted to carry out leveraged foreign exchange trading and securities margin financing activities without obtaining a licence for Type 3 and Type 8.

AIs may apply to the SFC for a certificate of registration for regulated activities other than Type 3 and Type 8. By a Memorandum of Understanding signed between the SFC and the HKMA, they cooperate to supervise AIs’ conduct in relation to the regulated activities. The HKMA is responsible for the day-to-day supervision of regulated activities conducted by AIs while the SFC is responsible for making securities-related rules for the AIs to comply with.

Please note that lending business in Hong Kong is regulated by the Money Lenders Ordinance (Cap.163), but such legislation does not apply to AIs. AIs are entitled to carry out lending activities so long as they remain AIs.

The Fintech Supervisory Sandbox (“FSS”) allows banks and their technology firms to conduct pilot trials of their fintech initiatives, which enables them to get feedback from a limited number of customers without fully complying with the HKMA’s supervisory requirements. The purpose is to gather user feedback so that they can make further refinements before launching their fintech initiatives.

The FSS has been linked with similar pilot testing facilities of overseas supervisory authorities. The HKMA is one of the participating regulators involved in the cross-border testing workstream of the Global Financial Innovation Network (“GFIN”).

At the time of writing, Hong Kong does not have a specific regulatory regime for crypto currencies but the SFC has been enhancing the regulation regarding the issuance or custody of crypto currencies.

The SFC’s “Statement on Regulatory Framework for Virtual Asset Portfolios Managers, Fund Distributors and Trading Platform Operators” issued on 1 November 2018 only allows professional investors to invest in virtual assets portfolios and the SFC will regulate funds which intend to invest more than 10% of a mixed portfolio in virtual assets.

The SFC’s “Position paper: Regulation of Virtual Asset Trading Platforms” published on 6 November 2019 states that the regulatory framework covers all the key investor protection concerns, including safe custody of assets (please see Reponse 7 below for further details), market manipulation and cybersecurity. The standard is the same as the conventional securities brokers and automated trading system.

The SFC is currently reviewing its regulatory initiatives and considering whether retail investors should be allowed to access crypto exchange-traded funds through online brokers, and if so, whether the SFC should impose additional requirements for knowledge or risk disclosures. However, at the time of writing, no decision has been made by the SFC in this respect.

In view of the increasing linkage of crypto-assets with traditional financial system, the HKMA has been reviewing the regulatory treatment of crypto-assets locally and is considering bringing crypto-assets within the regulatory perimeter by adopting a risk-based approach. The HKMA has issued a “Discussion Paper on Crypto-assets and Stablecoins” in January 2022 to invite stakeholders to provide responses and share views on the proposed regulatory approach.

At the time of writing, Hong Kong does not have a specific regulatory regime recognising crypto assets as deposits.

The SFC’s “Position paper: Regulation of Virtual Asset Trading Platforms” regulates the platform operator’s manner regarding the custody of crypto assets. For example, it is recommended that a platform operator should hold client assets on trust for its clients through a company which (i) is an “associated entity” of the platform operator, (ii) is incorporated in Hong Kong, (iii) holds a “trust or company service provider licence” and (iv) is a wholly-owned subsidary of the platform operator. The purpose of such recommendation is to ensure that clients’ virtual assets are properly segregated from those of the platform.

BO and Chapter 8 of Guide to Authorisation issued by the HKMA state the application process but they do not specify the average timing.

Before submitting a formal application for an AI licence, the applicant may have a non-compulsory preliminary consultation with the HKMA.

When the applicant lodges an application for authorisation of an AI licence, documents listed under Annex 2 of Guide to Authorisation should be submitted to the HKMA, such as copies of memorandum and articles of association and a business plan for the first three years.

All formal applications for authorisation will be considered by a Banking Supervision Review Committee comprising senior officers of the HKMA and chaired by the Deputy Chief Executive (Banking). The HKMA must be satisifed that the applicant meets the minimum criteria stated under the Seventh Schedule to BO.

In the event the HKMA exercises its power to refuse to grant an authorisation, it is required to give the applicant the opportunity of being heard and if the HKMA eventually decides to refuse to grant authorisation, it must notify the applicant of the reasons for such refusal in writing.

Lastly, the HKMA does not specify the estimated time to process an application for an AI licence. The Guide to Authorisation states that the HKMA aims to process applications as quickly as possible. The length of time would depend on the particular circumstances of each application such as the completeness of information and quality of documents submitted.

An overseas applicant and a local applicant can apply to the HKMA for carrying out banking services in Hong Kong and overseas respectively.

An overseas applicant (a bank incorporated outside Hong Kong) seeking a licence to carry out banking services in Hong Kong can either set up a branch or a locally incorporated subsidiary for such purposes. BO (mainly the minimum criteria for authorisation under its Seventh Schedule) and Chapter 4 of the Guide to Authorisation issued by the HKMA set out the requirements of overseas application. All directors, controllers, chief executives and executive officers of an overseas applicant must be fit and proper to hold the particular position. The HKMA must know the identities of the controllers though no prior approval from the HKMA is required for such controllers.  Also, the overseas applicant must maintain minimum levels of share capital and formulate a policy statement of liquidity risk management to ensure its financial stability. The overseas applicant must be under adequate supervision by its home supervisor in the opinion of the HKMA, after taking into account various factors including the legal and administrative powers and bank resolution regime of the overseas applicant’s home jurisdiction.

It may be of interest to note that generally, licence of deposit-taking companies is granted only to a locally incorporated subsidiary in Hong Kong since 1977.

Regarding local applicant seeking to establish an overseas branch, an AI incorporated in Hong Kong shall not do so without the approval of the HKMA. If an AI is allowed to maintain an overseas branch, it shall be subject to conditions under BO, such as submitting a form specifying the assets and liabilities of the overseas branch. Needless to say, the overseas branch must also be subject to the foreign law of the jurisdiction in which the overseas branch is located.

Under BO, it is stated that only companies incorporated under the Companies Ordinance (Cap. 622), the predecessor Companies Ordinance (Cap.32) and companies incorporated outside Hong Kong can operate as banks in Hong Kong. Generally, a limited company is the most common form of corporate vehicle to carry out banking services in Hong Kong.

The HKMA imposes the organisational requirements for banks. The SPM “Corporate Governance of Locally Incorporated Authorised Institutions” issued by the HKMA regulates the composition of the board of directors of a bank. The size and composition of the board will vary, depending upon the size, complexity and risk profile of the bank. The board members should possess a range of knowledge and experience in relevant areas and should have a reasonable understanding of local, regional and global market. Chair of the board should be an independent non-executive director (“INED”) or a non-executive director, and he shall ensure that board decisions are taken on a sound and well-informed basis and in the best interest of the AI. The responsibilities of the board of directors include setting out strategic plans and overseeing AI’s capital adequacy assessment to ensure adequate capital and sufficient liqudity to cover the risk exposures, and establishing a risk management framework to minimise the risks to the bank, as well as setting out disciplinary actions for staff who takes excessive risk.

The SPM “Guideline on a Sound Remuneration System” issued by the HKMA sets out the principles in relation to the remuneration systems of AIs to ensure they are consistent with and promote effective risk management and contribute toward acceptable staff behaviour.

The board of directors of an AI should establish a remuneration system which is consistent with the AI’s culture, long-term business plan, and legal and regulatory requirements.

An AI should also set up a remuneration committee chaired by an INED and its members or majority of its members should be made up of INEDs. The duties of the committee include independent evaluations of the remuneration practices to ensure that they are consistent with an assessment of AI’s financial condition, and making recommendations of remuneration practices to ensure compliance with the legal and regulatory requirements.

Hong Kong has implemented the capital requirements of the 2011 Basel III framework such as capital adequacy ratio, credit valuation adjustment (“CVA”) capital charge and capital buffers by amending the Banking (Capital) Rules (Cap. 155L) (“BCR”) which came into effect on 1 January 2013, 30 June 2013 and 1 January 2015 respectively. Amendments to BCR for the implementation of the standardised approach for measuring counterparty credit risk exposures and the capital requirements for bank exposures to central counterparties also took effect on 30 June 2021.

As regards the implementation of the revised or new capital standards under the 2017 Basel III final reform package, the HKMA on 10 June 2021 issued the circular “Revised Basel III Implementation Timeline” and it states that the corresponding frameworks including (i) the revised frameworks on credit risk, operational risk, output floor and leverage ratio and (ii) the revised market and CVA risk frameworks, together with their corresponding disclosure framework, will take effect from 1 July 2023 and 1 January 2024 respectively. The HKMA aims to substantially complete the drafting of the relevant rules by the end of 2022. It is yet to be known whether there will be any major deviations from the framework.

BCR applies to all locally incorporated AIs.

BCR states that a locally incorporated AI must not at any time have a leverage ratio of less than 3%. AIs failing to comply with the leverage ratio requirement must immediately notify the HKMA and provide the particulars of the failure to the HKMA if so requested.

Hong Kong has implemented the Basel III Liquidity Coverage Ratio (“LCR”) and Net Stable Funding Ratio (“NSFR”) requirements by introducing and amending the Banking (Liquidity) Rules (Cap. 155Q) which came into effect on 1 January 2015 and 1 January 2018 respectively. Apart from the above Basel III requirements, Hong Kong has also implemented other liquidity ratios such as Liquidity Maintenance Ratio (“LMR”) and Core Funding Ratio (“CFR”). The HKMA classifies AIs into 3 categories of institutions (namely category 1, category 2 and category 2A), each has a different liquidity requirement.

Category 1 institutions refer to institutions which are internationally active or significant to the general stability of the local banking system or its liquidity risk is material. Category 2 institutions are AIs not classified as category 1 institutions, but some of them may be classified as category 2A institutions by the HKMA after taking into account their business size and liquidity risk.

As category 1 institutions have greater influence over the banking system, they are required to comply with a stricter liquidity requirement to maintain the LCR and the NSFR of not less than 100% at all times, while category 2 institutions must maintain an LMR of not less than 25% on average in each calendar month. Category 2A institutions are considered to have a greater liquidity risk than the category 2 institutions, so they are not only required to maintain an LMR at 25%, but also a CFR at not less than 75% on average in each calendar month.

An AI must make interim and annual financial disclosures in compliance with the prevailing accounting standards. AIs incorporated in Hong Kong shall lodge copies of their audited annual accounts, the report of the auditors and report of the directors with the HKMA, not later than 4 months after the close of each financial year; while AIs incorporated outside Hong Kong shall lodge copies of their audited annual balance sheet, profit and loss account, report of auditors and report of directors with the HKMA, not later than 6 months after the close of each financial year. For the interim financial disclosures, AIs should prepare the interim financial report with the accounting and measurement principles so applied in the interim period.

AIs should also make disclosures for each annual, semi-annual and quarterly reporting period in accordance with the respective disclosure templates and tables. For example, AIs incorporated in Hong Kong should disclose their overview of risk management annually, composition of regulatory capital semi-annually and their key prudential ratios quarterly.

The SPM “Group-wide Approach to Supervision of Locally Incorporated Authorised Institutions” issued by the HKMA provides the consolidated supervision of an AI in Hong Kong.

It provides that the HKMA should exercise consolidated supervision of AIs by application of quantitative prudential limits such as on capital adequacy, leverage ratio, liquidity and connected lending. To assess the non-quantifiable risks posed to the AIs, the HKMA will consider qualitative factors including the group’s organisational structure, corporate governance, quality of management, risk management systems and internal controls.

The HKMA has the overriding power to supervise the banking activities to ensure the stability of banking system. It may gather information from an AI (or any subsidiaries of the AI) relevant for its supervision. To address the risks posed to AIs, the HKMA may impose restrictions on an AI’s operations such as limiting financial exposures to its subsidiaries, and to attach conditions to its operations.

According to BO, controllers of AIs may be classified as (i) minority shareholder controllers, which means any person who either alone or with associates controls 10% to 50% of the voting rights of an AI or of another company of which the AI is a subsidiary, (ii) majority shareholder controllers, which means any person who either alone or with associates controls over 50% of the voting rights of an AI or of another company of which the AI is a subsidiary, and (iii) indirect controllers, which mean any person in accordance with whose directions or instructions of the directors of an AI or of another company of which the AI is a subsidiary are accustomed to act.

The person intending to become a controller of an AI incorporated in Hong Kong shall serve the HKMA with a written notice for approval. The HKMA may serve a notice of consent, after taking into account various consideration, for example, whether the person is fit and proper and the interests of the customers are not threatened. To safeguard the interests of an AI, the HKMA may however serve a conditional notice of consent which restricts the power of a controller or serve a notice of objection if it thinks fit.

BO requires that a director, chief executive, executive officer, or controller as referred to in Response 18 above of an AI is a fit and proper person to hold the particular position, taking into account a range of consideration such as experience, knowledge, skills and record of integrity. As the fit and proper test is on an on-going basis, the HKMA will evaluate the AIs’ board members and senior management from time to time, including conducting face-to-face meetings with the serving directors and candidates of the board.

No.

The HKMA is empowered under BCR to designate the AIs incorporated in Hong Kong as global systemically important AIs (“G-SIBs”) or domestic systemically important AIs (“D-SIBs”) and to determine their Higher Loss Absorbency (“HLA”) requirements. There is currently no G-SIB headquartered and incorporated in Hong Kong, while there are currently five D-SIBs in Hong Kong. HLA ratio for both G-SIBs and D-SIBs must be not less than 1% and not more than 3.5% since 1 January 2019.

The HKMA has a more stringent supervision and control over D-SIBs. For example, in order to minimise the risk exposure to D-SIBs, the HKMA identifies potential risks to the domestic financial system which may affect the risk profile of D-SIBs and regularly uses risk or audit reports to evaluate the D-SIBs’ risk mitigation measures.

The regulators can impose different sanctions for different violation of banking regulations.

For less serious violation, such as non-compliance of the disclosure requirements of Banking (Disclosure) Rules (Cap.155M), the HKMA may require an AI to rectify the errors or omissions in its disclosure statements by written notice. The HKMA may also order a pecuniary penalty, for example, if the regulated person violates the regulation of payment systems and stored value facilities activities.

For more serious violation, such as carrying on banking business without a banking licence or an AI contravening the conditions attached under its licence, criminal prosecution may be instituted and revocation of licence may apply.

The HKMA has several options to deal with the situation where an AI faces financial difficulty.

The HKMA may deploy one or more of the stabilisation options available under FIRO, including:

• transfer some or all of the business of a failing AI to a purchaser;
• transfer some or all of the business of a failing AI to a bridge institution;
• transfer some or all of the assets, rights and liabilities of a failing AI to an asset management vehicle;
• make bail-in instruments (please refer to Response 25 below for further details); and/or
• (as a last resort) transfer some or all of the business of a failing AI to a temporary public ownership company.

When the restructuring conducted by the above measures can address the financial difficulty, the resolution may be brought to a close.

Apart from the resolution regime estalished by FIRO, under BO, in the situation where an AI informs the HKMA that it is or is likely to be unable to meet its obligations, or the HKMA thinks that an AI is or is likely to become insolvent, the HKMA may, after consulting the Financial Secretary, take the following actions:

• require an AI to do any act in relation to its affairs, business and property, such as restricting the institution from expanding its business and disposing of assets;
• direct an AI to seek the advice of an advisor appointed by the HKMA on the management of its affairs, business and property;
• appoint a manager to safeguard the assets of the AI; and/or
• report the circumstances to the Chief Executive in Council, which may direct the Financial Secretary to present a petition to the court for the winding-up of the AI.

The Deposit Protection Scheme Ordinance (Cap.581) (“DPSO”) aims to protect most types of deposits denominated in any currency held with the Hong Kong offices of every licensed bank in Hong Kong. Structured deposits, bearer form deposits, and time deposits with an original term to maturity longer than five years, are not covered. The maximum protection is up to HK$500,000 per depositor per bank including both principal and interest. The protection will be triggered when a winding-up order has been made by the court in respect of the bank.

FIRO provides the bail-in instruments. The HKMA may make one or more bail-in instruments in respect to an AI. A bail-in provision can cancel, modify or change the form of a liability owed by an AI. Changing the form of a liability includes:

• converting or replacing an instrument under which an AI owes a liability from one form to a form or class of any other;
• creating a new security in connection with the modification of such an instrument; and
• converting those liabilities into securities issued by a bridge institution or a holding company of an AI that is incorporated in Hong Kong.

Certain types of liabilities are excluded from bail-in instruments as stated in paragraph 2 of Schedule 5 to FIRO, including liabilities representing protected deposits under DPSO.

Locally incorporated AIs are required to hold capital on a going concern basis or on a gone concern basis, according to the SPM “Overview of Capital Adequacy Regime for Locally Incorporated Authorised Institutions” issued by the HKMA.  The AI’s Tier 1 captial is intended to absorb losses on a going concern basis while its Tier 2 capital is intended to absorb losses on a gone concern basis (i.e. when an AI is no longer able to continue its activities as going concern).

According to Financial Institutions (Resolution) (Loss-absorbing Capacity Requirements—Banking Sector) Rules (Cap. 628B), the HKMA, as the resolution authority may require a resolution entity which is a G-SIBs to meet the minimum Total Loss-absorbing Capacity (“TLAC”) requirements under the Financial Stability Board’s TLAC term sheet, by increasing its minimum external Loss-absorbing Capacity (“LAC”) risk-weighted ratio and minimum external LAC leverage ratio.

Virtual banks and Hong Kong-China cross-border activities are subject to more bank regulations in Hong Kong in recent years.

In view of the growth of virtual banks applications in Hong Kong, the HKMA has recently issued “Guideline on Authorisation of Virtual Bank”. It is expressly stated that the HKMA will give priority to process virtual bank applicants who can demonstrate sufficient financial and technology resources, have a credible and viable business plan and have developed an appropriate IT platform.

The regulation on Hong Kong-China cross-border activities is also on the rise. One of the recent examples is the Cross-boundary Wealth Management Connect Scheme in the Guangdong-Hong Kong-Macao Greater Bay Area (the “Cross-boundary WMC”) launched in September 2021. It allows eligible residents of nine cities in the Greater Bay Area, Hong Kong and Macao to invest in wealth management products provided by their respective banks in each other’s market. At the time of writing, it is regulated that investors can only invest in low-to-medium risk wealth management products distributed by eligible banks to protect the investors’ rights. It is believed that the Cross-boundary WMC will be further expanded by a wider scope of products, eligible banks and investors in the future.

AIs have become one of the most popular targets of cyber attacks, given that they have increased their reliance on technologies. The rise of cybercrime such as e-banking fraud and email scam may disrupt the banking services. The HKMA is putting more emphasis on combating against cybercrime and implementation of anti-money laundering (“AML”) measures. For example, AIs are encouraged to implement more innovative AML measures such as using new network analytics to facilitate more effective alert examination, increasing public-private collaboration to share experiences and offering more trainings with updated materials to AI staff.