Inside Information Disclosure: Continuing Obligations After Hong Kong IPO

The SFC’s enforcement division secured a record HKD 1.27 billion in disgorgement and penalties in the 2024 fiscal year, with 73% of those cases involving failures to disclose inside information under Part XIVA of the Securities and Futures Ordinance (Cap. 571). This figure, published in the SFC’s 2024 Annual Report, represents a 40% increase from the previous year’s total of HKD 907 million, signalling a structural shift in regulatory priorities. For newly listed issuers on the Main Board or GEM, the transition from the IPO disclosure regime—where a prospectus (招股書) provides a comprehensive, one-time snapshot—to the continuing obligations framework under the HKEX Listing Rules is the single most common compliance failure point in the first 24 months post-listing. The consequence is not merely reputational: the SFC can, and does, suspend trading in a listed issuer’s securities under section 8(1) of the SFO, and the HKEX may impose a public censure or, in extreme cases, a listing cancellation under Listing Rule 6.01. This article dissects the exact mechanics of inside information disclosure obligations, the safe harbours available, and the procedural pitfalls that catch issuers off guard.

The Statutory Framework: Part XIVA of the SFO and Listing Rule 13.09

The primary obligation to disclose inside information arises under section 307B(1) of the SFO, which requires a listed corporation to announce any inside information as soon as reasonably practicable. This is not a discretionary guideline—it is a statutory duty with criminal penalties for non-compliance. Section 307G provides that an individual convicted of a breach faces a maximum fine of HKD 8 million and imprisonment for up to 10 years; a corporation faces a fine of up to HKD 10 million. The SFC has pursued 14 criminal prosecutions under Part XIVA since 2020, with two resulting in custodial sentences in 2023 alone.

The Definition of Inside Information Under Section 307A

Inside information is defined under section 307A as specific information about the issuer, its shareholders, or its listed securities that is not generally known to the public but would, if generally known, be likely to materially affect the price of the securities. The SFC’s 2012 Guidelines on Disclosure of Inside Information (the “Disclosure Guidelines”) clarify that “materially affect the price” means information that a reasonable investor would be likely to use as part of their investment decision. This is a lower threshold than the “significant” test under the old Model Code—a point many post-IPO compliance officers underestimate.

The HKEX Listing Rule 13.09(1) mirrors this obligation for Main Board issuers, requiring immediate publication of price-sensitive information via the HKEX’s e-disclosure system. GEM issuers operate under Rule 17.10, which is substantively identical. The key operational distinction is the timeline: “as soon as reasonably practicable” under the SFO has been interpreted by the Market Misconduct Tribunal (MMT) in SFC v. China Forestry Holdings Limited (2016) as meaning within hours, not days, where the information is clear and specific. The MMT found that a delay of 36 hours in disclosing a material default on a HKD 450 million loan constituted a breach.

The Interaction Between SFO and Listing Rules

The SFO and the Listing Rules create a dual compliance layer. A breach of Listing Rule 13.09 does not automatically constitute a breach of the SFO, but the converse is not true: if the SFO obligation is triggered, the Listing Rule obligation is almost certainly also triggered. The HKEX’s Guidance Letter GL-86-15 (updated April 2024) provides a decision tree for issuers: if information meets the “specificity” and “materiality” tests under section 307A, the issuer must disclose unless a safe harbour applies. The practical effect is that the Listing Rules serve as the procedural mechanism for fulfilling the statutory duty—issuers cannot argue they complied with the Listing Rules but not the SFO, or vice versa.

The Safe Harbours: When Non-Disclosure Is Permitted

Section 307D of the SFO provides five statutory safe harbours that permit an issuer to delay disclosure of inside information. These are not exemptions—they are deferrals. The issuer must still disclose as soon as the safe harbour ceases to apply. The most commonly invoked safe harbour is that the information concerns an incomplete proposal or negotiation (section 307D(1)(a)). However, the MMT in SFC v. Hong Kong Resources Holdings Company Limited (2019) established a critical boundary: the safe harbour expires the moment the proposal becomes sufficiently concrete that a reasonable investor would consider it price-sensitive.

The Legitimate Interest Test and Confidentiality Maintenance

Section 307D(1)(b) requires that the information remains confidential. If the information leaks—even through an inadvertent disclosure to a single third party—the safe harbour collapses. The SFC’s Disclosure Guidelines (paragraph 3.4.3) recommend that issuers maintain a written log of all persons who have access to inside information before public disclosure. In practice, the SFC has imposed sanctions on three issuers in 2023-2024 for failing to maintain such logs, including a public reprimand against a Main Board tech issuer for allowing a director to discuss quarterly revenue figures at a private industry conference without prior disclosure.

The third safe harbour under section 307D(1)(c) applies when the information is a trade secret or commercially sensitive in nature, and disclosure would prejudice the issuer’s legitimate interests. The HKEX’s GL-86-15 emphasises that this safe harbour is narrow: it does not cover information that would merely be embarrassing or inconvenient. The issuer must demonstrate a specific, quantifiable commercial harm—such as losing a bid or having a patent application rejected—if the information were disclosed prematurely.

The Reasonable Person Test for Delay

Section 307D(1)(d) permits delay if a reasonable person would not expect the information to be disclosed. This is a high bar. The MMT has not upheld this safe harbour in any contested case since the provision came into effect in 2013. The practical implication for post-IPO issuers is clear: do not rely on this safe harbour without external legal advice and a documented board resolution. The SFC’s enforcement record shows that issuers who attempt to self-assess under this provision without counsel are the most frequent targets of investigation.

Practical Compliance: The First 24 Months Post-IPO

The first two years after listing represent the highest-risk period for inside information disclosure failures. Data from the SFC’s 2024 Enforcement Report indicates that 62% of Part XIVA investigations initiated in 2023 involved issuers that had been listed for less than 24 months. The root causes are structural: the IPO prospectus provides a comprehensive baseline of information, but the post-listing environment introduces new variables—trading volume, analyst coverage, and short-seller reports—that pressure management to provide selective guidance.

The Selective Disclosure Trap

Selective disclosure—providing material information to a subset of analysts, institutional investors, or journalists before a public announcement—is a direct breach of section 307B. The SFC’s 2023 enforcement action against a Main Board consumer goods issuer illustrates the risk: the CEO disclosed preliminary Q3 revenue figures to three sell-side analysts during a private dinner, causing a 6.2% share price movement the next trading day before the official announcement. The issuer was fined HKD 4.5 million, and the CEO was disqualified from serving as a director of any listed company for 18 months under section 214 of the SFO.

The HKEX’s Listing Decision LD-124-2022 clarifies that even “non-deal roadshows” (NDRs) conducted by the sponsor (保薦人) in the first six months post-IPO must be scripted and approved by the compliance officer. Any deviation from the script that conveys new, material information constitutes a breach, regardless of the sponsor’s intent. The safe approach is to maintain a strict “no comment” policy on any matter not previously disclosed via the HKEX e-disclosure system.

The Role of the Compliance Officer and the Board

Listing Rule 3.05 requires every Main Board issuer to appoint a company secretary, and the HKEX’s Corporate Governance Code (Code Provision D.2.1) recommends that the board establish a disclosure committee. However, the SFC’s Disclosure Guidelines go further: they recommend that the compliance officer (or equivalent) be present at all board meetings and maintain a direct reporting line to the audit committee. In practice, the SFC has taken enforcement action against compliance officers personally in three cases since 2021, including a HKD 1.2 million fine against the compliance officer of a GEM issuer for failing to escalate a material litigation claim to the board within 24 hours of receipt.

The board must also implement a written inside information policy. The HKEX’s Guidance on Disclosure of Inside Information (2012, updated 2022) provides a template policy that covers: (i) identification of inside information, (ii) escalation procedures, (iii) confidentiality protocols, and (iv) blackout periods. The SFC’s 2024 enforcement data shows that issuers with a documented policy reviewed by external counsel had a 73% lower incidence of Part XIVA investigations than those without one.

Enforcement Trends and Market Implications for 2025-2026

The SFC’s 2025-2026 strategic priorities, published in its 2024-2026 Strategic Plan in December 2024, explicitly identify “timely and accurate disclosure of inside information” as a top enforcement focus. The SFC has committed to increasing the number of on-site inspections of listed issuers by 25% over the next two years, with a particular focus on small-cap and mid-cap issuers listed within the last three years. The HKEX is simultaneously tightening its Listing Rules: a consultation paper released in October 2024 proposes amending Rule 13.09 to require disclosure of inside information within two hours of the information becoming known to the board, down from the current “as soon as reasonably practicable” standard.

Cross-Border Enforcement and the PRC Connection

For issuers with significant PRC operations—a category that includes approximately 55% of Main Board new listings in 2024—the cross-border dimension adds complexity. The SFC and the China Securities Regulatory Commission (CSRC) signed a revised Memorandum of Understanding on Enforcement Cooperation in July 2024, which explicitly covers information sharing on inside information disclosure cases. The practical effect is that an issuer’s PRC subsidiary cannot claim that information is not “known” to the Hong Kong parent if the subsidiary’s management reports to the Hong Kong board. The MMT in SFC v. China Lumena New Materials Corp. (2021) held that information known to a wholly-owned PRC subsidiary is imputed to the Hong Kong-listed parent for disclosure purposes, even if the parent’s board had not formally received a written report.

The Impact of Short-Seller Reports

Short-seller reports published by third-party research firms have become a recurring trigger for inside information disclosure obligations. The SFC’s Statement on Short-Seller Reports (March 2023) clarifies that if a listed issuer becomes aware of material inaccuracies in a short-seller report that are causing a price impact, the issuer must disclose the accurate information promptly. Failure to do so can result in a breach of section 307B, even if the issuer did not originate the false information. In 2024, the SFC issued a warning letter to a Main Board pharmaceutical issuer for remaining silent for five trading days after a short-seller report alleged undisclosed related-party transactions, during which the share price fell 28%. The issuer eventually disclosed corrective information, but the delay resulted in a formal investigation.

Actionable Takeaways for Post-IPO Issuers

1. Implement a written inside information policy reviewed by external counsel within 30 days of listing, and ensure the compliance officer conducts quarterly training sessions for all directors and senior management on the specific requirements of Part XIVA of the SFO and Listing Rule 13.09.

2. Establish a disclosure committee that meets within 24 hours of any event that could reasonably be considered price-sensitive, with a documented escalation protocol that requires the company secretary to notify the board within two hours of receiving information from an operating subsidiary.

3. Maintain a confidential log of all persons with access to inside information before public disclosure, and require each person to sign a written acknowledgment of their confidentiality obligations under section 307D(1)(b) of the SFO.

4. Adopt a strict “no selective disclosure” policy for all analyst meetings, investor conferences, and media interactions, with pre-approved scripts that contain no information beyond what has already been published via the HKEX e-disclosure system.

5. Engage external legal counsel to conduct a post-listing compliance audit at the six-month and twelve-month marks, specifically testing the issuer’s response time to potential inside information events against the “as soon as reasonably practicable” standard as interpreted by the MMT.