Internal Control

The Stock Exchange of Hong Kong Limited (the “HKEX”) has published the Guide for New Listing Applicants (the “Guide”), effective from 1 January 2024, introducing the new chapter on prospectus disclosure requirements and guidance in relation to Corporate Governance and Environmental, Social and Governance (“ESG”) (Chapter4.3 of the Guide). Listing applicants should pay attention to the impact of the Guide on the contents of the prospectus, in order to timely assess and optimize the proposed listing timetable.
 
<a href="../../../../../uploads/HKEX_s_Latest_Prospectus_Disclosure_Requirements_on_Corporate_Governance_and_Environmental_Social_and_Governance_under_the_Guide_for_New_Listing_Applicants_V6_5de8f68b61.pdf" target="_blank" rel="noopener">Read the report now</a>
<a href="../../../../../uploads/HKEX_s_Latest_Prospectus_Disclosure_Requirements_on_Corporate_Governance_and_Environmental_Social_and_Governance_under_the_Guide_for_New_Listing_Applicants_V6_5de8f68b61.pdf" target="_blank" rel="noopener"><img src="../../../../../uploads/Screenshot_2024_01_19_at_6_41_52_PM_e6c9255108.png" width="500" /></a>

Screenshot 2024-01-19 at 6.50.37 PM.png

HKEX’s Latest Prospectus Disclosure Requirements on Corporate Governance & Environmental, Social and Governance under the Guide for New Listing Applicants 

As a guidance and enhanced regulations on the compliance audit activities of personal information protection, the Cyberspace Administration of China issued "Administrative Measures for the Personal Information Protection Compliance Audit (Comment Draft)” and the annex of "Reference Points for Compliance Audit of Personal Information Protection" for public comments.
 
Avista extracted some key provisions, with additional interpretation in terms of internal control, to provide personal information processors a better understanding for the regulatory requirements of the personal information protection-related compliance audit.
 
<a href="../../../../../uploads/Highlights_of_the_Compliance_Audit_Requirement_in_the_Administrative_Measures_for_the_Personal_Information_Protection_Compliance_Audit_Comment_Draft_4a2daaddc3.pdf" target="_blank" rel="noopener">Read the report now</a>
<a href="../../../../../uploads/Highlights_of_the_Compliance_Audit_Requirement_in_the_Administrative_Measures_for_the_Personal_Information_Protection_Compliance_Audit_Comment_Draft_4a2daaddc3.pdf" target="_blank" rel="noopener"><img src="../../../../../uploads/Screenshot_2023_11_10_at_2_57_02_PM_69620af56e.png" width="500" /></a>

Screenshot 2023-11-10 at 2.48.31 PM.png

Highlights of the Compliance Audit Requirement in the “Administrative Measures for the Personal Information Protection Compliance Audit (Comment Draft)”

In July 2023, the Securities and Futures Commissions ("SFC") and the Accounting and Financial Reporting Council ("AFRC") issued the first joint statement highlighting common regulatory concerns regarding loans, advances and prepayments arrangements for listed issuers.
 
Listed companies are advised to consider the Statement as an official guideline and evaluate their internal controls and implement necessary enhancements to align with the recommended practices.  
 
<a href="../../../../../uploads/AVISTA_Insights_20230731_83e33f2d49.pdf" target="_blank" rel="noopener">Read the summary of the Statement now</a>
 
<a href="../../../../../uploads/AVISTA_Insights_20230731_83e33f2d49.pdf" target="_blank" rel="noopener"><img src="../../../../../uploads/cover_EN_01_9790eb32a7.png" alt="" width="400" height="564" /></a>

joel-filipe-J3eemrdvV_U-unsplash.jpg

Summary of SFC and AFRC Joint Statement on Loans, Advances and Prepayments Arrangements

Staying at home and working-from-home have become the new norms under COVID-19. The social-distancing measure has rapidly driven the development of the Information Technology industry. Online games, communication software, and e-commerce are all benefited from the pandemic. Digital transformation was also spotted in various industries through adopting big data, cloud computing and artificial intelligence technologies in daily operations. However, the network security, data security and personal information security risks brought by the application of new technologies are more noticeable than ever.
 
In early July 2021, The Cyberspace Administration of China (CAC) issued the "Cyber Security Review Measures (Revised Draft for Comments)” to respond to the data security concerns arising from recent Chinese companies' applications for overseas listings. With the introduction of various laws and regulations, companies should place more emphasis on cybersecurity and strengthen internal control systems to avoid any violations of laws and regulations.
 
Click <a href="../../../../../uploads/_2f7fc17902.pdf" target="_blank" rel="noopener">here</a> to download the full insight. (Available in Chinese version only.)
 
<a href="../../../../../uploads/_2f7fc17902.pdf" target="_blank" rel="noopener"><img src="../../../../../uploads/cover_3826de4709.JPG" width="600" /></a>

95713048_m.jpg

 The Cyberspace Administration of China (CAC) Draft on  "Cyber Security Review Measures” 

The Stock Exchange of Hong Kong Limited (“HKEX”) published a consultation paper titled ‘Review of Listing Rules Relating to Disciplinary Powers and Sanctions’ (the “Consultation Paper”) in August 2020, which proposed changes in respect of HKEX’s disciplinary regime. The Consultation Paper follows a wide-ranging review of the HKEX’s disciplinary powers and sanctions under Chapter 2A of the Listing Rules, to ensure that the disciplinary regime continues to remain robust and effective. The consultation period had ended on 9 October 2020.
 
The key enhancements to the existing disciplinary regime are set out below. 
<ol>
<li>Lowering existing thresholds for public statements regarding individuals Currently, the HKEX’s power to issue a public statement to the effect that a director continuing to remain in office is prejudicial to the interests of investors (“PII Statement”) can only be exercised where there has been a wilful or persistent failure by the director to discharge his responsibilities under the Listing Rules. The HKEX is proposing to remove this threshold as it is difficult in determining whether an action is wilful. This amendment will provide greater flexibility to the HKEX in being able to issue PII Statements against directors where warranted, without the need to prove that the director’s conduct is wilful or persistent. </li>
<li> Enhancing follow-on actions in relation to public statements regarding individuals and publication requirements Currently, the follow-on actions which the HKEX may direct where an individual subject to a PII Statement remains in office as a director are limited to suspension or cancellation of listing of the issuer’s securities or any class of its securities. In order to bring the compliance attitudes and cultures within listed issuers into sharp focus for the purpose of benefitting the investing public, the following enhancements are proposed in case of serious misconduct: (a) The follow-on actions which the Listing Committee or the Listing Review Committee may direct include the denial of facilities of the market to that listed issuer for a specified period; and (b) The follow-on actions apply where an individual subject to a PII Statement continues to be a director or senior management member of the specified listed issuer. The HKEX also proposes that, after a PII Statement with follow-on actions has been made against an individual, the listed issuer identified in the statement must include a reference to the PII Statement in all of its announcements and corporate communications, unless and until that individual is no longer a director or a senior management member of the relevant listed issuer. </li>
<li>Introducing director unsuitability statements For more serious cases of misconduct where there is a evident or repeated failure by a director to discharge his responsibilities, the HKEX is proposing a new sanction, which would enable it to issue a public statement that, in its opinion, the director is unsuitable to occupy a position as a director or within the senior management of a named listed issuer or any of its subsidiaries. </li>
<li>Introducing secondary liability The HKEX is also proposing to introduce secondary liability for Listing Rule breaches in circumstances where it determines the person “has caused by action or omission or knowingly participated in a contravention of the Listing Rules”. These persons may include directors and senior management, substantial shareholders, professional advisers and their employees, authorised representatives, supervisors and a guarantor of an issuer in the case of a guaranteed issue of debt securities or structured products. Set out below are some examples of how secondary liability would be applied: (a) Chief Financial Officers for failure to obtain auditors’ agreement before publication and material inaccuracy of preliminary results announcement; (b) Chief Operating Officers for failure to disclose share charge in a timely manner and in its interim report; (c) Company Secretaries for material inaccuracy of listed issuer’s announcement of controlling shareholder’s transfer of shares; (d) Substantial Shareholders for breach of maintain minimum public float; (e) Financial Advisers for material inaccuracy of listed issuer’s Circular.</li>
</ol>
 
We believe the proposed enhancements could further enable the HKEX to take timely and effective disciplinary actions, which in turn promote market quality and maintain the integrity of the Hong Kong capital market.