SFC inspections
Facing an SFC section 180 inspection?
A section 180 inspection is a supervisory review under the Securities and Futures Ordinance (Cap. 571). It may involve access to premises, inspection and production of records, enquiries about the firm’s business and transactions, and meetings with responsible officers, Managers-In-Charge and other staff.
An inspection does not, by itself, mean that the SFC has commenced an investigation or found misconduct.
Liva Law advises licensed corporations and management on section 180 inspection notices, document and information requests, inspection meetings, secrecy and legal professional privilege, responses to inspection findings and remedial action.
What is a section 180 inspection?
Section 180 gives an authorized person powers to supervise intermediaries and their associated entities. In relation to a licensed corporation, the powers may be used to ascertain whether the firm is complying, has complied or is likely to be able to comply with applicable statutory and regulatory requirements and the continuing standards relevant to its licence.
An authorized person may, at a reasonable time, enter premises approved by the SFC for the licensed corporation, inspect and copy or otherwise record details of relevant records and documents, and make enquiries concerning the firm, its business, transactions and related activities. These powers may be exercised through an on-site visit, information and document requests, or a combination of both.
On-site reviews are one of the SFC’s supervisory tools. Depending on the circumstances, a review may be a routine inspection, special inspection, thematic inspection or prudential visit. The scope and depth may be adjusted according to the firm’s activities, regulatory risk and the purpose of the review.
A routine inspection commonly assesses the firm’s systems and controls and compliance with selected requirements. A thematic inspection may focus on a particular practice or risk across firms. A special inspection may arise where the SFC has identified a more immediate concern. The review is not necessarily a comprehensive audit of every part of the business.
What may the SFC require or look at?
Under section 180, the SFC may require access to records or documents relating to the business of the licensed corporation or its associated entity, related-corporation transactions, and transactions or activities undertaken in the course of (or which may affect) that business. It may inspect, copy or record details of relevant material, require production within a specified time and place, and require questions concerning those records, documents, transactions or activities to be answered.
Depending on the firm’s regulated activities and the stated scope, a review may address matters such as:
- governance, senior management oversight and allocation of responsibility;
- roles of responsible officers and Managers-In-Charge;
- business models, regulated activities and licensing conditions;
- financial resources rules (FRR), liquidity and regulatory returns;
- client assets, onboarding, AML and selling practices;
- order handling, conflicts, complaints, breaches and notifications;
- outsourcing, information security and record retention;
- compliance monitoring, internal audit and prior remediation.
The precise scope should be taken from the inspection notification, requests and follow-up correspondence. The SFC may select samples, conduct process reviews, compare policies against practices, review source documents and speak with relevant personnel.
Records must be retrievable
Licensed corporations have continuing record-keeping obligations. Records relating to regulated activities should be readily available and retrievable without undue delay. A firm should not attempt to recreate, alter, falsify or retrospectively create records in response to an inspection.
Accuracy and cooperation
A person may commit an offence if, without reasonable excuse, the person fails to comply with a requirement imposed under section 180. Separate offences may arise where a person knowingly or recklessly provides a record, document or answer that is false or misleading in a material particular, or acts with intent to defraud.
The SFC may also consider whether the conduct of the firm and its management during an inspection affects their fitness and properness. Senior management remains responsible for the response even where external advisers assist.
How this differs from a section 183 notice or investigation
A section 180 inspection is primarily supervisory. A section 183 notice operates after the SFC has commenced an investigation under Section 182 and may require document production, explanations, an interview or other assistance.
An inspection may identify matters requiring corrective action without becoming an investigation. Serious or potentially systemic issues may be referred for further enquiry or investigation.
| Process | Primary purpose |
|---|---|
| section 180 inspection | Supervision — ongoing compliance, business conduct, financial soundness, governance and controls |
| section 183 notice | Information gathering after a section 182 investigation has commenced |
| section 181 notice | Surveillance — information about specified transactions (identity particulars, instructions and transaction details) |
| Inspection findings / letter of deficiencies | Supervisory concerns and required remedial action |
| Notice of Proposed Disciplinary Action (NPDA) | Commencement of disciplinary proceedings against a regulated person |
An inspection is not an NPDA. The same factual issue can move through more than one regulatory stage.
First steps if the firm is facing an inspection or inspection findings
Record the notice, scope and deadlines
Create a central record of receipt details, SFC officers, inspection date and location, each document/information requirement, review period or sample, proposed meetings, and every production, response and remediation deadline. Treat a formal inspection notification as an official notice, not an optional appointment request.
Establish senior management oversight
Identify who will direct the response and communicate with the SFC. This commonly involves directors, the MIC of Overall Management Oversight, the MIC of Compliance, relevant responsible officers, legal and compliance, operations and finance, IT and records, and external advisers where appropriate. The firm remains responsible for information and representations submitted on its behalf.
Preserve and retrieve relevant records
Suspend routine deletion that may affect relevant material. Identify systems, archives, outsourced providers, group entities and any relevant records held outside Hong Kong. Preservation should not become reconstruction. If a required record cannot be found, document the search and prepare an accurate explanation.
Map requests and control productions
For each request, map the business process, relevant requirements, custodians, systems, period/sample, third-party dependencies and known gaps. Use a controlled process for collecting, reviewing and producing records. Keep a clear record of documents produced (request, sources searched, items produced, omissions, dates and delivery method). Written responses should be checked against underlying records and prior SFC submissions.
Prepare ROs, MICs and relevant staff
Preparation should help each person understand the scope, locate contemporary records, distinguish knowledge from assumption, describe how controls operate in practice, and avoid speculation. It should not involve scripting inaccurate answers.
Secrecy and legal professional privilege
Section 378 may restrict disclosure of supervisory information, including the fact of a section 180 review, findings, SFC correspondence (including a letter of deficiencies) and responses that reveal supervisory information. Disclosure should follow the applicable exception or SFC consent. Legal professional privilege is preserved under section 380(4) of the SFO; a document is not privileged merely because a lawyer received it. Continue to address non-privileged responsive material.
Respond to findings with evidenced remediation
If the SFC issues inspection findings or a letter of deficiencies, address each item: the finding; the firm’s position; underlying causes of the deficiencies; affected scope; immediate remedial actions; longer-term remediation; ownership; timeline; testing; and evidence. Do not describe an action as completed unless it has been implemented and can be evidenced.
How we can assist
- Understand the inspection — statutory basis, scope, deadlines, confidentiality; distinguish section 180 from a section 183 notice or enforcement matter.
- Coordinate the response — communications, document requests, deadlines and management oversight.
- Manage records and information requests — preservation, collection, review, privilege and structured productions.
- Prepare management and staff — ROs, MICs, directors, compliance and relevant employees for SFC meetings by reference to contemporary records.
- Respond to inspection findings — analyse findings, prepare written responses and practical remediation plans.
- Address escalation risk — where issues may involve breaches, client impact, individual exposure, self-reporting or referral for further enquiry or investigation.
- Support remediation and follow-up — policies, controls, implementation records and subsequent SFC responses.
Who we advise
We advise licensed corporations and associated entities facing a section 180 inspection notification, document requests, staff meetings, inspection findings or a letter of deficiencies; boards and senior management; responsible officers and licensed representatives; MICs of relevant Core Functions; and in-house legal, compliance, operations, finance and internal audit personnel.
Frequently asked questions
Does a section 180 inspection mean that the SFC suspects misconduct?
Not necessarily. Inspections are part of supervisory functions and may be routine, thematic or risk-led. An inspection does not by itself mean that an investigation under section 182 has commenced.
Can the SFC conduct an inspection without prior notice?
Section 180 permits an authorized person to exercise relevant powers at a reasonable time and does not make advance notice a precondition. Where formal notification is given, treat it as an official notice rather than an optional appointment.
Can the inspection be postponed if an RO or key employee is unavailable?
The firm may promptly explain a genuine difficulty and propose an alternative, but staff absence does not automatically suspend the inspection. Asserted unavailability will generally not be regarded as a reasonable excuse for non-compliance.
Must the firm produce every record requested and answer every question?
Identify the statutory requirement, scope and deadline. Failure to comply without reasonable excuse may be an offence. Providing materially false or misleading material or answers knowingly or recklessly may also be an offence. Scope, availability or privilege questions should be raised promptly and specifically.
Can client confidentiality or privacy justify withholding records?
In general, a duty of confidentiality does not excuse non-compliance with a statutory requirement under section 180. Legal professional privilege is a separate issue and is preserved under the SFO.
Who within the firm can be told about the inspection or findings?
Circulation should be controlled under section 378. Do not assume inspection information can be circulated generally to employees, group companies, service providers, insurers or other third parties.
Should documents be reviewed before they are provided to the SFC?
A controlled review helps confirm responsiveness, completeness and any LPP issue. It should not conceal unfavourable material or cause unnecessary delay.
What can happen after an inspection?
The SFC may conclude without material follow-up, seek further information, or issue inspection findings or a letter of deficiencies. Depending on seriousness, further enquiries or investigation, licensing conditions, business restrictions or disciplinary action may follow. An inspection finding is not itself an NPDA.
Discuss your SFC inspection
If your firm has received an inspection notification, information request, letter of deficiencies or other SFC supervisory correspondence, contact Liva Law to discuss the scope, deadlines and practical next steps. At first contact, please provide the name of the licensed corporation, a safe contact number, the general nature of the communication and the earliest deadline. Please do not send the inspection notice, findings letter or other confidential documents until we have confirmed how they should be provided and whether we can accept the engagement.
Call +852 3520 3333 Email enquiry@llawsw.com Message us on WhatsApp View all contact details
Related insight: Is inspection “cooperation” the same as enforcement cooperation?