The Hong Kong asset management industry centres on managing portfolios of securities and futures contracts, collective investment schemes (CISs) and related products. Main products include listed and unlisted securities, exchange-traded and OTC derivatives, unit trusts and mutual funds authorised under the UT Code, open-ended fund companies (OFCs), REITs, structured products, MPF schemes and pooled retirement funds (PRFs).

Core services are Type 9 asset management (discretionary portfolio management and CIS management), with supporting services including Type 4 advice, Type 1 dealing, Type 13 depositary services, trustee/custodian services, distribution/marketing and fund administration. Service providers are primarily SFC-licensed corporations and registered institutions (with the HKMA as front-line supervisor for AFIs). Investors range from retail clients through professional investors to institutions such as pension funds, insurers and endowments.

The SFC’s mission is to strengthen and protect the integrity and soundness of Hong Kong’s securities and futures markets for investors and the industry. It adopts a principles-based and risk-based approach, emphasising intermediary responsibility (especially senior management accountability under GP9). Objectives include investor protection, market integrity, and fair and efficient markets.

The MPFA protects MPF scheme members’ interests. The Insurance Authority regulates insurers and intermediaries and protects policyholders. The HKMA safeguards monetary and banking stability and front-line supervises authorised financial institutions that are also registered institutions under the SFO. Where mandates overlap, regulators co-operate through MoUs and coordinated reviews.

Type 9 asset management means managing a portfolio of securities or futures contracts for another person, or managing a CIS. “Securities” is wide and includes shares, stocks, debentures, bonds, notes, interests in CISs and certain other instruments. Futures contracts cover exchange-traded contracts and certain OTC contracts for differences.

A CIS is an arrangement under which participants contribute money or property, contributions are pooled, and the purpose/effect is to enable participation in profits, income or other returns. Important exceptions include same-group arrangements, certain solicitor client-money arrangements in ordinary professional practice, and certain pure deposit arrangements. Exceptions are a frequent exam trap.

Part IV of the SFO governs offers of investments. It controls invitations to the public to acquire interests in CISs and certain other investment products, and requires SFC authorisation of relevant advertisements and offering documents unless an exemption applies. The regime is designed to prevent unregulated public offers and misleading marketing.

Product authorisation powers allow the SFC to refuse authorisation where a product is not in the interest of the investing public (investor protection and transparency concerns are classic grounds). Misrepresentation controls and advertising authorisation requirements are central—unauthorised public offers and misleading statements can attract regulatory and criminal consequences.

A public OFC is a corporate CIS vehicle with variable capital, registered and regulated under Part IVA of the SFO. Unlike a traditional Companies Ordinance company, an OFC is purpose-built for collective investment with share capital that can expand and contract as investors enter and exit.

Operating an OFC without required SFC registration is a regulatory breach punishable by fine and/or imprisonment. Share rights are defined in (and may be varied only according to) the instrument of incorporation. OFCs sit alongside unit trusts as a mainstream Hong Kong fund structure.

Asset-management-specific SFC codes and guidelines include the Fund Manager Code of Conduct (FMCC), the Handbook for Unit Trusts and Mutual Funds / UT Code, OFC Code, Code on REITs, PRF Code, SFC Code on MPF Products, and related circulars (e.g. liquidity risk management and climate-related risks). The general Code of Conduct and ICG also apply to licensed corporations/registered institutions.

These instruments are not criminal statutes by themselves, but they are admissible and highly relevant to fitness-and-properness and disciplinary assessments. Topic 3 studies product and manager codes in depth; Topic 1 requires the map of which instruments exist and what they regulate.

The MPF system is a mandatory occupational retirement savings regime under the Mandatory Provident Fund Schemes Ordinance and related regulations. Employers and relevant employees must participate; schemes are overseen by the MPFA, with investment products and certain intermediaries also touching the SFC’s perimeter.

ORSO schemes are a separate voluntary/exemptable regime: ORSO schemes generally must be registered or exempted unless they are MPF schemes or certain overseas-government schemes. Do not confuse compulsory MPF with ORSO.

The SFC is an independent statutory body outside the civil service. It is organised into divisions covering intermediaries, investment products, enforcement, supervision, corporate finance and market infrastructure, supported by committees and advisory bodies that assist policy and process review.

Key functions include licensing and supervision of intermediaries, product authorisation, market surveillance, investigation and enforcement, and policy-making for market development and investor protection.

Relevant regulators include the SFC, HKMA, MPFA and IA. The SFC is the principal securities/futures regulator; the HKMA is front-line supervisor of AFIs that are registered institutions; the MPFA oversees MPF schemes and intermediaries’ MPF conduct; the IA regulates insurance entities and intermediaries.

Where mandates overlap (e.g. AFI registered institutions, MPF intermediaries who are also SFC/HKMA licensees), co-operation is effected through MoUs, dual reviews and information sharing. Simultaneous SFC–MPFA reviews of MPF products is a standard co-ordination model tested in exams.

Anyone carrying on (or holding out as carrying on) a regulated activity in Hong Kong must be licensed by the SFC (licensed corporation) or registered (registered institution, typically an AFI front-line supervised by the HKMA). Type 9 is the core asset-management licence; other types (1, 4, 13, etc.) support dealing, advice and depositary functions.

A licensed corporation needs at least two Responsible Officers per regulated activity; at least one must be an executive director and at least one must be based in Hong Kong and available to supervise. Every individual executive director of a licensed corporation must himself/herself be approved as a Responsible Officer. Unlicensed regulated activity is a criminal offence.

Fit and proper is continuous and assessed under four heads: (1) financial status/solvency; (2) educational qualifications/experience; (3) ability to carry on the activity competently, honestly and fairly; and (4) reputation, character, reliability, financial integrity and honesty.

Bankruptcy (including overseas proceedings), dishonesty, regulatory sanctions (including foreign sanctions), or competence failures can render a person not fit and proper. The SFC can refuse, suspend or revoke licences/registrations. Virtual-asset fund managers with material non-security VA exposure may need additional SFC terms and conditions.

The Code of Conduct for Persons Licensed by or Registered with the SFC applies to all licensed corporations and registered institutions. A breach is not itself a criminal offence, but the SFC takes breaches into account for fitness and properness and may take disciplinary action (reprimand, fine, suspension, revocation).

The Code applies across regulated activities relevant to asset managers. Junior staff are not automatically exempt: the SFC considers the person’s level of responsibility, control and knowledge when assessing Code breaches.

Nine General Principles: GP1 honesty and fairness; GP2 diligence/best execution; GP3 resources and procedures (link to ICG); GP4 KYC/suitability; GP5 clear information; GP6 conflicts; GP7 compliance; GP8 client assets; GP9 senior management responsibility for risk and conduct standards.

In practice these drive order handling, client agreements, risk disclosure, Chinese walls, personal account dealing and complaint handling. Client Identity Rule Policy typically requires identity information within 2 business days of an SFC request. Senior management cannot simply delegate away GP9 accountability.

Type 13 covers providing depositary services for relevant CISs. Trustees/custodians/depositaries must safeguard scheme property, oversee certain manager functions as required by product codes, and maintain independence and operational resilience appropriate to the role.

If a depositary becomes aware of a material change in the extent of services it can provide to an authorised CIS, the most appropriate immediate conduct response is to inform the management company of the CIS in a timely manner so that investor interests and regulatory notifications can be managed.

OTCD conduct and risk-mitigation requirements apply to relevant licensed corporations dealing with non-centrally cleared OTC derivatives. A classic scope point: a licensed corporation managing a portfolio of NCC OTCDs for a CIS under Type 9 can fall within SFC risk-mitigation requirements for those transactions.

Related OTCD reporting/record-keeping obligations (Topic 2) interact with conduct expectations: accurate reporting, timely records, and systems that prevent under-reporting. Licence type and activity determine which OTCD rules bite.

The Management, Supervision and Internal Control Guidelines (ICG) identify key control areas including management and supervision, segregation of duties, personnel and training, information management, compliance, audit, operational controls and risk management.

ICG is a guideline, not a free-standing criminal statute. Its legal status is that breaches may be considered when assessing fitness and properness. It sets the control architecture that GPs 3 and 7 of the Code of Conduct expect firms to implement in practice.

Senior management must actively supervise the business, require and assist in establishing proper systems, and remain ultimately accountable for culture and controls. Compliance procedures should cover AML controls, business practices/internal controls, and client and staff dealings—not marketing vanity metrics.

Supervision includes adequate management information, escalation paths, and ensuring compliance/audit have appropriate independence and reporting lines. Delegation of tasks does not equal delegation of responsibility.

The PDPO’s data protection principles cover purpose and manner of collection, accuracy and retention, use, security, openness, and access/correction rights. Collection must be for a lawful purpose directly related to a function of the data user, and data should be adequate but not excessive.

Collecting unrelated lifestyle preferences “to tailor future products” is a classic lawful-purpose / excessiveness breach. Firms must also control use (not using data for a new purpose without consent) and retention.

Key AML/CFT ordinances include AMLO, the Drug Trafficking (Recovery of Proceeds) Ordinance, the Organized and Serious Crimes Ordinance, and the United Nations (Anti-Terrorism Measures) Ordinance. Firms must identify, assess and mitigate ML/TF risks and report suspicious transactions to the JFIU.

Failure to comply with GAML or HKMA AML guidelines can lead to SFC disciplinary action including fines and fitness concerns. Institutional risk assessments must be kept current (commonly tested: review at least every two years).

A risk-based approach requires firms to identify higher-risk customers, products, delivery channels and geographies, apply enhanced due diligence where risk is higher, and simplify only where risk is demonstrably low. RBA is continuous, not a one-off onboarding form.

Effective RBA means translating risk assessments into policies, systems, training and STR decision-making. Third-party and intermediary risks must be managed.

When setting fines under the SFO/AMLO, the SFC considers nature, seriousness and impact; intention/recklessness/negligence; duration and frequency; financial benefit; co-operation (self-reporting and remediation are heavily rewarded); and disciplinary history.

Prompt reporting, full documentation, acceptance of liability and client compensation can lead to a maximum reduction of 30% for co-operation (self-reporting, full documentation, acceptance of liability, client compensation).

Senior management must direct and supervise the business properly. OECD-style corporate governance principles emphasise fairness, transparency, accountability and responsibility. Weak boards, unclear reporting lines and unmanaged conflicts are themselves fitness issues.

Deficiencies in governance—rubber-stamp boards, dominant individuals without challenge, or missing independent oversight—can amplify every other control failure.

The SFC supervises through off-site monitoring, on-site inspections, thematic reviews, circulars, licensing conditions and enforcement. It can require production of records, interview persons, and refer matters for MMT or criminal routes where misconduct is involved.

Day-to-day supervision is risk-based: higher-impact intermediaries and thematic industry risks attract more attention. Circulars often operationalise expectations after inspections.

MPF intermediaries are persons who engage in regulated MPF sales/advice activities as defined under MPF legislation/guidelines. The MPFA is the lead supervisor for MPF intermediary registration/conduct in its domain, while front-line regulators (SFC or HKMA) continue to supervise the person as a securities/banking intermediary where dual-hatted.

MPF intermediaries are subject both to MPFA Conduct Guidelines and to their front-line regulator’s rules. Exam focus: dual coverage, not “MPFA only” or “SFC only” for dual-regulated persons.

The Insurance Authority’s codes of conduct for licensed insurance agents and brokers set general principles and expected standards analogous to the SFC Code (honesty, competence, disclosure, conflicts, client interest). They apply to licensed insurance intermediaries, including where firms cross-sell basic insurance alongside securities advice.

For Paper 6, know that IA codes exist, apply to agents and brokers, and form part of the multi-regulator map introduced in Topic 1.

SFO subsidiary legislation imposes ongoing notification, Financial Resources Rules (FRR) capital requirements, Client Securities Rules, Client Money Rules, record-keeping rules, contract note rules, and accounts/audit requirements on asset managers that are licensed corporations (and, for several regimes, on registered institutions as well).

Returns for firms permitted to hold client assets are a frequent trap. Client money exemptions, contract-note timing (generally by the end of the second business day after the transaction), and segregation/safeguarding of client securities and money are core back-office test areas.

The OFC Rules govern formation, registration, share capital mechanics, directors/custodian arrangements and ongoing operation of open-ended fund companies. Share capital is variable; share class rights are defined in and varied only according to the instrument of incorporation.

Evaluate how OFC Rules interact with SFC registration under Part IVA and with the OFC Code (Topic 3) for authorised products. Operational consequences include redemption mechanics, capital movements, and governance of the corporate CIS vehicle versus a unit-trust structure.

The Securities and Futures (OTC Derivative Transactions – Reporting and Record Keeping Obligations) Rules require prescribed persons to report specified OTC derivative transactions to an approved trade repository and to keep related records.

Exemptions are narrowly drawn. Read exemption conditions carefully (including whether exemption once lost can be “regained”). Record-keeping supports regulatory reconstruction of OTCD activity and complements risk-mitigation conduct standards.

The FMCC sets organisational, operational, dealing and reporting standards for fund managers of CISs and discretionary accounts. The Handbook and product codes (UT Code, OFC Code, Code on REITs, PRF Code) add product-level authorisation and operational requirements. Together they form the conduct backbone for Type 9 managers of authorised/public products.

FMCC themes include senior management responsibility, conflicts, risk management, custody arrangements, marketing fairness, fees/expenses and SFC reporting. Risk management must identify relevant risks and implement procedures to measure, manage and monitor them.

Authorisation under the UT Code and related product codes requires fit documentation, eligible managers/trustees/custodians, acceptable investment and borrowing limits, disclosure and ongoing compliance. REITs, MPF products and PRFs have specialised codes with analogous authorisation and ongoing regimes.

Investment-in-other-CISs rules, diversification and eligible-asset constraints are heavily tested. If a PRF product provider is not incorporated or has no place of business in Hong Kong, it must appoint the local representative/process arrangements required by the PRF regime. Custodians may hold scheme property in omnibus accounts only under strict conditions (adequate safeguards, proper records, and compliance with code requirements).

SFC circulars on liquidity risk management require fund managers to assess liquidity of liabilities and assets, implement tools and governance, and ensure redemption terms are compatible with portfolio liquidity. Climate-related risk expectations for large fund managers require governance, investment processes, risk management and disclosure proportionate to size and strategy.

Large Fund Managers under enhanced standards face additional expectations such as disclosing methodology and assumptions used in carbon emissions calculations where climate disclosure applies. Focus on process, disclosure quality and proportionality.

Mutual Recognition of Funds (MRF) arrangements (notably Mainland–Hong Kong) and other recognition/passport-style schemes allow eligible funds authorised in one market to be offered in the other under streamlined processes, subject to criteria and ongoing conditions.

Recognised Mainland Funds under MRF face specific restrictions (e.g. investor composition/holding limits tested in the knowledge checks). Managers must still meet eligibility, disclosure and operational conditions; MRF is not a free passport without constraints.

Hong Kong uses a dual regime: Part XIII (MMT civil route) and Part XIV (criminal route) largely mirror the same six market misconduct forms. Parallel provisions exist, but only ONE route may be pursued against the same person for the same act.

The SFC investigates and then, with the Secretary for Justice’s involvement as required, chooses the route based on evidence strength and public interest. MMT = balance of probabilities; criminal = beyond reasonable doubt.

The Market Misconduct Tribunal is a specialist tribunal that determines whether market misconduct has occurred and identifies persons involved. It applies the civil standard of proof—on the balance of probabilities—not the criminal standard.

Procedures include institution of proceedings (with required consents), hearings, findings and orders. The MMT can impose civil sanctions such as disqualification orders, cold shoulder orders, disgorgement and costs.

Core market misconduct types include insider dealing, false trading, price rigging, disclosure of information about prohibited transactions, disclosure of false or misleading information inducing transactions, and stock market manipulation. Parts XIII/XIV largely replicate these; Part XIV also covers certain additional offences relevant to intermediaries.

Insider dealing combines connection + inside information + dealing/counselling/procuring or tipping-off, subject to defences. Wash trades (no change in beneficial ownership) are a classic false-trading illustration.

MMT consequences include: cold shoulder (ban on trading in HK markets for up to 5 years), disqualification as director/liquidator/receiver/manager for up to 5 years, disgorgement of profit/loss avoided (with compound interest), Government & SFC costs, disciplinary referral, training order.

Criminal (Part XIV indictment): fine up to HK$10 million and imprisonment up to 10 years (summary: up to 3 years + HK$1 million). Private civil actions may also follow. Co-operation can cut disciplinary fines by up to 30%. Unlicensed dealing = criminal + fitness consequences (industry bans common).

The SFO provides private rights of civil action for persons who suffer pecuniary loss as a result of market misconduct. Critically, the right can be available regardless of whether the claimant traded the affected asset in the narrow way a candidate might assume—exam items often test breadth of standing and independence from public enforcement.

Private actions complement MMT/criminal routes and increase deterrence by enabling investor recovery.

Section 174 SFO restricts unsolicited calls. Rescission remedy: written notice within 28 days after the agreement OR within 7 days after first discovering the contravention — whichever is earlier (classic exam trap).

Exemptions: existing clients, licensed persons / registered institutions, professional investors, solicitors/CPAs acting professionally, money lenders. Exam technique: unsolicited? → exemption? → which clock expires first?

Common improper practices include front running (trading ahead of a known client order using that knowledge), rat trading (re-allocating an already-executed profitable trade to oneself at the client’s expense), churning (excessive trading in a discretionary account to generate commission), boiler-room tactics, unsuitable recommendations and unauthorised trading.

Distinguish front running vs rat trading vs churning precisely—this is a favourite comparison set. Corporate mis-governance also links Topic 4 themes back to Topic 1 governance.

SFC enforcement actions are driven by investor harm, market integrity impact, deliberate or reckless misconduct, systemic control failures, unlicensed activity and concealment. Full co-operation, self-reporting and prompt remediation significantly reduce sanctions; inadvertent breaches with no investor harm often settle more leniently.

Unlicensed Type 9 activity is treated severely because it undermines the licensing gate. Enforcement lessons: document decisions, escalate issues early, and remediate.