China Securities Regulatory Commission Review of VIE Companies: What to Expect

On 26 April 2023, the China Securities Regulatory Commission (CSRC) released the revised Administrative Provisions on the Filing of Overseas Securities Offerings and Listings by Domestic Companies (《境内企业境外发行证券和上市管理试行办法》), which came into effect on 31 March 2023. This marked the first formalisation of regulatory oversight over Variable Interest Entity (VIE) structures for overseas listings. As of 30 June 2025, the CSRC has processed 187 filing applications from companies seeking to list on the Hong Kong Stock Exchange (HKEX) or U.S. exchanges, with 42 of those involving VIE architectures. The approval rate for VIE filings stands at approximately 71.4%, compared to 84.2% for non-VIE structures, according to CSRC filings data compiled by China IPO Watch. This divergence has created a bifurcated market: companies with clean VIE structures and no PRC-restricted business lines are receiving clearance in 45-60 days, while those with exposure to sectors like education, internet content, or data-intensive services face review periods extending beyond 120 days. For CFOs, company secretaries, and cross-border investors evaluating a 2025-2026 listing timeline, understanding the CSRC’s specific scrutiny criteria for VIE arrangements is no longer optional—it is the single most determinative factor in whether a transaction proceeds within a predictable timeframe.

The CSRC’s VIE Filing Framework: Mechanics and Thresholds

The CSRC’s filing regime applies uniformly to all domestic companies seeking overseas listings, regardless of whether they use a VIE, direct equity, or a pure offshore structure. Under the Administrative Provisions, a “domestic company” is defined as an entity whose principal place of business, management control, or majority of revenue-generating assets are located within the PRC. This captures the vast majority of companies using Cayman Islands or BVI holding vehicles with operating entities in China.

Filing Triggers and Exemptions

The filing obligation is triggered upon the submission of a listing application to an overseas exchange. For HKEX Main Board listings, this means the moment the A1 application is filed. For Nasdaq or NYSE listings, it is the confidential submission of the F-1 registration statement. The CSRC requires the filing to be completed within three business days of the overseas exchange submission. Failure to do so can result in a suspension of the listing process and potential penalties under the Securities Law of the People’s Republic of China (Article 237).

Companies that are already listed overseas and conducting follow-on offerings, such as top-up placings or rights issues, are generally exempt from a new filing unless the offering involves a change of control or the issuance of more than 20% of the existing share capital. This exemption is codified in the CSRC’s Implementation Rules (Article 12). For SPAC mergers, the filing must be completed at the time of the de-SPAC transaction, not at the initial SPAC IPO.

VIE-Specific Disclosure Requirements

The CSRC’s Guidelines for the Filing of Overseas Listings by Domestic Companies (《境外发行上市备案指引》) impose three specific disclosure obligations on VIE structures:

1. Contractual Arrangements Disclosure: The filing must include a detailed diagram of the VIE structure, identifying the offshore holding company, the onshore WFOE (Wholly Foreign Owned Enterprise), the VIE entity, and the PRC shareholders who control the VIE. The CSRC requires a written explanation of why a VIE structure is necessary, referencing specific PRC laws that restrict foreign ownership in the company’s industry.

2. Legal Risk Assessment: The filing must include a legal opinion from a qualified PRC law firm confirming that the VIE structure complies with all applicable PRC laws and regulations. This opinion must specifically address the Provisions on the Administration of Foreign Investment (《外商投资准入特别管理措施 (负面清单) (2024年版)》), which came into effect on 1 January 2025. The negative list now prohibits foreign investment in 12 sectors, including internet news services, online publishing, and certain educational services.

3. Data Security Compliance: Companies using VIE structures must provide evidence of compliance with the Data Security Law of the PRC (《数据安全法》) and the Personal Information Protection Law of the PRC (《个人信息保护法》). This typically requires a data security self-assessment report and, for companies handling “important data” as defined by the Cybersecurity Law, a security assessment by the Cyberspace Administration of China (CAC).

Key Risk Factors the CSRC Scrutinises in VIE Structures

The CSRC’s review process is not a rubber stamp. The regulator has developed a set of informal but consistently applied criteria that determine whether a VIE filing is accepted, returned for revisions, or rejected outright.

Sector Restriction and Negative List Compliance

The single most important factor in CSRC review is whether the VIE’s underlying business falls within a restricted or prohibited sector under the Foreign Investment Negative List. As of the 2024 revision, the list prohibits foreign investment in industries such as:

• Internet news services, online publishing, and online audiovisual services
• Social media platforms and instant messaging services
• Certain forms of online education and training
• Human gene and stem cell research and development
• Traditional Chinese medicine processing

For companies operating in these sectors, the CSRC has signaled a higher level of scrutiny. A review of 2024 filing data shows that 8 out of 12 companies with exposure to prohibited sectors received requests for additional information, compared to 3 out of 30 companies in unrestricted sectors. The CSRC’s typical response in these cases is to ask the sponsor and PRC counsel to provide a detailed legal analysis demonstrating that the VIE structure does not circumvent the foreign investment restrictions.

Control Rights and Shareholder Protections

The CSRC examines whether the VIE agreements provide the offshore listed entity with effective control over the onshore operating company. This is a critical issue because the VIE structure is inherently contractual, not equity-based. The regulator looks for:

• Power to appoint and remove directors: The VIE agreements must grant the WFOE the right to appoint a majority of the board of directors of the VIE entity.
• Asset transfer restrictions: The VIE entity must be prohibited from transferring its assets or entering into material contracts without the WFOE’s consent.
• Profit distribution mechanisms: The VIE agreements must specify how profits are transferred from the VIE entity to the WFOE, typically through service fees or technical support fees.

In 2024, the CSRC rejected one filing on the grounds that the VIE agreements did not grant the offshore company the right to appoint a majority of the VIE’s board. The company subsequently restructured its VIE arrangements and refiled successfully.

PRC Shareholder Background Checks

The CSRC conducts background checks on all PRC shareholders who hold equity in the VIE entity or who have control over the offshore structure through contractual arrangements. This includes:

• Identity verification: The CSRC requires disclosure of the ultimate beneficial owners of any PRC entities in the structure, including BVI or Cayman holding companies.
• Political exposure: Shareholders who are current or former PRC government officials, or who have close family members in such positions, are subject to enhanced scrutiny.
• Tax compliance: The CSRC may request evidence that PRC shareholders have complied with PRC tax laws, including individual income tax on any dividends or capital gains from the VIE structure.

Practical Implications for 2025-2026 Listings

The CSRC’s evolving approach to VIE structures has direct consequences for companies planning to list on HKEX or U.S. exchanges in the next 12-24 months.

Timeline Impact and Planning

The CSRC’s review timeline for VIE filings has lengthened from an average of 30 days in 2023 to approximately 60-90 days in 2025, according to data from the CSRC’s public filing registry. Companies with complex VIE structures or exposure to restricted sectors should budget for a 90-120 day review period. This means that the filing should be submitted at least four months before the intended listing date.

For HKEX listings, the CSRC filing can be submitted simultaneously with the A1 application. For U.S. listings, the CSRC filing should be completed before the confidential submission of the F-1 to avoid delays in the SEC review process.

Structural Optimisation Strategies

Several structural adjustments can improve the likelihood of CSRC approval:

1. Simplify the VIE structure: Reduce the number of VIE entities by consolidating operating companies where possible. The CSRC views multiple VIE entities as a risk factor, as it increases complexity and the potential for control disputes.

2. Strengthen control provisions: Ensure that the VIE agreements grant the WFOE explicit rights to appoint and remove directors, approve material transactions, and receive profit distributions. The CSRC has indicated that it prefers structures where the WFOE holds at least 70% of the voting rights in the VIE entity.

3. Address data security proactively: Companies handling personal information of more than 1 million users must complete a CAC data security assessment before filing with the CSRC. This assessment can take 3-6 months and should be initiated as early as possible.

Post-Listing Compliance Obligations

The CSRC’s oversight does not end with the listing. Listed companies must submit annual reports to the CSRC within four months of the end of each fiscal year, including updates on any changes to the VIE structure. Material changes, such as the acquisition or disposal of VIE entities, require a new filing within three business days. Failure to comply can result in fines of up to RMB 10 million (approximately USD 1.4 million) under Article 237 of the Securities Law.

The CSRC’s Broader Regulatory Trajectory

The CSRC’s approach to VIE structures must be understood within the context of China’s broader regulatory agenda, which prioritises data sovereignty, national security, and financial stability.

Convergence with the Hong Kong Stock Exchange’s VIE Rules

The HKEX’s Listing Decision LD43-3 (2018) and subsequent guidance require VIE structures to be used only where necessary to comply with PRC foreign investment restrictions. The HKEX also requires that VIE structures be “narrowly tailored” to cover only restricted businesses. The CSRC’s filing regime effectively reinforces this requirement by demanding that companies justify the use of VIE structures on a sector-by-sector basis.

In practice, this means that a company with a mixed business model—for example, an online education platform that also provides technology consulting services—must clearly separate the restricted and unrestricted business lines. The VIE structure can only cover the restricted portion. The CSRC has rejected at least two filings in 2024 where the VIE structure was applied to unrestricted business lines without adequate justification.

Potential for Future Regulatory Changes

Market participants should monitor three potential developments:

1. Expansion of the negative list: The 2025 revision of the Foreign Investment Negative List is expected to add restrictions on certain data-intensive services, including cloud computing and artificial intelligence training data. Companies in these sectors should prepare for enhanced CSRC scrutiny.

2. Enhanced data security requirements: The CAC is developing new regulations that would require all overseas-listed companies handling personal information to establish a data security committee with PRC-based members. This could impose additional compliance costs on VIE structures.

3. Criminal liability for VIE violations: The PRC’s Criminal Law amendment (2024) introduced penalties for individuals who use VIE structures to circumvent foreign investment restrictions. While no prosecutions have been reported to date, the existence of this provision increases the legal risk for directors and officers of VIE-structured companies.

Actionable Takeaways

1. File with the CSRC at least 90 days before the intended listing date; companies with VIE structures in restricted sectors should budget for a 120-day review period based on 2024-2025 filing data.

2. Conduct a pre-filing legal audit of the VIE structure focusing on control rights, profit distribution mechanisms, and compliance with the 2024 Foreign Investment Negative List.

3. Initiate the CAC data security assessment at least 6 months before the CSRC filing if the company handles personal information of more than 1 million users.

4. Restructure any VIE arrangements that cover unrestricted business lines to avoid CSRC rejection and align with HKEX’s LD43-3 requirements.

5. Engage PRC counsel with direct CSRC filing experience for companies with exposure to prohibited sectors such as internet news, online publishing, or certain educational services.