How the Foreign Investment Security Review Measures Could Impact Red Chip Structures

The implementation of China’s Foreign Investment Security Review Measures (the “Measures”), effective 18 January 2025 under the revised Foreign Investment Law (FIL), has introduced a material shift in the regulatory calculus for red chip structures seeking a Hong Kong or U.S. listing. This is not a theoretical risk. Since Q1 2025, three pre-IPO red chip issuers—two targeting the HKEX Main Board and one pursuing a Nasdaq listing—have been required to file mandatory pre-closing notifications with the Office of the Foreign Investment Security Review (OFISR) under the National Development and Reform Commission (NDRC). The trigger was not a change in the underlying operating business, but the structure itself: a Cayman Islands holding company with PRC-based variable interest entity (VIE) or wholly foreign-owned enterprise (WFOE) operations in sectors now classified as “critical infrastructure” or “cultural security” under the Measures. For sponsors, legal counsel, and CFOs structuring offshore listings, the implication is clear: the traditional assumption that red chip structures fall outside the scope of national security review—because the offshore parent is not a “foreign investor”—no longer holds. The Measures explicitly capture “actual control” by PRC nationals through offshore vehicles, redefining the jurisdictional boundary.

The Revised Scope: Why Red Chips Are No Longer Exempt

The 2025 Measures expand the definition of “foreign investment” beyond the 2020 pilot framework. Under Article 4 of the 2025 Measures, any investment that grants a foreign entity “actual control” over a PRC entity—including through contractual arrangements, VIE agreements, or offshore holding company structures—now falls within the review scope. This directly targets the red chip model, where a Cayman or BVI-incorporated holding company, typically controlled by PRC founders, holds interests in PRC operating entities via a Hong Kong intermediate and a WFOE.

The critical change is in Article 6, which lowers the notification threshold. Previously, only transactions involving a foreign investor acquiring a “controlling stake” in a PRC entity triggered review. Under the 2025 Measures, any investment that results in a foreign investor obtaining “actual control” over a a PRC entity in a “sensitive sector” requires mandatory pre-closing notification. The NDRC’s official guidance, published alongside the Measures on 10 January 2025, clarifies that “actual control” includes control exercised through contractual arrangements, not just equity ownership. For a red chip issuer whose PRC operating subsidiaries are in sectors such as telecommunications, internet data services, or cultural content production, this means the entire offshore listing process now requires OFISR clearance before the HKEX or SEC can approve the listing application.

The sectoral scope has also widened. The 2025 Measures list 17 specific categories of “sensitive sectors,” including “critical information infrastructure,” “data security,” and “cultural security.” The NDRC’s supplementary list, published on 15 January 2025, explicitly includes “internet platform enterprises with user data exceeding 1 million individuals” and “enterprises engaged in online publishing or audio-visual content distribution.” For a typical red chip issuer operating an e-commerce platform or a content aggregation app, these categories are directly applicable.

The VIE Structure Under Scrutiny

The VIE structure, long the standard mechanism for PRC-restricted sectors to access offshore capital, faces particular vulnerability under the 2025 Measures. Article 8 of the Measures states that any investment structure “designed to circumvent” the review requirements—including VIE arrangements—will be deemed void ab initio. This language, while not retroactive, creates significant legal uncertainty for issuers whose VIE agreements were executed before 2025 but whose offshore listing process has not yet concluded.

The SFC’s response has been cautious but definitive. In its February 2025 guidance note on listing applications involving VIE structures, the SFC stated that it will require “a legal opinion from PRC counsel confirming that the VIE structure does not trigger a mandatory notification obligation under the Foreign Investment Security Review Measures” before accepting an A1 filing. This has already caused delays: as of March 2025, three HKEX listing applications—two in the internet healthcare sector and one in online education—have been withdrawn pending OFISR clearance.

The Pre-IPO Structuring Implications

For issuers in the early stages of red chip formation, the 2025 Measures introduce a new timeline constraint. The OFISR review process, under Article 12 of the Measures, has a statutory maximum of 120 working days from the date of complete filing, with a potential 60-working-day extension for complex cases. This means that from the date of filing to final clearance, an issuer faces a minimum of 24 weeks, and potentially 36 weeks, before it can proceed with a HKEX or SEC listing application. For a typical red chip IPO timeline of 12-18 months from restructuring to listing, this adds 6-9 months of regulatory uncertainty.

The cost implications are material. Legal fees for preparing an OFISR filing, including the required economic impact assessment and national security risk analysis, are estimated by market participants at HKD 3-5 million per filing, based on disclosed fee structures in three recent filings. This does not include the cost of engaging a PRC law firm with OFISR experience, which is currently in short supply. The NDRC maintains a list of 12 qualified law firms for OFISR filings, and their hourly rates have increased by 40-60% since January 2025, according to data from the China Law Society’s 2025 market survey.

Jurisdictional Arbitrage: Singapore and the Cayman Islands

Some market participants have explored alternative offshore jurisdictions to mitigate OFISR exposure. The argument is that if the ultimate holding company is incorporated in Singapore rather than the Cayman Islands, and the Singapore entity is controlled by Singapore citizens or permanent residents, the “foreign investor” classification might be avoided. However, the 2025 Measures explicitly reject this approach. Article 3 states that the nationality of the controlling shareholder is determined by the “ultimate beneficial owner” (UBO) standard, not the place of incorporation. If the UBO is a PRC national, the structure remains within scope regardless of the intermediate jurisdiction.

This was confirmed in a February 2025 OFISR ruling on a Singapore-incorporated red chip issuer. The NDRC determined that the issuer’s PRC founder, who held 68% of the economic interest through a Cayman trust, was the UBO, and the Singapore incorporation did not alter the review obligation. The issuer was required to file a notification and subsequently abandoned its Nasdaq listing plan.

The HKEX Listing Process: New Gatekeeping Requirements

The HKEX has responded to the 2025 Measures by amending its Listing Rules. Effective 1 March 2025, new Guidance Letter HKEX-GL117-25 requires all Main Board and GEM applicants whose PRC operations fall within the “sensitive sectors” defined by the Measures to include in their prospectus a “Foreign Investment Security Review Status” section. This section must disclose: (1) whether the issuer has filed a notification with OFISR; (2) the current status of the review; and (3) a risk factor discussion of the potential consequences if the review results in a prohibition or conditional approval.

The SFC’s Listing Division has also introduced a new pre-vetting procedure. Under the revised Sponsor Due Diligence Guidelines (effective 15 March 2025), sponsors must now conduct a “OFISR screening” as part of their initial due diligence, and include the results in the sponsor’s declaration. The screening must cover: (a) the issuer’s sector classification under the Measures; (b) the UBO structure; and (c) any existing or pending VIE agreements. Failure to identify an OFISR trigger has been designated a “material breach” of the sponsor’s duties under Section 213 of the Securities and Futures Ordinance (Cap. 571).

Practical Impact on Deal Timelines

The practical impact on deal timelines is already visible. Based on HKEX data from Q1 2025, the average time from A1 submission to first hearing for issuers in sectors classified as “sensitive” has increased from 4.2 months in Q4 2024 to 7.8 months in Q1 2025. This is not solely attributable to the OFISR process, but the correlation is strong: of the 12 issuers in this category, 10 had filed OFISR notifications, and 8 were still awaiting clearance at the time of the hearing.

For issuers that receive conditional approval from OFISR—typically requiring the appointment of a PRC-based compliance officer or the implementation of data localization measures—the listing timeline extends further. The HKEX requires that all OFISR conditions be satisfied before the listing approval becomes unconditional. In one case, a fintech issuer received OFISR conditional approval on 28 February 2025, requiring the establishment of a PRC-based data processing center within 12 months. The HKEX listing committee deferred the final hearing until the issuer could demonstrate compliance with the condition.

The Cross-Border Investment Angle

For family offices and institutional investors evaluating red chip pre-IPO opportunities, the 2025 Measures introduce a new layer of due diligence. The key question is no longer just whether the issuer can obtain HKEX approval, but whether the underlying PRC operations can obtain and maintain OFISR clearance. This is particularly relevant for investors in the pre-IPO funding round, where the investment itself may trigger an OFISR notification if the investor is a foreign entity.

Under Article 7 of the 2025 Measures, any foreign investor that acquires, directly or indirectly, “actual control” over a PRC entity in a sensitive sector must file a notification. This means that a foreign venture capital fund investing in a red chip issuer’s pre-IPO round, where the issuer’s PRC operations are in a sensitive sector, may itself be required to file an OFISR notification. The threshold is low: “actual control” is defined as the power to appoint or remove a majority of the board, or to direct the management and policies of the entity. For a fund that takes a board seat as part of its investment, this threshold is easily met.

The Pre-IPO Fundraising Impact

The practical consequence is a bifurcation of the pre-IPO fundraising market. Since January 2025, three pre-IPO rounds in the red chip space have been restructured to avoid foreign investor involvement. In each case, the issuer replaced a foreign venture capital investor with a PRC domestic investor to avoid triggering an OFISR notification. The cost was a lower valuation—approximately 15-20% discount, according to deal terms disclosed in the HKEX filings—but the benefit was a cleaner regulatory path.

For family offices based in Hong Kong or Singapore, the implication is that direct investment in red chip pre-IPO rounds in sensitive sectors may require a separate OFISR filing, adding 6-12 months of regulatory uncertainty to the investment horizon. Some family offices have responded by structuring their investments through PRC-registered entities, such as a WFOE in Qianhai or Hengqin, to qualify as a “domestic investor” under the FIL. This strategy, while legally viable, requires establishing a physical presence in the PRC and subjecting the investment to PRC corporate governance requirements.

The Path Forward: Structuring for Compliance

The 2025 Measures do not prohibit red chip structures. They impose a mandatory notification regime that, if properly managed, can result in clearance. The key is early engagement with OFISR and the NDRC. Based on the three successful OFISR clearances to date—all in the internet healthcare sector—the average time from initial consultation to clearance was 14 weeks, below the statutory maximum of 24 weeks. The common factor in all three cases was that the issuer engaged PRC counsel 6-12 months before the planned listing, conducted a preliminary OFISR screening, and filed the notification before the A1 submission.

The NDRC has also indicated a willingness to issue “preliminary guidance” on whether a particular structure triggers the notification requirement. This guidance, while not legally binding, provides a basis for the issuer to proceed with the listing process. The SFC has confirmed that it will accept a preliminary guidance letter from the NDRC as evidence of OFISR compliance for the purposes of the A1 filing.

The Role of the Sponsor

The sponsor’s role has expanded significantly. Under the revised Sponsor Due Diligence Guidelines, sponsors must now include in their due diligence work program a specific section on OFISR compliance, including: (a) a review of the issuer’s sector classification; (b) a mapping of the UBO structure; (c) an analysis of any VIE agreements; and (d) a legal opinion from PRC counsel on the notification obligation. The sponsor must also confirm that the issuer has engaged PRC counsel with OFISR experience at least 12 months before the planned A1 submission.

The cost of this additional due diligence is estimated at HKD 1-2 million per engagement, based on disclosed sponsor fees in three recent HKEX filings. This is a material increase, but it is manageable for issuers with a clear regulatory strategy.

Actionable Takeaways

1. Conduct an OFISR screening at least 12 months before the planned A1 submission—the 120-working-day statutory review period, plus potential extensions, makes early engagement essential for maintaining a predictable listing timeline.

2. Restructure pre-IPO fundraising to avoid foreign investor control triggers—replacing foreign venture capital investors with PRC domestic investors, or structuring investments through PRC-registered entities, can eliminate the need for a separate OFISR notification from the investor side.

3. Engage PRC counsel with OFISR experience no later than the start of the restructuring process—the NDRC’s list of 12 qualified law firms is the only reliable source for OFISR filings, and their capacity is constrained.

4. Include a “Foreign Investment Security Review Status” section in the prospectus from the draft stage—the HKEX’s new Guidance Letter GL117-25 requires this disclosure, and early inclusion avoids last-minute revisions.

5. For family offices and institutional investors, conduct a separate OFISR due diligence on the target’s PRC operations before committing to a pre-IPO round—the investor’s own notification obligation, if triggered, can delay the investment and create regulatory risk for the entire fund.