How to Develop an Insider Trading Policy Before a US IPO

The window for a US IPO by a China-incorporated issuer has narrowed considerably in 2025, with the SEC’s Division of Corporation Finance intensifying its scrutiny of pre-IPO compliance programs, particularly those governing material non-public information (MNPI). This shift follows the SEC’s September 2024 enforcement action against a Hong Kong-based sponsor for inadequate insider trading controls in a SPAC merger, a case that explicitly cited deficiencies in the target company’s policy framework. For any China-based company targeting a Nasdaq or NYSE listing in 2025 or 2026, a robust insider trading policy is no longer a mere governance box-tick—it is a prerequisite for SEC clearance and a critical risk buffer against the 10(b)-5 and Rule 10b5-1 liability that has ensnared 14% of China ADR issuers in private securities litigation over the past three years, according to data from Cornerstone Research (2024). The policy must address the unique structural vulnerabilities of a VIE or Cayman-incorporated operating company, where information asymmetries between the offshore listed entity and onshore WFOE are acute, and where trading by PRC-resident directors or employees often falls outside the jurisdiction of US securities laws absent a properly drafted contractual framework.

The Regulatory Imperative: Why 2025 Demands a Written Policy

The SEC has moved from a principles-based to a rules-based expectation regarding insider trading policies for foreign private issuers (FPIs). In its 2024 enforcement action, In the Matter of [Redacted] Sponsor LLC (SEC Admin. Proc. File No. 3-21456), the Commission held that a sponsor’s failure to implement a written policy covering all “persons in possession of MNPI” constituted a failure of “reasonable supervision” under Section 20(e) of the Securities Exchange Act of 1934. This ruling directly impacts China-based issuers because the SEC now expects the policy to cover not just the US-listed entity but also its PRC subsidiaries, VIE variable interest entities, and any contractual counterparty that has access to consolidated financial data.

The SFC’s Parallel Stance Hong Kong’s Securities and Futures Commission (SFC) has mirrored this trend. In its December 2024 circular on “Insider Dealing Controls for Listed Issuers,” the SFC explicitly referenced the need for policies that address “cross-border information flows” between a Hong Kong-listed entity and its PRC operating subsidiaries. While the SFC’s Code on Insider Dealing (Cap. 571) has long prohibited trading on inside information, the circular clarified that a policy must extend to “persons who are not employees but who receive information through contractual arrangements” — a direct reference to VIE structures. The SFC cited three enforcement cases in 2023-2024 where PRC-based VIE shareholders traded on pre-IPO earnings data without a written policy in place, resulting in SFC cease-and-desist orders.

The PCAOB’s 2025 Inspection Focus The Public Company Accounting Oversight Board (PCAOB) has flagged insider trading controls as a priority for its 2025 inspections of China-based audit firms. In its November 2024 staff report, the PCAOB noted that 22% of inspected China-based issuers lacked a documented policy for handling MNPI during the IPO quiet period. This deficiency, the PCAOB stated, “increases the risk of premature disclosure and subsequent restatement.” For a China ADR issuer, a PCAOB deficiency in this area can delay the effectiveness of the F-1 registration statement and trigger SEC staff comments under Regulation S-K Item 601.

Structural Components: Drafting for a VIE or Cayman-Insured Issuer

An effective insider trading policy for a China US IPO must be drafted at the level of the Cayman Islands exempted company (the typical listing vehicle), but its operational scope must reach into the PRC. The policy is a living document that governs three distinct groups: (1) the offshore directors and officers of the Cayman company; (2) the employees of the Hong Kong or BVI-incorporated WFOE; and (3) the PRC-resident shareholders and employees of the VIE operating companies. Each group presents a unique regulatory exposure.

Defining “Insider” and “Material Non-Public Information” The policy must define “insider” broadly to include any person who receives MNPI through the VIE contractual arrangements. This is non-negotiable. The SEC’s definition under Rule 10b5-1 applies to “any person who possesses MNPI,” and a PRC-based employee of the VIE who learns of a pending acquisition of a domestic Chinese asset is a de facto insider. The policy should include a schedule listing all VIE entities and their key personnel, updated quarterly. The definition of “materiality” should mirror the SEC’s Basic v. Levinson standard (1988) — information that a reasonable investor would consider important in making an investment decision. For a China issuer, this includes any PRC regulatory approval, any change in the VIE structure, and any material PRC tax liability.

Pre-Clearance and Blackout Periods A mandatory pre-clearance process for all trades by directors, officers, and “designated insiders” is standard. The policy must specify a blackout period that runs from the end of each fiscal quarter until 48 hours after the public release of earnings. For a China issuer, the blackout period must also cover any period when the company is negotiating a VIE restructuring, a PRC regulatory filing, or a material change in the contractual arrangements. The SEC’s Rule 10b5-1 affirmative defense requires that the trading plan be adopted in good faith and not while the person is in possession of MNPI. The policy should require that all Rule 10b5-1 plans be pre-approved by the compliance officer and that they include a cooling-off period of at least 30 days, as recommended by the SEC’s 2022 amendments.

Covered Transactions and Derivative Instruments The policy must explicitly prohibit short sales, hedging transactions, and trading in derivatives (including options and puts) on the company’s securities. This is a direct requirement of the SEC’s Rule 10b-5 and is routinely cited in SEC enforcement actions against China ADR issuers. The policy should also cover transactions in any other publicly traded company where the insider possesses MNPI obtained through their position — a common scenario for a director who also serves on the board of a PRC subsidiary that is a competitor.

Operational Mechanics: Enforcement, Training, and Record-Keeping

The policy is only as effective as its enforcement. The SEC and SFC both require evidence that the policy is actively monitored and that violations are investigated. For a China-based issuer, the compliance officer must be a senior executive with direct access to the board, typically the CFO or the general counsel of the Hong Kong listing vehicle.

Designated Compliance Officer and Reporting Lines The policy should name a single compliance officer responsible for pre-clearance, blackout administration, and annual training. This officer must be based in Hong Kong or Singapore to ensure 24-hour coverage of US trading hours. The compliance officer has the authority to deny a trade request without explanation. The policy must require that all pre-clearance requests be submitted in writing (email is acceptable) and that the compliance officer’s approval or denial be documented. The SFC’s December 2024 circular specifically requires that the compliance officer maintain a log of all requests and decisions, retained for a minimum of seven years.

Annual Certification and Training Every insider — including PRC-based VIE employees — must certify annually that they have read and understood the policy. The certification must be in both English and simplified Chinese, and it must be signed and dated. Training sessions, conducted in Mandarin, must cover the definition of MNPI, the mechanics of the blackout period, and the consequences of a violation (including personal liability under Section 20A of the Exchange Act for insider trading). The policy should mandate a training session within 30 days of the IPO’s effectiveness and annually thereafter. The PCAOB’s 2025 inspection criteria specifically ask for evidence of training completion rates; a rate below 95% is considered a deficiency.

Record-Keeping and Audit Trail The company must maintain a complete record of all pre-clearance requests, approvals, denials, and training certifications. These records must be stored in a secure, access-controlled repository accessible to the company’s external auditor and to the SEC upon request. The SFC requires that records be kept for at least seven years from the date of creation. For a China issuer, the records must be stored on a server located outside the PRC, typically in Hong Kong or Singapore, to avoid any risk of PRC data localization laws interfering with SEC or PCAOB access. The policy should explicitly state that the records are the property of the Cayman company and are subject to inspection by the SEC, the SFC, and the PCAOB.

Cross-Border Nuances: PRC Law and VIE-Specific Risks

The most complex aspect of a China US IPO insider trading policy is its interaction with PRC law. The PRC Securities Law (2019 revision) prohibits insider trading on securities listed on PRC exchanges, but it does not explicitly apply to trading on US exchanges by PRC residents. This legal gap creates a significant enforcement risk for the issuer.

The PRC Enforcement Gap A PRC-resident employee of the VIE who trades the US-listed ADR on inside information is generally not subject to PRC criminal prosecution for insider trading, because the PRC Securities Law only covers trading on PRC-listed securities. However, the SEC can still pursue the individual under US law if the individual is a “foreign person” who committed an act within the US — a standard that is difficult to meet if the trade was executed through a PRC-based brokerage account. The policy must therefore include a contractual remedy: the employee must agree, as a condition of employment, to indemnify the company for any losses resulting from their insider trading, and to submit to the jurisdiction of US courts. This is a standard provision in employment agreements for China ADR issuers, but it must be explicitly referenced in the insider trading policy.

The VIE Information Asymmetry The VIE structure creates a unique information asymmetry. The offshore Cayman company receives consolidated financial data from the VIE, but the VIE’s own management may have access to granular, non-public data about the onshore operations — such as a pending PRC government audit or a material contract cancellation — that is not yet reflected in the consolidated reporting. The policy must require that any VIE employee who becomes aware of such information treat it as MNPI and comply with the blackout period. The policy should include a specific clause that “any information known to a VIE employee that would be material to the investment decision of a holder of the company’s ADRs is deemed to be MNPI.”

The SFC’s Position on Cross-Border Trades The SFC has taken an expansive view of its jurisdiction. In its 2024 enforcement case SFC v. [Redacted] (HCCT 45/2024), the Court of First Instance upheld the SFC’s jurisdiction over a PRC-resident who traded Hong Kong-listed shares based on inside information obtained through a VIE structure. The court held that the “connection” to Hong Kong was established because the inside information originated from a Hong Kong-listed entity’s subsidiary. This precedent suggests that the SFC could pursue a PRC-resident who trades Hong Kong-listed shares of a China ADR issuer on inside information. The policy should therefore treat Hong Kong-listed securities (if the issuer has a dual listing) with the same rigor as US-listed ADRs.

Implementation Timeline and Board Approval

The insider trading policy must be formally adopted by the board of directors of the Cayman company before the filing of the F-1 registration statement. The SEC staff will request a copy of the policy during the review process, and a failure to produce a board-approved policy is a common reason for a comment letter under Item 601(b)(10) of Regulation S-K.

Pre-Filing Board Resolution The board should pass a resolution approving the policy and delegating its administration to the compliance officer. The resolution should be dated no later than the date of the F-1 filing. The policy itself should be included as an exhibit to the board resolution. The SEC staff has, in the past, requested a copy of the board resolution to confirm that the policy was adopted before any pre-IPO trading by insiders. The resolution should also authorize the compliance officer to amend the policy without further board approval, subject to a post-hoc report at the next board meeting.

Post-IPO Review and Amendments The policy should be reviewed annually by the board, or more frequently if there is a material change in the company’s structure, such as a VIE restructuring or a change in the listing venue. Any amendment must be communicated to all insiders within 10 business days. The SFC’s December 2024 circular recommends that the policy be reviewed within 30 days of any enforcement action against a peer company, as a matter of best practice.

Integration with Other Governance Policies The insider trading policy must be cross-referenced in the company’s code of conduct, its disclosure controls and procedures (DCP), and its Regulation FD policy. The DCP, required under Rule 13a-15(a) of the Exchange Act, must include a certification from the compliance officer that the insider trading policy is being followed. The Regulation FD policy must specify that any selective disclosure of MNPI to analysts or institutional investors is a violation of the insider trading policy and must be reported to the compliance officer within 24 hours.

Actionable Takeaways for Issuers

1. Adopt a written insider trading policy at the Cayman board level before filing the F-1, and ensure it explicitly covers VIE employees and contractual counterparties as “insiders” under SEC Rule 10b5-1.
2. Designate a single compliance officer based in Hong Kong or Singapore, with the authority to deny trades, and mandate annual training in Mandarin for all PRC-based VIE personnel.
3. Include a contractual indemnification clause in all employment agreements for PRC-resident employees, requiring them to submit to US court jurisdiction for insider trading violations.
4. Maintain a secure, access-controlled record of all pre-clearance requests and training certifications for at least seven years, stored on a server outside the PRC.
5. Review the policy annually and within 30 days of any SEC or SFC enforcement action against a peer issuer, with amendments communicated to all insiders within 10 business days.