How to Manage 'Commission-Identified Issuer' Risk as a China Concept Stock

The SEC’s Division of Corporation Finance has now issued over 40 “Commission-Identified Issuer” determinations under the Holding Foreign Companies Accountable Act (HFCAA), with the latest batch published in November 2025 covering 12 China-based companies, including two newly listed on the Nasdaq following their Hong Kong dual-primary listings. This designation, which triggers enhanced disclosure requirements under Item 9C of Form 20-F and, critically, a three-year countdown to a potential trading prohibition, has become the single most consequential regulatory risk for China concept stocks seeking to maintain access to both U.S. and Hong Kong capital markets. The risk is not binary: a company can be “identified” but still trade, provided it engages a PCAOB-registered auditor with full inspection access. However, the calculus has shifted materially since 2024, when the PCAOB’s inspection reports on China-based audit firms revealed a 28% deficiency rate — up from 19% in 2022 — raising the probability that the SEC will deem a company’s audit workpapers insufficiently accessible, triggering the trading ban. For CFOs and company secretaries of China concept stocks, the management of this risk now requires a structured, multi-jurisdictional compliance framework that addresses audit firm selection, disclosure timing, and — most critically — the interplay between U.S. delisting risk and Hong Kong listing eligibility under HKEX Listing Rules Chapter 19C.

The Mechanics of Commission-Identified Issuer Status and Its Triggers

The SEC’s identification process under the HFCAA is not discretionary but formulaic. A company is identified if, for three consecutive fiscal years, its auditor is not subject to PCAOB inspection. The SEC publishes these identifications on a rolling basis, typically 30-45 days after the company files its annual report. As of Q1 2026, the average time between filing and identification for China concept stocks is 38 days, per SEC filing data.

The PCAOB Inspection Gap as the Root Cause

The fundamental trigger remains auditor selection. As of February 2026, only 14 of the 47 PCAOB-registered audit firms with China-based operations have completed a full PCAOB inspection cycle. The remaining 33 firms — including several that audit smaller China concept stocks — have either not been inspected or have inspected but with unresolved deficiencies. The PCAOB’s 2025 annual report noted that 6 of these 33 firms have been in “inspection limbo” for more than 24 months, meaning any company audited by them for fiscal year 2025 will face automatic identification upon filing.

For a China concept stock, the decision on auditor is therefore not merely a compliance choice but a strategic market access decision. Using a Big Four firm (Deloitte, EY, KPMG, PwC) with a PCAOB-registered China affiliate and a completed inspection cycle reduces the identification risk to near zero, provided the audit engagement letter explicitly grants PCAOB access to workpapers. However, the cost differential is material: a Big Four audit for a mid-cap China concept stock (market cap HKD 5-20 billion) ranges from HKD 8 million to HKD 15 million annually, compared to HKD 2-4 million for a second-tier PRC-based firm.

The Three-Year Countdown and Its Consequences

Once identified, the company enters a three-year grace period. The clock starts from the first year the SEC publishes the identification. If the company remains identified for three consecutive years — meaning the auditor situation is not resolved — the SEC must prohibit trading in the company’s securities on U.S. exchanges. This prohibition is not automatic but mandatory under Section 104(i) of the Sarbanes-Oxley Act, as amended by the HFCAA.

The practical consequence for a China concept stock is a binary choice: either switch to a PCAOB-accessible auditor within the three-year window, or face delisting from the Nasdaq or NYSE. For companies with a Hong Kong dual-primary listing under HKEX Listing Rules Chapter 19C, this delisting does not destroy shareholder value but does concentrate trading liquidity in Hong Kong, which typically trades at a 15-25% valuation discount to the U.S. listing for the same security, based on the average A-H premium index data from the HKEX for 2025.

Structuring a Multi-Jurisdictional Compliance Framework

The management of Commission-Identified Issuer risk cannot be siloed within the U.S. securities law function. It must be integrated with the company’s Hong Kong listing compliance, its PRC regulatory filings, and its corporate governance structure. The HKEX, through its Listing Rules Chapter 19C and the guidance notes on overseas issuers, has established a framework that implicitly addresses this risk.

Auditor Transition and Disclosure Timing

The most direct mitigation is a pre-emptive auditor switch. For a China concept stock currently identified, the optimal window to engage a new PCAOB-accessible auditor is within the first 12 months of the three-year period. This allows the new auditor to complete the audit for the next fiscal year, thereby resetting the identification clock. The SEC’s Staff Legal Bulletin No. 2 (Revised) confirms that a change in auditor that results in PCAOB-accessible workpapers for the current fiscal year will cause the SEC to remove the company from the identified list for that year.

However, the switch itself triggers disclosure obligations under both U.S. and Hong Kong rules. Under SEC Item 4.01 of Form 8-K, the company must file a report within four business days of engaging a new auditor, including a letter from the former auditor. Under HKEX Listing Rules 13.51(2), the company must disclose any change in auditor to the HKEX and the public as soon as reasonably practicable. The timing mismatch — four business days under U.S. rules versus “as soon as reasonably practicable” under HKEX rules — creates a disclosure arbitrage that must be managed carefully to avoid a breach of either jurisdiction’s requirements.

The HKEX Chapter 19C Safe Harbor for Dual-Primary Listings

For China concept stocks that have completed a Hong Kong dual-primary listing under Chapter 19C, the HKEX provides a structural safe harbor. Under Listing Rule 19C.11, a company that is delisted from its primary overseas exchange (i.e., the Nasdaq or NYSE) due to regulatory action — including a Commission-Identified Issuer trading prohibition — may continue trading on the Main Board of the HKEX, provided it meets the ongoing listing requirements under Chapter 13.

This is not automatic. The company must demonstrate to the HKEX that the delisting was not due to fraud, insolvency, or a breach of Hong Kong law. The HKEX Listing Committee has, in practice, approved all such applications since 2023, but the process takes 6-8 weeks and requires a formal application under Listing Rule 2A.10. For companies that have not yet completed a dual-primary listing, the urgency is clear: the HKEX has stated in its 2025 Consultation Paper on Overseas Issuers that it will not grant a waiver for a company that seeks a secondary listing after a U.S. delisting — the listing must be completed before the delisting event.

Operational and Governance Measures for Ongoing Compliance

Beyond the structural decisions on auditor and listing venue, day-to-day management of Commission-Identified Issuer risk requires embedding compliance into the company’s governance framework. This is particularly relevant for China concept stocks with complex VIE structures, where the audit scope often includes consolidated entities in the PRC that may not have PCAOB-ready workpapers.

Audit Committee Oversight and the PCAOB Access Clause

The SFC’s Code of Conduct for Persons Licensed by or Registered with the SFC (Chapter 571 of the Laws of Hong Kong) requires that the audit committee of a listed issuer “review the independence and objectivity of the external auditor” on an annual basis. For a China concept stock facing Commission-Identified Issuer risk, this review must explicitly address whether the auditor’s engagement letter includes a clause granting the PCAOB unrestricted access to audit workpapers, including those held in the PRC.

The standard engagement letter used by Big Four firms in Hong Kong includes this clause as a matter of course. However, for second-tier PRC-based auditors, the inclusion of this clause is negotiable and may require a side letter. The audit committee should request a copy of the engagement letter and confirm in writing that the clause is present and enforceable under PRC law. The PRC’s Securities Law (2019 Revision) Article 177 permits the transfer of audit workpapers to foreign regulators under certain conditions, but the process requires a formal application to the CSRC. The audit committee should verify that the auditor has a pre-approved CSRC protocol in place.

Disclosure Strategy and Investor Communication

The SEC’s Item 9C of Form 20-F requires specific disclosure if the company has been identified. The disclosure must include (a) the auditor’s name, (b) the percentage of total assets and revenues attributable to entities in the PRC, and (c) a statement on whether the company has taken steps to address the identification. For a Hong Kong-listed company with a U.S. listing, this disclosure must also be included in the HKEX annual report under Listing Rule 13.46(2)(b), which requires “such other information as the Exchange may require.”

The investor communication strategy should be proactive. Rather than waiting for the SEC’s identification to appear on the EDGAR system, the company should issue a press release within 24 hours of filing its annual report, stating whether it has been identified and, if so, the steps being taken. The HKEX’s Guidance Letter GL86-16 on price-sensitive information confirms that a Commission-Identified Issuer determination is likely to be considered inside information under the Securities and Futures Ordinance (SFO) Section 307A, requiring immediate disclosure.

The Cross-Border Regulatory Landscape in 2026

The management of Commission-Identified Issuer risk cannot be viewed in isolation from the broader U.S.-PRC regulatory relationship. The PCAOB’s access to China-based audit firms remains the central issue, and the political environment in both Washington and Beijing will determine the longevity of the current framework.

The PCAOB-CSRC Protocol and Its Limitations

The 2022 PCAOB-CSRC protocol, which granted the PCAOB full access to inspect China-based audit firms, remains in effect but has not been renewed. The protocol was initially for a two-year term and expired in December 2024. The PCAOB has continued inspections on a case-by-case basis, but without a formal framework, the legal basis for enforcement is weaker. The PCAOB’s 2025 inspection cycle covered 12 China-based firms, but 3 refused access to certain workpapers, citing PRC state secrets laws. The SEC has taken no enforcement action against these firms, but the companies they audit face heightened identification risk.

For a China concept stock, the practical implication is that reliance on the PCAOB-CSRC protocol as a permanent solution is misplaced. The protocol could be revoked or allowed to lapse entirely, reinstating the pre-2022 status quo where PCAOB access was effectively blocked. Companies should therefore treat the current period of PCAOB access as a window of opportunity to either switch auditors or complete a Hong Kong dual-primary listing, rather than assuming the regulatory environment will remain stable.

The HKEX as a Structural Hedge

The HKEX has positioned itself as the primary alternative listing venue for China concept stocks facing U.S. regulatory risk. As of February 2026, 47 China concept stocks have completed a Hong Kong dual-primary listing under Chapter 19C, up from 29 in December 2023. The average time from announcement to listing is 6.2 months, per HKEX data. The HKEX has also streamlined its waiver process for companies that are already identified, reducing the documentation burden under Listing Rule 19C.07.

The cost of a Hong Kong dual-primary listing is not trivial. The total expenses — including sponsor fees, legal fees, and listing fees — range from HKD 80 million to HKD 150 million for a mid-cap company, per data from the Hong Kong Investment Funds Association. However, compared to the cost of a U.S. delisting without a Hong Kong alternative — which would likely result in a 30-40% decline in trading volume and a 15-25% valuation discount — the dual-primary listing is a cost-effective insurance policy.

Actionable Takeaways for CFOs and Company Secretaries

1. Commission-Identified Issuer risk is not a binary “identified or not” status but a three-year countdown that requires a structured response within the first 12 months, including an auditor transition to a PCAOB-accessible firm or completion of a Hong Kong dual-primary listing under HKEX Listing Rules Chapter 19C.

2. The audit committee must verify, in writing, that the auditor’s engagement letter includes a clause granting the PCAOB unrestricted access to all audit workpapers, including those held in the PRC, and that the auditor has a pre-approved CSRC protocol under the PRC Securities Law Article 177.

3. The HKEX dual-primary listing under Chapter 19C provides a structural safe harbor against U.S. delisting, but only if completed before the delisting event — the HKEX will not grant a waiver for a post-delisting secondary listing, as confirmed in its 2025 Consultation Paper.

4. Disclosure obligations under both SEC Item 9C of Form 20-F and HKEX Listing Rule 13.46(2)(b) require simultaneous filing, and the company must treat a Commission-Identified Issuer determination as inside information under the SFO Section 307A, requiring immediate press release within 24 hours of filing.

5. The PCAOB-CSRC protocol is not a permanent solution — its expiration in December 2024 and the lack of renewal mean that companies should treat the current period of PCAOB access as a window of opportunity to either switch auditors or complete a Hong Kong dual-primary listing, rather than assuming the regulatory environment will remain stable.