How to Test the Stability of a VIE Structure Before Filing for IPO

The decision by the China Securities Regulatory Commission (CSRC) to formally codify its filing regime for overseas listings in March 2023, followed by the December 2024 issuance of updated rules on data security assessments, has fundamentally altered the calculus for any company using a Variable Interest Entity (VIE) structure that intends to list in Hong Kong or the United States. Prior to this regulatory framework, a VIE’s stability was largely a matter of contractual negotiation and sponsor due diligence; today, it is a binary threshold issue for CSRC acceptance. The year 2025 has already seen at least three Hong Kong-listed VIE issuers receive specific CSRC inquiries regarding the enforceability of their VIE agreements under PRC law, a direct consequence of the regulator’s heightened scrutiny on the “controlling interest” test. For any CFO or sponsor preparing a Form A1 or F-1, the question is no longer if the VIE will be tested, but how to prove its structural integrity before the filing button is pressed. This article outlines a five-part diagnostic framework, grounded in the CSRC’s Trial Administrative Measures of Overseas Securities Offerings and Listings by Domestic Companies (2023) and the HKEX’s Listing Decision HKEX-LD100-2019, to stress-test a VIE against the three most common failure modes: regulatory denial, contractual breach, and foreign ownership restriction.

The Regulatory Foundation: Mapping the Three Failure Modes

The stability of a VIE structure is not a monolithic concept. It can be decomposed into three distinct failure modes, each with its own legal and regulatory trigger. The first mode is regulatory denial, where the competent PRC regulator (e.g., the Ministry of Industry and Information Technology for telecommunications, or the Cyberspace Administration of China for data) refuses to accept the VIE as a valid proxy for control, thereby blocking the CSRC filing. The second mode is contractual breach, where the VIE’s shareholders or the operating company itself repudiates the series of exclusive call options, technical services agreements, and equity pledge agreements that constitute the VIE. The third mode is foreign ownership restriction, where the target industry (e.g., value-added telecommunications services, online publishing, or certain medical services) is explicitly closed to foreign investment under the Special Administrative Measures (Negative List) for Foreign Investment Access (2024 edition), making the VIE the only permissible structure but also rendering it inherently fragile.

A pre-filing stability test must address all three modes. The CSRC’s 2023 filing rules, specifically Article 6 of the Trial Administrative Measures, require the issuer to demonstrate that the VIE structure “does not circumvent the regulatory requirements of the industry.” This is a direct invitation for the CSRC to review the substance of the VIE, not just its form. The HKEX’s Listing Decision LD100-2019 further clarifies that a VIE structure must be “narrowly tailored” to the specific foreign ownership restriction, and any deviation from this principle (e.g., using a VIE for a business line that could be held directly by a foreign entity) will be challenged. The first step in the stability test, therefore, is to map the issuer’s exact business lines against the Negative List, using the 2024 edition’s four-digit industry codes, and to confirm that the VIE is used only for those lines where foreign ownership is capped or prohibited. Any VIE covering a business line that could be directly held by a Hong Kong or Cayman entity is a structural defect that must be rectified before filing.

Stress-Testing the Contractual Web: The “Five Pillars” Audit

The contractual VIE agreements—typically five core contracts—form the operational backbone of the structure. A stability test must audit each agreement against three criteria: (a) whether it is enforceable under PRC law, (b) whether it has been properly notarized and registered, and (c) whether it contains a “poison pill” provision that could be triggered by a change of control at the offshore holding company level.

The first pillar is the Exclusive Call Option Agreement. This agreement grants the WFOE (Wholly Foreign-Owned Enterprise, usually incorporated in Shanghai or Beijing) the right to purchase the equity of the PRC operating company from its domestic shareholders at any time. The critical test here is the purchase price. PRC courts, as confirmed in the 2021 Guiding Case No. 96 from the Supreme People’s Court, have held that an option price that is “manifestly unfair” (e.g., nominal consideration of RMB 1) may be set aside if challenged. The stability test must ensure the option price is either a formula linked to net asset value (NAV) or a fair market value determined by a third-party appraiser, with the appraisal report dated within six months of the filing date. A nominal price structure is a red flag for both the CSRC and the HKEX.

The second pillar is the Equity Pledge Agreement. The domestic shareholders of the VIE must pledge their equity in the operating company to the WFOE. The stability test requires verification that this pledge has been properly registered with the State Administration for Market Regulation (SAMR) via its online pledge registration system. An unregistered pledge is unenforceable against third parties, including the shareholder’s other creditors. The test must also confirm that the pledge covers 100% of the VIE’s equity, and that there are no prior-ranking pledges or encumbrances. A SAMR registration certificate, with a QR code that can be scanned to verify the registration date and scope, is the only acceptable evidence.

The third pillar is the Technical Services Agreement. This is the primary profit extraction mechanism, where the WFOE charges the VIE a fee for management, technical, or intellectual property services. The stability test must ensure that the fee structure is arm’s-length and consistent with PRC transfer pricing rules under the Special Tax Adjustments chapter of the Enterprise Income Tax Law (Article 41). A fee that is a fixed percentage of revenue (e.g., 95%) will be challenged by the PRC tax authorities as a disguised dividend repatriation, and the CSRC will view this as evidence that the VIE is not a genuine operating entity. The test should include a transfer pricing documentation report prepared by a qualified PRC tax advisor, demonstrating that the fee is consistent with the comparable uncontrolled price (CUP) method.

The fourth pillar is the Power of Attorney. The domestic shareholders must grant the WFOE an irrevocable power of attorney to vote their shares. The stability test must confirm that this power of attorney is not revocable at will under PRC Civil Code Article 173, which allows revocation of a power of attorney unless it is “irrevocable by its nature.” The agreement should explicitly state that it is coupled with an interest (the WFOE’s investment in the VIE) and therefore irrevocable under PRC law. The test should also verify that the power of attorney has been notarized at a PRC notary public, as a notarized document carries higher evidentiary weight in a PRC court.

The fifth pillar is the Spousal Consent Letter. This is the most commonly overlooked element. Under PRC marital property law (Article 1062 of the Civil Code), equity interests acquired during a marriage are presumed to be joint property. A domestic shareholder who pledges or sells their VIE equity without spousal consent may later face a challenge from the spouse, who can claim that the pledge or sale was void. The stability test must require that each domestic shareholder’s spouse execute a notarized consent letter, specifically waiving any claim to the VIE equity and consenting to the pledge and future sale. The absence of spousal consent is a structural defect that can be exploited by a hostile shareholder or a divorcing spouse post-listing, and the HKEX has flagged this in at least two confidential pre-A1 feedback letters in 2024.

The “Change of Control” Cascade: Testing the Offshore-Offshore Link

A VIE structure’s stability is not solely a PRC law analysis. The offshore holding company—typically a Cayman Islands or BVI entity—must be able to exercise its rights under the VIE agreements even if there is a change of control at the offshore level. This is the “change of control” cascade problem. The stability test must trace the chain of control from the listed entity (e.g., the Hong Kong Main Board issuer) down to the WFOE, and then verify that the VIE agreements do not contain a “change of control” clause that would allow the domestic shareholders to terminate the agreements if the offshore holding company is acquired.

The test begins with the Offshore Holding Company’s Memorandum and Articles of Association (M&A) . The M&A must grant the board of directors the explicit authority to enforce the VIE agreements, and this authority must not be contingent on the identity of the shareholders. A common defect is an M&A that requires a “qualified shareholder” (e.g., a PRC citizen) to exercise the VIE rights. This defect must be removed by amending the M&A before filing.

The test then moves to the WFOE’s Board Resolutions. The WFOE, as a PRC-incorporated entity, must have board resolutions that specifically authorize its legal representative to execute and enforce the VIE agreements. These resolutions must be dated within the same fiscal year as the filing, and they must not expire upon a change of control at the holding company level. The test should also confirm that the WFOE’s legal representative is a senior executive of the offshore issuer, not a third-party nominee, to ensure alignment of interests.

The final link in the cascade is the PRC Operating Company’s Articles of Association. The VIE’s own articles must not contain any provision that would allow its domestic shareholders to veto a transfer of control at the offshore level. A standard PRC company’s articles often include a “right of first refusal” clause for existing shareholders. The stability test must ensure that this clause has been explicitly waived by the domestic shareholders in the VIE agreements, and that the waiver is recorded in the company’s SAMR-filed articles. Without this waiver, a domestic shareholder could argue that a change of control at the offshore level triggers their right of first refusal, potentially blocking the entire structure.

The CSRC Filing Readiness: The “No-Objection” Letter and the Data Security Assessment

The final and most consequential test is whether the VIE structure can survive the CSRC’s substantive review. Since the 2023 filing regime, the CSRC has issued at least 15 rounds of supplementary comments on VIE-related filings for Hong Kong listings, with the most common queries focusing on (a) the necessity of the VIE, (b) the enforceability of the agreements, and (c) the compliance with data security laws. The stability test must simulate this review by preparing a “No-Objection” Letter from the relevant PRC industry regulator.

For a VIE operating in a sector governed by the Negative List (e.g., value-added telecommunications services), the issuer must obtain a letter from the Ministry of Industry and Information Technology (MIIT) confirming that the VIE structure does not violate the foreign ownership restrictions. This is not a formal approval, but a “no-objection” statement. The test must verify that the issuer has applied for this letter at the provincial level of MIIT, and that the application has been acknowledged. The CSRC will view the absence of any communication from MIIT as a negative signal, and may require the issuer to suspend the filing until the letter is obtained.

The second component is the Data Security Assessment under the Data Security Law (2021) and the Personal Information Protection Law (2021). For any VIE that processes personal information of more than 1 million individuals, or that handles “important data” as defined by the Cyberspace Administration of China (CAC), a pre-filing data security self-assessment is mandatory. The stability test must include a completed self-assessment report, signed by the issuer’s legal representative, that identifies all data flows between the VIE, the WFOE, and the offshore holding company. The report must conclude that the VIE structure does not create a risk of unauthorized data export. The CSRC, in its December 2024 Guidelines for Overseas Listing Filing, explicitly stated that a failure to complete this assessment is a ground for rejecting the filing.

The third component is the PRC Legal Opinion. The issuer’s PRC counsel must issue a legal opinion that addresses the VIE’s stability directly. The opinion must state, with specific reference to the five pillars and the change-of-control cascade, that the VIE agreements are valid, binding, and enforceable under PRC law. The opinion must also address the Negative List and confirm that the VIE is used only for restricted business lines. The stability test should include a mock review of this opinion by a second PRC law firm, to identify any gaps or weaknesses before the opinion is filed with the CSRC.

Actionable Takeaways for the Filing Team

1. Map every business line to the 2024 Negative List’s four-digit industry codes and excise any VIE coverage of unrestricted businesses before the first draft of the A1 is circulated to the sponsor.
2. Obtain a notarized spousal consent letter from each domestic shareholder before the pre-A1 due diligence call; this is the single most common deficiency cited in CSRC supplementary comments on VIE structures.
3. Replace any nominal option price in the Exclusive Call Option Agreement with a NAV-linked formula, and attach a third-party appraisal report dated within six months of the filing date.
4. Apply for a provincial-level MIIT “no-objection” letter at least 90 days before the intended CSRC filing date, and document the application receipt number.
5. Complete the data security self-assessment and produce a signed report that maps all data flows from the VIE to the offshore entity, with a specific conclusion on the absence of “important data” export risk.