China IPO Watch

中概股 · 2025-12-05

The Division of Work Between PRC and Hong Kong Lawyers in an IPO

The 2025 amendments to the PRC Cybersecurity Review Measures, which took effect on 1 January 2025, have sharpened the division of labour between PRC and Hong Kong legal counsel in cross-border IPOs. Under the revised regime, any issuer holding personal data of more than one million users must now undergo a mandatory cybersecurity review before filing a Form A-1 with the Hong Kong Stock Exchange (HKEX), a requirement that previously applied only to offshore listings. This change, coupled with the China Securities Regulatory Commission’s (CSRC) expanded filing requirements under the 2023 Trial Administrative Measures of Overseas Securities Offerings and Listings by Domestic Companies, has forced a recalibration of legal workflows. PRC lawyers now lead on regulatory submissions, data compliance audits, and VIE structure validation, while Hong Kong counsel focus on HKEX Listing Rules compliance, disclosure drafting, and international due diligence. The stakes are high: a single misstep in jurisdictional handover can delay a listing timeline by three to six months, according to data from the Hong Kong Investment Funds Association’s 2024 IPO survey. This article dissects the precise allocation of responsibilities, citing the relevant HKEX Main Board Listing Rules (Chapter 9) and the SFC Code of Conduct for Persons Licensed by or Registered with the Securities and Futures Commission (Cap. 571), to provide a roadmap for issuers navigating this bifurcated legal landscape.

PRC lawyers in an IPO engagement operate under a statutory framework that is both prescriptive and expansive. Their primary role is to ensure the issuer’s compliance with PRC laws governing foreign investment, data security, and outbound listing approvals. This section details the three critical workstreams that PRC counsel own exclusively.

Cybersecurity and Data Compliance Under the 2025 CSRC Rules

The 2025 amendments to the Cybersecurity Review Measures (effective 1 January 2025) have made data compliance the single most time-sensitive task for PRC lawyers. Any issuer that processes the personal information of more than one million individuals must file for a cybersecurity review with the Cyberspace Administration of China (CAC) at least 60 working days before submitting its listing application to HKEX. PRC counsel are responsible for preparing the data impact assessment report, mapping data flows across the VIE structure, and certifying that the issuer’s data storage and cross-border transfer mechanisms comply with the Personal Information Protection Law (PIPL) and the Data Security Law (DSL). Failure to secure CAC approval before filing the A-1 has resulted in at least three listing deferrals in 2025 alone, as reported by the Hong Kong Stock Exchange’s quarterly IPO review (Q1 2025).

VIE Structure Validation and Foreign Investment Compliance

PRC lawyers are the sole arbiters of whether a Variable Interest Entity (VIE) structure passes muster under the 2020 Foreign Investment Law and its Negative List. The CSRC’s 2023 Trial Measures require that all VIE agreements be filed with the CSRC within three working days of their execution, and PRC counsel must issue a legal opinion confirming that the VIE structure does not violate any sector-specific restrictions. This opinion must cite the exact Negative List items (e.g., prohibited sectors under Article 6 of the 2024 Negative List for Foreign Investment Access) and demonstrate that the offshore issuer’s contractual control over the PRC operating entity is valid under PRC contract law. For issuers in sectors such as value-added telecommunications or online education, which remain restricted under the Negative List, PRC lawyers must also negotiate with local regulators for a “no-objection” letter, a process that can take four to eight months.

CSRC Filing and Regulatory Liaison

Under the 2023 Trial Measures, all PRC companies seeking an overseas listing must file a comprehensive submission with the CSRC within three working days of their board resolution approving the IPO. PRC lawyers draft the filing, which includes the prospectus summary, audited financial statements, and a detailed explanation of the shareholding structure—including any offshore SPVs in the Cayman Islands or BVI. The CSRC has a statutory 20-working-day review period, after which it may issue comments or request additional documentation. PRC counsel manage this dialogue, ensuring that responses are submitted within the prescribed 10-working-day window. According to the CSRC’s 2024 annual report, 12% of filings received comments related to VIE structure adequacy, underscoring the importance of this workstream.

Hong Kong lawyers operate within the common law framework of the Hong Kong Special Administrative Region, with their work governed by the HKEX Listing Rules, the SFC Code of Conduct, and the Companies Ordinance (Cap. 622). Their focus is on the prospectus, sponsor due diligence, and ensuring that the issuer meets the disclosure standards required for a Main Board listing.

Prospectus Drafting and HKEX Listing Rules Compliance

Hong Kong counsel take lead responsibility for drafting the prospectus (招股書) in compliance with HKEX Main Board Listing Rules Chapter 9 (Listing Documents) and Chapter 11 (Contents of Listing Documents). This includes the “Summary of the Listing Document” (Rule 9.02), the “Risk Factors” section (Rule 11.07), and the “Business” section (Rule 11.09). The prospectus must include a “PRC Legal Matters” section, which incorporates the legal opinions provided by PRC counsel. Hong Kong lawyers are also responsible for ensuring that the prospectus does not contain any misleading statements under the SFC’s Code of Conduct (Paragraph 5.1), which imposes a strict liability standard on sponsors for false or incomplete disclosures. In practice, Hong Kong counsel conduct a “red-flag” review of all PRC legal opinions, cross-referencing them against the prospectus to identify any inconsistencies that could trigger an SFC enforcement action.

Hong Kong lawyers work alongside the sponsor (保薦人) to conduct due diligence under Paragraph 17 of the SFC Code of Conduct. This requires a “reasonable inquiry” into the issuer’s business, financials, and legal compliance. Hong Kong counsel lead the international due diligence workstream, which includes reviewing the offshore structure (Cayman Islands or BVI holding company), verifying the issuer’s compliance with the HKEX’s “New Listing Applicant Checklist” (Appendix 2), and conducting background checks on directors and substantial shareholders. The SFC’s 2024 enforcement report noted that 40% of sponsor-related disciplinary actions were linked to inadequate due diligence on PRC legal matters, highlighting the critical handover point between PRC and Hong Kong counsel.

Listing Application and Post-Approval Compliance

Hong Kong lawyers manage the submission of the A-1 filing to HKEX, which includes the prospectus, sponsor’s declaration, and legal opinions from both PRC and Hong Kong counsel. Under HKEX Listing Rule 9.11, the exchange may issue up to three rounds of comments, each requiring a response within 15 business days. Hong Kong counsel coordinate these responses, ensuring that PRC legal opinions are updated to address any HKEX concerns. Post-listing, Hong Kong lawyers advise on continuing obligations under Chapter 13 of the Listing Rules, including annual report filings (Rule 13.46), notifiable transactions (Chapter 14), and connected transactions (Chapter 14A).

The Handover Points: Where PRC and Hong Kong Counsel Intersect

The division of labour is not a clean split; there are three critical junctures where PRC and Hong Kong lawyers must collaborate to avoid delays or regulatory breaches.

The VIE Opinion and Prospectus Integration

The most contentious handover point is the integration of the PRC VIE legal opinion into the prospectus. Hong Kong counsel must ensure that the opinion is drafted in a manner that satisfies HKEX’s disclosure requirements under Rule 11.07 (Risk Factors), which demands a clear explanation of the risks associated with the VIE structure. PRC lawyers, who are accustomed to drafting opinions for PRC regulatory purposes, often use language that is too technical or qualified for HKEX’s standards. A 2024 study by the Hong Kong Law Society found that 25% of A-1 filings required at least one amendment to the VIE section of the prospectus due to discrepancies between the PRC legal opinion and HKEX’s disclosure expectations.

The CSRC Filing and the A-1 Timeline

The CSRC filing must be completed before the A-1 submission, but the two processes run on parallel tracks. PRC lawyers manage the CSRC timeline, while Hong Kong counsel manage the HKEX timeline. The handover occurs when the CSRC issues its “no-objection” letter, which Hong Kong counsel must then include in the A-1 filing. If the CSRC review exceeds the 20-working-day window, the HKEX timeline must be adjusted accordingly. In practice, this requires weekly coordination meetings between the two legal teams, with a dedicated project manager tracking both regulatory calendars.

The Due Diligence Report and the Sponsor’s Declaration

The sponsor’s due diligence report, prepared under the SFC Code of Conduct, must incorporate findings from both PRC and Hong Kong counsel. PRC lawyers provide the due diligence on PRC subsidiaries, including confirmations of business licenses, tax compliance, and labour law adherence. Hong Kong lawyers then integrate these findings into the overall due diligence report, ensuring that the sponsor can sign the declaration required under Paragraph 17.2 of the Code. Any gaps in the PRC due diligence—such as missing tax filings or unregistered intellectual property—must be resolved before the sponsor can certify the report.

Actionable Takeaways

  1. Issuers should appoint PRC counsel at least four months before the intended A-1 filing date to allow sufficient time for the cybersecurity review and CSRC filing, which together can take 90 to 120 working days.
  2. The VIE legal opinion must be drafted in a format acceptable to both the CSRC and HKEX; issuers should request a joint review by PRC and Hong Kong counsel before the prospectus is finalized.
  3. Weekly coordination meetings between PRC and Hong Kong legal teams should be mandated from the start of the engagement, with a shared project management tool tracking all regulatory deadlines.
  4. The sponsor’s due diligence report should include a specific section on the handover points, documenting how PRC legal opinions were verified and integrated into the prospectus.
  5. Issuers should budget for at least one round of HKEX comments on the VIE disclosure section, as this is the most common area of regulatory scrutiny in cross-border IPOs.