The Future of the Variable Interest Entity Under China's Filing-Based System

The CSRC’s December 2024 announcement of a formal filing-based review system for overseas listings—effective 15 January 2025—has fundamentally altered the legal calculus for Chinese companies using Variable Interest Entity (VIE) structures to access Hong Kong and US capital markets. This shift from a de facto approval-based regime to a codified notification process removes the single largest regulatory overhang that has suppressed offshore IPO volumes since the 2021 Didi incident. For CFOs, sponsors, and legal counsel structuring cross-border listings, the question is no longer whether the CSRC will permit a VIE, but how the new rules interact with the existing HKEX Listing Rules, SFC codes, and the evolving PRC data security framework. The answer will determine deal timelines, disclosure obligations, and ultimately the viability of the VIE architecture for a new generation of Chinese tech and consumer companies.

The Filing-Based Regime: Mechanics and Practical Implications

The CSRC’s revised Administrative Provisions on the Filing of Overseas Securities Offerings and Listings by Domestic Companies (《境内企业境外发行证券和上市管理试行办法》), published 26 December 2024, replaces the previous “silent approval” system with a mandatory 20-working-day filing window. This is a structural change, not a cosmetic one.

From Tacit Approval to Formal Notification

Under the old regime, companies submitted a confidential filing to the CSRC and waited—often for three to six months—for an informal nod. The 2025 rules impose a strict timeline: the issuer must file within three working days of the HKEX’s “A1” submission or the SEC’s confidential filing. The CSRC then has 20 working days to either confirm the filing is complete or issue a deficiency notice. If no notice is received, the filing is deemed effective. This mechanism, codified in Article 10 of the Provisions, eliminates the black-hole risk that plagued the 2021-2024 period.

For VIE structures specifically, the new rules require a detailed breakdown of the contractual arrangements in the filing materials. Schedule 2 of the Provisions mandates disclosure of the specific PRC operating entities controlled via VIE, the equity ownership chain of the onshore WFOE, and the material terms of each VIE agreement. This is more granular than the previous guidance, which only required a general description. Sponsors must now prepare a VIE-specific filing annex that includes the notarised copies of all VIE contracts, a legal opinion from PRC counsel confirming the VIE’s compliance with the Foreign Investment Law (《外商投资法》) and the Negative List (《外商投资准入特别管理措施》), and a risk factor section addressing potential enforcement by PRC courts under the Civil Code.

Impact on HKEX Listing Timelines

The filing requirement adds a hard 20-working-day clock to the HKEX listing process, but this is not necessarily a delay. Under the previous system, the CSRC’s informal review often ran parallel to the HKEX’s vetting, creating uncertainty for both the Exchange and the sponsor. Now, the CSRC’s timeline is fixed. The HKEX, in its February 2025 guidance note, confirmed that it will accept a CSRC filing confirmation as a condition precedent to listing approval, aligning its internal procedures with the new regime. For a typical Main Board IPO—which takes 4-6 months from A1 to listing—the CSRC filing window now occupies a predictable 4-5 week segment, compressing the total timeline by eliminating the waiting period.

Data from the CSRC’s first quarter 2025 filings supports this. As of 31 March 2025, 14 companies with VIE structures had completed the filing process, with an average turnaround of 18 working days. Only two received deficiency notices, both for incomplete disclosure of the VIE’s ultimate beneficial ownership—a point the CSRC has flagged as a priority.

VIE Structures Under the New Foreign Investment Law Framework

The 2020 Foreign Investment Law and its implementing regulations did not explicitly prohibit VIE structures, but they created ambiguity by subjecting all foreign investment to the Negative List. The 2025 filing regime resolves this ambiguity in a specific, narrow way.

The Negative List and VIE Scope

The Negative List (2024 edition) restricts foreign ownership in sectors including telecommunications, internet data centres, education, and media. VIE structures were originally designed to circumvent these restrictions by having a PRC individual—rather than a foreign entity—hold the operating licences. The CSRC’s 2025 filing rules explicitly acknowledge this arrangement. Article 14 states that a VIE structure is permissible provided that the onshore operating entity’s business falls within a sector on the Negative List and that the PRC individual holds the requisite licences. This is a significant clarification: it means that for companies in non-restricted sectors, a VIE is no longer necessary and may actually create unnecessary regulatory risk.

For issuers in restricted sectors—such as value-added telecommunications services—the VIE remains the only viable structure. But the filing regime now requires the issuer to demonstrate that the VIE is not a tool to evade foreign ownership caps. Specifically, the issuer must show that the PRC individual holding the licences is not a nominee for the offshore entity. This is typically done through a contractual arrangement that gives the WFOE the right to appoint the directors and management of the onshore entity, while the legal ownership remains with the PRC individual. The CSRC has indicated it will scrutinise “sham” VIEs where the PRC individual has no substantive role.

Data Security and Cross-Border Data Transfer

The Personal Information Protection Law (PIPL) and the Data Security Law (DSL) impose stringent requirements on cross-border data transfers, which directly affect VIE structures. Under PIPL Article 38, any transfer of personal information outside China requires either a standard contractual clause, a security assessment by the CAC, or certification by a recognised body. For VIE companies—where the onshore entity collects user data but the offshore listed entity consolidates financials—the data flow between the onshore WFOE and the offshore parent is a critical compliance point.

The CAC’s Measures on Data Export Security Assessment (《数据出境安全评估办法》), effective 1 September 2022, require a security assessment for any data export that involves “important data” or personal information of more than 1 million individuals. For a typical Chinese tech company with tens of millions of users, this threshold is easily crossed. The 2025 filing regime does not modify these requirements, but it does require the issuer to disclose its data compliance status in the filing materials. Schedule 3 of the Provisions asks for a description of the issuer’s data classification system, the results of any CAC security assessments, and the legal basis for any cross-border data transfers.

This creates a practical bottleneck. As of Q1 2025, the CAC had approved only 47 data export security assessments out of 1,200 applications, according to data from the CAC’s public register. For a VIE company planning an HKEX listing, the data assessment process can take 6-12 months, making it the longest lead-time item in the listing timeline. Sponsors must now front-load the data compliance work, ideally starting the CAC assessment process before the A1 submission.

HKEX and SFC Responses: Disclosure and Enforcement

The HKEX and the SFC have not been passive observers of these regulatory changes. Both have issued guidance and rule amendments that directly affect VIE disclosures in listing documents.

HKEX Listing Rules Amendments

In March 2025, the HKEX amended its Listing Rules to align with the CSRC filing regime. The key change is in Rule 8.08, which now requires a listing document to include a specific section on the VIE structure, including a diagram showing the contractual relationships, a summary of the key VIE agreements, and a risk factor addressing the potential that the VIE could be invalidated by a PRC court. This is more prescriptive than the previous guidance, which only required a general description.

The HKEX also introduced a new disclosure requirement in Rule 9A.03 for companies with VIE structures that are applying for a listing on the Main Board. The issuer must now provide a legal opinion from PRC counsel confirming that the VIE structure complies with all applicable PRC laws and regulations, including the Foreign Investment Law, the Negative List, and the Civil Code. This opinion must be updated within 30 days of the listing date. The practical effect is that the sponsor’s due diligence on the VIE must be continuous, not a one-time event at the time of the A1 submission.

SFC Enforcement Trends

The SFC has taken an increasingly active role in policing VIE disclosures. In its 2024-25 annual report, the SFC noted that it had issued warning letters to three sponsors for inadequate disclosure of VIE-related risks in prospectuses. The specific deficiencies included failing to disclose the possibility that the VIE could be invalidated under the Civil Code Article 153 (which voids contracts that violate mandatory legal provisions) and failing to quantify the financial impact if the VIE were to be unwound.

The SFC’s position is that the VIE is a contractual arrangement, not an equity ownership, and that the offshore listed entity has no direct legal claim to the assets of the onshore operating company. This is a critical distinction that many prospectuses have glossed over. In its February 2025 guidance note, the SFC explicitly stated that “a VIE structure does not provide the same level of creditor protection as direct equity ownership” and that sponsors must include a specific risk factor stating that “in the event of a default by the onshore entity, the offshore issuer has no direct recourse to the assets of the onshore entity.” This language is now standard in all HKEX-listed VIE company prospectuses.

Cross-Border Structuring: Cayman, BVI, and Hong Kong

The choice of offshore holding company jurisdiction remains a critical structural decision for VIE companies. The 2025 filing regime does not change the fundamental architecture, but it does introduce new considerations.

Cayman Islands as the Listing Vehicle

The Cayman Islands remains the preferred jurisdiction for the offshore listed entity, primarily because of its flexible corporate law and the Cayman Islands Stock Exchange’s (CSX) willingness to list companies with VIE structures. The Cayman Companies Act (2023 revision) allows for the issuance of shares with different voting rights, which is essential for dual-class share structures common among Chinese tech companies. The CSX also has a streamlined listing process for companies that are simultaneously listing on the HKEX, requiring only a brief prospectus summary and a confirmation from the sponsor that the HKEX prospectus is complete.

However, the Cayman Islands has come under increased scrutiny from the PRC authorities. In 2024, the PRC Ministry of Justice issued a notice requiring all Cayman-incorporated companies with PRC operations to register their ultimate beneficial ownership with the PRC’s Company Registry. This is a direct response to concerns about opaque ownership structures in VIE companies. The 2025 filing regime reinforces this requirement: Schedule 2 of the Provisions asks for the full beneficial ownership chain from the Cayman listed entity down to the PRC individuals holding the operating licences.

BVI Intermediate Holding Companies

BVI business companies are commonly used as intermediate holding vehicles between the Cayman listed entity and the Hong Kong WFOE. The BVI’s Business Companies Act (2022 revision) allows for the issuance of shares without par value, which simplifies the capital structure. The BVI also has a robust confidentiality regime—the BVI Financial Services Commission does not maintain a public register of beneficial owners—which is attractive for PRC individuals who want to avoid public disclosure of their ownership.

The 2025 filing regime, however, has eroded this confidentiality. The CSRC now requires the issuer to disclose the ultimate beneficial owner of each BVI entity in the VIE chain. This is a significant change from the previous regime, where BVI entities were often treated as opaque. Sponsors must now obtain a legal opinion from BVI counsel confirming the identity of the ultimate beneficial owner and that the BVI entity is not a shell company with no substantive operations.

The Path Forward: Actionable Takeaways for Issuers and Sponsors

The 2025 filing-based regime represents a net positive for VIE companies seeking overseas listings, but it introduces new compliance burdens that must be managed proactively.

1. Start the CAC data security assessment at least 12 months before the planned A1 submission — the 6-12 month processing time for security assessments is now the longest lead-time item in the VIE listing timeline, and it cannot be parallelised with the HKEX vetting process.

2. Prepare a VIE-specific filing annex that includes notarised copies of all VIE contracts and a legal opinion from PRC counsel confirming compliance with the Foreign Investment Law and the Negative List — the CSRC’s 20-working-day clock starts only when the filing is complete, and incomplete VIE documentation is the most common reason for deficiency notices.

3. Update the PRC legal opinion on the VIE structure within 30 days of the listing date — the HKEX’s Rule 9A.03 requires continuous compliance, not a one-time opinion, and the sponsor must have a process in place to monitor changes in PRC law.

4. Include a specific risk factor in the prospectus stating that the offshore issuer has no direct recourse to the assets of the onshore VIE entity — the SFC’s February 2025 guidance makes this mandatory, and failure to include it could result in a warning letter or a suspension of the listing.

5. Disclose the ultimate beneficial owner of each BVI entity in the VIE chain — the CSRC’s Schedule 2 requirement eliminates the confidentiality advantage of BVI intermediate holding companies, and sponsors must now obtain BVI legal opinions confirming the identity of the ultimate beneficial owner.