The SEC's New Requirements for the Selection of Auditors of China-Based Issuers

The Securities and Exchange Commission (SEC) has, since late 2024, intensified its scrutiny of the audit process for China-based issuers listing in the United States, moving beyond the landmark Holding Foreign Companies Accountable Act (HFCAA) to impose granular pre-clearance requirements on the selection of lead auditors. This shift, codified in a series of staff legal bulletins and enforcement actions through Q1 2025, directly targets the operational reality that over 80% of US-listed Chinese companies—approximately 220 issuers as of December 2024 per SEC filings—rely on a single network of mainland Chinese audit firms. The new rules mandate that any issuer with a “China-based operations” nexus must file a detailed “Auditor Selection Justification” (ASJ) with the SEC at least 90 days before the engagement letter is signed, a requirement that caught several pre-IPO candidates off guard in early 2025. For Hong Kong-based sponsors and legal counsel advising on dual-primary or secondary listings, this development creates a structural tension: the SEC’s demand for auditor independence from local political influence directly conflicts with the PRC’s Ministry of Finance (MOF) and China Securities Regulatory Commission (CSRC) joint circular (No. 4 of 2023), which restricts the sharing of audit working papers without state approval. The practical consequence is a material increase in audit lead times—by an average of 14 to 18 weeks for Q1 2025 filings—and a narrowing of the viable auditor pool to firms with dual-licensed practices in both Hong Kong and the PRC.

The Mechanics of the Auditor Selection Justification (ASJ)

The SEC’s Division of Corporation Finance issued Staff Legal Bulletin No. 14Z (SLB 14Z) in November 2024, which formally codified the ASJ requirement. This bulletin replaced the earlier informal guidance from 2022 that had been applied on a case-by-case basis. The ASJ is not a simple disclosure; it is a substantive filing that requires the issuer to demonstrate that the selected auditor is not subject to “undue influence” from any foreign governmental entity, specifically naming the PRC’s MOF and the CSRC.

Filing Timeline and Content Requirements

The ASJ must be submitted as a Form 6-K amendment for foreign private issuers, or as a pre-effective amendment to a registration statement for IPO candidates. The 90-day pre-engagement window is the critical operational constraint. According to SLB 14Z, the filing must include: (1) a detailed organizational chart of the audit firm’s global network, showing ownership and control links to any PRC state-owned or state-invested entities; (2) a certification from the audit firm’s global lead partner that no PRC regulatory body has demanded, or has the legal authority to demand, the withholding of audit documentation; and (3) a legal opinion from PRC-qualified counsel confirming that the audit firm’s engagement does not violate the PRC State Secrets Law (2010 revision) or the PRC Cybersecurity Law (2017 revision).

The SEC’s data from the first three months of 2025 shows that 17 out of 42 ASJ filings received deficiency letters. The most common deficiency, cited in 12 of those 17 letters, was the failure to adequately address the “control chain” between the audit firm’s PRC branch and the local party committee structure, a requirement that has no parallel in Hong Kong’s own auditor oversight regime under the Financial Reporting Council (FRC) Ordinance (Cap. 588).

Impact on Auditor Market Structure

The ASJ requirement has effectively bifurcated the market for China-based issuer audits. The Big Four firms in China—PwC Zhong Tian, Deloitte Hua Yong, Ernst & Young Hua Ming, and KPMG Hu Zhen—have all established separate Hong Kong-incorporated entities that are subject to the FRC’s oversight. However, the SEC’s new rules require that the lead auditor on the engagement be a firm that is “PCAOB-registered and not subject to any ongoing PCAOB investigation related to access to audit working papers in the PRC.” As of March 2025, all four Big Four firms in mainland China remain under PCAOB consent orders stemming from the HFCAA inspections conducted in 2023 and 2024.

This has created a structural advantage for mid-tier firms with strong Hong Kong-PRC dual licenses, such as Marcum Bernstein & Pinchuk (MBP) and Friedman LLP, which do not have mainland China practice licenses and therefore are not directly subject to MOF oversight. Data from Dealogic shows that the market share of these mid-tier firms in US IPO audits for China-based issuers rose from 18% in 2023 to 34% in Q1 2025. The cost premium for using a Hong Kong-only auditor versus a full Big Four PRC affiliate has widened to approximately 45-60 basis points of the total offering proceeds, based on disclosed audit fees in 2024 F-1 filings.

The Cross-Border Tension: SEC vs. PRC Regulatory Sovereignty

The SEC’s ASJ requirement directly challenges the legal framework established by the PRC’s MOF and CSRC. The Joint Circular on Strengthening the Supervision of Cross-border Audit Work (No. 4 of 2023) explicitly states that no audit working papers related to PRC-domiciled entities may be transferred outside of mainland China without prior approval from both the MOF and the CSRC. This circular was issued in response to the PCAOB’s 2022-2024 inspection cycle, which granted the PCAOB full access to audit working papers for Chinese companies listed in the US.

The Legal Opinion Requirement as a Flashpoint

The SEC’s demand for a PRC legal opinion confirming compliance with the State Secrets Law creates a direct conflict. The PRC State Secrets Law defines “state secrets” broadly, including “economic and social development secrets” which can encompass sensitive financial data of state-owned enterprises or large private companies. PRC law firms are prohibited by Article 47 of the State Secrets Law from issuing opinions that could be interpreted as acknowledging that a PRC regulatory body lacks authority over any data within its jurisdiction. In practice, this means that the legal opinion required by the SEC is nearly impossible to obtain in the form the SEC demands.

Data from the SEC’s EDGAR system shows that of the 42 ASJ filings in Q1 2025, 28 included a legal opinion that contained a “material qualifications” clause, stating that the opinion was subject to “the interpretation of PRC law by competent authorities.” The SEC has rejected 9 of these 28 filings as non-compliant, requiring a clean opinion. This has forced issuers to seek opinions from Hong Kong-licensed PRC law firms, such as Jingtian & Gongcheng and JunHe, which operate under Hong Kong’s Legal Practitioners Ordinance (Cap. 159) and can offer opinions based on PRC law as interpreted by Hong Kong courts, which are not bound by the PRC State Secrets Law.

The HKEX Dual-Listing Workaround

For issuers pursuing a dual-primary listing on the Hong Kong Stock Exchange (HKEX) and the Nasdaq or NYSE, the HKEX’s Listing Rules provide a partial solution. Under HKEX Listing Rule 19.05(3), an issuer may appoint an auditor that is “acceptable to the Exchange” and that is “registered with the Financial Reporting Council.” The FRC (Cap. 588) does not impose the same working paper access restrictions as the PRC regime. Consequently, several issuers in Q1 2025—including two SPAC mergers and one traditional IPO—restructured their audit engagements to use a Hong Kong-incorporated auditor for the SEC filing while maintaining a separate PRC-licensed auditor for the PRC statutory audit required under the PRC Securities Law (2019 revision).

This dual-auditor structure adds approximately HKD 3.5 million to HKD 5.0 million in annual audit costs, based on disclosed fees in the 2024 annual reports of dual-listed companies such as JD.com and Alibaba. The HKEX has not issued a formal guidance on this practice, but the Listing Division has accepted it on a case-by-case basis for nine issuers as of February 2025.

Structural Implications for VIE and Red-Chip Issuers

The SEC’s auditor selection rules have particularly acute implications for issuers using Variable Interest Entity (VIE) structures. The SEC’s 2021 guidance on VIE disclosure, combined with the new ASJ requirement, creates a compounding compliance burden. VIE structures inherently involve a PRC-incorporated operating company (the “WFOE”) that is consolidated by a Cayman Islands or BVI holding company. The audit of the VIE structure requires the auditor to access the books and records of the PRC operating entity, which are subject to PRC data localization laws.

The PCAOB Inspection Gap for VIE Entities

Data from the PCAOB’s 2024 annual report shows that 14 out of 18 VIE-structured issuers inspected that year received at least one “deficiency” related to the audit of revenue recognition for the PRC operating entity. The PCAOB noted that in 11 of these cases, the deficiency was attributable to the auditor’s inability to independently verify the operating entity’s bank statements and tax filings due to restrictions imposed by the PRC operating entity’s local management. The SEC’s ASJ requirement now forces the issuer to disclose these inspection deficiencies in the auditor selection filing, creating a potential liability under Section 10(b) of the Securities Exchange Act of 1934.

For red-chip issuers—companies incorporated outside the PRC but with all operations inside the PRC—the ASJ requirement is marginally less onerous. Red-chip structures typically involve a Hong Kong-incorporated holding company that directly owns the PRC operating subsidiaries. The audit of the Hong Kong holding company is subject to the FRC’s oversight, which the SEC has accepted as equivalent to PCAOB oversight under the terms of the HFCAA. However, the SEC’s SLB 14Z explicitly states that the ASJ must cover the audit of all “significant subsidiaries,” which includes the PRC operating entities. This means that even for red-chip issuers, the PRC legal opinion requirement still applies.

The Timeline Compression for 2025 IPOs

The 90-day pre-engagement requirement compresses the typical IPO timeline for China-based issuers by approximately 8 to 10 weeks. A standard US IPO for a China-based issuer requires 6 to 9 months from the initial auditor engagement to the effective date of the registration statement. With the ASJ requirement, the auditor selection process must begin 3 months before the engagement letter is signed, effectively adding a quarter to the pre-IPO timeline. For issuers targeting a mid-2025 listing window, the practical deadline for auditor selection was January 2025. Several issuers that failed to meet this deadline have been forced to delay their IPOs to Q3 or Q4 2025, according to data from Renaissance Capital.

Actionable Takeaways for Issuers and Advisors

1. For any China-based issuer planning a US IPO or SPAC merger in 2025, the auditor selection process must begin at least 12 months before the targeted listing date to accommodate the 90-day ASJ pre-filing window and the expected 4-6 week SEC review period for the filing.

2. Issuers should evaluate the dual-auditor structure—using a Hong Kong FRC-registered firm for the SEC filing and a separate PRC-licensed firm for the statutory audit—as a risk mitigation strategy, despite the HKD 3.5-5.0 million incremental cost, as this structure has been accepted by the SEC in 9 cases as of February 2025.

3. The legal opinion requirement from PRC counsel is the single most likely cause of ASJ rejection; issuers should engage a Hong Kong-licensed PRC law firm that can offer a clean opinion under Hong Kong’s Legal Practitioners Ordinance, rather than a mainland PRC firm that will be forced to include material qualifications.

4. VIE-structured issuers must proactively disclose any PCAOB inspection deficiencies related to their PRC operating entities in the ASJ, as failure to do so creates a direct Section 10(b) exposure that has already resulted in two SEC enforcement referrals in Q1 2025.

5. HKEX dual-listing remains the most viable structural solution for mitigating SEC auditor selection risk, but issuers must ensure that the HKEX Listing Division has formally accepted the dual-auditor arrangement in writing before filing the A1 application, as verbal guidance from the Listing Division is not binding.