Principal Business Forms

The principal forms of business organisation in Hong Kong are:

• companies limited by shares;
• companies limited by guarantee;
• sole proprietorships; and
• partnerships.

In commercial practice, the most common vehicle for carrying on business is a private company limited by shares incorporated under the Companies Ordinance. It provides separate legal personality, limited liability and a flexible structure for ownership and management.

Companies limited by guarantee are commonly used for charities, clubs, trade associations and other non-profit organisations. They do not have share capital. Members undertake to contribute up to a specified amount if the company is wound up and to that extent liability is limited.

Sole proprietorships are usually for small-scale businesses, while partnerships are common for specific professions (eg, solicitors and accountants).

Overseas companies may also register in Hong Kong as registered non-Hong Kong companies if they establish a place of business in Hong Kong. They remain incorporated under their home country, but must comply with Hong Kong registration, filing and disclosure obligations. This will commonly be the case for companies listed in Hong Kong but are incorporated in one of the offshore jurisdictions (BVI, Cayman Islands, etc).

Principal Sources of Governance Requirements

The principal source of corporate governance requirements is the Companies Ordinance. It covers essentially all matters associated with limited companies, from incorporation, corporate capacity, directors, company secretaries, share capital, registers, accounts, audits, shareholder meetings, statutory filings to shareholder remedies.

A company’s articles of association are also important. They are regarded as internal contracts between the company and its shareholders (and also amongst the shareholders themselves), which regulate the internal relationship between the company, its shareholders and directors. They usually deal with board powers, shareholder meetings, share transfers, dividends, director appointments and the conduct of board meetings.

The common law and equitable principles remain important. They impose duties on directors, including duties to act in good faith in the interests of the company, to exercise powers for proper purposes, to avoid conflicts of interest and to exercise reasonable care, skill and diligence.

Publicly Traded Companies

Companies whose shares are listed on The Stock Exchange of Hong Kong Limited are subject to additional governance requirements under the Listing Rules, the Corporate Governance Code, the ESG (Environmental, Social and Governance) Reporting Code and the Securities and Futures Ordinance.

These requirements address matters such as:

• board composition;
• independent non-executive directors;
• audit, remuneration and nomination committees;
• disclosure of inside information;
• financial reporting;
• connected transactions;
• notifiable transactions;
• shareholder approval requirements;
• voting by poll; and
• corporate governance and ESG reporting.

For listed companies, corporate governance is not treated as a purely internal matter. It is part of the investor protection framework. The board is expected to be accountable to shareholders, supervise management, maintain effective internal controls and provide transparent public disclosure.

Companies Ordinance

The Companies Ordinance is the core statute governing Hong Kong companies. It regulates incorporation, corporate capacity, directors, company secretaries, share capital, registers, accounts, audits, shareholder meetings, statutory filings and shareholder remedies (including inspection rights).

Articles of Association

The articles of association are the company’s constitution. They form a statutory contract between the company and its members, and between the members themselves. In practical terms, the articles often determine whether a decision belongs to the board, the shareholders or both.

For private companies and joint ventures, bespoke articles are often used to regulate reserved matters, quorum requirements, transfer restrictions, drag-along and tag-along rights, board appointment rights and deadlock mechanisms. On the other hand, the Companies Ordinance provides a template set of articles which companies may choose to opt-in (whether in its entirety or only for specific provisions).

Directors’ Duties

Directors’ duties arise from statute, common law and equity. The Companies Ordinance contains a statutory duty of care, skill and diligence. Other common law and equitable duties include the duty to act in good faith in the interests of the company, to exercise powers for proper purposes, to avoid conflicts, not to make secret profits and not to misuse company property or information.

Companies (Winding Up and Miscellaneous Provisions) Ordinance

Companies winding up matters are governed by the Companies (Winding Up and Miscellaneous Provisions) Ordinance. There are detailed provisions and rules regarding winding up procedures including the appointment of liquidators and their duties and powers.

Listing Rules and Securities Regulations

For listed companies, the Listing Rules and the Corporate Governance Code are major sources of governance obligations. They impose specific requirements on board composition, independent directors, board committees, financial and non-financial disclosure, shareholder approvals regarding connected and/or substantial transactions and continuing obligations.

The Securities and Futures Ordinance also regulates disclosure of inside information, market misconduct, insider dealing and disclosure of interests in listed corporations. The Takeovers Code applies in public takeover and merger situations.

Sector-Specific Regulation

Certain sectors are subject to more intensive statutory and governance rules. These include limited companies in the businesses of banking, insurance, securities firms, money lenders or other regulated activities.

Regulated entities may be required to maintain specified internal controls, appoint fit and proper persons, allocate senior management responsibility, conduct AML checks and report to regulators. The governance burden is therefore much heavier for these businesses.

Listing Rules and Corporate Governance Code

There are two listing boards in Hong Kong: the Main Board and the GEM Board (for small to mid-sized growth companies). Companies listed in Hong Kong must comply with the Listing Rules (with varying rules for each of the Boards). These rules govern admission to listing, continuing obligations, corporate transactions, disclosure, shareholder approvals, board composition and dealings by directors.

The Corporate Governance Code forms part of the Listing Rules framework. It contains:

• mandatory disclosure requirements;
• code provisions, which operate on a “comply or explain” basis; and
• recommended best practices.

Mandatory disclosure requirements must be followed. Code provisions are not strictly mandatory in the same way, but any deviation must be explained. Recommended best practices are voluntary, but they indicate the governance standards expected of well-managed listed companies.

Board Composition

Listed companies must have a sufficient number of independent non-executive directors. HK Stock Exchange requires that an issuer must have at least three independent non-executive directors and that independent non-executive directors must represent at least one-third of the board.

At least one independent non-executive director must have appropriate professional qualifications, or accounting or related financial management expertise. This reflects the importance of independent financial overview.

Through the latest amendments introduced in July 2025 (see further below), by the first annual general meeting after 1 July 2031, listed companies may not have an independent non-executive director who has served more than nine years.

Board Committees

Listed issuers must maintain three separate committees: audit, remuneration and nomination. These committees play a central role in financial reporting, remuneration policy, board appointments and succession planning.

In practice, board committees are also an important method of managing conflicts. For example, independent board committees may be required for approving connected transactions, takeovers or conducting investigations into matters involving controlling shareholders or directors.

Disclosure and Accountability

Listed companies must disclose corporate governance arrangements in their annual reports. They must also publish annual audited financial statements, ESG reports and make announcements of material information.

The governance regime is disclosure-led, but it is not merely procedural. Failure to comply may lead to regulatory enquiries, public criticism, disciplinary sanctions, suspension of trading or, in serious cases, delisting or even civil or criminal liability.

2025 Corporate Governance Amendments

HKEX introduced significant amendments to the Corporate Governance Code and the Listing Rules, effective from 1 July 2025. The amendments strengthen governance expectations on director training, board performance reviews, board skills matrices, board diversity, a tenure cap for independent non-executive director, risk management and dividend policy disclosure.

These changes reflect a move away from formal compliance and towards more substantive assessment of board effectiveness. Listed companies are expected to explain how their boards actually function, not merely relying on compliance with formalities and rules.

Disclosure Implications

The amendments require more meaningful disclosure in corporate governance reports. Investors will expect issuers to explain board evaluation, director training, succession planning, diversity objectives, risk oversight and dividend policy in a specific and company-focused way.

Generic wording is unlikely to be satisfactory. The practical effect is that listed companies should review their governance reports early, rather than treating them as a year-end compliance exercise.

Shareholder Implications

For shareholders, the changes should improve visibility over the board’s effectiveness, independence and competence. They may also affect voting decisions on director re-election, remuneration and governance-related resolutions.

Institutional investors are likely to use the enhanced disclosure to assess whether a company’s board is appropriately refreshed, diverse and sufficiently independent from management or controlling shareholders.

Shareholders

Shareholders are the members of a company. They provide capital and hold economic and voting rights attached to their shares. However, shareholders do not directly own the company’s assets; they only own the shares, as the company is a separate legal person.

Generally, shareholders do not directly manage the operations of a company (which is vested in the directors); rather they exercise control through resolutions. For example, they appoint and remove directors, amend the articles, approve certain transactions and make decisions reserved to them by statute or the articles.

Board of Directors

The board of directors is the principal management organ of the company. It is usually responsible for strategy, business planning, financing, major contracts, risk management, internal controls and compliance.

In private companies, directors may be closely involved in daily management. In larger companies, the board usually delegates operational responsibility to senior management while retaining oversight.

Board Committees

Board committees assist the board by focusing on particular areas. Common committees include audit, remuneration and nomination committees. Larger companies may also establish risk, investment, sustainability, compliance, technology or AI committees.

Committees may make recommendations or exercise delegated authority. The board remains responsible overall for ensuring that delegated functions are properly performed.

Senior Management

Senior management implements board strategy and manages the company’s daily operations. Typical roles include the chief executive officer, chief financial officer, chief operating officer, general counsel, chief risk officer, compliance officer and heads of business divisions.

Company Secretary

The company secretary has an important governance role. The company secretary assists with board procedures, statutory filings, registers, shareholder meetings, minutes and compliance timetables.

For listed companies, the company secretary often acts as a key link between the board, the management, the regulators and the shareholders. The company secretary also usually assists in the preparation of announcements, circulars and annual reports.

Board Decisions

The board typically decides matters relating to:

• business strategy;
• annual budgets;
• financing;
• acquisitions and disposals;
• major contracts;
• litigation;
• risk appetite;
• internal controls;
• senior appointments;
• financial reporting;
• regulatory compliance; and
• corporate policies.

The articles usually give authority to the board to manage the company’s business. That authority is subject to matters reserved to shareholders by statute, the articles or any shareholders’ agreement.

Shareholder Decisions

Shareholders make decisions on matters such as:

• amendments to the articles;
• appointment and removal of directors;
• changes to share capital;
• approval of certain payments to directors;
• voluntary winding up;
• variation of class rights; and
• other matters reserved by the articles.

Some decisions require an ordinary resolution, passed by a simple majority. More fundamental decisions (eg, amendment of articles) require a special resolution which is passed by at least 75% of the votes.

Reserved Matters in Private Companies

In private companies and joint ventures, reserved matters are often created by shareholders’ agreements or bespoke articles. These may require a super-majority (or even unanimous) shareholder consent for key matters such as issuing shares, incurring debt, changing business, approving budgets, hiring senior executives, entering major contracts or disposing of assets.

Reserved matters are commercially important because they allow investors or minority shareholders to protect their position without taking over or unduly interfering with daily management.

Listed Company Decisions

For listed companies, the Listing Rules reserve certain matters for shareholder approval. These include major transactions, very substantial acquisitions or disposals, connected transactions and share schemes.

Where a transaction involves a connected person or controlling shareholder, independent shareholder approval may be required. Interested shareholders may be required to abstain from voting.

Company Secretary

The work of a company secretary is usually administrative in nature and generally does not involve any executive decision-making.

Board Meetings

Board decisions are usually made at board meetings. The articles regulate notice, quorum, voting, disclosure of interests and minutes.

Directors should receive sufficient information before making decisions. For important matters, board papers should identify the proposal, reasons, financial impact, risks, alternatives, conflicts and any professional advice obtained.

Written Board Resolutions

Many companies also make board decisions by written resolution, if permitted by the articles (some articles require a unanimous decision before there may be a written board resolution). Written resolutions are convenient for routine matters or urgent decisions where a physical meeting is unnecessary or impracticable.

However, written resolutions are generally seen as less appropriate for complex or controversial matters.

Shareholder Meetings

Shareholders make decisions at general meetings or, in private companies, by written resolution where permitted. Meetings may be physical, hybrid or virtual, provided the statutory requirements and those stated in the articles are satisfied.

The notice must identify the business to be considered. Shareholders may attend, speak and vote personally or by proxy.

Listed companies generally vote by poll and must announce the poll results.

Written Shareholder Resolutions

Private companies often use written shareholder resolutions for routine (and mostly uncontroversial) approvals. They are efficient where the shareholder base is small.

Unitary Board

Hong Kong companies have a unitary board structure. The board is responsible for managing and supervising the company’s affairs. There is no separate supervisory board (as is common in some civil law jurisdictions).

A private company may have a simple board structure, sometimes even with only one director. Public companies and companies limited by guarantee must have at least two directors.

Executive and Non-Executive Directors

Larger companies often distinguish between executive and non-executive directors. Executive directors are actively involved in management. Non-executive directors provide external judgment and maintain overall perspective.

Listed companies usually have executive directors, non-executive directors and independent non-executive directors. This structure is intended to balance management knowledge with independent and professional check and balance.

Board Committees

Board committees are common in listed companies and larger private companies. The audit committee focuses on financial reporting, internal controls and deals with the external auditor. The remuneration committee deals with pay structures and incentives. The nomination committee deals with board appointments, succession and board composition.

Committees do not remove the board’s overall responsibility. The board must ensure that committees have clear terms of reference and report back properly.

Chairperson

The chairperson leads the board. The chairperson is responsible for ensuring effective discussion, encouraging constructive challenge and maintaining a proper relationship between the board and management. A good chairperson also ensures that directors receive proper information and that dissenting views are heard.

Depending on the articles, the chairperson may sometimes be given a casting vote in case the votes are tied.

Chief Executive or Managing Director

The chief executive or managing director is usually responsible for running the day-to-day business. This role involves implementing strategy, managing senior employees and reporting to the board.

In listed companies, combining the roles of the chairperson and chief executive is generally treated with caution. If the roles are combined, it might be advisable for the company to explain how proper checks and balances are maintained.

Executive Directors

Executive directors have both board and management functions. They provide the board with detailed knowledge of the business, operations and market conditions.

Non-Executive Directors

Non-executive directors are not involved in the daily management. Their role is to provide external judgment, monitor the management and contribute to overall strategy.

They are expected to be independent-minded, but they are not passive advisers. They owe the same core legal duties as other directors.

Independent Non-Executive Directors

Independent non-executive directors are expected to bring objective and professional scrutiny. Their role is especially important in relation to financial reporting, managing conflicts of interest, and dealing with connected transactions, remuneration and board nominations.

They are often central to the proper running of the audit, remuneration and nomination committees.

General Companies

Every Hong Kong company must have at least one director who is a natural person. Private companies may have corporate directors, but they must still have at least one natural person director. On the other hand, public companies and companies limited by guarantee must have at least two directors.

A company must also have a company secretary.

Listed Companies

Listed companies must comply with additional composition requirements. They must have at least three independent non-executive directors and independent non-executive directors must represent at least one-third of the board.

At least one independent non-executive director must have appropriate accounting or financial management expertise. This supports the audit committee and financial reporting process.

Board Committees

Listed companies must establish audit, remuneration and nomination committees. The audit committee must be chaired by an independent non-executive director. The remuneration committee must be chaired by an independent non-executive director and comprise a majority of independent non-executive directors.

The nomination committee must also have a strong independent element. It is responsible for reviewing board structure, size, composition, diversity and succession planning.

Diversity, Skills and Training

Listed issuers must maintain a board diversity policy. Single-gender boards are generally inappropriate.

The 2025 HK Stock Exchange amendments (above) also strengthen expectations concerning annual director training and board skills matrices. HKEX guidance states that annual director training is mandatory for all directors of listed companies and that specified topics must be covered as a bare minimum.

Appointment

The first directors are appointed on incorporation. Subsequent appointments are governed by the articles of association. Directors may commonly be appointed by the board or by shareholders in general meeting.

In listed companies, newly appointed directors are normally subject to re-election by shareholders. Directors must also retire by rotation at prescribed intervals under the articles and the Listing Rules.

Removal

Shareholders may remove a director by ordinary resolution, subject to statutory procedures. A director facing removal is generally entitled to notice and may make representations.

The articles may also provide for automatic vacation of office in certain circumstances, such as resignation, bankruptcy, mental incapacity, prolonged absence, disqualification or breach of specified requirements.

Restrictions on Appointment

A director must not be disqualified from acting. Relevant restrictions include disqualification orders and bankruptcy and, in regulated sectors, fitness and propriety requirements.

For regulated businesses, appointment of directors or senior managers may require regulator approval or non-objection. This is particularly common in the financial services sector.

Officers

Officers such as the company secretary, chief executive, chief financial officer or compliance officer are appointed under the company’s internal procedures, employment arrangements and applicable regulatory requirements. Their authority is usually determined by board resolutions, delegated authority policies and employment contracts.

Independence

Independence is particularly important for listed companies. The Listing Rules contain criteria for assessing whether an independent non-executive director is actually and substantially independent. Relevant matters include employment relationships, business relationships, financial interests, family connections, cross-directorships, past service and other circumstances that may affect objective judgment.

Independence must be assessed continuously. It is not enough for a director to be independent on appointment if later relationships or circumstances compromise that independence.

Conflicts of Interest

All directors must avoid conflicts between their personal interests and the company’s interests, and this applies generally to all companies. They must not misuse corporate opportunities, company property or confidential information.

Where a director has an interest in a transaction, the director must disclose the nature and extent of that interest. The articles and applicable rules will determine whether the director may vote or count towards the quorum.

Listed Company Connected Transactions

Listed companies are subject to connected transaction rules. These regulate transactions between the company and its directors, substantial shareholders, controlling shareholders and/or their associates.

Depending on the size and nature of the transaction, requirements may include announcement, circular, independent financial advice, independent board committee review, independent shareholder approval and annual reporting.

Practical Conflict Management

Companies should maintain clear procedures for identifying and managing conflicts. These include director interest registers, annual confirmations, transaction-specific declarations, abstention procedures and independent approvals.

For listed companies and regulated businesses, conflict management should be treated as a core compliance system, not an informal and self-regulated matter.

Fiduciary Duties

Directors must act in good faith in the interests of the company. They must exercise powers for proper purposes and must not act for collateral or improper motives.

They must avoid conflicts of interest, not make unauthorised profits and not misuse company assets, opportunities or confidential information. These duties are strict and may apply even where the company has not suffered any financial loss.

Duty of Care, Skill and Diligence

The Companies Ordinance imposes a statutory duty on directors to exercise reasonable care, skill and diligence. This duty contains both objective and subjective elements. This statutory duty is in addition to the common law duties of care.

The court may consider what would reasonably be expected of a person carrying out that director’s functions, and what may be expected from that director’s actual knowledge, skill and experience.

Duty to Exercise Independent Judgment

Directors must exercise their independent judgment. They may rely on management, experts and professional advisers where appropriate, but they must still consider matters for themselves.

A director appointed by a shareholder should not simply follow that shareholder’s instructions. The director’s duty is owed to the company.

Statutory and Regulatory Duties

Directors and officers may also have duties concerning accounting records, financial statements, audit, shareholder meetings, statutory registers, filings, disclosure of interests and corporate records.

In listed and regulated companies, directors and senior officers may have additional obligations under the Listing Rules, Securities and Futures Ordinance, anti-money laundering laws and sector-specific regulations.

Duties Owed to the Company

Directors generally owe their duties to the company, not directly to individual shareholders. The company is a separate legal person.

This means that where the company suffers loss, the company is normally the proper claimant. A shareholder cannot usually recover personally for a loss that is merely reflective of the company’s loss.

Shareholders

Although duties are owed to the company, shareholder interests are often highly relevant. In a solvent company, the interests of the company are commonly associated with the interests of shareholders as a whole.

Directors should not favour one shareholder group unfairly over another. In companies with controlling shareholders, directors must take care to exercise independent judgment and protect the company’s overall interests.

Creditors

When a company is insolvent or bordering on insolvency, creditors’ interests become important. Directors should be cautious about incurring new liabilities, disposing of assets, preferring certain creditors or continuing business without a realistic prospect of avoiding insolvent liquidation.

Wider Stakeholders

Directors may also need to consider employees, customers, suppliers, regulators, the community, ESG risks and reputational issues. For listed companies, these considerations are increasingly reflected in ESG reporting, risk management and internal control expectations.

Enforcement by the Company

The company is usually the primary claimant for breach of directors’ duties. The board may cause the company to bring proceedings. If there has been a change of control, it is not uncommon for the new management to pursue former directors in the name of the company.

If the company enters liquidation, the liquidator may investigate and bring claims against former directors. This is common where there are allegations of misfeasance, improper payments, conflicts or asset dissipation.

Shareholder Derivative Actions

A shareholder may bring a derivative action on behalf of the company in appropriate circumstances. This is particularly relevant where the alleged wrongdoers control the company and prevent it from suing.

But in such a situation, the remedy still belongs to the company. Any recovery usually goes to the company, not directly to the shareholder.

Unfair Prejudice

Shareholders may also personally petition for relief where the company’s affairs have been conducted in a manner unfairly prejudicial to their (almost invariably minority) interests. The remedy is flexible and may include a buy-out order, regulation of the company’s affairs or other appropriate relief.

This remedy is often used in private company disputes where there is exclusion from management, misuse of company assets, diversion of business or breakdown of legitimate expectations.

Consequences

Consequences of breach may include damages, equitable compensation, account of profits, rescission, injunctions, restoration of property, disqualification, regulatory sanctions and criminal liability in serious cases.

For listed companies, HKEX may also impose disciplinary sanctions, including public criticism, prejudice to suitability findings and directions for remedial action.

Other Bases of Claims

Directors and officers may face claims or enforcement for:

• misleading statements or omissions in prospectuses;
• false or misleading public announcements;
• insider dealing or market misconduct;
• breach of Listing Rules;
• bribery, fraud or corruption;
• money laundering or sanctions breaches;
• data privacy breaches;
• competition law breaches;
• employment law breaches;
• misfeasance in insolvency; and
• negligence or tortious liability.

The nature of the claim depends on the conduct and the statutory framework engaged.

Regulatory Enforcement

Regulators may bring enforcement action against directors and officers. Relevant regulators include the HK Stock Exchange, the Securities and Futures Commission, the Companies Registry, the Hong Kong Monetary Authority, the Insurance Authority, the Competition Commission, the Privacy Commissioner and law enforcement agencies.

Regulated sectors carry higher personal risk for senior management. Regulators often focus on whether senior officers had proper systems, supervision and escalation procedures.

Limitation of Liability

A company cannot generally exempt a director from liability to the company for negligence, default, breach of duty or breach of trust. Any such exemption is generally restricted by statute.

However, companies may provide permitted indemnities and may purchase directors’ and officers’ liability insurance. Such insurance is common, especially for listed companies and regulated businesses.

Ratification

Shareholders may ratify some breaches of duty. However, ratification is not available for every type of misconduct.

Approval Requirements

Directors’ remuneration is governed by the articles, service contracts, the Companies Ordinance and, for listed companies, the Listing Rules. The articles may allow directors’ fees to be determined by the board or the shareholders.

Listed Company Remuneration Committees

Listed companies must maintain a remuneration committee. It should review and recommend remuneration policy, directors’ remuneration and senior management remuneration.

The committee should consider performance, market conditions, time commitment, responsibilities, risk and the need to avoid rewarding poor performance. It should also ensure that remuneration structures do not encourage excessive risk-taking.

Consequences of Non-Compliance

Payments made without the required approval may be unauthorised and recoverable. Directors may be required to repay the benefits or compensate the company.

Non-compliance may also amount to breach of duty. For listed companies, it may lead to regulators scrutiny, public criticism or disciplinary action.

Disclosure

Companies must disclose directors’ emoluments in their financial statements. Listed companies must provide more detailed annual report disclosure concerning remuneration policy, directors’ remuneration, remuneration committee work and senior management remuneration by band.

Where remuneration arrangements involve share options, share awards, connected transactions or termination payments, further disclosure or approval requirements may apply.

Separate Legal Personality

A company is a legal person separate from its shareholders. Shareholders do not own the company’s property; rather they own the shares of and in the company which carry certain rights (including voting rights and the rights to receive dividends).

The principle of separate legal personality means that shareholders are generally not liable for the company’s debts beyond any unpaid amount on their shares.

Rights of Shareholders

Shareholder rights primarily arise from the Companies Ordinance, the articles of association, the terms of issue of the shares and any shareholders’ agreement. These rights may include voting, dividends, transfer rights, information rights and rights on winding up.

Different classes of shares may carry different rights. For example, preference shares may have priority dividend rights but limited voting rights.

Register of Members

Hong Kong companies must keep a register of members. This is a statutory record of the company’s shareholders.

Shareholder information filed with the Companies Registry (for example, in annual returns) is publicly searchable. However, beneficial ownership information is not public and it is not uncommon for shares to be held on trust or by nominees.

Shares in listed companies may be held in the name of the clearing house and therefore a public shareholder may technically not be a member of the company since his name is not officially on the register. This might have an impact if a shareholder wishes to commence litigation in his own name (for example, a derivative action on behalf of the company).

No General Right to Manage

Shareholders do not manage the company’s daily business. Management powers are normally vested in the board of directors through the articles.

Shareholders cannot generally instruct the board how to exercise management powers unless the articles, a valid resolution or a shareholders’ agreement gives them such a right.

Control Through Voting

Shareholders exercise control through their voting and resolutions. They may appoint or remove directors, amend the articles, approve major corporate actions and decide matters reserved to them.

In practical terms, control of the board is often the most important shareholder power. A shareholder or group of shareholders who can appoint or remove directors may influence the company’s direction.

Private Companies and Joint Ventures

In private companies, shareholders are often also directors. The distinction between ownership and management may therefore be blurred.

In joint ventures, shareholders’ agreements often reserve important decisions for shareholder approval. These may include budgets, debt, acquisitions, disposals, share issues, litigation and changes in business.

Listed Companies

In listed companies, shareholders influence management through voting, engagement and market pressure. Institutional investors may engage with boards on governance, remuneration, capital allocation, ESG and succession planning.

However, day-to-day management remains with the board and senior management.

Annual General Meetings

Hong Kong companies are generally required to hold annual general meetings unless an applicable exemption is engaged. Exemptions may apply to single-member companies, dormant companies or companies whose members have dispensed with annual general meetings.

At an annual general meeting, shareholders usually consider and approve financial statements, directors’ reports, auditors’ reports, director appointments or reappointments and auditor appointments.

General Meetings

General meetings may be called by the directors. Shareholders may also have statutory rights to require the directors to call a general meeting.

The notice must specify the time, place, form and business of the meeting. The required notice period depends on the type of company, the nature of the resolution and the provisions of the articles.

Physical, Hybrid and Virtual Meetings

Hong Kong law permits companies to hold general meetings using technology, subject to the Companies Ordinance and the articles. The key practical requirement is that members must be able to participate, speak and vote.

This is useful for companies with international shareholders. However, companies should ensure that electronic voting, identity verification and meeting records are properly managed.

Voting

Shareholder decisions are made by ordinary or special resolution. Ordinary resolutions require a simple majority. Special resolutions require at least 75% approval.

Listed companies generally conduct voting by poll and must announce poll results. Proxy voting is also common.

Personal Claims

A shareholder may bring a personal claim where a personal right has been infringed. Examples include denial of voting rights, breach of class rights, failure to register a transfer, breach of the articles or misrepresentation inducing the purchase of shares.

A shareholder must distinguish personal loss from a loss suffered or reflected by the company. If the company suffers the loss, the claim usually belongs to the company.

Unfair Prejudice

Unfair prejudice is one of the most important shareholder remedies in Hong Kong. It is particularly common in private company disputes and quasi-partnership companies.

Examples may include exclusion from management, diversion of business, misuse of company assets, lack of probity, failure to provide information, excessive remuneration or breach of legitimate expectations.

The court has broad remedial powers. A buy-out order is common, but the court may also regulate the company’s affairs or grant other reliefs.

Derivative Action

A shareholder may bring a derivative action on behalf of the company where a wrong is done to the company. This is relevant where directors breach duties, misappropriate assets or divert corporate opportunities, and yet the wrongdoers remain in control of the board so the company is prevented from suing in its own name.

The remedy belongs to the company. The shareholder acts as a procedural vehicle to enforce the company’s rights.

Just and Equitable Winding Up

A shareholder may seek a winding up on the just and equitable ground. This may be appropriate where there is deadlock, loss of substratum, exclusion from a quasi-partnership or a complete breakdown of trust and confidence.

The remedy is serious and may destroy value. Courts often consider a winding up to be a remedy of last resort.

Disclosure of Interests

Substantial shareholders of Hong Kong listed corporations must disclose interests and short positions under the Securities and Futures Ordinance. The general disclosure threshold is 5% or more of the voting shares.

The disclosure regime may capture direct interests, indirect interests, controlled corporations, derivatives, beneficial interests and other deemed interests. Directors and chief executives of listed corporations are also subject to disclosure obligations regarding their own shareholding.

Public Disclosure

Disclosure notices are publicly available. They allow the market to identify significant shareholders and changes in major holdings. Listed companies are also required to set out their substantial shareholders in their annual reports.

The regime is important for market transparency. It helps investors understand control, influence and potential changes in ownership.

Accounting Records

Hong Kong companies must keep proper accounting records for six years. These records should be sufficient to show and explain the company’s transactions and financial position.

Directors are responsible for ensuring that accounting records and financial reporting systems are adequate. This is a governance obligation, not merely an accounting task.

Annual Financial Statements

Companies must generally prepare annual financial statements and a directors’ report. The financial statements must comply with the applicable financial reporting framework and standards.

Most companies must have their financial statements audited. Dormant companies are the main exception.

Filing Requirements for Private Companies

Private companies must file annual returns with the Companies Registry (with updates on registered address, directorship and shareholding indicated), but they do not file their audited financial statements publicly.

Listed Companies

Listed companies must publish annual and interim financial reports within the time limits prescribed by the Listing Rules. The annual reports have to be audited while the interim reports would usually be reviewed by the auditors (a standard that is short of a full audit). They must also announce results.

Outside the periodic reporting cycle, listed companies must announce inside information, major transactions, connected transactions, changes in directors or auditors, profit warnings or alerts and other material matters.

Private Companies

Private companies are not generally required to publish a standalone corporate governance report. Their governance disclosures mainly arise through statutory filings.

These filings include annual returns, director changes, company secretary changes, registered office changes, share allotments, share capital changes and charges.

Internal Records

Even where information is not filed publicly, companies must maintain proper internal records. These include registers of members, directors, company secretaries and mortgages over company properties.

Listed Companies

Listed companies must include corporate governance disclosure in annual reports. They must address the Corporate Governance Code’s mandatory disclosure requirements and explain deviations from code provisions. The disclosure usually covers board composition, director attendance, board committees, company secretary matters, auditor remuneration, shareholder rights, risk management and internal controls.

Listed companies must also disclose their approach to risk management and internal controls. HKEX guidance emphasises that the board is responsible for maintaining and reviewing effective risk management and internal control systems.

Companies Registry

Companies are incorporated and registered with the Companies Registry. Business registration is also required through the Inland Revenue Department for all entities carrying on business or generating revenue in Hong Kong.

For local companies, the incorporation process normally includes simultaneous business registration. Applicants submit the prescribed incorporation form, articles of association and business registration application.

Ongoing Filings

After incorporation, companies must file prescribed documents with the Companies Registry. These include annual returns, notices of director or company secretary changes, registered office changes, share allotments, changes in share capital, mortgages, special resolutions and other specified matters.

The Companies Registry requires companies to comply with timely disclosure and reporting obligations concerning specified information about the company, its officers and shareholders.

Public Availability

Most filed documents are publicly searchable. Public access to company records is important for creditors, investors, counterparties and regulators. Some personal information (for example, the passport number of a director) is protected or withheld from public inspection.

That said, beneficial ownership of shares and shareholding through nominees are generally not information available to the public.

Consequences of Non-Compliance

Failure to file may result in late filing fees, prosecution, fines and default fines. Persistent non-compliance may also lead to striking off or deregistration in appropriate cases.

Supervisory Powers

The Companies Registry is the designated body that maintains public registers, administers filing requirements, enforces compliance and prosecutes offences and violations.

AML Framework

Hong Kong’s AML framework includes the Anti-Money Laundering and Counter-Terrorist Financing Ordinance, the Drug Trafficking (Recovery of Proceeds) Ordinance, the Organized and Serious Crimes Ordinance, the United Nations (Anti-Terrorism Measures) Ordinance and sanctions legislation.

The AML Ordinance imposes customer due diligence and record-keeping requirements on financial institutions and designated non-financial businesses and professions.

Suspicious Transaction Reporting

Suspicious transaction reporting is a broad obligation. A person who knows or suspects that property represents proceeds of crime or terrorist property must report the suspicion to the Joint Financial Intelligence Unit (JFIU).

JFIU materials emphasise that suspicious transaction reporting is a legal obligation applicable to all, and has no reporting threshold.

Board Oversight

For regulated businesses, boards and senior management must oversee AML and counter-terrorist financing systems. This includes risk assessments, customer due diligence, ongoing monitoring, sanctions screening, suspicious transaction reporting, staff training and independent review.

AML guidelines issued by regulators such as the Securities and Futures Commission and Companies Registry states that effective money laundering and terrorist financing risk management requires adequate governance arrangements, and that the board or delegated committee and senior management should understand the relevant risks and ensure they are adequately managed.

Sanctions

Hong Kong implements United Nations sanctions through local legislation. Companies exposed to cross-border business, financial services, shipping, trade, technology or high-risk jurisdictions should maintain effective sanctions screening and escalation systems.

Sanctions compliance should be treated as a board-level risk where exposure is material. Directors should ensure that the company has appropriate controls, training and documented decision-making.

Personal Liability

Directors and officers may face personal liability if they participate in, consent to, connive in or knowingly permit AML breaches. They may also face liability where AML failures amount to a breach of directors’ duties.

Serious breaches may also result in criminal liability, regulatory sanctions, disciplinary action, disqualification and reputational damage. Even where criminal liability is not established, poor AML governance may lead to regulatory criticism and loss of business confidence.

Requirement to Appoint Auditors

Hong Kong companies are generally required to appoint external auditors in connection with annual financial statements. Dormant companies are the main exception.

The auditor must be qualified under Hong Kong law. The auditor reports on whether the financial statements give a true and fair view and comply with the applicable financial reporting framework and standards.

Appointment and Removal

Auditors are normally appointed by shareholders in annual general meetings. Removal of auditors is subject to statutory procedures designed to protect auditor independence and ensure that members are properly informed.

A company should not change auditors to suppress disagreement or avoid scrutiny. In practice, where an auditor inexplicably resigns or is removed without proper justification, it may in itself be a strong alarm to the stakeholders as to how the company has been operating.

Rights of Auditors

Auditors have rights to access accounting records and obtain information and explanations from directors and officers. Directors and officers must co-operate with the auditors.

Providing false or misleading information to auditors may create serious consequences, including criminal or regulatory exposure.

Listed Companies

For listed companies, the audit committee oversees the relationship with the external auditor. It reviews independence, audit scope, audit findings, audit fees and non-audit services.

The audit committee is also expected to review financial reporting judgments, internal controls and risk management systems. It is a central safeguard in listed company governance.

Regulatory Treatment of Geopolitical Risk

Hong Kong does not impose a single general rule requiring all companies to perform a dedicated geopolitical risk function. However, geopolitical risk may be relevant to sanctions, supply chains, financing, market access, cybersecurity, data transfers, ESG, tax, trade controls and disclosure obligations.

For listed issuers, geopolitical risk may fall within the board’s responsibility for overall risk management and internal controls. Where geopolitical developments may materially affect operations or financial performance, the board should ensure proper assessment and disclosure.

Board and Committee Oversight

Geopolitical risk is usually overseen by the board, audit committee, risk committee or executive risk committee. The appropriate structure depends on the company’s business.

A multinational trading, logistics, technology or financial services business may require formal reporting and monitoring. A purely local private business may require a lighter structure.

Sanctions Compliance

Sanctions compliance is a key area of board-level oversight. Companies should identify whether their customers, suppliers, counterparties, banks, investors, vessels, products or jurisdictions create sanctions exposure.

Effective oversight usually includes:

• sanctions screening;
• contractual controls;
• counterparty due diligence;
• escalation procedures;
• legal review of high-risk transactions;
• staff training; and
• periodic testing of controls.

Disclosure

For listed companies, geopolitical or sanctions risks may need to be disclosed if material. Disclosure may be required in financial reports, risk factor sections, announcements or transaction documents.

The board should ensure that disclosure is accurate, balanced and not misleading. Understatement of geopolitical exposure can create investor, regulatory and reputational risk.

Listed Company ESG Reporting

Hong Kong listed companies must publish ESG reports under the ESG Reporting Code. ESG reporting covers environmental, social and governance matters, including board oversight, materiality, stakeholder engagement and specific ESG indicators.

The ESG regime applies to listed companies. Private companies are not generally subject to the same public ESG reporting requirements unless required by contract, financing arrangements, group policy or sector-specific regulation.

Climate Reporting

Climate reporting is now the most significant area of ESG development. HK Stock Exchange introduced enhanced climate disclosure requirements for financial years beginning on or after 1 January 2025. These requirements are structured around governance, strategy, risk management, and metrics and targets.

The requirements are being phased in. HKEX materials state that Large Cap issuers are subject to mandatory disclosure for certain climate requirements from financial years commencing on or after 1 January 2026, while other Main Board issuers are initially subject to “comply or explain” requirements and GEM issuers to voluntary disclosure.

ISSB Alignment

Hong Kong is moving towards sustainability disclosure aligned with the International Sustainability Standards Board. The Government’s Roadmap on Sustainability Disclosure indicates a pathway for publicly accountable entities to adopt ISSB-aligned standards, with Hong Kong sustainability disclosure standards having an effective date of 1 August 2025 for voluntary application.

Board Responsibility

ESG reporting is not simply a communications exercise. The board must oversee ESG risks and opportunities, determine materiality, supervise internal controls and ensure that public statements are supported by evidence.

A listed company should therefore connect ESG reporting with strategy, risk management, financial planning and disclosure controls.

Continued Direction of Travel

Hong Kong has not materially retreated from ESG reporting despite global debate around ESG. The direction remains towards more structured, investor-focused and internationally aligned sustainability disclosure.

The strongest shift is from broad ESG narrative to more specific disclosure on climate risk, governance, metrics and financial impact. Companies are expected to provide information that investors can use, rather than general statements of commitment.

Climate and Data Quality

Climate is the fastest-moving component. Companies need better systems for greenhouse gas data, climate risk assessment, scenario analysis, transition planning and internal controls.

This may require input from finance, sustainability, operations, legal, risk, procurement and external advisers. Boards should also consider whether climate disclosures are consistent with financial statements and business plans.

Governance and Anti-Greenwashing

Governance is also becoming more important. Companies must ensure that ESG claims are accurate and properly supported.

The global political debate around ESG has made many companies more cautious about overstatement. In Hong Kong, the practical response is likely to be more disciplined disclosure, not abandonment of ESG reporting.

Social Issues

Social factors remain relevant, particularly labour practices, health and safety, supply chains, data privacy, customer welfare and diversity. For many businesses, these issues may be more immediately material than climate risk.

Companies should therefore avoid treating ESG as only environmental reporting. The correct approach is to identify material risks for the specific business.

No Single AI Governance Statute

Hong Kong does not currently have a single corporate governance statute requiring all companies to appoint AI-specialist directors or establish AI committees. AI oversight arises from existing directors’ duties, risk management obligations, data protection law, sector-specific regulation and regulatory guidance.

Where AI is material to a company’s operations, products, customer interactions, compliance or financial reporting, the board should treat AI as a governance and risk issue.

Existing Legal Framework

Relevant laws may include:

• Personal Data (Privacy) Ordinance;
• Securities and Futures Ordinance;
• consumer protection laws;
• intellectual property laws;
• confidentiality obligations;
• employment laws;
• cybersecurity-related duties; and
• sector-specific regulatory rules.

The most immediate legal risks often arise from personal data, confidentiality, misleading outputs, IP infringement and inadequate supervision.

Privacy AI Framework

The Privacy Commissioner (PCPD) has published an AI Model Personal Data Protection Framework. It covers AI strategy and governance, procurement of AI solutions, governance structure, training, risk assessment and human oversight.

Although the framework is not a comprehensive AI statute, it is an important practical reference for organisations procuring, implementing or using AI systems involving personal data.

Board Structures

There is no mandatory requirement for a dedicated AI committee. Depending on the company, AI issues may sit with:

• the full board;
• the audit committee;
• the risk committee;
• a technology committee;
• an AI governance committee; or
• senior management supported by legal, compliance and IT.

The structure should reflect the company’s AI use and materiality. A financial institution using AI for client-facing decisions will need more formal governance than a small private company using generative AI for internal administration.

Governance Frameworks

Hong Kong’s AI governance framework is currently guidance-led. Key sources include the PCPD’s AI guidance, the Digital Policy Office’s Ethical AI materials and sector-specific guidance from financial regulators.

The PCPD’s framework encourages organisations to establish governance structures, conduct risk assessments, determine human oversight, manage data quality and provide training.

Generative AI Guidance

In March 2025, the PCPD published guidance to help organisations develop internal policies on employees’ use of generative AI at work. The guidance is intended to assist organisations in complying with the Personal Data (Privacy) Ordinance when employees use generative AI.

In April 2025, the Digital Policy Office released a Hong Kong Generative Artificial Intelligence Technical and Application Guideline. Government materials state that it provides practical operational guidance and addresses risks including data leakage, model bias and model errors.

Key Risks

AI use-related risks include:

• inaccurate or hallucinated outputs;
• unfair or biased outcomes;
• privacy breaches;
• leakage of confidential information;
• cybersecurity vulnerabilities;
• IP infringement;
• lack of explainability;
• over-reliance by staff;
• poor vendor management; and
• reputational harm.

Companies should distinguish between low-risk internal use and high-risk use affecting customers, investors, employees or regulated decisions.

Allocation of Responsibility

The board should approve AI strategy and risk appetite where AI is material. The audit or risk committee should oversee controls, assurance, data governance, cybersecurity and incident reporting.

Management should maintain an AI inventory, approve use cases, implement policies and monitor compliance. Legal, compliance, procurement, data protection and cybersecurity teams should review higher-risk AI tools. Internal audit should provide assurance where AI use is material.

Main Liability Exposures

The main exposures include data privacy breaches, cyber incidents, misuse of confidential information, misleading outputs, discriminatory outcomes, intellectual property infringement, breach of contract, employment claims, consumer harm, regulatory breaches and reputational damage.

For listed companies, AI may also create disclosure risk. If AI is material to the business, inaccurate public statements about AI capability, performance, safety, governance or profitability may be misleading.

Directors’ and Officers’ Exposure

Directors and officers are unlikely to be liable merely because the company uses AI. The risk arises where they fail to exercise reasonable oversight, ignore known risks, approve misleading disclosure or allow inadequate controls.

If AI is used in a regulated business, senior management exposure may be greater. AI-related failures could affect suitability assessments, client advice, AML monitoring, market conduct, insurance underwriting, credit decisions or complaints handling.

Data and Privacy Enforcement

The Privacy Commissioner may investigate privacy breaches or misuse of personal data. Enforcement may also arise where AI systems process personal data without proper notice, consent, security or purpose limitation.

Personal data governance is therefore one of the most immediate AI compliance risks in Hong Kong.

Other Enforcers

Other potential enforcers include HKEX, the Securities and Futures Commission, the Hong Kong Monetary Authority, the Insurance Authority, the Competition Commission, Customs and Excise, law enforcement agencies and private claimants.

Private claims may be brought by customers, employees, shareholders, contractual counterparties, IP owners or affected individuals.

No General Standalone AI Disclosure Rule

Hong Kong does not currently impose a general standalone requirement for all companies to disclose AI use, AI strategy or AI governance in annual reports. Disclosure depends on materiality, the company’s status and the legal context.

For private companies, AI disclosure is usually not required unless it is relevant to financial reporting, contractual obligations, regulatory filings, data breaches, litigation or shareholder reporting.

Listed Company Disclosure

Listed companies should disclose AI-related matters where they are material to investors. This may include AI strategy, dependence on AI systems, technology risks, data risks, cybersecurity risks, regulatory uncertainty, IP risks and material incidents.

If AI-related information constitutes inside information, it must be disclosed as soon as reasonably practicable under the Securities and Futures Ordinance. This may arise where an AI incident materially affects operations, financial performance, reputation or regulatory status.

Prospectus Disclosure

Companies seeking listing or conducting securities offerings should disclose material AI-related risks in prospectuses. This is particularly important for AI businesses, technology companies, platform companies and companies whose valuation depends heavily on AI capability.

Relevant risk factors may include:

• model limitations;
• data quality and data rights;
• third-party model dependence;
• cybersecurity;
• regulatory uncertainty;
• IP ownership;
• customer reliance;
• explainability;
• safety;
• competition; and
• ethical or reputational risk.

Sustainability and Governance Disclosure

AI may also be relevant to ESG or governance disclosure where it affects data privacy, workforce management, customer fairness, cybersecurity, climate data, operational resilience or ethics.

A prudent listed company should maintain internal disclosure controls for AI-related statements. Public claims about AI capability, productivity gains, compliance, safety or governance should be accurate, balanced and supported by evidence.