Hong Kong classifies offences by mode of trial rather than by distinction between misdemeanours and crimes: summary offences are tried before a magistrate, while indictable offences may be tried in the Magistrates’ Courts, the District Court or the Court of First Instance. Most white-collar offences require conduct and a culpable mental state. Fraud under Section 16A of the Theft Ordinance (Cap 210) (TO) requires a deceit and an intent to defraud, inducing another person to act or omit to act, resulting in a benefit or in prejudice, or a substantial risk of prejudice, to another. Money laundering under Section 25 of the Organized and Serious Crimes Ordinance (Cap 455) (OSCO) requires dealing with property known or believed to be the proceeds of an indictable offence. Corruption under the Prevention of Bribery Ordinance (Cap 201) (POBO) generally requires offering, soliciting or accepting an advantage without lawful authority or reasonable excuse. Certain regulatory provisions under the Securities and Futures Ordinance (Cap 571) (SFO) and the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap 615) (AMLO) are strict liability, though a due diligence defence is often available.

Most offences require a mental element, which may be intent, knowledge or recklessness; a defendant’s underlying motive only impacts sentencing, not guilt. Liability also extends beyond the completed crime. Attempt is punishable under Section 159G of the Crimes Ordinance (Cap 200) (CO) where the defendant intends to commit the offence and does an act that is more than merely preparatory. Aiding, abetting, counselling or procuring renders a person guilty of the like offence under Section 89 of the Criminal Procedure Ordinance (Cap 221) (CPO). Companies may be convicted of most offences, with fault attributed under the common law identification doctrine.

The prosecution bears the legal burden of proving every element of the offence. The defendant is presumed innocent until proved guilty under Article 87 of the Basic Law and Article 11 of the Hong Kong Bill of Rights. The criminal standard is proof beyond reasonable doubt, whether tried summarily or on indictment. Where a legal burden falls on the defendant, typically for a statutory defence, it is discharged on the balance of probabilities.

Certain provisions reverse the legal burden. For example, for corruption offences, Section 10(1) of the POBO requires a public servant, once a prima facie case is shown, to explain how a standard of living or pecuniary resources or property disproportionate to his known income came under his control. Section 24 of the POBO places on the defendant the burden of proving lawful authority or reasonable excuse. Several presumptions apply, for example Section 10(2) of the POBO provides that pecuniary resources or property held by another person in trust for or on behalf of the defendant, or acquired from them as a gift, are presumed to have been in the defendant control. Where market misconduct is pursued before the Market Misconduct Tribunal (MMT), these proceedings will follow the standard of proof applicable to civil proceedings in general, being on a balance of probabilities (Section 252(7) of the SFO), as it is in Securities and Futures Commission (SFC) and Hong Kong Monetary Authority (HKMA) disciplinary proceedings.

There is no general statute of limitations for indictable offences. Fraud, money laundering, corruption, conspiracy to defraud and criminal market misconduct may be prosecuted regardless of how much time has elapsed. For summary offences, a complaint shall be made, or an information must generally be laid, within six months from when the matter arose, under Section 26 of the Magistrates Ordinance (Cap 227) (MO). Individual statutes may prescribe longer periods.

The six-month period runs from the date the offence was committed, not from discovery; for continuing offences, time runs from the last day of the conduct, and, for conspiracy, from the last act in furtherance of the agreement. Hong Kong has no discovery rule suspending the limitation period for concealed offences, but the absence of any limitation for indictable offences means concealment is generally no barrier to prosecution, and cold cases may be reopened where new evidence emerges. Long delay does not bar prosecution, but in an exceptional case it may nevertheless be raised on an application to stay for abuse of process. Continuing offences, such as the carrying on of an unlicensed activity, are treated as committed on each day the conduct continues.

Hong Kong’s criminal jurisdiction is primarily territorial, with no broad nationality-based jurisdiction of the United States kind. Several statutes nonetheless reach abroad:

• Section 4 of the POBO covers bribery of Hong Kong public servants “whether in Hong Kong or elsewhere”;
• Section 25(4) of the OSCO provides that an indictable offence includes conduct which would constitute an indictable offence if it had occurred in Hong Kong, so that dealing with the proceeds of that conduct is caught;
• the market misconduct provisions of the SFO, particularly false trading, price rigging and stock market manipulation, apply to conduct in Hong Kong or elsewhere which has the specified effect on a relevant recognised market; and
• conspiracy to defraud is triable where the agreement is made in Hong Kong or if an act in pursuance of it is committed in Hong Kong.

The Inland Revenue Ordinance (Cap 112) (IRO) is strictly territorial, as it governs income or profits “arising or derived from Hong Kong”, under Sections 8(1) and 14(1). Evasion of tax therefore does not extend to foreign tax.

Mutual legal assistance is governed by the Mutual Legal Assistance in Criminal Matters Ordinance (Cap 525). Extradition runs through the Fugitive Offenders Ordinance (Cap 503), with 19 jurisdictions, of which nine are suspended. It generally requires double criminality and an offence punishable by more than 12 months’ imprisonment. However, there are no extraditions with Mainland China at the moment.

Regulatory co-operation runs through the Egmont Group, International Organization of Securities Commissions (IOSCO) and bilateral arrangements. The Joint Financial Intelligence Unit (JFIU) is a member of the Egmont Group. The SFC is a signatory to the IOSCO Multilateral Memorandum of Understanding and may obtain investigatory assistance from overseas securities regulators. The Hong Kong Police Force operates as sub-Bureau under INTERPOL National Central Bureau China. Hong Kong is a member of the Financial Action Task Force (FATF), with its effectiveness to be assessed in the fifth-round mutual evaluation.

Companies can be held criminally liable, with attribution generally determined by the common law identification doctrine rather than a statutory code of corporate fault. A company is responsible for the acts and mental state of those representing its “directing mind and will”, which is the board, the managing director or senior officers exercising governing authority. The Privy Council in Meridian Global Funds Management Asia Ltd v Securities Commission [1995] 2 AC 500 outlined the rules of attribution, to ascertain whether acts or mental states of individuals are to be treated as the company’s. Both individuals and companies may be liable for the same offence. There is no statutory preference for charging companies or individuals, though, in practice, enforcement tends to target individuals because attribution is difficult in large, decentralised organisations. Hong Kong has no “failure to prevent” offence equivalent to Section 7 of the UK Bribery Act 2010, and no automatic parent–subsidiary liability.

Neither is there general successor criminal liability in Hong Kong. On a share acquisition, the target company retains its exposure, and on an asset acquisition the purchaser generally does not assume the seller’s liability, subject to money laundering risk over tainted assets. Directors and officers are not automatically liable because the company is convicted. Personal liability arises where the officer is a party to the offence, or where it was committed with their consent or connivance pursuant to Section 101E of the CPO. Section 20 of the TO applies this to offences listed therein. Section 9 of the POBO can make a director liable as an agent. Consequences include imprisonment, fines, confiscation and disqualification of up to 15 years.

Hong Kong has no codified sentencing guidelines. Sentences are set by reference to the statutory maximum, applicable principles, and tariffs developed in decided cases. The classical principles are retribution, deterrence, prevention and rehabilitation, with deterrence carrying particular weight in serious financial crime. After conviction, the defence mitigates and the court sets a starting point and then applies any discount. A guilty plea at the earliest opportunity generally attracts a discount of up to one third, diminishing as the plea comes later (HKSAR v Ngo Van Nam [2016] 5 HKLRD 1). Co-operation and voluntary disclosure may attract a further discount and influence the charging decision, accomplice witnesses may receive immunity with the Director of Public Prosecutions’ approval, and restitution and remediation are significant mitigation factors. A genuine pre-existing compliance culture, prompt remediation and co-operation with the authorities may support a decision not to prosecute. At sentencing, these may also be taken into account as mitigating factors.

Hong Kong has no deferred prosecution agreement or non-prosecution agreement, and no guideline for assessing a penalty under one. A plea agreement is usually a charge negotiation under the Prosecution Code. The court is not bound by it and retains the sentencing decision.

Under Section 73 of the CPO, the court may order a convicted offender to pay compensation for personal injury, loss or damage, enforceable as a civil debt. In practice, courts will not exercise the power where loss is not readily ascertainable or requires complex inquiry. Fraud cases of that kind are usually left to civil proceedings as the High Court has unlimited jurisdiction over such civil claims.

The SFC may seek restorative relief from the defendant through several routes:

• the MMT may order disgorgement under Section 257(1)(d) of the SFO;
• Section 213(2)(b) enables an order requiring steps to restore the parties to a transaction to their previous position;
• Section 214(2)(d) allows disqualification of up to 15 years; and
• Section 214(2)(e) allows the Court to make other appropriate orders, including compensation orders in appropriate cases.

Victims may pursue civil remedies in the District Court or the High Court:

• deceit;
• unjust enrichment;
• knowing receipt;
• dishonest assistance;
• proprietary claims;
• tracing;
• Mareva injunctions under Section 21L of the High Court Ordinance (Cap 4);
• Norwich Pharmacal orders; and
• interim relief in aid of foreign proceedings under Section 21M of the High Court Ordinance.

The District Court has civil jurisdiction over claims exceeding HKD75,000 and up to HKD3 million, while the Court of First Instance has unlimited civil jurisdiction.

Despite the Law Reform Commission’s 2012 recommendation to establish an opt-out class action regime, no corresponding bill was ever tabled in Hong Kong. Multi-party disputes must therefore proceed via representative actions under Order 15, rule 12 of the Rules of the High Court (Cap 4A), subject to the “same interest” test or the “common ingredient” requirement and with no damages-distribution mechanism.

The Department of Justice (DOJ) is the principal prosecuting authority, its independence protected by Article 63 of the Basic Law. Investigation is carried out by specialist agencies. The Independent Commission Against Corruption (ICAC) investigates corruption under the POBO and the ICAC Ordinance (Cap 204) across public and private sectors. The SFC investigates market misconduct and intermediary breaches; it may refer indictable offences to the DOJ, prosecute summarily, bring civil proceedings before the MMT, and seek disqualification and restoration in the High Court. The HKMA supervises authorised institutions’ AML/CFT compliance under the AMLO. The JFIU, run jointly by the Police and Customs and Excise Department (“Customs”), receives and analyses suspicious transaction reports. The Police investigate fraud and co-ordination of the response to deception cases is done through the Anti-Deception Coordination Centre, while the Commercial Crime Bureau handles complex commercial fraud. The IRD investigates tax evasion, the AFRC regulates public-interest-entity auditors, and the Competition Commission investigates under the Competition Ordinance (Cap 619), with the Competition Tribunal imposing sanctions.

Civil and administrative enforcement runs through the MMT, SFC civil proceedings, HKMA, SFC and AFRC discipline, and the Competition Tribunal. There is no formal conflict-of-jurisdiction mechanism; agencies co-ordinate through referrals and joint operations, with criminal prosecution generally taking precedence. Cases are allocated by gravity across the Magistrates’, District and High Courts; there are no specialised criminal courts. Enforcement priorities are shaped by government policy and public concern, but there is no improper political interference in charging decisions.

Investigations typically begin following complaints, referrals from other authorities, exchanges, auditors or listed companies, suspicious transaction reports to the JFIU, or the authority’s own surveillance and intelligence. Opening an investigation does not require judicial approval, though the principal coercive powers do. Each agency operates under its own framework. For instance, the ICAC can utilise Section 13A of the POBO; the SFC may rely on Sections 179 and 182 of the SFO. For money laundering inquiries, Section 4 of the OSCO also enables a judge to order production of material.

Authorities may demand production of and gain access to documents under Section 4 of the OSCO, Sections 179 and 183 of the SFO, Section 13 of the ICAC Ordinance and Section 41 of the Competition Ordinance; non-compliance is a criminal offence.

Dawn raids are an established tool in serious cases. Under Section 191 of the SFO, a magistrate may issue a warrant authorising entry, search and seizure. Warrants are commonly executed at company offices, auditors’ premises and residences, and seizures frequently include computers and mobile devices. According to Section 191(6) and (7), failure to comply with such warrants without reasonable excuse is itself an offence and carries a fine of HKD1 million and 2 years’ imprisonment if convicted on indictment.

Compulsory questioning differs by agency. The ICAC may require suspects and witnesses to attend and provide information; suspects are interviewed under caution and may seek legal advice and request a lawyer’s presence. Under Section 183(1) of the SFO, an investigator may require any person to attend, answer and produce documents; failure without reasonable excuse is an offence under Section 184. There is no right to silence in SFC interviews, but the privilege against self-incrimination is preserved in modified form under Section 187: an answer in respect of which the claim is made is inadmissible in subsequent criminal proceedings, though derivative evidence remains admissible and pre-existing documents must be produced. Police suspects are cautioned and retain the common law right to silence.

Authorities may trace, freeze and seize digital assets through the letter-of-no-consent regime, restraint orders and Norwich Pharmacal orders against exchanges. Under Section 58(1)(a) of the Personal Data (Privacy) Ordinance (Cap 486) (PDPO), data held for crime prevention and detection is exempt from certain use and access restrictions, so data protection is no defence to lawful compulsory process.

Hong Kong authorities increasingly use AI and advanced digital tools to combat financial crime. The JFIU processes suspicious transaction reports through the STREAMS 2 system, while the SFC operates market surveillance monitoring insider dealing, false trading, price rigging and manipulation, and has acted against unlicensed advice on social media. To enhance cross-section co-ordination, the FINEST platform, operated with the Police, HKMA and banks, enables real-time intelligence sharing, and authorities use blockchain analysis to trace crypto flows.

There is no specific statute governing law enforcement use of AI:

• the Interception of Communications and Surveillance Ordinance (Cap 589) governs covert surveillance;
• the PDPO regulates data use, with the Section 58 crime-prevention exemption; and
• the Protection of Critical Infrastructures Ordinance (Cap 653), in force from 1 January 2026, imposes security duties on designated operators.

The SFC’s Circular on generative AI (Ref 24EC55, 12 November 2024) and the HKMA’s publication of the Research Paper on Generative AI in the Financial Services Sector on 27 September 2024 identified key hurdles including compliance and risk concerns, as well as agreeing on international regulatory principles such as demanding transparent disclosure to end-users and the prevention of systemic discrimination.

There is no formal guideline under which the authorities accept or reject AI-enhanced internal investigations by companies.

Internal investigations are not generally mandatory but are expected by regulators and often practically necessary. Licensed persons must notify the SFC of material or suspected breaches, and listed companies must disclose inside information under Part XIVA of the SFO.

The framework for internal investigations is shaped by legal professional privilege, data protection and employment law, and regulatory expectations. The leading privilege authority is CITIC Pacific Ltd v Secretary for Justice [2015] HKCA 571, which held that the corporate “client” is the company itself, rejecting the narrow UK approach, and adopted the dominant purpose test for both legal advice and litigation privilege, extending to in-house lawyers. Section 58(1)(a) of the PDPO provides a crime-prevention exemption, and Section 21B of the Employment Ordinance (Cap 57) protects employees who give evidence to authorities, but not internal reporting. The SFC Code of Conduct paragraph 12.5, HKMA Supervisory Policy Manual CG-1 and the HKEX Corporate Governance Code require whistle-blowing channels and controls. Companies are not generally obligated to share findings, but aforementioned notification duties, co-operation credit and compulsory production powers create practical pressure to disclose. Privilege does not extend to pre-existing documents, and is defeated by the crime-fraud exception. Furthermore, the privilege belongs to the company, which may waive it even where that disadvantages its directors.

Criminal prosecutions are initiated by laying an information or preferring an indictment, commencing in the Magistrates’ Courts. Charging decisions are made by the DOJ under the Prosecution Code, applying a two-stage test. At the evidence stage, prosecutors must be satisfied there is sufficient admissible evidence to justify proceedings, assessed by whether there is a reasonable prospect of conviction. Where the evidence falls short, proceedings must not be started or continued however serious the offence. At the public interest stage, paragraph 5.9 lists factors including:

• the gravity of the offence;
• the culpability and circumstances of the suspect;
• delay;
• criminal history;
• remorse;
• reparation and co-operation;
• the position of victims;
• the availability of alternatives; and
• deterrence.

The DOJ has discretion over whether and what to charge. The Prosecution Code requires that charges adequately reflect the criminality and be kept as low as reasonably possible, and that charges not be dropped merely to secure a plea. The ICAC, SFC and other agencies may refer cases but do not make charging decisions for indictable offences: for instance, the SFC may only prosecute summarily and bring civil proceedings. The Secretary for Justice acts independently under Article 63 of the Basic Law to ensure all prosecution-related decisions are free from interference.

Hong Kong has no deferred or non-prosecution agreements and no statutory civil recovery regime of the United Kingdom kind. There is no formal mechanism for resolving a criminal investigation by court-approved agreement, but several alternatives operate.

Charge negotiation is available under Chapter 13 of the Prosecution Code: the prosecution may accept a plea to a lesser or reduced number of charges, justified by the evidence and public interest. The court need not approve the agreement and is not bound on sentence. Under Section 61 of the MO, a court may bind a defendant over to be of good behaviour, a discretionary alternative to conviction for minor or technical matters, though unsuitable for serious fraud, corruption or money laundering. Where a matter is resolved through regulatory or civil routes, the outcome is frequently contingent on compliance improvements, remedial action, enhanced controls and independent review. The introduction of deferred prosecution agreements remains a matter of policy discussion rather than enacted legislation.

Fraud

Under Section 16A of the TO, fraud requires deceit, an intent to defraud, and the inducement of another person to act or make an omission resulting in a benefit to or prejudice or substantial risk of prejudice to another person. The maximum penalty is 14 years’ imprisonment.

Conspiracy to Defraud

A common law offence preserved by Section 159C(6) of the CO, conspiracy to defraud requires an agreement to defraud and carries up to 14 years’ imprisonment. It is frequently charged in complex cases and has extraterritorial reach where the agreement is made or an act is carried out in Hong Kong.

False Accounting

Under Section 19 of the TO, false accounting covers dishonestly destroying, defacing, concealing or falsifying an account, record or document made or required for accounting purposes, or using or producing a materially misleading, false or deceptive account, record or document, with a view to gain for oneself or another or with intent to cause loss to another. The maximum penalty carries up to ten years’ imprisonment. Where the offence is committed by a body corporate, Section 20 extends liability to officers who consented to or connived in the offence.

Fraudulent Trading

Section 275 of the Companies (Winding Up and Miscellaneous Provisions) Ordinance (Cap 32) (CWUO) applies where, in the course of a company’s winding-up, the company’s business has been carried on with intent to defraud creditors or for a fraudulent purpose. Persons who are knowingly parties to the carrying-on of the business in that manner may be subject to liability. The provision also contains criminal liability, with a maximum penalty of an unlimited fine and five years’ imprisonment, in addition to potential personal liability for the company’s debts.

Directors

Directors owe statutory duties under Sections 465 to 470 of the Companies Ordinance, including:

• good faith;
• care, skill and diligence; and
• avoidance of conflicts.

Breach may give rise to civil liability and, in serious cases, criminal prosecution. Directors may also be subject to disqualification in specified circumstances, with a maximum disqualification period of 15 years under Section 168E of the CWUO.

The POBO, enforced by the ICAC, is the principal anti-corruption statute and covers both public and private sectors. Section 4 targets bribery of public servants. Section 9 targets private-sector bribery, making it an offence for an “agent”, including an employee or director, to solicit or accept an advantage in connection with the principal’s affairs without lawful authority or reasonable excuse, and separately criminalising the offering of such an advantage. Each carries a maximum of HKD500,000 and seven years’ imprisonment. Section 10 creates the offence of a public servant holding property disproportionate to known income without satisfactory explanation, with the burden on the defendant once a prima facie case is shown.

Hong Kong has no specific offence of bribery of foreign public officials. The POBO is concerned with corrupt dealings involving Hong Kong public servants and public bodies, and it does not generally treat foreign public officials as “public servants” for the purposes of its public-sector bribery provisions. However, conduct involving a foreign public official may fall within other offences in Hong Kong law, including the agent bribery provisions under Section 9.

There is no distinct influence-peddling offence in Hong Kong, though such conduct may be prosecuted as fraud, conspiracy to defraud or bribery depending on the circumstances. There is no fixed sentencing tariff for bribery despite the maximum POBO penalty, and it is not uncommon for imprisonment to be imposed, particularly in serious cases.

Hong Kong has no general statutory obligation to prevent bribery and no “failure to prevent” offence of the kind in Section 7 of the UK Bribery Act 2010. Similarly, there is no legal obligation under the POBO to maintain a compliance programme to prevent corruption or bribery, despite the recommendations made by the ICAC on establishing control systems and fostering anti-corruption culture.

Financial institutions, on the other hand, may be subject to regulatory requirements to maintain adequate internal controls and allocate sufficient resources to prevent corruption. For example, the HKMA expects authorised institutions to adopt appropriate internal codes of conducts and controls to address corruptions risks. The SFC similarly requires licensed and registered persons to maintain adequate internal control procedures and financial and operational resources to protect against fraud, other dishonest acts or professional misconduct. In Hong Kong, there is no general obligation to report suspected bribery to law enforcement authorities. However, a reporting obligation may arise where the suspected bribery has generated criminal proceeds under Section 25A(1) of the OSCO. Failure to make the required disclosure is an offence punishable by a fine of HKD50,000 and imprisonment of three months.

Financial institutions regulated by HKMA and SFC are also subject to specific notification requirements under HKMA’s Supervisory Policy Manual and the SFC Code of Conduct respectively. In particular, authorised institutions may be required to notify the HKMA of specified regulatory breaches, while paragraph 12.5 of the SFC Code of Conduct requires licensed persons to notify the SFC immediately of certain actual or suspected material breaches, infringements or non-compliance. Failure to comply may result in disciplinary actions.

The SFO prohibits insider dealing and other forms of market misconduct. Insider dealing is principally governed by Sections 270 and 291 of the SFO, which occurs where a person connected with a listed corporation possesses inside information and deals in the corporation’s listed securities or derivatives, or counsels or procures another person to deal. The SFO further identifies five forms of market misconduct:

• false trading;
• price rigging;
• disclosure of prohibited transaction information;
• disclosure of false or misleading information inducing transactions; and
• stock market manipulation.

Enforcement of market misconduct is dual track. It may be pursued either before the MMT as civil market misconduct or through criminal proceedings under Part XIII and Part XIV respectively. The criminal offences carry a maximum penalty of HKD10 million and ten years’ imprisonment on conviction. The tribunal, on the other hand, imposes sanctions including:

• disgorgement of profits or avoided losses;
• disqualifications orders;
• “cold shoulder” orders;
• cease-and-desist orders; and
• costs.

Criminal banking law is governed by the Banking Ordinance (Cap 155) (BO) and the AMLO. Section 11 of the BO provides that no banking business shall be carried on in Hong Kong except by a bank. Any person and every director and manager of a company that contravenes the section commits an offence, which is punishable by a fine of HKD1 million and imprisonment for five years.

The principal criminal offence concerning tax evasion is Section 82 under the IRO, which applies where a person acts wilfully and with intent to evade tax or to assist another person to evade tax through specified conduct. The offence may be committed by:

• omitting income from a return;
• making an incorrect statement; or
• failing to notify chargeability.

The prosecution must therefore establish both the requisite intent to evade or assist in evading tax, in addition to the prohibited act. The offence is punishable by a fine of HKD50,000, a further fine of three times the tax evaded, and three years’ imprisonment. The Inland Revenue Department (IRD) may also impose substantial additional tax administratively under Section 82A, which is a civil rather than criminal penalty.

Hong Kong does not have a specific offence of failure to prevent tax evasion equivalent to the UK Criminal Finances Act 2017. There is no general statutory obligation on a company to maintain procedures specifically to prevent the same, and failure to do so is not a criminal offence.

Hong Kong has implemented the OECD Common Reporting Standard for automatic exchange of financial account information under the IRO. Reporting financial institutions are required to identify financial accounts held by tax residents of reportable jurisdictions, collect prescribed information and furnish the relevant information to the IRD.

Section 19 of the TO creates the offence of false accounting. More details can be found under 3.1 Criminal Company Law and Corporate Fraud. Sections 373 to 381 of the Companies Ordinance require companies to keep adequate accounting records for seven years. Directors may commit an offence where they fail to take all reasonable steps to secure compliance with these requirements. A director who fails to take such steps is liable to a fine of HKD300,000, while a director who wilfully fails to do so is liable to a fine of HKD300,000 and imprisonment for 12 months.

Schedule 2 to the AMLO requires financial institutions and designated non-financial businesses to keep customer due diligence and transaction records for five years. A financial institution that knowingly contravenes commits an offence punishable by HKD1 million and two years’ imprisonment. Where the contravention is committed with intent to defraud a relevant authority, the maximum is HKD1 million and seven years’ imprisonment.

The competition law regime in Hong Kong is the Competition Ordinance. The First Conduct Rule (Section 6) prohibits agreements, concerted practices and decisions between undertakings with the object or effect of restricting competition, including price fixing, market sharing, output limitation and bid rigging. The Second Conduct Rule (Section 21) prohibits an undertaking with a substantial degree of market power from abusing that power by engaging in conduct having the object or effect of preventing, restricting or distorting competition.

The Competition Commission investigates, issues warning notices, accepts commitments, issues infringement notices and commences proceedings, but cannot impose penalties. The Competition Tribunal determines contraventions, imposes sanctions and hears follow-on damages claims. It may impose pecuniary penalties of up to 10% of the undertaking’s Hong Kong turnover for each year of infringement, subject to a three-year cap under Section 93, and make other orders including director disqualification under Section 101.

The Commission operates a leniency policy. It is only available to the first individual that discloses their involvement in cartel conduct in respect of which the Commission has not yet opened an initial assessment or investigation (Type 1 Leniency) or an individual that is able to provide substantial assistance to the Commission’s investigation and subsequent enforcement action of cartel conduct which the Commission is already assessing or investigating (Type 2 Leniency). If the individual meets all the conditions for leniency, the Commission will not take any proceedings against them in relation to the reported conduct.

The Trade Descriptions Ordinance (Cap 362) is the principal consumer protection statute. Section 7 criminalises applying a false trade description to goods, or supplying or offering to supply goods to which a false trade description is applied. Section 7A applies similar prohibitions to false trade descriptions of services supplied or offered to consumers.

The main unfair trade practices are as follows:

• misleading omissions of material information (Section 13E);
• aggressive commercial practices that significantly impair consumer freedom of choice through harassment, coercion or undue influence (Section 13F);
• bait advertising without reasonable grounds to offer at the stated price (Section 13G);
• bait-and-switch (Section 13H); and
• wrongly accepting payment where the trader does not intend to supply, intends to supply materially inferior goods or services, or lacks reasonable grounds to believe it can supply (Section 13I).

The constituent elements vary by offence, but generally concern specified misleading, coercive or deceptive conduct in connection with the promotion, sale or supply of goods or services to consumers.

Conviction for the Section 7 and Sections 13E to 13I offences carries penalties of up to HKD500,000 and five years’ imprisonment. The Customs enforces for general goods and services, and the Communications Authority for telecommunications and broadcasting.

Section 161 of the CO creates the offence of access to a computer with criminal or dishonest intent, across four limbs, carrying up to five years’ imprisonment. However, the application of Section 161 to insider misuse of computer systems has raised difficulties where the defendant already had authorised access to the relevant system. In Secretary for Justice v Cheng Ka-Yee and Others [2019] HKCFA 9, the CFA upheld the acquittals, holding that “obtaining access” to a computer does not apply to a person’s use of their own computer where there is no access to another computer.

Criminal damage under Sections 59(1A) and 60(1) of the CO apply to deletion or corruption of data and software, carrying a maximum penalty of up to ten years’ imprisonment. A person commits criminal damage if, without lawful excuse, they destroy or damage property belonging to another with the intention to destroy or by being reckless. This includes the misuse of a computer, which covers interfering with the functioning of a computer, altering or erasing any program or data stored in a computer, or adding any program or data to the contents of a computer.

Confidential business information is protected through the common law of confidence and contractual non-disclosure agreements, while the PDPO separately protects personal data.

The Protection of Critical Infrastructures (Computer Systems) Ordinance (Cap 653) serves as Hong Kong’s first comprehensive cybersecurity law. It covers eight essential-services sectors and imposes organisational, preventative, and incident reporting and response duties on designated operators of critical infrastructure to ensure that they adopt appropriate measures to protect their computer systems. Non-compliance with specified statutory obligations may constitute an offence, with maximum fines ranging from HKD500,000 to HKD5 million.

United Nations Security Council sanctions are implemented in Hong Kong through the United Nations Sanctions Ordinance (Cap 537) and regulations thereunder. They prohibit specified dealing with designated persons, entities, funds, economic resources or goods. Breach is generally a criminal offence, with penalties varying by regulation but typically including unlimited fines and imprisonment for up to seven years.

Terrorist financing and related sanctions are addressed by the United Nations (Anti-Terrorism Measures) Ordinance (Cap 575), carrying a fine and up to 14 years’ imprisonment. Section 3 extends to conduct outside Hong Kong by Hong Kong permanent residents and locally incorporated bodies.

Hong Kong implements UN sanctions through its domestic legal framework, principally the United Nations Sanctions Ordinance and regulations made under it, but does not automatically give effect to unilateral sanctions imposed by other jurisdictions. Breach of UN sanctions is prosecuted criminally, while breach of AML/CFT obligations may attract regulatory sanctions by the HKMA and SFC.

Under Section 25A of the OSCO, a person who knows or suspects that property represents the proceeds of an indictable offence, or was or is intended to be used in connection with such an offence, must disclose that knowledge or suspicion to an authorised officer as soon as it is reasonable to do so. Failure to make the disclosure is an offence punishable by a fine of HKD50,000 and up to three months’ imprisonment. Section 25A(5) separately criminalises tipping off, carrying a maximum fine of HKD500,000 and three years’ imprisonment.

Section 89 of the CPO provides that a person who aids, abets, counsels or procures the commission of an offence is guilty of the like offence. The prosecution must prove that the defendant assisted, encouraged or counselled the commission of the offence with intent. Knowledge of the circumstances constituting the offence is generally required, though it is not necessary to prove that the defendant knew the precise form the offence would take.

Statutory conspiracy under Section 159A of the CO applies to agreements to commit offences other than conspiracy to defraud, with the same maximum as the substantive offence subject to the specific rules in Section 159C. Conspiracy to defraud is a common law offence preserved by Section 159C(6), carrying up to 14 years’ imprisonment.

Dealing with property known or believed to represent the proceeds of an indictable offence is an offence under Section 25 of the OSCO, carrying penalties of up to HKD5 million and 14 years’ imprisonment. The prosecution must prove that the defendant dealt with property and, at the time of dealing, knew or had reasonable grounds to believe that the property, in whole or in part, directly or indirectly represented the proceeds of an indictable offence. “Dealing” includes receiving, acquiring, concealing, disguising, disposing, converting, transferring or moving property into or out of Hong Kong. Any indictable offence may be a predicate offence, and, under Section 25(4), indictable offence includes conduct outside Hong Kong that would constitute an indictable offence if it had occurred in Hong Kong.

Section 25A(1) imposes an obligation to disclose knowledge or suspicion of money laundering. A person who discloses may have a statutory defence under Section 25A(2) where the necessary disclosure has been made and the statutory conditions concerning consent or subsequent disclosure are satisfied.

The AMLO imposes specified AML/CFT obligations on financial institutions and designated non-financial businesses and professions, including customer due diligence, record-keeping, monitoring and reporting obligations. Under Section 5, an authorised institution that knowingly contravenes a specified provision may be liable to a maximum fine of HKD1 million and two years’ imprisonment, while a contravention committed with intent to defraud the HKMA carries a maximum fine of HKD1 million and seven years’ imprisonment.

In practice, suspicious transaction reports are generally made to the JFIU through the STREAMS 2 system. The JFIU receives and disseminates reports, while the Police and Customs investigate. The relevant regulatory authorities, including the HKMA and SFC, supervise compliance within their respective sectors, and the DOJ conducts prosecutions.

Hong Kong has no dedicated ESG criminal statute. ESG misconduct is addressed through sectoral environmental legislation. Environmental offences are enforced principally by the Environmental Protection Department under legislation including the following:

• Air Pollution Control Ordinance (Cap 311);
• Water Pollution Control Ordinance (Cap 358); and
• Waste Disposal Ordinance (Cap 354).

Examples include operating a specified process without the required licence, unlawfully discharging polluting matter, and unauthorised disposal of waste. The constituent elements depend on the offence and generally involve carrying out the regulated activity without the required permit or in contravention of the applicable statutory or licence requirements. Penalties vary according to the offence: certain serious water pollution offences may attract up to HKD1 million and two years’ imprisonment.

There is no general statutory regime in Hong Kong equivalent to the EU Corporate Sustainability Due Diligence Directive requiring companies to conduct human-rights or environmental due diligence. Hong Kong does not, however, leave ESG disclosure entirely unregulated. Appendix C2 to the Listing Rules makes Scope 1 and Scope 2 greenhouse gas emissions disclosures mandatory for all listed issuers.

Hong Kong has no AI Act equivalent to the EU AI Act and no single regulator for AI . Liability for AI-enabled misconduct attaches through existing criminal and regulatory offences rather than a bespoke statute.

In the financial sector, the SFC November 2024 Circular on the Use of Generative AI Language Models applies to licensed corporations using AI language models in regulated activities. It regards the use of AI for investment recommendations, advice and research as high-risk, and requires appropriate senior-management oversight, governance, internal controls, model validation, monitoring, data and cybersecurity controls and third-party due diligence. Algorithmic trading is also subject to the SFC’s Code of Conduct and related requirements concerning testing, governance, risk management, pre-trade controls and emergency shutdown or “kill switch” arrangements.

Cryptocurrencies are treated as “property” capable of being held on trust, following Re Gatecoin Ltd (in liquidation) [2023] HKCFI 914. The Court held that cryptocurrencies can constitute trust property, allowing proprietary remedies such as tracing and proprietary injunctions where a proprietary interest is established.

Virtual assets are principally regulated under the AMLO. Pursuant to Part 5B of the AMLO, a person who operates a centralised virtual asset trading platform serving Hong Kong customers is required to be licensed. Operating such a platform without a licence is an offence under Section 53ZRD, punishable on conviction on indictment by a fine of up to HKD5 million and seven years’ imprisonment, and a further fine of HKD100,000 for every day the offence continues. Sections 53ZRF and 53ZRG also criminalise certain fraudulent or deceptive conduct and misrepresentations involving virtual assets.

The Stablecoins Ordinance (Cap 656) establishes the HKMA as the licensing authority for specified fiat-referenced stablecoin activities. Carrying on a regulated stablecoin activity without the requisite licence or exemption is prohibited under Section 8. On conviction, the offence is punishable by a fine of up to HKD5 million and seven years’ imprisonment, with a further fine of HKD100,000 per day while the offence persists.

General offences may also apply to crypto-related conduct, including fraud, money laundering and conspiracy to defraud. Where a virtual asset is a security, the SFO licensing and market misconduct regimes may also apply. Non-compliance may result in criminal liability and/or SFC regulatory sanctions.

The principal general defences are the same as those in criminal cases generally:

• absence of the requisite conduct or mental element;
• duress;
• mistake of fact in respect of the criminal intent; and
• statutory defences such as lawful authority or reasonable excuse, where applicable.

Where a recognised defence is properly raised by the defendant, the prosecution will generally bear the burden of disproving it beyond reasonable doubt, subject to the statutory framework.

Hong Kong has no general statutory defence of “adequate procedures” and no failure-to-prevent offence for corporate crime, so a compliance programme does not by itself constitute a defence to criminal liability. It may nevertheless be relevant to the assessment of culpability and the public interest in prosecution, to sentencing, and to regulatory assessments of a firm’s systems and controls by HKMA and SFC. Certain regulatory offences provide a due diligence defence.

There is no general de minimis doctrine for white-collar offences and a defendant cannot raise triviality as a defence. The concept operates instead through prosecutorial discretion and sentencing mitigation. The Prosecution Code, paragraph 5.3 requires both sufficient admissible evidence and that the general public interest require prosecution. Among the public interest factors in paragraph 5.9:

• paragraph 5.9(e) considers whether the offence is “trivial, technical in nature, obsolete or obscure” – it is the closest equivalent in Hong Kong to a de minimis consideration;
• paragraph 5.9(h) takes into account the suspect’s co-operation, remorse and repayment; and
• paragraph 5.9(n) considers the availability of alternatives such as a caution or warning.

The Prosecution Code does not expressly use the term “de minimis”.

Certain statutes provide genuine de minimis exclusions. For example, Schedule 1 to the Competition Ordinance excludes agreements or conduct of lesser significance from the conduct rules: the First Conduct Rule does not apply to anti-competition agreements where the undertakings’ combined turnover is below HKD200 million, unless the agreement involves serious anti-competitive conduct, while the Second Conduct Rule does not apply where an undertaking’s annual turnover does not exceed HKD40 million. Triviality may be relevant at both the prosecutorial stage and at sentencing, but does not generally constitute a defence. There is no general sector-wide exemption from white-collar criminal liability, although particular regulatory regimes may contain specific statutory exclusions or exemptions.

Hong Kong has no formal plea bargaining regime under which a sentence can be agreed and no United States-style co-operation agreements, but the prosecution sets out a framework for plea negotiation under Chapter 13 of the Prosecution Code. The prosecution may accept a plea to a lesser or alternative charge, or to fewer counts, provided that:

• there is admissible evidence to support the charges to which the plea is offered;
• the charges adequately reflect the criminality involved; and
• the charges leave the court with sufficient scope to impose an appropriate sentence.

Paragraph 8.1 of the Prosecution Code further requires that the charges adequately reflect the criminality and be kept as low as reasonably possible, and that charges not be dropped merely to secure a plea. However, the court retains ultimate discretion as to sentencing decision, even where the parties have agreed the charges and factual basis for the plea.

A guilty plea at the earliest opportunity generally attracts a discount of up to one third, diminishing as the plea comes later (HKSAR v Ngo Van Nam [2016] 5 HKLRD 1). A defendant who assists the authorities may also constitute a mitigating factor and may, in appropriate cases, support a further discount. There is no general obligation to disclose discovered misconduct, but specific duties such as Section 25A(1) of the OSCO apply. Voluntary reporting and pre-charge co-operation may be relevant to the prosecution’s public-interest assessment and to sentencing mitigation.

Hong Kong has no general statutory whistle-blower protection regime equivalent to the US Dodd–Frank framework. Protection is instead provided through sector-specific laws, regulatory requirements and corporate governance. For example, Section 30A of the POBO protects an informer’s identity in proceedings. Information for an offence under the Ordinance is not admitted in evidence, and a witness cannot be required to disclose the name or address of an informer, unless that person is themself a witness.

For listed issuers, Appendix C1 to the Listing Rules and the Corporate Governance Code provide that an issuer should establish a whistle-blowing policy and system enabling employees and persons dealing with the issuer to raise concerns, in confidence and anonymity, about possible improprieties.

The ICAC provides a confidential reporting channel and accepts anonymous corruption complaints. Complaints are handled under procedures designed to protect the complainant’s identity and the confidentiality of the complaint.

Cross-border investigations may be affected by differences in legal professional privilege between jurisdictions. Following CITIC Pacific Ltd v Secretary for Justice [2015] 4 HKLRD 20, the Court of Appeal rejected the restrictive approach in the UK and recognised a broader scope of corporate legal advice privilege. Confidential internal communications between employees may be covered by legal advice privilege if their dominant purpose was obtaining legal advice. A document privileged in Hong Kong proceedings may not be privileged where it is sought elsewhere. In Hong Kong proceedings, privilege is governed by Hong Kong law as the law of the forum. Defence counsel therefore have to consider where a document will be collected and where it may have to be produced.

Cross-border data constraints may also affect multi-jurisdictional investigations. Hong Kong’s cross-border data transfer is relevant to Section 33 of the PDPO, which provides that personal data should not be transferred overseas to a jurisdiction that is less protective than under the PDPO. However, Section 33 has never been brought into force and does not currently apply. Where data is stored in other jurisdictions, the local law may restrict organisations and individuals from providing data stored there directly to foreign jurisdictions without prior approval. These differences may require defence counsel to carefully co-ordinate document collection, disclosure and co-operation across jurisdictions.

The principal pending changes concern virtual assets. The Financial Services and the Treasury Bureau and SFC have concluded consultations on licensing regimes for virtual asset dealing, custodian, advisory and management services, and a Bill is intended for 2026. The Stablecoins Ordinance came into operation on 1 August 2025. Pre-existing issuers who applied in time could continue until 31 January 2026. The HKMA granted the first two issuer licences in April 2026, to Anchorpoint Financial and HSBC. The Protection of Critical Infrastructures (Computer Systems) Ordinance (Cap 653) came into force on 1 January 2026, imposing organisational, preventative and incident-reporting duties on operators across eight essential-services sectors.

Hong Kong’s fifth-round FATF mutual evaluation is in progress. The 2023 follow-up report identified partial compliance on politically exposed persons, new technologies, customer due diligence in Designated Non-Financial Businesses and Professions and beneficial ownership transparency of legal arrangements. The outcome may drive further reform. Deferred prosecution agreements, reform of corporate criminal attribution, and statutory whistle-blower protection all remain matters of policy discussion as of now.

Enforcement activity is high, with rising suspicious transaction reports, active ICAC corruption investigations and substantial SFC disciplinary fines. The year ahead will be shaped by the virtual asset framework, critical infrastructure cybersecurity, the said FATF evaluation, and whether deferred prosecution agreements and whistle-blower protection advance to legislation.