The Standpoint Brief

01

Self-reports and legal professional privilege

What moved

On Wednesday, 22 April 2026, the Hong Kong District Court issued a pre-hearing ruling in a case the Securities and Futures Commission is bringing against a hedge fund, the founder of the hedge fund, and a former trader at the hedge fund. The case concerns alleged insider dealing in a 2017 block trade. As summarized by a Lexology Corporate and Regulatory Alert (May 2026):

Hong Kong District Court rules that self-report made to the Securities and Futures Commission and associated materials do not enjoy legal professional privilege.

The documents at issue, per Bloomberg's reporting (22 April 2026), include an internal investigation report prepared for the broker that executed the underlying trade. The broker had submitted the report to the regulator under express "limited waiver" language. The broker is not among those being prosecuted.

On whether the court could require the broker to hand over further documents while the case is being heard, Bloomberg reports the judge as follows:

because [the broker] isn't a party to the criminal trial, he has no jurisdiction to compel it to unredact the submitted materials or provide documents the court ruled are disclosable but haven't been handed to the SFC. [The broker] can decide whether to surrender them, and if it refuses to do so, it's up to the SFC to apply to a court for an enforcement order.

What it means

• Two separate points in the same ruling. The judge distinguishes between (i) what the court could require from the broker — which is not among those being prosecuted — while the case is being heard, and (ii) what the regulator could require directly using its own powers. The second is preserved by the judge's reference to the regulator applying separately for an enforcement order.
• The "limited waiver" wording on the report was not enough on its own. Per the Lexology Alert summary, the materials submitted to the regulator did not enjoy legal professional privilege.

What to consider

• The reach extends beyond self-reports. The thinking in this ruling may be relevant to documents shared with a regulator in other situations — responses to inspection requests, thematic review submissions, and supervisory correspondence.
• Keep legal-advice work separate from regulator-bound work. Where a firm wishes to keep legal advice protected, separating that work from work prepared to give to the regulator may help maintain the distinction.
• Set the purpose at the start, not after the fact. Engagement letters and scoping documents may benefit from clearly stating the purpose of each piece of work — agreed when the engagement begins, not later.
• Cover wording is not enough on its own. Phrases like "subject to legal professional privilege" or "limited waiver" on the front of a document have not, on the reporting of this ruling, been treated as enough on their own.

02

Director accountability and the documentary record

What moved

A Hong Kong Court of First Instance judgment on 7 May 2026 disqualified four former directors of a delisted Growth Enterprise Market issuer for periods of between 12 and 33 months. Two former independent non-executive directors received 12-month orders for negligence in failing to detect substantial overstatements in the issuer's reported balances.

What it means

• Detection failure is treated as misconduct. The Securities and Futures Commission continues to act against directors who fail to detect material red flags — regardless of complicity in the underlying wrongdoing.
• Reliance is not a defence. Neither management, internal audit, nor external audit closes the gap.
• Active scrutiny is the duty. It must be documented in minutes and committee follow-ups.

What to consider

• Documentation matters as much as discussion. How board scrutiny is recorded matters as much as how it is conducted — the difference between active and passive minutes shows up in court whether the board intended it to or not.
• Personal exposure follows the board pack. Independent non-executive directors bear personal exposure based on what the board pack shows, not what was discussed in the room.
• Documented red-flag handling provides protection. Documented evidence that red flags were raised, considered, and resolved is meaningful protection in proceedings under section 214 of the Securities and Futures Ordinance.

03

Anti-money laundering and tokenised products

What moved

Securities and Futures Commission circulars issued on 20 April 2026 set out the framework for tokenisation of authorised investment products and for secondary trading of tokenised authorised products. They sit alongside legislative work that would significantly extend the Anti-Money Laundering and Counter-Terrorist Financing Ordinance regime over virtual assets. The regime in force since 1 June 2023 has one license category — for virtual asset trading platform operators. The proposals being consulted on would expand this to five categories: trading platforms, dealers, custodians, advisers, and managers. The structure is modelled on Hong Kong's conventional securities licensing framework. A bill is expected at the Legislative Council during 2026.

What it means

• No relaxation of anti-money laundering obligations. New permissions for tokenised investment products carry no parallel easing of anti-money laundering and counter-terrorist financing requirements.
• Compliance must cover both traditional finance and distributed-ledger systems. Custody of private keys, beneficial ownership across distributed-ledger addresses, and monitoring of transfers across both kinds of systems all need to be in scope.
• Customer due diligence must reach wallet-level provenance. Counterparty identity is no longer sufficient.
• Most existing frameworks were not built for this.

What to consider

• Tokenisation expands what compliance must cover. Transaction monitoring, customer due diligence, and vendor mapping all extend when a product is offered in tokenised form.
• Beneficial ownership analysis must cover both worlds. Beneficial ownership through a distributed-ledger address raises different problems from corporate-structure ownership; both belong in the same risk assessment.
• Off-balance-sheet does not mean off the hook. Where private keys are safekept off-balance-sheet, residual obligations under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance shift into contractual and risk-register territory rather than disappearing.