2026-09-30
Added
Relevant Regulated Intermediaries must obtain express consent from individual clients before collecting and transferring their personal data to the Securities and Futures Commission and Hong Kong Exchanges and Clearing Limited under the HKIDR-DM. No orders or trades to open new positions are permitted without this consent, and intermediaries unable to obtain it must only submit orders to close out existing open positions. Consent must be explicit, not implied, and must cover specific purposes including data transfer, market surveillance, and enforcement functions. Intermediaries are required to authenticate client identity, retain records of consent and withdrawals for at least two years after the client relationship ends, and may rely on existing consent only if it expressly covers all required purposes.
SFC published 4 documents in the last 30 days — get each new one by email the day it lands.
2026-09-30 This circular sets out the Securities and Futures Commission’s (SFC) requirements for Relevant Regulated Intermediaries (RRIs) [1] to obtain express consent from individual clients [2] as required under paragraph 5.6A(p) of the Code of Conduct [3] for the collection and transfer of their personal data [4] to the SFC and Hong Kong Exchanges and Clearing Limited (HKEX) [5] under the HKIDR-DM, which is scheduled to be launched in the second quarter of 2028. Such consent may be obtained by written and signed acknowledgement on paper, by email, other electronic means (for example, by instant messaging applications) or by phone.
Read the rest free, and get an email when SFC publishes again
Source: Securities and Futures Commission Hong Kong — original document · Summary generated with machine assistance and reviewed before publication; the authoritative text is the regulator's original document. How RegAlert works
More like this from SFC
SFC published 4 documents in the last 30 days. We email you each new one the day it's published.