Sanctions screening obligations for Hong Kong TCSPs and companies under Cap. 537

Sanctions Screening Hong Kong TCSP Company Compliance Obligations

Hong Kong trust or company service providers and Hong Kong-incorporated companies must screen customers and beneficial owners against the United Nations Sanctions Ordinance (Cap. 537) and its subsidiary regulations. The legal duty is absolute. A TCSP that onboards a designated person, or a company that transacts with one, faces criminal prosecution, fines of up to HK$500,000, and imprisonment for up to two years under Cap. 537 alone. Cap. 615 raises the stakes further: failure to conduct adequate customer due diligence or file a suspicious transaction report carries a fine of up to HK$1,000,000 and imprisonment for up to seven years.

Hong Kong Sanctions Screening Requirements

The United Nations Sanctions Ordinance (Cap. 537) gives effect to sanctions resolutions adopted by the United Nations Security Council. The Secretary for Commerce and Economic Development issues regulations under Cap. 537 that designate specific persons, entities, and activities subject to financial sanctions.

Hong Kong's sanctions regime operates independently from those of the United States or the European Union. A person sanctioned by OFAC but not listed under Cap. 537 is not prohibited from dealing with Hong Kong persons under Hong Kong law. That is the legal position. In practice, international business partners frequently require compliance with multiple regimes as a contractual condition, so TCSPs and companies with cross-border exposure must manage overlapping obligations.

The Companies Registry maintains the current designated persons list on its website. Screen every customer, beneficial owner, and transaction party against that list before establishing a business relationship. Re-screen on an ongoing basis.

Cap 537 Sanctions Compliance Hong Kong

Cap. 537 prohibits providing funds, financial assets, or economic resources to or for the benefit of a designated person, directly or indirectly. The prohibition catches any person who knows or has reasonable cause to suspect they are dealing with a designated person. Ignorance of the list is not a defence.

A designated person under Cap. 537 is any individual or entity named in a sanctions regulation made under the ordinance. The list is updated periodically as the United Nations adopts new resolutions or amends existing ones. Monitor these updates. When the list changes, re-screen existing customers immediately. A TCSP that fails to screen and later provides services to a designated person faces criminal prosecution on the basis of that failure alone.

Hong Kong TCSP Sanctions Obligations

The Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 615) and the Companies Registry guidelines set out the obligations. Integrate sanctions screening into CDD procedures as part of a risk-based approach.

Onboarding a new client requires two steps: identify the client and any beneficial owner using reliable, independent source documents, then screen both against the Cap. 537 designated persons list. If the client is a legal person, screen the directors, shareholders, and any person who exercises control over the entity.

Where screening reveals a potential match, or where the client is from a high-risk jurisdiction, apply enhanced due diligence. EDD means obtaining additional information about the source of funds and wealth and conducting more frequent monitoring of the business relationship.

Appoint an AML compliance officer responsible for implementing the sanctions screening programme. That officer must ensure staff receive training on sanctions obligations and that screening systems are adequate for the size and complexity of the business.

Hong Kong Company Sanctions Screening

A company that is not a TCSP but conducts business with international counterparties must still ensure it does not deal with designated persons. The obligation arises under both Cap. 537 and Cap. 615. Directors and officers are personally liable for compliance failures.

Maintain a written sanctions screening policy. It must set out procedures for checking new customers, suppliers, and business partners against the Cap. 537 list. It must also cover how the company handles potential matches: escalation to senior management and, where appropriate, reporting to JFIU.

Where the company is a TCSP, Cap. 615 adds record-keeping requirements. Keep records of sanctions screening checks for at least five years after the end of the business relationship. This includes screening results, any correspondence with the client about the check, and any decision to proceed with or decline the relationship.

Reporting and Enforcement

If a TCSP or company identifies a potential match with a designated person, stop. Do not proceed with the transaction or establish the business relationship. File a suspicious transaction report with JFIU immediately. The report must include the name of the designated person, the nature of the proposed transaction, and the steps taken to verify the match.

Failure to report a suspicious transaction is a criminal offence under Cap. 615. The penalty on conviction is a fine of up to HK$1,000,000 and imprisonment for up to seven years.

The Companies Registry and the Hong Kong Police Force enforce sanctions compliance. They may conduct inspections to verify that screening procedures are in place and that records are maintained. Non-compliance with Cap. 537 can result in a fine of up to HK$500,000 and imprisonment for up to two years.

Distinction Between Hong Kong Sanctions and International Regimes

Hong Kong's sanctions regime under Cap. 537 is limited to United Nations Security Council resolutions. The Hong Kong government does not maintain its own unilateral sanctions list. A person sanctioned by OFAC but not listed under Cap. 537 is not prohibited from dealing with Hong Kong persons under Hong Kong law.

TCSPs and companies that operate internationally may still be subject to foreign sanctions laws, if they have a presence in the sanctioning jurisdiction or if they process transactions through banks in that jurisdiction. A Hong Kong company with a branch in the United States must comply with OFAC sanctions for that branch's activities.

The Companies Registry advises TCSPs to consider the sanctions regimes of all jurisdictions in which they operate. Adopt a risk-based approach to screening that covers all relevant lists. Depending on the nature of the business, this may include screening against the United Nations Consolidated List, the OFAC Specially Designated Nationals List, and the European Union Consolidated List.

Practical Steps for Compliance

Take these steps to meet Hong Kong sanctions screening obligations:

1. Obtain the current Cap. 537 designated persons list from the Companies Registry website.
2. Integrate sanctions screening into the CDD process for all new customers and beneficial owners.
3. Re-screen existing customers when the designated persons list is updated.
4. Maintain records of all screening checks for at least five years.
5. Appoint an AML compliance officer to oversee the screening programme.
6. Train staff on sanctions obligations and the procedures for handling potential matches.
7. File a suspicious transaction report with JFIU if a match is identified.

These steps form the minimum standard. TCSPs and companies that handle high volumes of transactions or deal with high-risk jurisdictions should use automated screening software to manage the workload and reduce the risk of human error.

Penalties for Non-Compliance

The penalties are severe. A TCSP or company that deals with a designated person knowing or having reasonable cause to suspect that the person is designated commits an offence under Cap. 537. The maximum penalty is a fine of HK$500,000 and imprisonment for two years.

A TCSP that fails to conduct adequate CDD, including sanctions screening, commits an offence under Cap. 615. The penalty is a fine of up to HK$1,000,000 and imprisonment for up to seven years. The same penalty applies for failure to file a suspicious transaction report.

Directors and officers face personal liability. If an offence was committed with their consent or connivance, or was attributable to their neglect, they may be prosecuted alongside the company. A director who fails to ensure adequate sanctions screening procedures are in place is exposed.

The Companies Registry may also take regulatory action against a non-compliant TCSP. This can include suspension or revocation of the TCSP's licence. Without a licence, the TCSP cannot carry on business in Hong Kong.