China plans to exempt Hong Kong IPOs from cyber-security reviews

The exemption was outlined by officials in recent meetings with bankers. PHOTO: REUTERS

HONG KONG (BLOOMBERG) - China plans to exempt companies going public in Hong Kong from first seeking the approval of the country's cyber-security regulator, removing one hurdle for businesses that list in the Asian financial hub instead of the United States, according to sources familiar with the matter.

The exemption was outlined by officials in recent meetings with bankers, after a government statement on Saturday (July 10) announcing a new review process for foreign listings prompted questions over whether it would apply to Hong Kong, the sources said. The Cyberspace Administration of China (CAC) will vet companies to ensure they comply with local laws, but only those headed to other countries such as the US will undergo a formal review, the sources said.

All listings, including those in Hong Kong, will require a sign-off from the China Securities Regulatory Commission (CSRC) under the new framework, the sources said. Bankers briefed by the CSRC came away with the impression that the approval process for Hong Kong would be less onerous than for the US.

The CSRC and CAC did not immediately respond to requests for comment.

China's government is overhauling the way it regulates initial public offerings (IPOs) as part of a broad campaign to tighten oversight of companies like Didi Global and ByteDance that control reams of valuable user data. Beijing has entwined the importance of data with that of national security and the battle for technological supremacy with the US, fuelling speculation that regulators will use the new cyber-security review to end the flood of Chinese companies going public in New York.

Some companies are already reconsidering their plans. Bloomberg reported on Friday that Chinese social media and e-commerce start-up Xiaohongshu, or Little Red Book, is putting its US IPO on hold. Chinese on-demand logistics and delivery firm Lalamove is weighing a venue switch from the US to Hong Kong, sources familiar with the matter said earlier this week.

The cyber-security exemption for Hong Kong, which is a special administrative region of China, would help soften the blow for international banks like Morgan Stanley that have earned some US$6.4 billion (S$8.7 billion) in fees from offshore listings by Chinese companies since 2014. About 60 per cent of that was generated from Hong Kong listings.

It would also add to the tailwinds for Hong Kong Exchanges & Clearing. The bourse's stock has surged in recent years as the political stand-off between Beijing and Washington spurred Chinese technology giants, including Alibaba Group Holding, to seek secondary listings in Hong Kong.

While preventing Chinese companies from listing in the US would curb their access to the country's vast pool of individual savers, most of America's big institutional investors are already active in Hong Kong's US$6.9 trillion stock market. The city's currency is linked to the US dollar and is not subject to capital controls like in mainland China, making it a viable alternative to New York for both company founders and international money managers.

US President Joe Biden's administration plans to issue a warning to US companies about doing business in Hong Kong as soon as today, but it will not order them to scale back investments or leave the city.

As part of China's clampdown on IPOs, the CSRC is leading efforts to close a loophole that allowed companies to list overseas without regulatory approval if the unit selling shares was incorporated outside China, sources familiar with the matter said last week.

The loophole has been used by firms from Alibaba to Tencent Holdings to sidestep Chinese restrictions on foreign investment in sensitive industries, using the so-called Variable Interest Entity model. The updated regulations are expected to be ready in a month or two, one of the sources said, adding that banks and issuers are not likely to make a final decision on listing venues until the details are clear.

Security Risk

The flurry of activity follows Didi's US$4.4 billion IPO in New York at the end of last month, which went ahead despite reservations among regulators about the security risks posed by the ride-hailing giant's data trove. China has since banned the company from signing up new users and pulled its app from stores.

On Saturday, the authorities proposed rules that would require nearly all companies seeking to list in foreign countries to undergo a cyber-security review.

The shifting regulations threaten the plans of about 70 private firms based in Hong Kong and China that were set to go public in New York, according to data compiled by Bloomberg. Chinese companies have raised about US$76 billion through first-time US share sales over the past decade.

Not all firms planning US IPOs would meet the bar for listing in Hong Kong. Didi, for example, would have found it hard to satisfy the exchange's requirement that its operations be legally compliant because of China's complex licensing norms for businesses, vehicles and drivers. Separately, Hong Kong's exchange plans to raise the annual profit requirement for a main board listing by 60 per cent to HK$80 million (S$14 million) in the recent three financial years, effective from next year.

Join ST's Telegram channel and get the latest breaking news delivered to you.