For several years, the Automatic Exchange of Information (AEOI) and the Common Reporting Standard (CRS) have reshaped the landscape of financial transparency in Hong Kong. Understanding the fundamental rules is no longer optional—it’s essential for any Financial Institution, trust, or individual with international financial ties. This guide provides a comprehensive breakdown of the core AEOI/CRS obligations.

What is AEOI and Why Was It Created?

The Automatic Exchange of Information (AEOI) is a global standard developed by the OECD to increase tax transparency and fight cross-border tax evasion. Its technical framework, the Common Reporting Standard (CRS), requires jurisdictions to obtain information from their financial institutions and automatically exchange that information with other jurisdictions on an annual basis.

In simple terms, it’s a system where tax authorities tell each other about the financial accounts held by foreign tax residents.

Hong Kong formally adopted these rules via the Inland Revenue (Amendment) (No. 3) Ordinance 2016, committing the city to this new global standard.

Who Must Report? Defining a “Financial Institution

This is the most critical first step: determining if you are considered a Reporting Financial Institution (FI). The definition is much broader than just banks and includes four main categories:

• Depository Institutions: Entities that accept deposits in the ordinary course of a banking or similar business (e.g., banks).
• Custodial Institutions: Entities that hold financial assets for the account of others as a substantial portion of their business.
• Investment Entities: This is a complex but crucial category. It includes any entity that primarily conducts as a business one or more of the following activities for a customer:
  • Trading in money market instruments, foreign exchange, securities, or commodities.
  • Individual and collective portfolio management.
  • Otherwise investing, administering, or managing financial assets or money on behalf of other persons.

  This is the category that captures most professionally managed trusts, investment funds, and family offices, making them Reporting FIs. An entity is also an Investment Entity if it’s managed by another FI.

• Specified Insurance Companies: Insurers who issue or are obligated to make payments with respect to a Cash Value Insurance Contract or an Annuity Contract.

What Must Be Identified? “Reportable Accounts” and “Controlling Persons”

If an entity is a Reporting FI, its next duty is to review its financial accounts to identify “Reportable Accounts.”

A Reportable Account is a financial account held by one or more “Reportable Persons” or by a Passive Non-Financial Entity (NFE) with one or more “Controlling Persons” who are Reportable Persons.

Defining “Controlling Persons”
For trusts, this is a key concept. The obligation is to “look through” the trust structure and identify the individuals who have ultimate control. This includes:

• The Settlor(s)
• The Trustee(s)
• The Protector(s), if any
• The Beneficiaries or class of beneficiaries
• Any other natural person exercising ultimate effective control over the trust.

This broad definition ensures that all relevant individuals associated with the trust are identified for tax residency purposes.

The Process: Your Core Compliance Obligations

A Reporting FI has two ongoing duties:

Step 1: Perform Due Diligence
You must establish and maintain procedures to identify the tax residency of all your account holders and, where applicable, their Controlling Persons. The primary tool for this is the self-certification form, which you must collect and validate for all new accounts. For pre-existing accounts, different review procedures apply based on account value.

Step 2: Annual Reporting
Once you have identified Reportable Persons, you must report specific information to the Hong Kong IRD annually. This information includes:

• Name, address, and jurisdiction(s) of tax residence.
• Taxpayer Identification Number (TIN).
• Account number.
• Account balance or value as of the end of the calendar year.
• The total gross amount of income, dividends, interest, and other payments credited to the account during the year.

From Rules to Reality: IRD Enforcement is Here

Following the due diligence and reporting steps outlined above is a legal requirement, not just a guideline. The Hong Kong IRD has now moved beyond the initial implementation phase and is actively conducting compliance reviews.

This means they are sending formal inquiry letters to Financial Institutions and trusts, directly testing whether these procedures have been properly followed. Understanding what these letters mean and how to navigate an IRD inquiry has become a critical business issue.

To understand what these letters mean and how to navigate an IRD inquiry, read our latest analysis: IRD Sending AEOI Letters? What Hong Kong Financial Institutions & Trust Companies Need to Know

The Consequences of Non-Compliance

The Inland Revenue Ordinance contains strict penalties for non-compliance. These can be applied for a range of failures, including:

• Failing to establish and maintain due diligence procedures.
• Filing an incorrect AEOI return.
• Failing to file a return by the deadline.

Penalties can include fines of HK$50,000 and imprisonment depending on the nature of the error. This makes proactive compliance essential.

Contact HKWJ Tax Law today for a comprehensive review to ensure your compliance framework is robust before an inquiry arrives.