Compliance Perspective: Implications of the Inland Revenue (Amendment) (Automatic Exchange of Information) Bill 2026 for YFG
Preface The Hong Kong government's proposed amendments to the Automatic Exchange of Financial Account Information (AEOI) system have been gazetted. The Compliance Department of YFG has received inquiries and is concerned about the possible impact of the relevant legislation on the company's business model and regulatory positioning. In response to these concerns, this article aims to outline the main directions of this AEOI revision and conduct a preliminary assessment of its potential impact on the company's operations. It also analyzes the classification of insurance brokerage companies under the Common Reporting Standard (CRS) framework and their possible compliance obligations.
Regulatory Framework
Press Release of the Government of the Hong Kong Special Administrative Region (March 25, 2026). The Inland Revenue (Amendment) (Automatic Exchange of Information) Bill 2026 was gazetted. Government Hong Kong (GovHK). ("Bill") (https://www.info.gov.hk/gia/general/202603/25/P2026032500544.htm?fontSize=1)
Organization for Economic Co-operation and Development (OECD), Common Reporting Standard, Section VIII(A)(1), Definition of “Reporting Financial Institution” (“RFI”)
Organization for Economic Co-operation and Development (OECD), Common Reporting Standard, Section VIII(A)(6)(a), regarding the definition of “Investment Entity”.
Organization for Economic Co-operation and Development (OECD), "Common Reporting Standard", Section VIII(A)(2): Definition of "Custodial Institution".
YFG Compliance Department's View
The main contents of the 2026 AEOI Amendment Regulations According to the official announcement of the Inland Revenue Department, the main contents of the bill include the following three major areas: 1.1. Introduction of compulsory registration requirements: • Requires that all RFIs, whether or not they have account information that needs to be reported to the tax bureau, must be registered through the automatic exchange of information website. • Existing institutions must complete registration on or before March 31, 2027. 1.2. Optimize record keeping requirements: • Reporting financial institutions are required to keep records for six years from the due date for submission of statements. • Even if the organization has been dissolved or is no longer eligible to report, the relevant responsible persons (such as directors or trustees) must still ensure that records are properly maintained until the expiry date. 1.3. Increase penalties and strengthen enforcement mechanisms: • Introduce new offenses for organizations that fail to comply with registration requirements or provide incorrect information. • Introduce a fine mechanism based on the number of financial accounts for failure to conduct due diligence to ensure penalties are commensurate with the seriousness of the offence. • Add an "administrative penalty" mechanism to provide a more timely and cost-effective punishment mechanism in addition to criminal prosecution. 1.4. The significant impact of the Bill on “already RFI” brokerage firms: If a brokerage firm has been classified as an RFI due to the nature of its business, the bill will bring the following new requirements: • Mandatory registration: Even if there are no accounts that need to be reported in the year (for example, all customers are Hong Kong tax residents), they must register on the automatic exchange of information website. • Six-year retention obligation: All due diligence records must be retained for at least six years or face higher fines. • Per-account penalties: In the event of omissions or misreporting, penalties may be calculated based on the number of affected accounts, significantly increasing the cost.
Does the Bill require Yu Fung Broker Limited to become an RFI? 2.1. Core principle: Identity depends on “business nature” rather than “draft revision” The main purpose of the Bill is to strengthen administrative controls (such as mandatory registration, record keeping and increasing penalties), rather than redefining who a financial institution is. The RFI definition of CRS remains unchanged and only includes: • Depository Institutions • Custodial Institutions • Investment Entities • Specified Insurance Companies (i.e., insurance companies that issue or are responsible for disbursing cash value or annuity contracts) Yu Fung Broker Limited: • Does not issue insurance products • Not maintaining customer financial accounts (discussed in point 4) • Does not hold or manage client investment assets • Not operating an investment or ILAS platform (discussed in point 5) • Only in the role of insurance intermediary Therefore, if an insurance broker's business is purely intermediary, its status remains as an "active non-financial entity" (Active NFE) and does not fall under RFI. Therefore, YFG is not an RFI, and the Bill does not require YFG to register as an RFI.
Does the Bill create new responsibilities for customers? Under the draft regulations, the basic obligations of customers (account holders) are broadly the same as the current CRS framework, but legal risks and compliance costs are significantly increased. The following are the specific impacts of the Bill on customers: 3.1. Legal obligation to provide “self-certification” Although current law already requires customers to submit self-certification, the new regulations further strengthen the power of reporting financial institutions (RFI) to collect information. If the customer refuses to provide the required tax residence information or supporting documents, RFI may be legally forced not to open an account, or freeze/close the existing account to avoid RFI's own violation of the law. 3.2. Criminal penalties for providing incorrect information (for customers) The Bill maintains and strengthens (the Bill indirectly makes the penalty mechanism more stringent in practice by optimizing the administrative framework and increasing penalties for institutions) for intentionally providing false or misleading information. If a customer submits a self-certification knowingly knowing that the content is false in material aspects, or recklessly providing false information, he or she commits a crime. Upon conviction, the maximum penalty is a level 3 fine (currently HK$10,000). 3.3. Data retention and traceability period extension Since RFI is required to keep records for at least six years (from the time the return is submitted), this means that clients' tax information will be on file for a longer period of time. If the tax bureau conducts a peer review or ad hoc investigation many years later, the information submitted by the customer many years ago will still be reviewed, increasing long-term tax risks. 3.4. Administrative costs may be passed on Although the penalties are mainly targeted at RFI, in order to comply with the high compliance requirements under the new regulations (such as the risk of penalty based on the account), financial institutions (banks, insurance companies) may: • Update terms: Require customers to sign more stringent liability exemption or compensation agreements. • Increase the number of reviews: Frequently ask customers to update expired information or resubmit forms. 3.5. Conclusion For most customers who declare honestly, there is no essential change in direct liability; but for customers who try to conceal their overseas tax identity or provide vague information, the probability of discovery and the cost of illegality will be greatly increased because RFI is forced to strengthen scrutiny.
Does the client fund account make YFG a custodian? Under the CRS framework, holding a "Client Money Account" for the purpose of forwarding premiums or claims does not generally make an insurance broker defined as a custodian institution. The following is a detailed analysis based on OECD CRS Article VIII(A)(2) and its notes: 4.1. "Main Business" Test (The20%Test) • To be defined as a custodian, the entity must have as its principal business “holding financial assets for the accounts of others”. • Income threshold: In the past three years, related income (such as custody fees, account management fees) generated from holding financial assets must account for 20% or more of total income. • YFG's situation: YFG's gross income mainly comes from commissions paid by insurance companies, rather than service fees generated from managing customer capital accounts. 4.2. Definition of “Financial Asset” (Financial Asset vs. Cash) • Characteristics of Cash: In the CRS definition, pure “cash” is generally not considered a financial asset. • Transit nature: Customer accounts held by insurance brokers are usually for administrative convenience (i.e., "collecting and paying" premiums or compensation). These funds stay in the account for a short period of time, and the broker does not conduct "investment management" or "hold for income" on these funds. 4.3. Views of the Hong Kong Inland Revenue Department (IRD) According to the guidance on automatic exchange of financial account information (AEOI) under the Hong Kong Inland Revenue Ordinance: • Insurance brokers are often considered Active NFEs (Active Non-Financial Entities). • Reason: Their function is to provide intermediary services and not to hold or manage financial accounts. Even if they hold client funds, this is to perform the administrative duties of the insurance contract and does not meet the "custodial and administrative" nature of a bank or trust company in the definition of "custodian institution." 4.4. Conclusion Unless there is an essential change in YFG’s business (for example, if it starts charging for long-term management of securities assets for clients, and this income exceeds 20% of total income), simply having a Client Money Account for transferring premiums will not make YFG an RFI.
Does assisting clients in managing ILAS make YFG an investment entity? Although YFG does not provide discretionary investment management services (DPMS) for Investment-Linked Assurance Scheme (ILAS), nor does it provide any investment advice, if an insurance brokerage company provides DPMS, it has the opportunity to be classified as an investment entity (Investment Entity) and then become a Reporting Financial Institution (RFI). According to Article VIII(A)(6)(a) of the OECD CRS, the analysis is as follows: 5.1. Changes in the nature of business When a brokerage firm provides discretionary services, its role goes beyond being a mere "insurance intermediary" and is instead performing the following activities: • Managing financial assets on behalf of others: This is fully consistent with the definition of Section VIII(A)(6)(a)(iii) (Individual and collective portfolio management). • Investment decision-making power: Because it is "discretionary", the broker has the right to buy and sell the investment options in the client's ILAS (Investment-Linked Life Insurance) policy. 5.2. Income threshold test (The 50% Test) To be considered an "investment entity", an income test must be met: • Criteria: In the past three years, the entity's total income from the above investment management activities (such as management fees, performance fees) must equal or exceed 50% of its total income. • Practical situation: If such services are only a small part of the brokerage firm's business and commission income still accounts for more than 50%, NFE status may still be maintained. But if this has become the core business, it will transform into RFI. 5.3. Impact on ILAS customers Even if a brokerage firm is regarded as an "investment entity", it still needs to distinguish between: • ILAS policy itself: The issuer of the ILAS contract is usually an insurance company, so the reporting responsibility (Reporting Requirement) of the policy value mainly falls on the insurance company (as the designated insurance company RFI). • The role of the brokerage firm: If the brokerage firm merely "manages" the assets within the policy but does not own the policy, it is generally considered a Managing Entity. • In Hong Kong, such companies are usually required to hold a Securities and Futures Commission (SFC) Type 9 license (asset management). Once such a license is held and the income test is met, the company must register as an RFI with the tax office and fulfill the associated due diligence obligations. 5.4. Summary • Pure Brokerage = Active NFE (Non-Financial Institution). • Provide discretionary management and revenue >50%=Investment Entity (RFI).
Conclusion Based on the above analysis, the core purpose of the 2026 AEOI Amendment Regulations is to strengthen the compliance responsibilities of existing reporting financial institutions, rather than expanding the definition of RFI or including insurance intermediaries within the reporting scope. The business model of Yu Fung Broker Limited does not involve maintaining financial accounts, holding or managing client assets, nor is it an institution that issues cash value insurance policies; therefore, Yu Fung Broker Limited is not an RFI and does not need to bear new reporting or due diligence responsibilities due to this amendment.
However, since the revised regulations have significantly increased the legal responsibilities and penalties of insurance companies as RFIs, including stricter record-keeping requirements, reporting obligations, and extended liability for former directors, insurance companies are bound to take more prudent compliance measures in practice. This means the insurance company may: • Tighter scrutiny of clients’ tax residency status • Require updated self-certifications more frequently • Request additional documentation to verify information • Take a more conservative approach to high-risk or incomplete customers These measures are not due to a change in YFG's role, but are a natural response by insurance companies as RFIs to assume higher risks under the new law.
Under the CRS framework, insurance companies are still the only entities responsible for maintaining accounts, conducting due diligence and reporting. YFG will, as always, fulfill its role as an intermediary in accordance with regulatory requirements, assist customers and insurance companies in maintaining transparent, accurate and compliant information flow, and continue to monitor the development of relevant regulations to ensure that company operations are consistent with regulatory requirements.
Disclaimer:
This document and the content contained therein (hereinafter referred to as the "Content") are based on the position of Yu Fung Broker Limited (YFG). The content is for reference only and may not reflect the latest regulatory and compliance developments. Relevant laws, rules, regulations, guidelines, codes of conduct or practice summaries ("Applicable Laws") may also change from time to time, and different people may have different understandings of their content or applicability.
All content does not provide regulatory, compliance, legal, financial or other professional advice on any specific matter, and is not intended to serve as a basis for any investment or business decision, nor is it intended to replace reviewing and complying with the detailed provisions of applicable laws. Relevant professional advice should be sought before taking or refraining from taking any action based on all or part of the content.
Although YFG has tried its best to ensure the accuracy and completeness of the content, it does not guarantee that it does not contain errors or omissions. Neither YFG nor the author, editor, reviewer or any other relevant person of this document guarantees the accuracy of the content (including references or links to external websites and their contents), nor assumes any responsibility for any direct or indirect consequences, losses or damages caused by reliance on all or part of the content.
If all or part of the content is reprinted or quoted by other websites, works or publications (whether in paper, electronic or other forms), or forwarded to any third party, YFG will not be responsible for any direct or indirect consequences, losses or damages caused by such reprinting, citing or forwarding.
This document is for internal reference only by YFG or its business partners. Please do not copy, reproduce or distribute all or part of the content without prior written authorization.
