Hong Kong Regulator Reframes Enforcement Priorities Around Outcomes

The SFC’s Head of Enforcement, Michael Duignan, has given one of the clearest public statements to date on the regulator’s developing enforcement philosophy. Speaking at the 10th Annual Institute on Corporate & Securities Law in Asia on September 24, 2026, Duignan reframed the SFC’s approach not as a fixed list of enforcement “priorities” but as a broader philosophy aimed at pursuing “any lawful, workable approach that gets good outcomes fast and efficiently.”

The speech comes as the SFC’s three-year strategic plan approaches its conclusion. It suggests that the next phase of enforcement will be more pragmatic, outcome-focused, and willing to use the full regulatory toolkit best suited to the issue at hand. Conventional enforcement — investigation, notice, disciplinary decision, and appeal — will continue to matter. However, Duignan’s remarks indicate that the SFC will not treat that route as the only legitimate path. Nor will the SFC necessarily decline a case simply because it does not fall within a preset list of enforcement priorities.

The speech’s clearest illustration of that approach was a case, not yet public, involving serious weaknesses in client asset controls, account statements, conflicts management, segregation of duties, and discretionary account supervision. Rather than pursuing disciplinary sanctions alone, the SFC used a combination of tools to secure voluntary licence surrender, an orderly wind-down, and redress for those affected. The message is clear: Where client assets or market integrity are at risk, the SFC may seek earlier remediation, impose or vary licensing conditions, restrict business activities, require investor redress, or press for wind-down or license surrender rather than waiting for a conventional disciplinary process to run its course.

The speech also reinforces the importance of supervisory engagement. Enforcement risk often begins before a formal investigation — through on-site inspections, thematic reviews, deficiency letters, routine enquiries, breach notifications, complaint handling, or self-reports. If the SFC is moving further “upstream,” how a firm responds at those stages will matter. A prompt, credible, and well-governed remediation plan may reduce enforcement risk. Repeated breaches, ignored red flags, weak escalation, or poor remediation may become enforcement issues when the facts suggest something more systemic. Senior management ownership will therefore be central to that assessment.

The speech also drew an important distinction between no-admission settlements with third parties and disciplinary proceedings against licensed corporations. Firms should not assume that no-admission structures used in other contexts will be available in disciplinary proceedings. Where a breach is alleged, discussions are more likely to focus on agreed facts, characterization, remedial credit, sanction, and announcement timing.

In the next enforcement cycle, firms can therefore expect earlier intervention, greater emphasis on remediation and redress, and more willingness by the SFC to take “less trodden” paths where it considers that market integrity and investor protection are better served.