Sanctions Compliance in Hong Kong

Sanctions compliance in Hong Kong requires international businesses to navigate a multi-layered framework: Hong Kong maintains its own statutory regime under the United Nations Sanctions Ordinance and related legislation, while entities with EU, US or UK nexus remain simultaneously subject to extraterritorial measures that carry serious consequences regardless of where operations are booked. A failure to screen counterparties, monitor asset freeze obligations or adapt contractual arrangements to evolving restrictions can expose companies, funds and financial institutions to enforcement action in multiple jurisdictions at once. Ferraz & Whitmore advises clients on building defensible compliance programmes, responding to regulatory enquiries and managing the cross-border dimension that Hong Kong's position as a global financial hub inevitably creates.

Why Sanctions Exposure Matters for Hong Kong-Based Operations

Hong Kong sits at the intersection of major trade and capital flows between Asia, Europe and North America. That position is a commercial advantage, but it also creates layered exposure. A Hong Kong entity that processes a payment, provides financing, re-exports controlled goods or even provides professional services may trigger restrictions under EU sanctions, UK autonomous measures or US OFAC regulations – none of which require a physical presence in those jurisdictions to apply.

The pace of change has accelerated sharply. The EU adopted its 20th Russia sanctions package on 23 April 2026 and followed it with the 21st package on 23 July 2026 (Regulation (EU) 2026/1848). That second package introduced, among other measures, a prohibition on transactions involving the digital rouble and the RUBx instrument, effective 24 May 2026. Companies that had not updated their sanctions screening procedures to capture digital currency channels before that date were immediately at risk of inadvertent breach.

Hong Kong-incorporated vehicles, subsidiaries of EU groups, and fund structures with European limited partners all sit within the reach of one or more of these regimes simultaneously. Identifying which obligations apply – and in what priority – is the first task of any serious compliance exercise.

Core Legal Instruments and Regulatory Bodies

Domestically, the principal legislative framework is the United Nations Sanctions Ordinance (Cap. 537), which implements UN Security Council resolutions in Hong Kong. Additional measures are enacted through subsidiary legislation and, where applicable, through instruments issued under the Import and Export Ordinance and the Drug Trafficking (Recovery of Proceeds) Ordinance for asset freeze purposes. The relevant regulatory interlocutors include:

• The Securities and Futures Commission (SFC) – monitors sanctions compliance by licensed intermediaries and has published circulars setting out its expectations for screening and suspicious transaction reporting.
• The Hong Kong Monetary Authority (HKMA) – supervises banks and issues guidance on customer due diligence and sanctions-related obligations.
• The Companies Registry – a source of beneficial ownership data relevant to screening exercises involving Hong Kong entities.
• The High Court of Hong Kong – the forum for civil asset freeze applications, injunctions and any litigation with a sanctions dimension.

For entities with an EU nexus, the directly applicable regulations – including the Russia sanctions consolidated in the Council's successive packages – impose a best-efforts obligation on EU persons and entities they control to ensure that non-EU subsidiaries do not circumvent restrictions. This obligation runs to the boardroom level and cannot be discharged simply by delegating screening to a compliance officer.

The Anti-Suit Protection Introduced in April 2026

A significant development for any client facing dispute risk is Council Regulation (EU) 2026/506, adopted on 23 April 2026 alongside the 20th sanctions package. It introduces a protective mechanism for EU persons sued by sanctioned Russian parties in Russian courts in breach of a jurisdiction clause or arbitration agreement. EU persons subject to such proceedings are given a specific legal instrument to resist enforcement and to seek redress, addressing a pattern that had emerged of Russian-connected parties using domestic litigation to circumvent contractual dispute resolution arrangements.

Switzerland adopted a parallel provision under its own framework (art. 29d of the relevant Swiss implementing instrument). For clients with contracts governed by Hong Kong law, or disputes referred to the HKIAC, the interaction between this EU protective mechanism and Hong Kong's own enforcement rules requires careful structuring. In particular, clients need to consider how a Hong Kong arbitral award or High Court judgment interacts with the anti-suit protection when enforcement is sought across jurisdictions.

If your contracts include jurisdiction clauses or HKIAC arbitration agreements and your counterparty has connections to sanctioned parties, we recommend an early review of how these new instruments affect your position. Please feel free to reach out to our team at info@ferrazwhitmore.com or visit our contacts page to discuss the specifics.

Typical Pitfalls in Hong Kong Sanctions Compliance

Based on the situations we encounter, the most common sources of exposure for internationally active businesses in Hong Kong include:

• Incomplete counterparty screening: Many screening tools lag behind designation updates by hours or days. Without a process for re-screening at key transaction milestones, a counterparty added to a list after initial onboarding may go undetected.
• Failure to capture beneficial ownership: Sanctions lists target natural persons and entities. A corporate vehicle two or three steps removed from a designated individual can still render a transaction prohibited if the ownership or control threshold is met under the applicable regulation.
• Export controls overlap: Export controls and sanctions are related but legally distinct. A shipment may be lawful under the sanctions regime but require a licence under dual-use export controls – and vice versa. The interaction with EU export control regulations is a frequent source of confusion for Hong Kong re-exporters.
• Digital and financial instrument gaps: The prohibition on the digital rouble and RUBx instruments effective 24 May 2026 is a recent illustration of how quickly new asset classes enter the restricted perimeter. Payment and treasury systems must be updated promptly when new categories are designated.
• Circumvention risk in supply chains: The EU's successive packages have increasingly targeted circumvention routes through third-country jurisdictions, and Hong Kong has been explicitly named in European Parliament and Commission communications as a transit jurisdiction of concern. This heightens the due diligence burden on Hong Kong entities and their professional advisers.
• Contractual gaps: Many legacy contracts lack sanctions clause updates and do not address termination rights, force majeure or material adverse change in the context of designation events. Reviewing and re-papering these agreements is an unglamorous but necessary task.

Procedures and Timelines

A structured compliance review for a mid-sized trading or financial services business typically proceeds in stages. A gap analysis against applicable regimes takes two to four weeks, depending on the volume of counterparties and the complexity of the supply chain. Implementing revised screening procedures, updating internal policies and providing staff training adds a further four to eight weeks. Where a potentially prohibited transaction has already occurred, the timeline for any voluntary disclosure to the relevant authority is driven by the authority's own framework – clients should not delay in seeking advice once a potential breach is identified.

For asset freeze matters before the High Court Hong Kong, urgent applications can be heard on short notice; however, the procedural requirements for evidence and service must be met precisely, and the interaction with any parallel proceedings in EU member state courts requires careful coordination.

Licence applications and derogation requests under EU sanctions are submitted to the competent authority of the relevant EU member state (determined by the entity's establishment or the location of the frozen assets), not to Hong Kong regulators. Processing times vary significantly depending on the complexity of the request and the member state concerned.

Cross-Border Dimension: Hong Kong, the EU and Beyond

The cross-border dimension is what distinguishes sanctions work in Hong Kong from purely domestic compliance. A Hong Kong holding company owned by EU nationals, a fund with both Hong Kong and European investors, or a commodities trader routing transactions through multiple jurisdictions will be simultaneously subject to overlapping regimes that do not always align.

Our practice spans multiple jurisdictions. We have experience advising on the EU framework across member states, and our work on the Sanctions Crime Directive enforcement in the Netherlands reflects the deepening criminal dimension of European sanctions law – a development that is directly relevant to group entities with EU subsidiaries. Similarly, our sanctions and trade practice in France provides a reference point for clients whose supply chains or financing arrangements touch French-regulated entities.

For the corporate and structuring dimension of operating in Hong Kong, including how holding structures interact with beneficial ownership obligations and sanctions screening, our corporate law practice in Hong Kong works in conjunction with our sanctions team.

How Ferraz & Whitmore Approaches Sanctions Compliance Mandates

We work with clients to identify their actual exposure rather than applying a generic checklist. The starting point is always a clear map of the regulatory perimeters that apply: which regimes govern which entities, which transactions and which assets. From that map, we help clients prioritise remediation, update contractual documentation, build or test screening procedures and, where necessary, engage with regulators.

Where a potential breach has occurred, we advise on the options available – including voluntary disclosure, remediation and any applicable derogation or licence route – without offering any assurance as to outcome. Regulators in multiple jurisdictions have shown they treat genuine cooperation and early disclosure differently from situations where a breach is discovered through enforcement action, but the outcome of any regulatory process remains in the hands of the relevant authority.

We also advise on the positioning of dispute resolution clauses in contracts where sanctions exposure is a live risk, bearing in mind the implications of instruments such as Council Regulation (EU) 2026/506 for the enforceability of jurisdiction and arbitration agreements involving sanctioned parties.

Self-Assessment: Initial Questions for Your Business

The following questions are not a substitute for legal advice, but they identify the areas where a more detailed review is typically warranted:

• Does your entity, or any group entity, have EU, US or UK nexus – through incorporation, ownership, currency denomination, correspondent banking relationships or the nationality of directors and officers?
• When did you last update your screening lists and internal sanctions policy? Have you captured the designations introduced under the EU 21st package (Regulation (EU) 2026/1848, 23 July 2026)?
• Do your screening procedures capture digital instruments and new asset classes, including the digital rouble / RUBx prohibition effective 24 May 2026?
• Have you reviewed your supply chain for potential circumvention pathways that could attract secondary risk under EU or US frameworks?
• Do your contracts with counterparties in affected jurisdictions include updated sanctions clauses addressing designation events, termination and force majeure?
• If you have contracts with HKIAC arbitration clauses or Hong Kong jurisdiction clauses, have you assessed the interaction with EU anti-suit protection mechanisms introduced in April 2026?
• Has your board or senior management received sanctions training in the past twelve months?

If the answer to any of these questions is uncertain, it is worth seeking a structured review. Proactive compliance is considerably less disruptive than responding to an enforcement enquiry or an asset freeze application. To discuss your situation in confidence, please contact us at info@ferrazwhitmore.com or through our contacts page.

Working With Ferraz & Whitmore on Sanctions Matters in Hong Kong

Our team combines knowledge of Hong Kong's domestic legal framework with direct experience of EU, UK and Swiss sanctions instruments. We advise on compliance programme design, transaction-specific screening, regulatory engagement, dispute resolution strategy and the contractual dimension of sanctions risk. Our cross-border reach means that when a matter requires coordinated advice across jurisdictions, we can provide it through a single point of contact rather than requiring clients to manage multiple firms independently.

If you are facing an immediate question – whether about a specific transaction, a potential breach, or a longer-term compliance programme – we encourage you to get in touch. You can reach our sanctions and trade practice at info@ferrazwhitmore.com or visit our contacts page to arrange an initial discussion.

Disclaimer: This publication is provided for informational purposes only and does not constitute legal advice. The information herein should not be relied upon as a substitute for professional legal counsel tailored to your specific circumstances. Ferraz & Whitmore assumes no liability for actions taken or not taken based on the contents of this material. For advice regarding your particular situation, please contact info@ferrazwhitmore.com.