FATCA and CRS Compliance for Hong Kong Financial Institutions

Introduction

Hong Kong financial institutions – including banks, fund administrators, brokers, insurance companies, and trust companies – are subject to two overlapping international tax transparency regimes: the United States Foreign Account Tax Compliance Act (FATCA) and the OECD Common Reporting Standard (CRS). Together, these frameworks require extensive due diligence and annual reporting on account holders’ tax residency and financial information.

Non-compliance exposes institutions to significant penalties, reputational damage, and potential withholding of payments from U.S. sources. This guide provides a practical overview of FATCA and CRS obligations applicable to Hong Kong financial institutions.

Part 1: FATCA Overview

What Is FATCA?

FATCA, enacted by the United States in 2010 and effective from 2014, requires Foreign Financial Institutions (FFIs) worldwide to identify U.S. account holders and report their financial information to the U.S. Internal Revenue Service (IRS) – directly or through their local tax authority. FFIs that fail to comply face a 30% withholding tax on U.S.-source payments, including dividends, interest, and gross proceeds from U.S. securities.

Hong Kong’s IGA with the United States

Hong Kong entered into a Model 2 Intergovernmental Agreement (IGA) with the United States, effective 13 July 2014. Under a Model 2 IGA:

• Hong Kong FFIs register directly with the IRS and obtain a Global Intermediary Identification Number (GIIN);
• FFIs consent to report U.S. account information directly to the IRS under a specific waiver mechanism;
• Non-consenting U.S. account holders are reported in aggregate (not individually) to the IRS, with the IRS able to request individual details through treaty channels.

This differs from Model 1 IGAs (used by many EU countries), under which local institutions report to their domestic tax authority, which then forwards data to the IRS.

Who Is a Reporting FFI in Hong Kong?

The IRS Registration System categorises Hong Kong FFIs broadly. Reporting FFIs include:

• Banks and deposit-taking institutions;
• Custodial institutions (holding financial assets for third parties);
• Investment entities (funds, fund managers, discretionary managers);
• Specified insurance companies (offering cash-value insurance or annuity contracts).

Certain entities qualify as Non-Reporting FFIs, including government entities, international organisations, central banks, certain small local banks, and qualified collective investment vehicles meeting specific conditions.

FATCA Due Diligence Obligations

Reporting FFIs must identify whether account holders or controlling persons are U.S. persons (U.S. citizens, U.S. residents, or entities incorporated in the U.S.). Due diligence procedures differ for:

• Pre-existing individual accounts – electronic record search for U.S. indicia (U.S. place of birth, address, telephone number, standing instructions to U.S. accounts); enhanced review for high-value accounts (above USD 1 million);
• New individual accounts – self-certification at account opening; plausibility check by the FFI;
• Pre-existing entity accounts – determine FATCA status of entity and controlling persons above USD 250,000;
• New entity accounts – obtain self-certification from entity and controlling persons.

FATCA Reporting

Identified U.S. Reportable Accounts must be reported to the IRS annually (by 31 March of the following year in Hong Kong). Required data fields include:

• Name, address, and U.S. TIN of account holders;
• Account number and balance/value;
• Income payments (interest, dividends, gross proceeds);
• In some cases, information on recalcitrant account holders.

Part 2: CRS Overview

What Is the Common Reporting Standard?

The CRS, developed by the OECD and endorsed by the G20, is a multilateral automatic exchange of financial account information (AEOI) framework. Over 100 jurisdictions participate. Under CRS, financial institutions identify account holders resident in other participating jurisdictions and report their financial information to their domestic tax authority, which then automatically exchanges it with the relevant foreign tax authorities.

CRS in Hong Kong

Hong Kong implemented CRS through the Inland Revenue (Amendment) (No. 3) Ordinance 2016 and the Inland Revenue (Financial Institutions) (Due Diligence and Reporting) Rules. Hong Kong’s first automatic exchange of information (AEOI) took place in September 2018, covering reportable accounts identified in 2017. Hong Kong has signed bilateral competent authority agreements (CAAs) with over 75 jurisdictions.

Reporting Financial Institutions Under CRS

Like FATCA, CRS covers:

• Depository institutions;
• Custodial institutions;
• Investment entities;
• Specified insurance companies.

Non-reporting financial institutions include government entities, international organisations, central banks, broad participation retirement funds, and certain collective investment vehicles.

CRS Due Diligence

CRS requires financial institutions to identify tax residents of reportable jurisdictions (any CRS-participating jurisdiction other than Hong Kong). Due diligence procedures include:

• Self-certification at account opening for new accounts (both individual and entity);
• Review of existing accounts using electronic records (for lower-value accounts) and paper records (for high-value individual accounts above USD 1 million);
• Controlling person look-through for passive non-financial entities (Passive NFEs) – requiring identification of controlling persons and their tax residency;
• Annual review of changed circumstances that may affect account holder classification.

CRS Reporting

Reportable account information is submitted to the Inland Revenue Department (IRD) annually by 31 May. Required data includes:

• Account holder name, address, jurisdiction of residence, and TIN;
• Account number and balance/value at year-end;
• Gross interest, dividends, and other income credited to the account;
• Gross proceeds from sales of financial assets.

Key Differences Between FATCA and CRS

While FATCA and CRS share similar due diligence concepts, important differences include:

• Scope – FATCA targets U.S. persons only; CRS targets tax residents of any CRS-participating jurisdiction;
• Reporting destination – FATCA reporting goes to the IRS (directly under Model 2); CRS reporting goes to the IRD for onward exchange;
• TIN requirements – FATCA requires U.S. TINs; CRS requires foreign TINs where available;
• Thresholds – FATCA has USD 50,000 de minimis for individual depository accounts; CRS generally has no de minimis thresholds;
• Enforcement mechanism – FATCA uses 30% withholding as an enforcement tool; CRS relies on domestic legislation and international cooperation.

Penalties for Non-Compliance in Hong Kong

Under the Inland Revenue Ordinance, failure to comply with CRS obligations (including due diligence failures, late reporting, and inaccurate reporting) may result in:

• Fines of up to HKD 10,000 for failure to file or late filing;
• Fines of up to HKD 50,000 for providing false or misleading information;
• Additional daily fines for continuing non-compliance.

FATCA non-compliance exposes Hong Kong FFIs to 30% withholding on U.S.-source payments, potential GIIN revocation, and reputational risk with U.S. correspondent banks.

Compliance Programme Best Practices

Robust FATCA/CRS compliance requires a structured programme:

• Governance – board-level accountability for FATCA/CRS compliance; designated compliance officer;
• Onboarding controls – mandatory self-certification at account opening; validation procedures for plausibility of claims;
• System integration – CRM and client onboarding systems capable of capturing and flagging FATCA/CRS classification;
• Annual account review – systematic procedures for reviewing changed circumstances and updating classifications;
• Reporting systems – XML-based reporting compatible with IRD and IRS submission requirements;
• Training – regular training for front-office and compliance staff on due diligence procedures;
• Third-party service providers – due diligence on and agreements with fund administrators, custodians, and other intermediaries.

Recent Developments

The IRD continues to issue guidance on CRS implementation, including guidance on digital financial products, crypto-asset reporting frameworks (CARF), and enhanced due diligence for passive NFEs. Financial institutions should monitor IRD circulars and OECD updates, as the CARF framework – requiring crypto-asset service providers to report customers’ digital asset holdings – is expected to be implemented in Hong Kong in the near term.

How Alan Wong LLP Can Assist

Alan Wong LLP advises financial institutions, fund managers, trustees, and insurance companies on FATCA and CRS compliance in Hong Kong. Our services include:

• FATCA/CRS compliance programme design and gap analysis;
• Review and drafting of client-facing self-certification forms;
• Advice on entity classification (reporting FI, Non-Reporting FI, Active NFE, Passive NFE);
• Regulatory review of due diligence and reporting procedures;
• Training workshops for compliance and operations teams.

Contact us to assess your institution’s FATCA and CRS compliance posture.