Hong Kong Strengthens AEOI Framework with 2026 Amendment Bill

Posted by Written by Melissa Cyrill Reading Time: 4 minutes
Hong Kong AEOI Amendment Bill 2026 marks a further step in strengthening the city’s tax transparency and information‑exchange framework. Gazetted in March 2026, the Bill enhances administrative arrangements for the automatic exchange of financial account information, reinforcing alignment with evolving global standards. The amendments underscore Hong Kong’s continued commitment to international cooperation while maintaining robust data protection safeguards.

Hong Kong is set to reinforce its position as a transparent and globally aligned financial hub with the gazettal of the Inland Revenue (Amendment) (Automatic Exchange of Information) Bill 2026 on March 27, 2026. The proposed legislation enhances the city’s administrative framework for the automatic exchange of financial account information (AEOI), aligning more closely with evolving global tax transparency standards.

The Bill builds on Hong Kong’s implementation of the Organisation for Economic Co-operation and Development’s Common Reporting Standard (CRS), under which the jurisdiction has conducted annual exchanges of financial account information with partner jurisdictions since 2018. These exchanges enable tax authorities worldwide to assess offshore holdings and combat cross-border tax evasion, while maintaining strict data confidentiality safeguards.

Key amendments under the 2026 Bill

The proposed amendments to the Inland Revenue Ordinance (Cap. 112) introduce several structural enhancements to the AEOI regime:

Mandatory registration with defined deadlines and digital compliance

Reporting financial institutions must now:

  • Register electronically via a designated Inland Revenue Department (IRD) system.
  • Registration must be completed electronically by March 31, 2027, for existing reporting financial institutions, or by January 31 of the year following the first reporting year for new entrants.

This formalizes a digitized compliance infrastructure, replacing informal or fragmented reporting identification practices.

Six-year record retention requirement

The Bill introduces a strict requirement to:

  • Retain due diligence and reporting records for at least six years.
  • Ensure records support verification of CRS filings.

This aligns AEOI compliance with audit-ready data governance standards.

Continuous compliance and notification obligations

  • Institutions must comply with enhanced ongoing notification requirements under Section 50D, including notifying the Inland Revenue Department within one month of changes in address, cessation of reporting status, or re-entry into reporting status.

Crucially, compliance obligations extend beyond annual reporting cycles, embedding AEOI into operational workflows.

Post-dissolution and individual liability

A significant escalation in enforcement scope:

  • Directors and responsible officers remain accountable
  • Obligations persist for up to six years post-dissolution

This introduces personal liability exposure and extends compliance beyond the corporate lifecycle.

Enhanced audit and information powers

The IRD gains authority to:

  • Request information to verify CRS filings
  • Assess the accuracy and completeness of submitted data

This shifts the regime from passive reporting to active regulatory oversight.

Administrative flexibility in filing acceptance

The Commissioner may:

  • Accept registrations or returns even where technical requirements are not fully met
  • Apply discretion based on circumstances

This ensures procedural flexibility, reducing risks of technical invalidation while maintaining compliance intent.

Expanded offences and multi-layered liability

The Bill broadens liability across:

  • Financial institutions
  • Employees and management
  • Service providers
  • Former entities and officers

Offences include:

  • Inaccurate or incomplete reporting
  • Failure to correct errors
  • Failure to notify authorities / comply with obligations
  • Fail to notify the Commissioner within a reasonable time

This creates a comprehensive accountability framework across the compliance chain.

Penalty regime linked to financial accounts

Penalties are now:

  • Scaled based on the number of financial accounts involved
  • Potentially reaching HKD 1,000–20,000 per account, depending on severity

This transforms penalties into economically significant, volume-driven exposure.

Administrative financial penalties (Alternative to prosecution)

A new enforcement mechanism allows:

  • The Bill introduces a financial penalty mechanism under which the Commissioner may impose administrative penalties directly, in cases where no criminal prosecution is pursued for the same offence.
  • Once a financial penalty is imposed, the institution cannot be prosecuted for the same act or omission.

This enables faster and more scalable enforcement actions.

Formal appeals mechanism

Affected institutions may:

  • Appeal penalty assessments to a formal review body
  • Submit representations and evidence within defined timelines

This ensures procedural fairness within a stricter enforcement regime.

Policy context: OECD peer review and global positioning

The amendments directly respond to feedback from the Organisation for Economic Co-operation and Development’s second-round peer review of Hong Kong’s AEOI regime initiated in 2024.

The Bill focuses on three core areas:

  • Mandatory registration
  • Enhanced record-keeping
  • Stronger sanctions for non-compliance

AEOI compliance in Hong Kong: How to read the 2026 amendment bill

The 2026 amendments fundamentally transform Hong Kong’s AEOI regime from a periodic reporting obligation into a full lifecycle compliance system. The framework now governs entry (mandatory registration), ongoing operations (due diligence, reporting, and notifications), and exit (post-cessation and post-dissolution obligations), effectively embedding tax transparency into the core operational fabric of financial institutions rather than treating it as an annual compliance exercise.

At the same time, the expansion of personal and post-exit liability significantly increases risk exposure. Directors, responsible officers, and even individuals linked to dissolved entities remain accountable for compliance failures for up to six years, signaling a shift away from entity-level containment of risk toward a broader accountability model. This requires businesses to incorporate compliance considerations into not only operational processes but also corporate structuring and exit strategies.

The amendments also elevate data governance to a strategic priority. With mandatory six-year record retention, enhanced audit powers, and penalties tied to inaccuracies in reporting, financial institutions must ensure that their CRS data is complete, traceable, and verifiable. This effectively integrates AEOI into enterprise-level data management and risk control systems, aligning tax compliance with broader digital governance frameworks.

From an enforcement perspective, the redesigned penalty regime introduces scalable and economically material consequences. By linking penalties to the number of financial accounts involved and enabling administrative fines without the need for prosecution, regulators can impose significant financial consequences even for systemic or technical errors. This materially raises the stakes for high-volume institutions such as private banks, asset managers, and cross-border financial service providers.

Importantly, the extension of liability to service providers and third parties underscores that outsourcing compliance functions does not transfer regulatory risk. Financial institutions must now implement stronger vendor governance, contractual safeguards, and oversight mechanisms to ensure that third-party providers meet regulatory standards.

Overall, the regime reflects a balanced regulatory design, combining stricter enforcement with administrative flexibility, such as the Commissioner’s discretion to accept filings that may not fully meet technical requirements. This dual approach allows Hong Kong to maintain its competitiveness as an international financial center while aligning closely with evolving OECD expectations on transparency and enforcement.

Taken together, these changes signal a clear shift: AEOI compliance in Hong Kong is no longer a procedural obligation but a core operational and governance discipline, requiring sustained investment in systems, controls, and risk management across the entire institutional lifecycle.

Jennifer Lu
DSA
quote

Tax planning and compliance in Hong Kong require careful navigation of evolving local and international tax rules. Our experienced advisors support businesses with corporate tax, indirect tax, individual tax, international tax, and transfer pricing, helping them remain compliant while optimizing their tax position in Hong Kong and the wider Asia?Pacific region.

Partner

About Us

China Briefing is one of five regional Asia Briefing publications. It is supported by Dezan Shira & Associates, a pan-Asia, multi-disciplinary professional services firm that assists foreign investors throughout Asia, including through offices in Beijing, Tianjin, Dalian, Qingdao, Shanghai, Hangzhou, Ningbo, Suzhou, Guangzhou, Haikou, Zhongshan, Shenzhen, and Hong Kong in China. Dezan Shira & Associates also maintains offices or has alliance partners assisting foreign investors in Vietnam, Indonesia, Singapore, India, Malaysia, Mongolia, Dubai (UAE), Japan, South Korea, Nepal, The Philippines, Sri Lanka, Thailand, Italy, Germany, Bangladesh, Australia, United States, and United Kingdom and Ireland.

For a complimentary subscription to China Briefing’s content products, please click here. For support with establishing a business in China or for assistance in analyzing and entering markets, please contact the firm at china@dezshira.com or visit our website at www.dezshira.com.