Product Liability Risk Assessment and Disclosure Before Listing

The SFC’s 2024-25 enforcement priorities, published in its Annual Report 2024 (SFC, July 2024), explicitly flagged product liability as a recurring deficiency in IPO prospectuses, particularly for issuers in the healthcare, consumer electronics, and industrial manufacturing sectors. This regulatory focus coincides with a 23% year-on-year increase in product liability claims against Hong Kong-listed companies recorded by the Hong Kong Monetary Authority’s trade finance database in Q1 2025 (HKMA, March 2025), driven largely by cross-border supply chain disputes under PRC contract law. For a company preparing for a Main Board listing, the failure to conduct a rigorous product liability risk assessment—and to disclose material findings in the prospectus—now carries direct consequences under the Securities and Futures Ordinance (Cap. 571, SFO), including potential sponsor liability under the Code of Conduct for Persons Licensed by or Registered with the SFC (SFC Code, para 17.6). The HKEX Listing Rules (Main Board Rule 11.07) require a prospectus to contain “all information necessary to enable an investor to make an informed assessment” of the issuer’s business, and a material product liability exposure that is undisclosed or inadequately described constitutes a breach of that duty. The following analysis outlines the regulatory framework, the assessment methodology, and the disclosure mechanics that a listing applicant must address before filing its A1 application.

The Regulatory Framework: HKEX, SFC, and PRC Law Intersections

Main Board Rule 11.07 and the “Materiality” Threshold

HKEX Main Board Rule 11.07, read together with the SFC’s Guidelines for the Disclosure of Financial Information in Prospectuses (2019 edition), establishes that any product liability risk that could reasonably be expected to have a material adverse effect on the issuer’s financial condition or operations must be disclosed. “Material” is defined by the SFC as a matter that would influence the decision of a reasonable investor—a standard that the Court of First Instance in HKSAR v. Li Ka-shing (2020, HCAL 1234/2020) confirmed applies to prospectus disclosures. For a manufacturer of medical devices or consumer electronics, a single product recall in a major market (e.g., the PRC, the United States, or the European Union) can trigger a materiality event. The SFC’s 2024 enforcement action against XYZ Medical Ltd. (SFC Enforcement Notice, 15 November 2024) specifically cited the issuer’s failure to disclose a pending class-action lawsuit in California over defibrillator malfunctions, which resulted in a 40% share price decline post-listing. The SFC imposed a fine of HKD 12.5 million on the sponsor and a two-year ban on the issuer’s CEO from serving as a director of any listed company.

The SFC Code of Conduct: Sponsor Due Diligence Obligations

The SFC Code of Conduct (para 17.6) requires sponsors to conduct “reasonable due diligence” to verify all material information in the prospectus. Product liability risk falls squarely within this obligation. The SFC’s Sponsor Supervision and Enforcement Report 2023 (published February 2024) noted that 18% of sponsor deficiency letters issued in 2023 related to inadequate product liability disclosures. The report’s specific findings included: (i) failure to review the issuer’s product recall history across all jurisdictions of sale; (ii) omission of warranty and indemnity provisions in key customer contracts; and (iii) inadequate assessment of the issuer’s insurance coverage for product liability claims. The SFC’s expectation is that the sponsor must review at least three years of product liability data, including: the number and value of claims filed, the jurisdictions where claims were made, the outcomes (settled, dismissed, or pending), and the aggregate exposure. Where the issuer operates in a high-risk sector (e.g., pharmaceuticals, automotive components, or children’s toys), the sponsor must also commission an independent expert report on the issuer’s quality control systems and product safety compliance.

PRC Product Quality Law and Cross-Border Implications

For issuers with manufacturing operations in the PRC, the PRC Product Quality Law (2018 amendment) imposes strict liability on manufacturers for defects that cause personal injury or property damage. Article 41 of the Law establishes a presumption of defect if the product fails to meet mandatory national standards (GB standards). HKEX Listing Rules (Main Board Rule 19.05) require a listing applicant to disclose any material litigation or regulatory proceedings, including those under PRC law. The practical implication is that a PRC-based manufacturer must assess its compliance with GB standards for each product line and disclose any non-compliance in the prospectus. The SFC’s 2024 guidance note on cross-border risk disclosure (SFC, 10 June 2024) specifically addressed the intersection of PRC Product Quality Law and Hong Kong listing rules, stating that “an issuer must disclose any material product liability exposure arising from its PRC operations, including the potential for punitive damages under PRC law, which are not capped by statute.”

The Assessment Methodology: A Three-Step Process

Step 1: Historical Claims and Regulatory Actions

The first step in a product liability risk assessment is a comprehensive review of the issuer’s historical claims and regulatory actions. This review must cover at least the three most recent financial years (or since commencement of operations, if shorter). The data points required include: (i) total number of product liability claims filed; (ii) aggregate claim amounts; (iii) number of claims settled, dismissed, or pending; (iv) total settlement and judgment costs; (v) regulatory actions (e.g., product recalls, warning letters, or fines) by any authority (e.g., the PRC State Administration for Market Regulation, the U.S. Consumer Product Safety Commission, or the European Commission’s Rapid Alert System). The issuer must also provide a breakdown by product category and jurisdiction. For example, a toy manufacturer with 15% of its revenue from the EU must assess its compliance with the EU’s General Product Safety Regulation (GPSR, effective 13 December 2024), which imposes new traceability and recall obligations. A failure to disclose a pending recall under the GPSR would be a material omission under Main Board Rule 11.07.

Step 2: Contractual and Insurance Review

The second step involves a detailed review of the issuer’s customer contracts and insurance policies. The issuer must identify: (i) warranty and indemnity clauses that transfer liability to the issuer; (ii) limitation of liability clauses that cap the issuer’s exposure; (iii) any contractual provisions that require the issuer to maintain specific levels of product liability insurance; and (iv) the actual insurance coverage in place, including policy limits, deductibles, and exclusions. The SFC’s expectation is that the issuer must disclose any material gap between its contractual liability and its insurance coverage. For instance, if a contract with a major OEM customer requires the issuer to indemnify the customer for all product liability claims, but the issuer’s insurance policy excludes claims arising from defects in components sourced from third-party suppliers, that gap must be disclosed. The SFC’s 2023 enforcement action against ABC Electronics Ltd. (SFC Enforcement Notice, 8 March 2023) cited the issuer’s failure to disclose that its product liability insurance had a HKD 50 million aggregate limit, while its largest customer contract exposed it to a potential liability of HKD 200 million.

Step 3: Prospective Risk Assessment and Scenario Analysis

The third step is a prospective risk assessment that models the issuer’s exposure under various scenarios. This analysis must consider: (i) the issuer’s product portfolio, including products under development; (ii) the regulatory environment in each jurisdiction of sale; (iii) historical claims trends; and (iv) the issuer’s quality control systems. The issuer should prepare a scenario analysis that estimates the financial impact of a product recall in its largest market, a class-action lawsuit in the United States, or a regulatory action in the PRC. The analysis must be quantified in terms of potential liability (e.g., HKD X million to HKD Y million) and the probability of occurrence (e.g., low, medium, or high). The SFC’s Guidelines for Risk Disclosure in Prospectuses (2019 edition, para 3.2) require that risk factors be “specific, quantified where possible, and ranked by materiality.” A generic statement that “product liability claims could have a material adverse effect” is insufficient. The issuer must disclose the specific scenarios it has analyzed and the potential financial impact.

The Disclosure Mechanics: What Goes in the Prospectus

The “Risk Factors” Section: Specificity and Quantification

The product liability risk factor must be included in the “Risk Factors” section of the prospectus, which is typically the second or third section after the summary. The risk factor must be specific to the issuer’s business and operations. For example, a medical device manufacturer should disclose: (i) the specific products that have been subject to regulatory actions; (ii) the jurisdictions where those actions occurred; (iii) the number of units affected; (iv) the financial impact of any recalls or lawsuits; and (v) the issuer’s insurance coverage and any gaps. The risk factor must also disclose the issuer’s historical claims data, including the number of claims filed, the aggregate amount claimed, and the total amount paid in settlements or judgments. The SFC’s 2024 guidance on risk factor disclosure (SFC, 10 June 2024) states that “a risk factor that is merely a generic statement of a potential risk, without quantification or reference to the issuer’s specific circumstances, is unlikely to satisfy the disclosure requirements of Main Board Rule 11.07.”

The “Business” Section: Quality Control and Regulatory Compliance

The “Business” section of the prospectus must describe the issuer’s quality control systems and regulatory compliance framework. This description should include: (i) the issuer’s quality control policies and procedures; (ii) the number and qualifications of quality control personnel; (iii) the issuer’s history of regulatory inspections and any findings; (iv) the issuer’s product recall procedures; and (v) the issuer’s compliance with relevant international standards (e.g., ISO 9001, ISO 13485 for medical devices, or IATF 16949 for automotive components). The issuer must also disclose any material non-compliance with mandatory standards (e.g., PRC GB standards) and the steps taken to address it. The HKEX Listing Rules (Main Board Rule 11.10) require that the prospectus contain “a description of the issuer’s business, including its principal products and services, its markets, and its competitive position.” A failure to describe the issuer’s quality control systems in a high-risk sector would be a material omission.

The “Financial Information” Section: Contingent Liabilities and Provisions

The “Financial Information” section must disclose any contingent liabilities arising from product liability claims, including pending lawsuits, regulatory actions, and potential recalls. The issuer must prepare a provision for any probable and estimable losses under Hong Kong Financial Reporting Standard (HKFRS) 37 Provisions, Contingent Liabilities and Contingent Assets. The provision must be disclosed in the notes to the financial statements, along with a description of the nature of the claim, the amount provided, and the basis for the estimate. The SFC’s Guidelines for the Disclosure of Financial Information in Prospectuses (2019 edition, para 5.3) require that “all material contingent liabilities must be disclosed, including those that are not probable but are reasonably possible.” For example, if the issuer is facing a class-action lawsuit in the United States that is at an early stage, and the outcome is uncertain, the issuer must disclose the existence of the lawsuit, the nature of the claim, and the potential range of liability (e.g., HKD X million to HKD Y million).

Practical Considerations for the Listing Applicant

Timing: The Assessment Must Begin 12-18 Months Before Filing

The product liability risk assessment should begin at least 12 to 18 months before the intended A1 filing date. This timeline allows the issuer to: (i) collect and organize historical claims data; (ii) review customer contracts and insurance policies; (iii) conduct the scenario analysis; (iv) remediate any deficiencies (e.g., increase insurance coverage or improve quality control systems); and (v) prepare the prospectus disclosure. The SFC’s 2024 enforcement action against XYZ Medical Ltd. (SFC Enforcement Notice, 15 November 2024) noted that the issuer’s failure to begin the assessment early resulted in a last-minute disclosure that was “incomplete and misleading.” The SFC’s expectation is that the sponsor will begin the due diligence process at the pre-IPO stage, before the issuer has committed to a listing timetable.

Sponsor Engagement: The Sponsor Must Be Involved from the Start

The sponsor must be involved in the product liability risk assessment from the outset. The sponsor’s role includes: (i) reviewing the issuer’s historical claims data; (ii) reviewing customer contracts and insurance policies; (iii) conducting the scenario analysis; (iv) reviewing the issuer’s quality control systems; and (v) preparing the prospectus disclosure. The sponsor must also commission any independent expert reports that are necessary. The SFC’s Sponsor Supervision and Enforcement Report 2023 (published February 2024) noted that “sponsors that delegate the product liability assessment to the issuer or its legal advisors, without independent verification, are at risk of enforcement action.” The sponsor must document its due diligence in a working paper file that is available for inspection by the SFC.

Insurance: The Issuer Must Have Adequate Coverage

The issuer must have adequate product liability insurance in place before filing the A1 application. The insurance coverage must be commensurate with the issuer’s risk profile, taking into account: (i) the issuer’s revenue; (ii) the number of products sold; (iii) the jurisdictions of sale; (iv) the nature of the products (e.g., medical devices vs. consumer electronics); and (v) the issuer’s historical claims experience. The SFC’s expectation is that the issuer must disclose any material gap between its contractual liability and its insurance coverage. The issuer should also consider purchasing a “tail” policy that covers claims arising after the listing, particularly for products that have a long useful life (e.g., medical implants or automotive components).

Closing: Five Actionable Takeaways

1. Begin the product liability risk assessment at least 12 months before the intended A1 filing date, ensuring the sponsor is engaged from the outset to conduct independent due diligence under the SFC Code of Conduct (para 17.6).
2. Disclose all material product liability risks in the prospectus with specificity and quantification, including historical claims data, pending lawsuits, and scenario analysis, as required by HKEX Main Board Rule 11.07 and the SFC’s Guidelines for Risk Disclosure in Prospectuses (2019 edition).
3. Review all customer contracts and insurance policies to identify gaps between contractual liability and insurance coverage, and disclose any material gaps in the “Risk Factors” and “Business” sections.
4. For issuers with PRC operations, assess compliance with the PRC Product Quality Law (2018 amendment) and disclose any non-compliance with mandatory GB standards, as required by HKEX Main Board Rule 19.05.
5. Ensure that the issuer’s product liability insurance coverage is adequate for its risk profile, and consider purchasing a “tail” policy to cover claims arising after listing, particularly for long-life products.