The Common Reporting Standard: Where Hong Kong Stands in 2026

When Hong Kong legislated for the common reporting standard in 2016, more than 90 countries had committed to it and nobody knew how well it would work. It works. In 2024, information on over 171 million financial accounts was exchanged automatically under the CRS (nearly EUR 13 trillion in assets, roughly three times Germany's annual economic output) and by November 2025 some 116 jurisdictions had commenced annual exchanges. What was once a coming thing is now the background condition of holding money across borders.

The interesting questions are no longer about whether the CRS will happen. They are about what Hong Kong has just changed, what arrives next, and where the standard genuinely still bites.

The oldest ledgers

One piece of perspective before the mechanics. The earliest writing humanity possesses (the clay tablets of Uruk, pressed some five thousand years ago) is not poetry and not scripture. It is accounting: rations, grain, livestock, who owes what to whom. Writing was invented by record-keepers, and financial records have travelled with trade ever since, further and longer than the traders themselves. The CRS did not introduce the idea that wealth leaves a written trail read by authority. It industrialised a practice as old as writing — and it is easier to plan calmly around it once you stop treating it as an intrusion and start treating it as the oldest fact of commercial life.

What Hong Kong actually built

The Inland Revenue (Amendment) (No. 3) Ordinance 2016 came into effect on 30 June 2016. Self-certification became compulsory for accounts opened on or after 1 January 2017, and Hong Kong made its first exchanges in September 2018.

The scope has widened steadily. Schedule 17E to the Inland Revenue Ordinance now lists reportable jurisdictions across four tranches — 2018, 2019, 2021 and 2026, the last adding Ecuador, Oman and Thailand. The Department publishes no headline total, and the figure of 126 still circulating in professional commentary dates from the 2019 amending ordinance and is out of date. The more meaningful number is how many partners Hong Kong actually sends to: 40 in 2018, 84 in 2025, on the OECD's 2025 peer review update.

Reporting financial institutions file through the AEOI Portal, designated by the Commissioner in July 2017. The Department issues electronic notices in January, and institutions are normally required to furnish the information in early June — normally, not statutorily. A specific date is often quoted as though it were in the ordinance. The obligation runs from the notice, and the notice is what you should read.

The 2026 Ordinance, which is the real news

The change that matters this year is domestic. The Inland Revenue (Amendment) (Automatic Exchange of Information) Ordinance 2026 (passed 17 June 2026, gazetted 26 June, in operation from 1 January 2027) does three things.

Registration becomes mandatory for everyone. Every reporting financial institution must register on the AEOI Portal whether or not it has anything to report; institutions already in business but unregistered have until 31 March 2027. The nil-return gap (the entity that quietly concluded it had nothing reportable and therefore did nothing) is closed.

Records must be kept for six years, and the obligation survives the entity. Where an institution is dissolved, responsibility for the records falls on former directors or trustees personally. Anyone in the habit of winding up a redundant investment company and disposing of its files should stop.

Penalties rise, and can be counted per account. The current scheme is modest — a false self-certification is an offence under section 80(2E) at level 3 (HK$10,000), institutional offences under sections 80B–80F run to level 5 with imprisonment in serious cases. Under the new Ordinance, penalties may be calculated by reference to the number of accounts involved, and an administrative penalty mechanism arrives as an alternative to prosecution. A misconfigured reporting system stops being one offence and starts being one per account.

The driver is easy to identify: the OECD's second-round peer review of Hong Kong has been running since 2024, Hong Kong's ratings going in were good, and this legislation is what protecting them looks like.

Trusts: the part most often stated wrongly

Confident advice on trusts under the CRS is frequently just incorrect, so here is the actual architecture.

A trust is either a reporting financial institution — most commonly an investment entity, earning primarily from financial assets and managed by another entity that is a financial institution — or a passive non-financial entity. A trust managed solely by individual trustees is not an investment entity. If the trust reports, the account holders are the settlor, the beneficiaries, and any natural person exercising ultimate effective control. If the trust is a passive NFE behind a bank account, the controlling persons are the settlor, trustee, protector, beneficiaries or class of beneficiaries and (in the Department's guidance) the enforcer.

Two specific corrections. There is no 25% threshold for trusts; that threshold belongs to corporations, and the persons above are controlling persons whether or not any of them controls anything. And the familiar line on discretionary beneficiaries (reported only in years a distribution is made) is half right: correct where the trust itself reports, and the opposite of the default where the trust is a passive NFE, in which case discretionary beneficiaries are reportable whether or not anything was paid. Hong Kong permits an institution to align the two treatments, but that is an option exercised on notification from the trustee, not a rule you may assume.

What is arriving, and when

Two further layers are coming, and Hong Kong's timing is not what most commentary assumes.

The OECD's amended CRS of 8 June 2023 extends the standard to certain e-money products and central bank digital currencies, catches indirect crypto exposure through derivatives and investment vehicles, and requires reporting of the role by which each person is a controlling person. The commonly expected first exchange year is 2027, with 84 of 124 jurisdictions planning to start then. Hong Kong is not among them: the stated intention is implementation from 1 January 2028 with first exchanges in 2029, and Hong Kong has not signed the addendum to the multilateral competent authority agreement that provides the exchange mechanism (78 signatories at the end of July 2026, including Singapore, Macao, Japan and Korea).

The crypto-asset reporting framework runs ahead of it. Hong Kong has committed to first CARF exchanges in 2028, conditional on domestic legislation in place by the end of 2026. A consultation ran from December 2025 to February 2026; the implementing Bill was gazetted on 22 May 2026 and had first reading on 3 June.

That Bill is not yet law. The Department's own CARF pages carry a disclaimer that their contents rest on a Bill still before the Legislative Council; the reportable and partner jurisdiction lists do not yet exist, and the portal and data schema are unpublished. If you hold crypto-assets through a structure, the honest position today: the obligation is coming, the shape is drafted, the detail is not settled.

What has not changed

FATCA continues alongside — Hong Kong's Model 2 intergovernmental agreement has been in force since 6 July 2016, with institutions reporting directly to the Internal Revenue Service.

And the point Hong Kong learned in 2016 stands, only more firmly: a trust or holding company does not prevent the exchange of information — in most cases it makes the reporting outcome more complicated, not less. Choose structures for what they actually do: governance, succession, asset protection, commercial efficiency. Build them on the assumption that the relevant tax authority will read them. The first thing our species ever wrote down was an account record, and five thousand years later the account records have learned to deliver themselves.

Frequently asked questions

Does Hong Kong participate in the Common Reporting Standard?

Yes, since 2016. Hong Kong legislated for the CRS through the Inland Revenue (Amendment) (No. 3) Ordinance 2016, made its first exchanges in September 2018, and exchanged with 84 partner jurisdictions in 2025. Financial institutions report through the Inland Revenue Department's AEOI Portal, and from 1 January 2027 registration on the portal becomes mandatory for every reporting financial institution, whether or not it has anything to report.

Are trust beneficiaries reported under the CRS in Hong Kong?

It depends on how the trust is classified. Where the trust is itself a reporting financial institution, a discretionary beneficiary is reported only in a year a distribution is received. Where the trust is a passive non-financial entity behind a bank account, the settlor, trustee, protector and beneficiaries are all controlling persons — and a discretionary beneficiary is reportable whether or not anything was distributed. The settlor is reported in either case; there is no 25% threshold for trusts.

When will Hong Kong report crypto-assets under CARF?

Hong Kong has committed to first Crypto-Asset Reporting Framework exchanges in 2028, conditional on domestic legislation by the end of 2026. The implementing Bill was gazetted on 22 May 2026 and is before the Legislative Council; the reportable jurisdiction lists, portal and data schema are not yet published. The amended CRS follows from 1 January 2028, with first exchanges in 2029.

---

This article is general information about Hong Kong's automatic exchange of information regime as at August 2026, not advice on any particular structure or filing obligation; parts of the framework described are still before the Legislative Council. Jefferson Trust Limited holds TCSP licence TC005824; enquiries: [email protected].