Swiss private bank EFG Bank AG's Hong Kong branch was reprimanded and fined HK$10.85 million by the SFC — for product due-diligence (PDD) and internal-control failures spanning 2015 to 2020, in a joint action with the HKMA. A signature case on distributor duty: if you sell it, you are responsible for actually understanding what it is.
1. How the PDD failed
EFG distributed structured products, funds and bonds to high-net-worth clients. The failures regulators found were process-level:
- No systematic product-risk assessment framework — risk scoring for new products was absent or token
- No periodic review mechanism — product risk characteristics shifted with markets, never re-examined
- Some products sold without even basic offering documentation
- Internal controls and compliance functions failed to counterweight the sales desk
None of this is "one RM made a mistake" — the firm's product-governance framework was never built.
2. Why it matters
- Sell-first distribution culture: private banking runs on product commissions — PDD is a cost centre. EFG proves that when PDD is subordinated to sales, regulators treat it as systemic breach, not business judgement.
- The PI-exemption paradox: EFG's clients were mostly professional investors with relaxed suitability — but PDD is the distributor's duty toward the product itself, regardless of client status. PI exemptions do not exempt product diligence.
- A template for two-regulator coordination: as a registered institution, EFG's securities side answers to the SFC and banking side to the HKMA — joint action shows the coordination machinery working.
- Six years to surface: failures from 2015–2020, fined later — another "remediated ≠ over" case.
3. Legal and regulatory analysis
| Instrument | How it applies | Compliance meaning |
|---|---|---|
| Code of Conduct 5.2 (know your product) | Distributors must understand the nature, risks and target market of what they sell | Cannot rely on issuer documents alone |
| Code of Conduct 4.3 (internal controls) | Product governance — listing approval, periodic review, delisting | A broken process is a control failure |
| HKMA Supervisory Manual | Banking-side controls for registered institutions | Dual regulator, dual file |
| SFO s.194 | Fine cap: HK$10m or 3× profit | HK$10.85m above base → computed on the 3× limb |
Read with UBS and IBKR, EFG completes a visible SFC enforcement line through private-bank distribution-chain governance — PI classification, product diligence, client assets, one link at a time.
RegSir's take
EFG should send every distributor back to a three-question PDD health check: (1) is there a written product-risk framework with scoring records? (2) a periodic review calendar with evidence? (3) has any product been "temporarily listed" with incomplete documentation? One unanswerable question is an EFG-shaped gap. The easiest private-bank excuse is "our clients are all PIs" — this case says PI status exempts many things, but never exempts you from knowing what you sell.
4. Compliance takeaways
- The product-governance four-pack: listing approval record, risk-scoring framework, periodic review calendar, delisting/flag mechanism — missing any one is the failure mode
- PDD must sit outside sales: product risk assessment belongs to product/compliance functions, not the revenue team grading its own homework
- No docs, no sale: listing before offering documents, term sheets and risk disclosures are complete is a direct breach — no grey zone
- Event-driven re-rating: after market shocks (AT1 write-offs, nickel chaos), proactively re-rate exposed products — waiting passively is how you lose
5. Official sources
| Document | Link |
|---|---|
| SFC / HKMA — EFG disciplinary action announcement | hkma.gov.hk ↗ |
| SFC — Code of Conduct for licensed and registered persons | sfc.hk ↗ |
| Securities and Futures Ordinance (Cap.571) s.194 | elegislation.gov.hk ↗ |