Enforcement Files · 2022–24 · CPD compliance

The CPD Fine Factory: How Mass Enforcement Lifted Compliance

534 cases in 2022–23 → 2,001 in 2023–24; fines HK$3.4m → ~HK$7m. These are not big cases — they are industrialised compliance costs.

Updated: 2026-10-21 Reading time: ~9 min Series: Enforcement Files
Home / Compliance Guides / Enforcement Files / CPD Fine Factory

Buried in the IA's annual report is a number that deserves a second look: 2,001 disciplinary actions in 2023–24 attracting fines of about HK$7 million — all for intermediaries who failed to complete their Continuing Professional Development (CPD) hours. The prior year (2022–23) saw 534 actions and HK$3.4 million. In twelve months, CPD enforcement volume nearly quadrupled — yet industry-wide CPD compliance rose from 90% to 96.1%. This is not scandal; it is industrialised enforcement by design.

2,001CPD disciplinary actions in 2023–24
≈HK$7mTotal CPD fines that year
90%→96.1%Industry CPD compliance rate
534→2,001Year-on-year case count — the industrialisation step-change
Industrialised CPD enforcementCase volume quadrupled while compliance rose — capacity plus deterrence 2022–23534 cases · HK$3.4m DEP online 2023–242,001 cases · ~HK$7m Compliance90% → 96.1% Disciplinary Executive Process: fast lane for trivial casescapacity → backlog cleared → expectations set → behaviour changes
The surge is not runaway enforcement — it is a one-off backlog clearance after a capacity upgrade

What CPD is — and why so many breach it

Licensed insurance intermediaries must complete prescribed CPD hours each assessment period (generally 15 hours including mandatory topics such as conduct and AML). Simple in theory; in practice, tracking hours across a six-figure intermediary population produces constant slippage — missing certificates, miscounted cycles, records lost when switching firms. Breach rates are structurally high. Ahead of 2022–23 the IA introduced a fast-track approach for trivial disciplinary cases; in 2023–24 it institutionalised capacity with the Disciplinary Executive Process.

Why a spike in fines is actually good news

This is the part worth thinking about. "2,001 cases" looks like enforcement frenzy; the data tells a different story:

The design of a "fine factory"

Design elementMechanismEffect
StandardisationCPD breaches are objective — hours met or not met is a binary answerBatch-processing possible; no case-by-case negotiation
Fast laneDisciplinary Executive Process handles trivial cases; the panel keeps big onesCapacity stops being the bottleneck
PredictabilityBreach equals fine; no luck involvedCompliance becomes a routine cost, not a risk decision
Upstream controlsThematic inspections on appointing insurersFirms chase hours proactively; breaches shrink at source
RegSir's take — CPD fines are the least glamorous but most load-bearing gear in the IA's enforcement machine. Headline fines (AIA's HK$23m) make news; CPD fines make habits. For intermediaries: stop treating CPD as "admin to chase at year-end" — this is now an automated system where every case counts and every count is fined. For firms the implication is bigger: thematic inspections test whether you have a tracking mechanism, not whether you have breaches — helping intermediaries log hours is a firm's compliance duty, not a favour.

Self-check

Official sources

DocumentIssuerYear
IA Annual Report 2023–24 synopsis (66 investigations · 24 conduct · 2,001 CPD)IA2024
IA Annual Report 2022–23 synopsis (534 CPD · HK$3.4m)IA2023
IA Annual Report 2022–23 full text (fast-track mechanism)IA2023
SHARE THIS ANALYSIS WhatsApp Telegram LinkedIn X

How would your case be characterised? Ask RegSir.

Describe the facts — RegSir analyses them against the Securities and Futures Ordinance, SFC guidance and enforcement precedent, provision by provision.

Try 3 questions free →