Which Hong Kong rules apply to AI agents in finance?

Existing ones, applied by three bodies. The HKMA supervises banks, the SFC supervises securities and futures firms, and the PCPD oversees the Personal Data (Privacy) Ordinance. Hong Kong has no AI-specific statute for finance, so an agent is governed through each supervisor's expectations on risk management, conduct and outsourcing, and through the ordinance's data protection principles.

Who regulates what?

The ordinance applies to every firm handling personal data in Hong Kong. The HKMA and SFC rules apply according to the firm's licence. A bank with a securities business deals with both supervisors.

What do the rules require, in substance?

The Personal Data (Privacy) Ordinance sets data protection principles. In substance, personal data must be collected for a lawful purpose directly related to the firm's function, by fair means and not excessively; kept accurate and no longer than necessary; used only for the purpose collected or a directly related one, unless the person consents to a new use; protected by appropriate security; and covered by open policies. People have rights of access and correction. Where a firm uses a data processor, such as a platform or model provider, it must use contractual or other means to ensure the processor protects the data and does not keep it longer than needed.

The HKMA expects banks to manage the risks of the technology they use, with board and senior management oversight, clear accountability, and proper management of outsourced services. Customers should be treated fairly, and banks remain responsible for outcomes delivered through technology.

The SFC expects licensed firms to supervise how their business is conducted, including through systems. Where an agent touches investment products, suitability and conduct obligations apply as if a person were doing the work.

This is an explanation of the rules, not legal advice; confirm how they apply to you with counsel.

Where does the line fall for an agent?

The reasoning is the same across the three bodies: the firm is accountable, whatever does the work. That puts a clear line between preparation and judgement.

• Agent may: answer customers from approved content, gather documents for account opening, prepare suitability fact-finds, monitor transactions and draft reports, process routine requests within limits.
• Stays with a person: suitability assessments and recommendations for investment products, credit decisions with significant effects, decisions to restrict or close accounts, approving any use of personal data for a new purpose, and responding to the PCPD or a supervisor.

Two points are specific to Hong Kong practice. First, the ordinance's use limitation is strict: using data for a purpose not directly related to the original one needs the person's prescribed consent, so an agent that repurposes servicing data for marketing creates a clear breach risk. Second, the direct marketing provisions of the ordinance are detailed, so marketing by agents needs its own review.

An illustrative example

Take a Hong Kong retail bank that deploys an agent to help customers with wealth products. The agent explains product features, collects the customer's investment experience and risk tolerance, and prepares a draft suitability record. A licensed relationship manager reviews the record, discusses it with the customer and makes any recommendation.

The bank finds the agent was using customers' deposit balances, collected for account servicing, to decide which customers to approach about structured products. That is a new use under the ordinance. The bank removes the agent's access to balances for outreach, routes any targeting through its direct marketing consent process, and records the change for its HKMA conduct review.

Which controls answer each body?

• For the HKMA: an inventory of agents with owners, limits enforced at action, outsourcing assessments of the platform and model provider, and outcome monitoring.
• For the SFC: suitability kept with licensed staff, records of every agent interaction about investment products, and supervision of the agent as part of the firm's systems.
• For the PCPD: purpose-bound sources, retention rules for agent memory and logs, processor contracts, and access requests that reach agent records.

For comparison, see which Mexican rules apply to AI agents in finance and which Kenyan rules apply to AI agents. Firms with UK operations will also meet UK operational resilience rules for AI agents. The full map is in AI agent regulation, mapped to controls.