Type 10 Credit Rating Services

A credit rating is not every comment that an issuer is financially strong or weak. The SFO uses defined concepts, and the purpose and distribution of the opinion matter. Understanding those boundaries is more useful than assuming that every analyst who reads a balance sheet needs a Type 10 licence.

Identify the opinion and its audience

The licensing analysis asks whether the service involves credit ratings within the statutory definition and their intended or reasonably expected dissemination. Public distribution and distribution by subscription can engage the regime, whether the recipients are in Hong Kong or elsewhere. Restricting a report to paying subscribers does not necessarily turn it into an unregulated private opinion.

Begin with what the firm produces. Does it express a creditworthiness opinion in a form within the definition, or merely assemble historical information? Then identify who will receive it, how they can reuse it, and what the provider reasonably expects. The title of a report is less important than its substance and planned distribution.

Internal risk assessments

The SFC explains that ratings prepared only for a firm's internal use are unlikely to constitute providing credit rating services where they are neither intended nor reasonably expected to be publicly disseminated or distributed by subscription. A bank's internal system for evaluating counterparty risk is its example. The internal purpose is central to that conclusion.

Imagine a risk team assigns grades to counterparties so the bank can set exposure limits. Those grades remain within the internal process. Compare a firm that packages its grades into reports sold to subscribers. Both use analytical judgments, but the distribution arrangements differ. The second business cannot rely on the first example simply because its methodology began as an internal tool.

A change in distribution should trigger review before publication. A report prepared for one purpose may need further work and regulatory analysis if the firm later wants to market it externally. Compliance should be involved when the business model changes, not only after an internal document appears on a public website.

Private ratings need genuine limits

The SFC describes private ratings as ratings requested by a person, prepared exclusively for that person, and neither intended nor reasonably expected to be distributed publicly or by subscription. Its FAQ addresses a prior written agreement prohibiting the rated entity from public dissemination when a CRA provides such a private rating. A confidential label without the corresponding arrangement is insufficient.

Suppose a company requests a private assessment and later asks to use it in an investor presentation. That changes the distribution issue. A CRA that wishes to disseminate a previously private rating publicly or by subscription must first ensure that it was prepared in compliance with the applicable CRA Code provisions. The private origin does not create a permanent exemption for future uses.

For an exam question, look for intent and reasonable expectation as well as the actual recipient list. A provider should not claim the rating is private while knowing the customer plans to distribute it widely. The arrangement must match how the product is meant to be used.

Credit data is different from a credit rating

The SFC distinguishes gathering, collating, disseminating, or distributing information about an entity's indebtedness or credit history from producing the regulated rating opinion. It also notes that the statutory definition excludes opinions regarding the creditworthiness of individuals. These distinctions help separate the Type 10 regime from ordinary credit-reference services.

A database showing payment dates, outstanding obligations, and historical defaults supplies information. A rating process evaluates creditworthiness using a methodology. A business can potentially do both, so calling itself a data provider does not resolve the entire analysis. Identify the output delivered to the customer and whether an evaluative opinion is part of it.

Which staff activities matter

The SFC's FAQ distinguishes staff preparing credit ratings from employees who perform only marketing or business-development work. Purely commercial support is unlikely to constitute providing credit rating services by itself. The employee's real duties matter more than whether the business card says analyst, associate, or relationship manager.

For example, an employee who schedules meetings and explains the firm's subscription packages has a different role from a person who participates in preparing the creditworthiness assessment. If support staff begin exercising analytical judgment within the rating process, the firm should reassess their role. An organisational label cannot replace a review of actual work.

Similarly, access to data does not automatically mean the employee prepares ratings. Map the process from collection through analysis, rating determination, review, and publication. Clear responsibilities make it easier to identify which individuals perform the regulated function and which provide administrative support.

Type 10 and securities advice

Credit-rating services and advising on securities are distinct regulated activities. The SFC FAQ specifically addresses comments on creditworthiness made in the course of securities advice. A recommendation about buying or selling an instrument and the preparation of a rating product can have different functions and scope. Review the statutory definitions and any relevant exclusions rather than assume one permission always includes the other.

An investor should also distinguish the meaning of the output. A credit rating addresses creditworthiness within its methodology. It does not automatically establish that the instrument is suitable for a particular client, fairly priced, liquid, or protected against every loss. Distribution of a rating cannot replace the intermediary's applicable suitability analysis.

Licensing and conduct are separate layers

Once the service falls within the regime, the firm and relevant individuals need the appropriate status and must comply with applicable conduct requirements. The CRA Code addresses issues such as rating quality, independence, conflicts, and confidentiality. Being licensed is not a promise that every rated obligation will perform as expected.

Issuer payment and commercial relationships can create conflicts that require controls. Staff should distinguish discussing the rating process from promising a desired outcome. Records should support the analytical conclusion and treatment of relevant information. These duties reinforce the difference between an evidence-based rating and a marketing claim designed to please a client.

The scope test to remember

Ask what opinion is produced, who it concerns, who prepares it, and how it will be distributed. Internal use, a genuine private rating, a subscription product, and a credit-history database are different fact patterns. Apply the statutory definition to those facts before choosing a licence category. That method is more reliable than deciding from the words credit or rating alone.