Type 7 Automated Trading Services

The word automated can be misleading. Almost every modern broker uses electronic systems, but the Type 7 question is not whether computers are involved. It is whether the service performs the functions described in the Securities and Futures Ordinance's ATS definition and which regulatory route applies.

Examine the service, not its marketing label

An electronic facility can do several different jobs. It may display information, transmit instructions, bring together trading interests, execute binding transactions, or support clearing. The legal analysis follows those functions. A product described as a network, bulletin board, app, or technology service can still raise an ATS question if its actual operation falls within the definition.

Start by documenting who uses the facility, what they can enter, what happens when trading interests meet, and when a binding obligation arises. Identify the instruments traded and the role of the operator. This produces a more useful licensing analysis than a statement that the business supplies software and therefore cannot be regulated.

The SFO provides different regulatory routes

The SFC explains that a corporation providing ATS as defined in the SFO must either be authorised under Part III or licensed or registered under Part V, subject to the applicable framework. Type 7 belongs to the Part V regulated-activity route. The appropriate route depends on the service and business model; the provider does not avoid oversight by choosing a preferred label.

As a general practice, an existing intermediary providing ATS alongside its other regulated activities would need the relevant Type 7 licence or registration under Part V. The SFC's ATS framework distinguishes such intermediary facilities from services where operating the trading infrastructure is the core function. The provider should assess the applicable requirements and conditions before launching.

Part III authorisation is not simply a Type 7 licence under another name. It is a different statutory route. When verifying a provider, check the appropriate SFC register and the terms of its authorisation or licence. An entry in one register should not be read as permission for every financial activity the provider might wish to conduct.

Simple order routing is a separate concept

The SFC says electronic facilities that simply route orders, and online facilities for specified regular fund subscription or redemption instructions, generally would not be regarded as Type 7 activity. That is a functional distinction. A channel that sends a client's order to the relevant dealer or market does different work from a facility that itself provides the defined trading service.

Imagine a broker's mobile app takes an order and transmits it to an external execution venue. The presence of a buy button does not alone make the app an ATS. Now imagine the operator changes the service so users' trading interests interact under the platform's own execution arrangements. That change requires a fresh analysis. The old order-routing description cannot simply be carried over.

An exclusion from Type 7 does not mean no regulation applies. The underlying dealing activity, electronic trading controls, notifications, client protections, and other obligations may still matter. The SFC expressly places responsibility on the intermediary to ensure its service does not fall within the ATS definition if it operates without the corresponding permission.

Type 7 does not replace other permissions

A platform may combine several services. Providing an electronic trading facility is one issue; dealing in securities, managing portfolios, advising, or holding client assets can raise others. A Type 7 permission should therefore be read with the rest of the business, any licence conditions, and the definitions of other activities.

For example, describing a business as a platform does not answer whether it is also a dealer. Nor does a technology permission establish that it may custody all client assets in any manner it chooses. Map each function and the party responsible for it. This avoids the common mistake of treating a single regulated-activity number as a complete business licence.

Trading rules and access controls

Users need to understand how the facility works: who can access it, which instruments it supports, how orders interact, and what happens during a system problem. A clear rule set supports orderly operation. Access controls help ensure that permissions, trading limits, and user credentials match the approved business arrangements.

Consider a service intended only for a defined user group. An employee cannot assume that adding another category of clients is a minor interface change. It can affect the authorisation conditions, applicable conduct duties, and operational risk. The same is true when the provider introduces new instruments or changes the matching mechanism.

Operational controls remain necessary

Electronic operation creates risks such as unauthorised access, duplicate instructions, system capacity problems, and incomplete records. The regulatory framework and applicable conditions address the provider's systems and controls. A licensed business should be able to explain how it tests changes, monitors activity, handles outages, and reconstructs transactions.

A test that confirms a screen accepts an order is not the same as testing the entire transaction process. The operator must understand rejection handling, cancellation, execution reports, downstream records, and recovery. Otherwise, a partial failure can leave users uncertain whether a transaction exists or whether sending the instruction again will create a duplicate.

Overseas systems and Hong Kong access

The physical location of servers does not settle the Hong Kong regulatory question. The SFC maintains a register of ATS providers authorised under Part III, including overseas operators and the conditions attached to their services. A cross-border service should examine its Hong Kong activities and access arrangements rather than assume that overseas incorporation removes the issue.

For an investor or compliance employee, use the register as evidence of a specific status. Check the named legal entity, facility, and conditions. A similar brand name or a group affiliate's permission is not enough. The authorised service may be narrower than the group's global product offering.

A useful exam decision sequence

Identify what the electronic facility actually does. Determine whether the ATS definition is engaged. Distinguish Part III authorisation from Part V Type 7 licensing or registration, then consider other regulated functions and conditions. If the facts only describe simple order routing, do not jump to Type 7 merely because the service is online. If the facts describe a defined trading facility, do not dismiss regulation because the operator calls itself a software company.