Type 10 Credit Rating Services and Licensing Boundaries

A credit opinion does not become a Type 10 service just because it discusses a company’s finances or a bond. The Type 10 analysis asks what the firm produces, what the opinion says, how it expresses that opinion, and who is expected to receive it. The Securities and Futures Ordinance (SFO) regulates providing credit rating services as a distinct activity. The SFC’s credit-rating-agency FAQs explain that the public or subscription purpose matters, and distinguish ratings from other financial research and data work.

What a credit rating does

A credit rating is an opinion about creditworthiness, expressed using a defined ranking system. It assesses whether credit extended to a corporate body, or on the security of a covered instrument, is likely to be realized. The rating may use letters, numbers, symbols, or another scale that orders credit risk. A report can contain supporting analysis, but the ranking opinion is central to the regulated concept.

A company’s financial database, a news article about a missed payment, or an analyst’s general comment is not automatically a credit rating. The definition focuses on a particular kind of evaluative opinion using a ranking system and specified subjects. The SFC notes that commercial agencies collecting or distributing information on the indebtedness or credit history of entities other than individuals generally are not required to hold Type 10 solely for that data activity. Consumer credit reference opinions about individuals are outside the SFO credit-rating definition described in its guidance.

The distribution purpose matters

The licensing regime is aimed at credit ratings intended for dissemination to the public or distribution by subscription, whether in Hong Kong or elsewhere, or reasonably expected to be distributed in that way. A firm preparing ratings for that market should analyze Type 10 licensing before producing or releasing the service. This reaches ratings that are sold through a subscription product as well as ratings made publicly available; a firm should not assume that a paywall removes the regulatory purpose.

A rating produced solely for an entity’s own internal use is treated differently. The SFC gives a bank’s internal counterparty-risk system as an example: where a rating is neither intended nor reasonably expected to be publicly disseminated or distributed by subscription, the firm is unlikely to be regarded as providing credit rating services for SFO purposes. The reason is the rating’s restricted purpose and use, not simply that the end user is a bank.

Private ratings have strict boundaries

A private rating is prepared at a person’s request exclusively for that person and is not intended, or reasonably expected, to reach the public or a subscription market. The SFC says that a rating agency providing private ratings must first enter into a written agreement with the rated entity prohibiting the rated entity from disseminating the rating to the public. The restriction helps preserve the reason for treating the product as private.

The label “private” is not enough. Look at the actual agreement, the intended audience, the distribution arrangements, and what the parties reasonably expect will happen. If the agency later wants to disseminate the rating publicly or distribute it by subscription, the SFC says the agency must first ensure the rating has been prepared in compliance with the CRA Code before dissemination. A planned later publication cannot be treated as an afterthought that leaves the preparation stage unregulated.

Type 10 compared with Type 4

Type 4 is advising on securities. It concerns advice to a client about acquiring or disposing of particular securities. Type 10 is a creditworthiness opinion expressed through a defined ranking system for distribution or subscription. The rating itself is not advice to the subscriber to buy or sell the rated bond. The SFC states that there is no overlap between the two definitions simply because a Type 4 adviser comments on the creditworthiness of an instrument during investment advice.

For example, a licensed securities adviser may explain that an issuer’s credit quality is a risk factor in discussing whether a client should buy a particular bond. That incidental commentary is not automatically a Type 10 rating. If the adviser separately starts producing standardized, ranked ratings for market distribution, the second activity raises a different question. Identify the product and its purpose rather than assuming that every negative or positive credit comment is an agency rating.

Who needs a licence within an agency?

The activity is not limited to the corporate entity’s licence status. The SFC explains that rating analysts who prepare credit ratings perform the regulated function and may need Type 10 licences. Staff members who only handle marketing or business development are unlikely to be treated as providing the rating service for this purpose. Likewise, support staff who collect and prepare raw credit data without performing analysis are unlikely to be performing a regulated function related to Type 10.

A job title does not settle the question. If a person’s actual duties include analyzing issuer information, applying the rating methodology, or contributing to the rating decision, those tasks deserve a different assessment from scheduling client meetings or distributing already-prepared reports. The SFC’s FAQ distinguishes data gathering from analytical work, so exam scenarios should focus on what the employee actually does.

Conflict controls and ancillary services

Credit-rating independence matters because the rated entity may pay for a rating or provide information to the agency. The SFC says a credit rating agency should not carry on a business that could reasonably be considered to have the potential to create a conflict of interest in its rating business. The CRA Code governs safeguards and ancillary services. In particular, an agency cannot provide consultancy or advisory services to a rated entity or its related party about that entity’s corporate or legal structure, assets, liabilities, or activities.

The practical concern is that an agency should assess creditworthiness independently rather than advise the issuer on how to improve the very profile being rated. Providing an unrelated ancillary service does not necessarily make every relationship impermissible, but the agency must assess and manage conflicts under the applicable Code. A factual question that pairs ratings with issuer consulting is therefore testing more than licensing scope; it also raises independence and conduct issues.

Instrument coverage and edge cases

The SFO definition refers to opinions about corporate bodies and specified financial instruments, including instruments connected with providing credit or evidencing indebtedness. Whether a novel instrument fits the definition is a question of its legal and economic features. In its FAQ, the SFC notes that a credit rating of sukuk may trigger Type 10 if the instrument constitutes an agreement to provide credit or acknowledges, evidences, or creates indebtedness. The label attached to the product does not answer the statutory question.

This is a useful general method for unfamiliar products: identify whether the instrument creates an obligation to pay or evidences indebtedness, then apply the statutory definition and current SFC guidance. Do not assume that an innovative structure escapes the regime simply because it is not called a bond. Conversely, do not assume every opinion about a financial product is a Type 10 rating; the defined ranking system and distribution purpose remain relevant.

Work through a Type 10 scenario

1. Is the output an opinion about creditworthiness, rather than factual credit history or general commentary?
2. Is that opinion expressed using a defined ranking system?
3. Does it concern a corporate body or covered financial instrument under the SFO definition?
4. Is it intended or reasonably expected to be disseminated publicly or distributed by subscription?
5. Who prepares or analyzes the rating, and who only performs marketing or raw-data support?
6. If the rating is claimed to be private, is there a prior written non-dissemination agreement and no expectation of public distribution?
7. Does the agency provide consulting or other services that could create conflicts under the CRA Code?

Common mistakes

• Treating all credit information as a credit rating. Raw payment history or a database is not necessarily a ranked creditworthiness opinion.
• Assuming a subscription product is private. Subscription distribution is expressly relevant to Type 10.
• Calling a rating private because one client commissioned it, while ignoring expected public release or the absence of a written restriction.
• Confusing Type 10 with Type 4. A standardized credit rating and client-specific investment advice have different statutory purposes.
• Assuming every agency employee needs a Type 10 licence. Duties that involve rating analysis differ from marketing or raw data collection.
• Ignoring conflicts from ancillary work. An agency’s independence and restrictions on advisory services remain important even when the rating itself is properly licensed.

For exam purposes, anchor Type 10 to a defined creditworthiness ranking and its distribution purpose. Then test the private-rating conditions, the person’s actual role, and any conflict issues. That sequence is clearer than starting from a company’s name or assuming that everything called research, analysis, or credit data is regulated in the same way.