What Is the PCAOB? The Role of the US Public Company Accounting Oversight Board

The PCAOB (Public Company Accounting Oversight Board) has re-emerged as a critical gatekeeper for Hong Kong issuers targeting a US listing, following the December 2022 passage of the Consolidated Appropriations Act, 2023, which eliminated the “foreign issuer” exemption from mandatory PCAOB inspection. As of Q1 2025, the PCAOB has successfully negotiated access to inspect audit firms in mainland China and Hong Kong, completing its first on-site inspections in the region since 2020. For any Hong Kong-headquartered company—whether incorporated in the Cayman Islands, Bermuda, or BVI—seeking a listing on the NYSE or Nasdaq, the PCAOB’s registration and inspection status of their auditor is no longer a procedural footnote but a statutory prerequisite for continued trading. Failure to retain a PCAOB-registered and inspected auditor for three consecutive years triggers a mandatory delisting under the Holding Foreign Companies Accountable Act (HFCAA). This article dissects the PCAOB’s statutory mandate, its inspection regime, the implications of the HFCAA for PRC-based issuers using Variable Interest Entity (VIE) structures, and the specific compliance steps Hong Kong sponsors and CFOs must integrate into their IPO roadmaps.

The Statutory Mandate and Operational Scope of the PCAOB

The PCAOB was established under the Sarbanes-Oxley Act of 2002 (Section 101) as a non-profit corporation to oversee the audits of public companies registered with the US Securities and Exchange Commission (SEC). Its jurisdiction is not optional: any accounting firm that prepares or issues an audit report for a US-listed company must register with the PCAOB, submit to its inspection regime, and comply with its auditing standards.

Registration Requirements for Hong Kong and PRC Auditors

Under PCAOB Rule 2100, a foreign public accounting firm that plays a “substantial role” in the audit of a US-listed issuer must register. For a typical Hong Kong IPO on the Nasdaq, the “principal auditor” is often a Big Four firm (Deloitte, PwC, EY, KPMG) operating through a Hong Kong partnership. As of October 2024, the PCAOB’s registered firm list includes 847 non-US firms, of which 97 are based in Hong Kong and 42 in mainland China. The registration process requires the firm to disclose its legal structure, client list (by issuer name and SEC file number), fee information, and any pending disciplinary proceedings. Failure to register can result in the PCAOB barring the firm from issuing audit opinions for SEC-reporting companies, effectively halting any IPO in which that firm serves as auditor.

The Inspection Cycle and Public Reports

The PCAOB inspects registered firms on a cycle determined by the number of issuers they audit. Firms auditing more than 100 issuers are inspected annually; firms auditing 100 or fewer are inspected at least once every three years. Each inspection results in a public report that identifies audit deficiencies—instances where the auditor failed to obtain sufficient appropriate evidence to support its opinion. For Hong Kong auditors, the most frequently cited deficiencies in 2023-2024 inspections included inadequate testing of revenue recognition (PCAOB Staff Inspection Brief, 2023, Vol. 2023/3) and insufficient evaluation of goodwill impairment models. These reports are publicly searchable on the PCAOB website and are routinely reviewed by Hong Kong sponsors during due diligence, as a firm with repeated Part I deficiencies may signal heightened litigation risk for the issuer.

The HFCAA and the Mandatory Delisting Mechanism

The Holding Foreign Companies Accountable Act, enacted in December 2020, directly links PCAOB access to the continued listing status of foreign issuers. Section 2(a) of the HFCAA requires the SEC to prohibit trading in the securities of any issuer whose auditor is not subject to PCAOB inspection for three consecutive years.

The Three-Year Countdown and Its Triggers

The SEC’s implementation rule (17 CFR 240.12b-25) defines the trigger as the issuer’s annual report (Form 20-F for foreign private issuers) filing date. The first year of non-inspection is the fiscal year in which the SEC identifies the issuer’s auditor as non-inspected. For Hong Kong issuers that used PRC-based auditors between 2021 and 2023, the countdown began with the FY2021 Form 20-F filing. As of December 2024, the SEC had identified over 200 issuers on its “Conclusive List” of non-compliant companies, including several Hong Kong-listed companies that also trade via American Depositary Receipts (ADRs) on the NYSE. The delisting process is automatic: the SEC issues a trading prohibition notice, and the exchange (NYSE or Nasdaq) delists the securities. No appeal to the exchange is available; the only remedy is for the issuer to change its auditor to a PCAOB-inspected firm before the third consecutive year’s filing deadline.

The December 2022 Breakthrough and Current Status

The PCAOB’s December 2022 announcement that it had secured complete access to inspect audit firms in mainland China and Hong Kong (PCAOB Release No. 2022-007) effectively reset the clock for issuers using those firms. The PCAOB conducted on-site inspections in Hong Kong in September 2023 and March 2024, covering the audit files of 10 Hong Kong-based firms, including affiliates of the Big Four. As of January 2025, no Hong Kong or PRC auditor has been designated as “non-inspected” by the PCAOB. However, this status is contingent on the continuation of the 2022 agreement—a bilateral arrangement between the PCAOB and the China Securities Regulatory Commission (CSRC) and the Ministry of Finance of the PRC. Any unilateral withdrawal by the PRC authorities would immediately reinstate the three-year countdown for all issuers using those auditors.

Practical Implications for Hong Kong Issuers and Sponsors

For a Hong Kong company pursuing a US IPO, the PCAOB’s role directly shapes the audit committee’s selection of the reporting accountant, the timeline for financial statement preparation, and the ongoing compliance burden post-listing.

Auditor Selection and VIE Structure Considerations

Issuers structured as Cayman Islands or BVI holding companies with operating entities in the PRC via VIE agreements must ensure that the auditor of the consolidated group is PCAOB-registered and has a clean inspection history. The PCAOB has explicitly stated that it will inspect the audit work of the component auditor (the firm auditing the PRC operating entity) even if the principal auditor (the Hong Kong firm) signs the consolidated opinion. For VIE structures, this means the PRC-based audit team must also be subject to PCAOB inspection. As of Q1 2025, the PCAOB has access to inspect all PRC-based audit firms, but the political risk of a sudden access revocation remains a material disclosure item under SEC Regulation S-K Item 503(c) (risk factors). Hong Kong sponsors should include a specific risk factor in the prospectus (招股書) stating that if PCAOB access to PRC auditors is restricted, the issuer’s ADRs could be delisted.

The Audit Committee’s PCAOB Due Diligence

Under HKEX Listing Rule 3.21, every listed issuer must establish an audit committee. For a US-listed Hong Kong company, the audit committee must also comply with SEC Rule 10A-3, which requires the committee to be directly responsible for the appointment, compensation, and oversight of the auditor. This includes reviewing the auditor’s most recent PCAOB inspection report. The audit committee should request the auditor’s “Part I” deficiencies (those that the board agreed to address) and “Part II” criticisms (those that were not addressed). A firm with multiple Part I deficiencies in consecutive years—for example, failure to test internal controls over financial reporting (ICFR)—should trigger a request for a second opinion from another PCAOB-registered firm. The committee must document this review in the minutes, as the SEC has indicated it will request such documentation during its own reviews of issuer filings.

Ongoing Compliance: Form 20-F and PCAOB Access Disclosure

Each year, a foreign private issuer filing Form 20-F must disclose whether its auditor is subject to PCAOB inspection. The SEC’s Division of Corporation Finance has issued sample comment letters (e.g., CF Letter, March 2023) requesting issuers to state explicitly whether the auditor was inspected in the prior fiscal year and, if not, the reasons. For Hong Kong issuers using a Big Four firm with a Hong Kong license, the answer is straightforward: the Hong Kong affiliate is inspected. However, for issuers using a smaller, PRC-based firm that is not a PCAOB member, the disclosure must state that the auditor is not subject to inspection and that the issuer faces a heightened risk of delisting. This disclosure must be in the prospectus and in each subsequent Form 20-F. Failure to do so can result in an SEC stop order delaying the IPO.

The SPAC Pathway and PCAOB Considerations

Special Purpose Acquisition Companies (SPACs) listing on the NYSE or Nasdaq present a distinct PCAOB dynamic for Hong Kong target companies. The SPAC itself is a US-domiciled shell company, and its auditor must be PCAOB-registered. When the SPAC announces a de-SPAC business combination with a Hong Kong target, the combined entity must file a proxy statement or registration statement (Form S-4) that includes audited financial statements of the target for at least the two most recent fiscal years. These target financials must be audited by a PCAOB-registered firm.

The De-SPAC Audit and the “Change of Auditor” Risk

If the Hong Kong target’s existing auditor is not PCAOB-registered, the target must engage a PCAOB-registered firm to re-audit its historical financials—a process that can take 12 to 18 weeks and cost between USD 500,000 and USD 1.5 million, depending on the complexity of the VIE structure. The PCAOB requires that the re-audit be performed in accordance with its standards (AS 1000 series), which are more prescriptive than PRC auditing standards in areas such as related-party transactions and revenue cut-off. The target’s audit committee must also evaluate whether the new auditor’s inspection history shows any “going concern” or “material weakness” findings. A PCAOB inspection report that identifies deficiencies in the new auditor’s methodology for testing revenue—a common finding in 2023-2024 reports—should be a red flag for the SPAC’s board.

The SPAC’s PCAOB Compliance Post-Combination

After the de-SPAC transaction, the combined company is a US-listed entity subject to the HFCAA. If the combined company’s auditor is based in Hong Kong or the PRC, the PCAOB inspection access status is identical to that of a traditional IPO. The SPAC sponsor should include a PCAOB access risk factor in the proxy statement. As of January 2025, the SEC has not issued any specific guidance exempting de-SPAC transactions from the HFCAA’s three-year rule. Therefore, a Hong Kong target that merges into a SPAC using a non-PCAOB-inspected auditor faces the same delisting timeline as a traditional IPO issuer.

Conclusion and Actionable Takeaways

The PCAOB is not a theoretical regulatory body for Hong Kong issuers; it is a direct determinant of listing eligibility on the NYSE and Nasdaq. The 2022 access agreement with the PRC authorities has temporarily neutralised the HFCAA’s delisting mechanism, but the political risk of a reversal remains high. Hong Kong CFOs, company secretaries, and sponsors must integrate PCAOB compliance into every stage of the IPO process, from auditor selection to annual Form 20-F disclosure.

Actionable Takeaways for Hong Kong Issuers and Sponsors:

1. Confirm PCAOB registration and inspection status of your auditor before engaging them for any US IPO work. Request a copy of the firm’s most recent PCAOB inspection report and review Part I deficiencies for any pattern related to revenue recognition or internal controls over financial reporting.
2. For VIE-structured issuers, ensure that the component auditor auditing the PRC operating entity is also subject to PCAOB inspection. The PCAOB will inspect the component auditor’s work, and a lack of access to that firm could trigger the HFCAA’s three-year countdown for the consolidated issuer.
3. Include a specific risk factor in the prospectus (招股書) under SEC Regulation S-K Item 503(c) that explicitly states the potential for ADR delisting if PCAOB access to PRC or Hong Kong auditors is revoked. This risk factor must be updated annually in the Form 20-F.
4. For de-SPAC transactions, budget for a re-audit of the Hong Kong target’s historical financials by a PCAOB-registered firm if the target’s existing auditor is not registered. This re-audit typically requires 12-18 weeks and costs between USD 500,000 and USD 1.5 million.
5. Document the audit committee’s review of the PCAOB inspection report in the board minutes. The SEC may request this documentation during its review of the issuer’s Form 20-F or registration statement, and failure to produce it can delay the IPO or trigger a comment letter.