HFCAA, PCAOB inspection, and the China issuer: what changed and what didn't.

For roughly two decades, one structural fault line ran under every China-based company with U.S.-traded securities: the auditors signing their financial statements sat in jurisdictions where the U.S. audit regulator could not inspect them. The Holding Foreign Companies Accountable Act turned that fault line into a statute with a countdown attached. Then, in late 2022, the countdown was paused — not repealed. A China-based company weighing a U.S. OTC path today needs to understand both halves of that sentence.

How the HFCAA mechanism works

The HFCAA, enacted in December 2020, attaches to companies that file reports with the SEC. Each year, the SEC identifies registrants whose financial statements were audited by a firm the PCAOB has determined it cannot completely inspect or investigate because of a position taken by an authority in the firm's home jurisdiction. A company so identified is a "Commission-Identified Issuer." The statute's teeth: after consecutive years of identification, the SEC must prohibit the company's securities from trading in the United States — on exchanges and over-the-counter alike. As originally enacted the threshold was three consecutive years; subsequent legislation shortened it to two. Two consecutive non-inspection years, then a trading prohibition. It is one of the more mechanical sanctions in U.S. securities law: no discretion, no balancing test, no consideration of whether the company itself did anything wrong.

December 2022: the determination that reset the clock

Through 2021 and most of 2022, the PCAOB's standing determination was that Chinese authorities' positions prevented complete inspection of registered firms headquartered in mainland China and Hong Kong. That put every issuer audited by those firms on the conveyor belt toward prohibition. In August 2022, the PCAOB, the China Securities Regulatory Commission, and China's Ministry of Finance signed a Statement of Protocol establishing a framework for PCAOB inspections and investigations in both jurisdictions. The PCAOB then sent inspectors to Hong Kong for an on-the-ground test of whether the access promised on paper was real. In December 2022, the Board announced its conclusion: it had secured complete access to inspect and investigate registered public accounting firms in mainland China and Hong Kong, and it vacated its prior determinations. The board was explicit that this was the first time in history it had obtained such access.

The 2022 determination did not end the HFCAA. It stopped the clock — on the condition that the access which stopped it continues to exist.

What changed in practice

With the determinations vacated, issuers stopped being newly identified on the basis of mainland China and Hong Kong audits, and the consecutive-year counts that had been accumulating were interrupted. PCAOB inspections of China-based firms became a recurring reality rather than a diplomatic aspiration, and the Board has since inspected, investigated, and in some cases sanctioned firms in the region — which is what a functioning inspection regime looks like. For a China-based company choosing an auditor today, the practical meaning is direct: it is possible to engage a PCAOB-registered firm, in the region or elsewhere, whose work is subject to genuine PCAOB oversight, and to build U.S.-facing financial statements on that foundation.

What did not change

The statute remains in force, and its machinery is dormant, not dismantled. The PCAOB has been explicit that its determination holds only so long as complete access persists, and that it will act — including issuing new determinations — if access is obstructed. If that happened, identification would resume and the two-year clock would restart for affected issuers. Geopolitics, not accounting, is the variable. An issuer cannot control it; an issuer can only position for it. That means treating auditor selection as a risk decision, not a procurement decision: a firm with a clean inspection history, workpapers maintained and producible under the protocol's terms, and engagement documentation that would survive a change in the weather.

The OTCQB angle: where HFCAA attaches and where it doesn't

Here the market-tier distinction matters more than most advisers explain. The HFCAA attaches to SEC-reporting companies — issuers filing annual reports with the Commission. An OTCQB company that is an SEC reporter sits squarely inside the regime: identification, the two-year count, and the trading prohibition all apply to it exactly as they apply to a Nasdaq-listed issuer, because over-the-counter trading is expressly within the prohibition's scope. OTCQB also admits companies using OTC Markets' Alternative Reporting standard, which does not involve SEC reports and therefore sits outside the HFCAA identification mechanism — though OTCQB's own rules still require audited financials, and for SEC-reporting companies a PCAOB-registered auditor. The honest framing: alternative reporting changes which disclosure regime governs you; it is not a loophole to be marketed, and investors and market makers increasingly ask HFCAA-shaped questions regardless of reporting track.

Planning posture for a China issuer today

The defensible plan treats the current inspection regime as real but conditional. Engage a PCAOB-registered auditor with a current, inspectable presence and ask directly about its inspection history and workpaper-access posture. Keep audit documentation organized so that a change of auditor — voluntary or forced — does not strand prior-year financials. Decide the SEC-reporting question deliberately, understanding that reporting status is what places you inside or outside the HFCAA machinery. And write the risk down: boards and investors respond better to a documented, monitored exposure than to a surprise. None of this guarantees anything — nothing in this area can be guaranteed — but it converts a geopolitical variable into a managed one, which is the most any issuer can do.