The First 90 Days After Forming a Hong Kong Company: Recruitment, Payroll and Operating Launch Checklist

Start with the conclusion: 90 days is an internal launch cycle, not a universal Hong Kong statutory deadline

Completing incorporation only means that a legal entity has been formed. It does not automatically show that the company can carry on every part of its business externally, receive payments smoothly, have employees start work, or meet every continuing obligation. This article treats the first 90 days as an internal launch cycle: align company facts and operating conditions at the start; move the first people and first payroll period into a traceable process in the middle; and complete a management review at the end. Its value is that it lets founders see which event actually triggers each task. The 90-day grid is only a record-keeping format.

Hong Kong has no single deadline that compresses the registered office, business registration, sector licences, insurance, work rights, MPF, payroll and employer records into 90 days. For example, changes to the registered office, directors' or company secretary's particulars, and a private company's annual return each run on their own company-law clocks. Once a local company actually starts business, a separate event clock applies to notifying business-registration particulars. After employing people, MPF, payroll and IR56 forms have their own milestones. The Companies Registry's post-incorporation filing guide, the Inland Revenue Department's one-stop business registration FAQ, the MPFA's guidance on employee enrolment, and the IRD's explanation of employers' obligations belong beside the same control board, but must not be mistaken for the same deadline.

This checklist is for Mainland Chinese or overseas founders whose company has been formed and is preparing to operate in practice, as well as operational owners acting with directors' authority. It does not replace fact-specific advice from accountants, company secretaries, lawyers, insurance advisers, immigration professionals or licensing authorities. In particular, do not treat internal ‘day 30’ or ‘day 60’ dates as promises that an account, licence, recruitment, visa or any approval will be completed.

Build a 90-day control board first: not a to-do list, but a clearance board

An ordinary to-do list can easily read ‘open account, buy insurance, arrange MPF, file taxes.’ The biggest problem with that format is that no one knows when a task should be done, who may confirm completion, or whether an exception requires the process to stop. This article recommends that every item have at least five columns: clock type, owner, trigger, readable evidence, and no-go condition.

Start by dividing clocks into three groups. The first is the fixed foundation that continues after incorporation, such as company particulars, the registered office, the Significant Controllers Register, business-registration validity and annual-return reminders. The second comprises event-driven obligations that arise only after hiring or personnel changes, such as whether a candidate may be employed, insurance taking effect, MPF enrolment, IR56E, termination or departure-from-Hong-Kong information. The third is the monthly or annual rhythm, including payroll periods, MPF contribution dates, annual employer reporting after receiving BIR56A, and the next anniversary date. The same person may own all three groups, but their trigger dates should never be merged.

The control board's ‘readable evidence’ must be specific as well. For company facts, use verified registration details, board or authorisation records, and a controlled company-facts pack. For payments, retain written status confirming that the actual account or payment tool is enabled, authorisation settings, and payment receipts. For employment matters, you should be able to read the employment terms, work-right checks, evidence that the insurance policy is in force, eMPF status and payroll records. If all that exists is a chat screenshot, oral confirmation or ‘application submitted,’ mark the item in progress, not complete.

The ‘no-go condition’ is the control board's most important column. If it is still unclear whether a business needs a particular licence, do not start that regulated activity. If a candidate's work-right documentation is insufficient, do not arrange actual work. If insurance is not yet in force, do not let the employee start. If payroll inputs are unapproved or no payment path is available, do not record the payroll month as closed. These stop points prevent one issue from being magnified by later payments, hiring or client delivery.

Days 0–30: align company facts, locations, payments and business stop points

Build a company-facts pack; do not use the annual return instead of day-to-day updates

In the first week, designate a person responsible for information and create a company-facts pack that only authorised people may amend. It should include the legal name; company and business-registration numbers; registered office; directors and company secretary; the information supporting ownership and significant-controller assessments; actual business address; incorporation date; expected actual business start date; and next anniversary date. It is a single source of fact for repeated use in later bank or payment-provider enquiries, contracting entity details, payroll employer records, invoice headers, company-secretary handovers and accounting handovers. It is not for public promotion.

A local private company limited by shares must have a registered office in Hong Kong. After a change to the registered office, the filing clock for NR1 runs separately from that change event. Appointments, cessations or changes of particulars for directors or the company secretary also have an independent 15-day filing requirement. A private company's annual return is generally calculated from the anniversary of incorporation; it does not automatically fall due on day 90 after incorporation. The Companies Registry's official guide sets out these distinct events. The control board should record separately whether a change occurred, who checked it and when registration evidence was received.

For applicable local non-listed companies, also confirm that the Significant Controllers Register is not an attachment completed only at incorporation. A company must take reasonable steps to identify significant controllers and keep the register and designated-representative particulars. The register may be kept at the registered office or another Hong Kong location, and the location arrangement itself creates notification boundaries. The Companies Registry's SCR FAQ explains the requirements for where it is kept and what it contains. The stop point here is that the control chain, designated representative or storage location is still unclear, so the company-facts pack should not be represented externally as complete.

Ask separately about the registered office, business-registration address and actual operating location

Many new companies enter all three addresses in the same field, then later discover that the lease, display, business registration, client delivery and employee attendance describe different facts. The registered office deals with company communications and service of statutory documents. The business address answers where business is actually conducted. The real work location must also cover employees' daily duties, client sites, coworking space or remote arrangements. The three may be the same or different, but completing one does not mean the other two have been resolved.

For a local company, after it actually starts business it must notify the Business Registration Office within one month of details such as its business name, nature, start date and business address. If the business address differs from the registered office, it should be handled according to the actual facts. An electronic business registration certificate may be printed and displayed at the business address. The IRD's official FAQ and its guidance on changes to business-registration particulars both distinguish company particulars from business particulars. The control board's evidence should be the actual date, submission or update status, and a written explanation of the address's purpose, rather than only a certificate of incorporation.

If the business involves food and beverage, import and export, telecommunications, money services, environmental activities, accommodation, education, healthcare or other regulated activities, first describe what is specifically provided, where it is provided, who is charged, and whether regulated goods or funds are handled. Then use GovHK's licences and permits information to screen for licences, permits, certificates or approvals that may be required. Screening is not approval. Until applicability, site conditions or approval status is clear, stop the relevant activity; do not use a certificate of incorporation as a substitute for a licence.

Test payment readiness by actual usability; do not treat an account application as the result

Within these 30 days, directors or an authorised owner should decide which lawful route the company will use to receive and make payments, who may set up payment details, who may approve payments, how payer and payee details will be checked, and who keeps monthly reconciliations. Different banks or payment providers decide whether to accept an applicant under their own customer-due-diligence, documentation and risk processes. Complete incorporation documents do not mean an account has been opened or that payment authority is enabled.

The control board should therefore not say ‘account opened successfully by day 14.’ It should say what formal status the owner received, whether payment authority has been enabled, whether downloadable transaction records can be generated, and whether the first payroll has an available company payment path. Without usable payment authority and a recordkeeping mechanism, do not regard customer receipts, supplier payments or payroll arrangements as implemented. This stop point is an internal-control recommendation, not a prediction of any financial institution's decision.

Define the first roles before collecting personal data

Start with a role card that states the actual work, employing entity, expected work location, direct manager, start conditions, whether client data must be accessed, whether work permission may be required, and whether the role sits in a business line that has not yet been approved. If the role card is unclear, the job advertisement, contract, insurance class and payroll inputs will all drift with it.

When collecting CVs or other personal data during recruitment, put the purpose of the data, those with access and retention arrangements on the control board too. The Privacy Commissioner's guidance requires advertisements that directly collect job-applicant data to state the purpose; data should be adequate but not excessive. As a general rule, a copy of an applicant's identity card should not be collected before the applicant accepts employment. The Guidance on the Code of Practice on Human Resource Management is the starting point for data collection, not permission to place every candidate's data in a shared group.

Days 31–60: if you will hire, take actual commencement through four gates first

Gate one: put employment facts into one usable set of records

Before recruitment begins or an offer is made, the operations owner should turn the role card into an employment-facts pack: employer name; role and responsibilities; actual start date; pay period; compensation components; working hours or roster; work location; manager; the version of the contract or written employment information; the personal-data purpose statement; and exceptions that may affect payroll or MPF. This does not require every contract term to be designed in this article. It does require that the same employee's name, start date and pay period are not recorded differently in HR, accounting, insurance and eMPF systems.

Readable evidence is more than a signed offer. It should include a version both parties can retain, verified employee master data, the role's start date and confirmation from the person responsible for payroll. If the employing entity, actual start date, work location or compensation inputs still conflict, do not roster the person, activate internal systems or have the candidate begin duties as a ‘trial.’ These practices can all change later employment, insurance, tax and work-right assessments.

Gate two: work rights and employees' compensation insurance must clear before work starts

Where a candidate is not a Hong Kong permanent resident, an employer cannot rely solely on an oral statement that the person may work. The Immigration Department requires employers to take practical steps before employment to confirm that a person may lawfully be employed. For non-permanent residents, they must also inspect a valid travel document. Visitors may not be employed, and a person whose document or e-Visa says ‘not permitted to take up employment’ must first obtain the applicable approval. The Immigration Department's employer guidance should be the evidence source for whether actual work may start, rather than a recruiter's assumption.

Insurance is another separate gate. Under the Labour Department's explanation of the Employees' Compensation Ordinance, before employing any employee an employer must have a valid policy covering its liabilities for work injuries. The rule does not simply exclude work by reference to full-time, part-time, permanent or temporary status. The Labour Department's official explanation should be used by the insurance owner to check the actual role, location and effective date. Where there is no verifiable evidence that the policy is in force, or work rights remain to be confirmed, an employee cannot bypass the commencement gate by calling the work ‘training,’ a ‘trial’ or ‘voluntary help.’

Gate three: work backwards from the actual employment date for MPF and eMPF; do not guess from incorporation

The MPF clock starts from the actual fact of employment, not the company's incorporation date. Except for exempt persons, employers must enrol regular full-time or part-time employees aged 18 to 64 who have been employed continuously for at least 60 days in MPF within the first 60 days of employment. The 60 days are calendar days, not working days. Employers must also submit the enrolment request through eMPF, with information including the employee's personal details, selected fund and tax-residency self-certification. The MPFA's enrolment guidance should be recorded directly on the employee card; do not decide special exemptions, industry schemes or short-term arrangements from experience alone.

A platform account, submitting an enrolment request, the employee receiving a participation notice and actual contributions are not the same status. eMPF is the current electronic platform for centralised administration of MPF schemes, but it does not decide employee status, wage composition or exemption conditions for a company. The MPFA's explanation of the eMPF Platform belongs in the ‘system path’ column. Whether each period's obligations have been met must still be assessed from that period's submission and payment evidence. If day 60 is approaching and information, authorisation or tax-residency self-certification is incomplete, escalate immediately to the responsible professional or platform support party; do not leave it until after the first contribution.

Gate four: run the first payroll dry run before payment takes place

Payroll is not simply dividing the monthly salary in an offer by days and making a transfer. At a minimum, the payroll owner, business owner and payment approver should jointly check the first dry run: payroll-period start and end dates; actual start date; approved fixed and variable items; absence or leave inputs; the basis for lawful deductions; employee payment details; MPF items; and explanations of exceptions. This article does not calculate salary levels, total cost or contract depth. Where commissions, allowances, cross-border payments, directors' remuneration or termination payments are involved, qualified professionals should review the facts.

Under the Employment Ordinance, wages must be paid when due and generally no later than seven days after the end of the wage period. The Labour Department's wage guidance provides the payment clock; it is not a buffer allowing a company to leave unverified wages until day seven. Readable evidence should include the approved calculation working papers, actual payment record, payroll information the employee can understand, MPF operating status and exception-handling record. Without a payment receipt or approval chain, do not declare the month's payroll closed based only on a bank-page screenshot.

Days 61–90: complete the first monthly close and keep annual information in its proper place

Make payment, MPF and records one closed monthly process

At this stage, the most valuable outcome is to run one payroll month end to end; there is no need to create another spreadsheet. Work through five steps: first lock approved employee and time inputs; then review calculations and exceptions; next pay under authority and retain the receipt; then complete the period's MPF/eMPF action and retain the successful status; finally archive payroll, employment, leave and exception information. If any step is missing, retain it as an unresolved item rather than moving it into the next month.

For regular monthly-paid employees, the MPF contribution day is generally the 10th of each month. The company should put the actual payroll month, employee category and current platform status in the calendar, rather than retain a vague task saying ‘process MPF monthly.’ The MPFA's employer FAQ describes that monthly milestone. The specific contribution amount, exemptions, late contributions, surcharges and treatment of special personnel are outside this article and should be confirmed under current rules and professional advice.

Payroll and employment records should not exist only in chats or on personal computers where they can be rewritten at any time. The Labour Department's guidance on wage and employment records explains the records employers should keep and reference formats. Internally, at minimum, establish who may amend and view records, when records are locked, how corrections leave an audit trail, and how payments, MPF and employee master data tie to the same payroll period. Then, when an audit, employee question or personnel change occurs, the team can return to facts rather than reconstruct memories.

Create IR56 event tags now; do not rebuild history when the annual form arrives

An employer's tax responsibilities begin with the first employee. For a newly hired employee who is expected to be liable to salaries tax, the clock for notifying IR56E is within three months after employment begins. Annual BIR56A/IR56B reporting is dealt with according to the form after the employer's return is issued by the IRD, generally within one month of issue. Termination and planned long-term or permanent departure from Hong Kong may separately trigger IR56F or IR56G. The IRD's employers' obligations page and employer reporting overview list these events separately.

That is why the first 90 days should establish five tags: new hire, remuneration change, termination, departure and annual employment. Do not wait until year-end to ask employees for historical information again. Readable evidence includes the date employee information was obtained, the source of compensation items, professional assessment of whether a form applies, actual filing status and the process for giving the employee a copy. Still not having received the annual form on day 90 does not mean there is nothing to do. Once data fields, owners and event reminders are in place, annual tasks will not start from memory alone.

Narrow access to personal data as recruitment ends

After day 61, many teams continue to keep all CVs, identity documents, payroll statements and insurance information in the same shared drive or chat group. That detaches data collected for recruitment from its original purpose. The Privacy Commissioner's guidance says recruitment data should be relevant to the purpose and not excessive; unsuccessful applicants' data should generally not be retained indefinitely, and the people handling it and their purposes should be explainable. Turn the relevant official guidance into access actions: remove irrelevant access when recruitment ends, move hired employees' data into a controlled personnel path, assign a clear owner to records needed for payroll and IR56, and record any additional purpose or retention rationale.

The stop point here is: ‘we need this document but cannot explain its purpose, custodian or basis for retention.’ In that situation, do not forward or copy it again. First have a privacy or qualified professional confirm the handling path. Data governance may seem less urgent than opening an account, but once an employee starts work, it appears in the same evidence chain as work-right, payroll, tax and insurance information.

Day-90 review: move only readable actions into the next quarter

The day-90 meeting should not ask whether every box is ticked. For each item, ask four questions: was the trigger date real, is the owner still in role, can the evidence be opened, and has the stop point been removed? Start by reviewing the three clock groups: whether company facts and the annual calendar are accurate; whether hired people have completed the work-right, insurance, MPF/eMPF and first-payroll loop; and whether monthly and annual tax, data-access and exception-handling work has been assigned to the next actual date.

The following should not be marked complete: an account or licence application was submitted but no usable status exists; a candidate gave only an oral statement with no work-right check; insurance, MPF or payroll records lack effective or filing evidence; the registered office is treated as the business address without checking actual operations; or annual returns, IR56E, MPF and wage payment are written as one date. For every failed item, retain the actual owner and next step instead of colouring it green for an internal report.

Only after the review does the control board become quarterly operating material rather than a launch tool. Put the next anniversary date, business-registration validity, each payroll period, MPF milestones, IR56 events and licence review into the real calendar separately. When the actual business, people, address, ownership, premises or payment method changes, reassess the relevant rows instead of carrying forward assumptions from incorporation day.

When support is needed, give the facts and boundaries to the right people first

Within its scope of company-registration coordination, document organisation and liaison with partner institutions, MANPRPOWER LIMITED can help organise a company-facts pack, launch control board and materials that still need checking. It does not provide professional conclusions on law, tax, audit, insurance, immigration, banking or sector licensing, and does not guarantee an account, licence, recruitment, visa or any timing outcome. Taking the actual business, address, people and timeline to the right adviser will often produce a more actionable professional answer than asking only, ‘what is still missing within 90 days?’