China is rewriting the rules for who answers when a bank stumbles. A draft amendment to the Banking Supervision Law, released for public consultation last December, extends regulatory reach beyond the boardroom to the shareholders and controllers who influence decisions.
From form to substance
The change introduces “look-through” supervision. Regulators now examine who controls the entity, who profits from its transactions, and who actually influences risk-related decisions rather than relying solely on formal ownership records.
Previous oversight focused on the bank and its named executives. However, a bank’s risk appetite can be shaped by a controlling shareholder through board resolutions, key appointments, and funding arrangements. Actual controllers may also exert control via proxy agreements, concerted action, affiliate networks, or nominee arrangements.
The draft amendment provides the technical foundation for look-through supervision by enhancing macroprudential management, financial databases, and information sharing mechanisms. By sharing information across departments, regulators can identify hidden relationships, making it possible to uncover nominee shareholders, complex control structures, and closed-loop fund flows.
The new Company Law broadens the definition of an actual controller, which no longer needs to be a non-shareholder; anyone who directs corporate behaviour through investment ties, agreements, or other arrangements is included. Consequently, individuals can no longer evade liability by holding low nominal stakes or hiding behind multi-layered corporate structures and concerted action agreements.
Article 180 of the new Company Law stipulates that controlling and actual controllers who execute corporate affairs owe the company a duty of loyalty and diligence, even if they do not hold a directorship. Article 192 establishes “shadow instruction liability”: controlling and actual controllers who instruct directors or senior executives to carry out any act that damages company interests or its shareholders face joint and several liability. This rule can apply retroactively.
Related: E-Cigarette Explosions: Understanding the Risks and Prevention
This creates a link between look-through identification in financial regulation and look-through accountability under company law. Authorities are responsible for identifying actual control relationships and sources of risk, while company law provides the basis to hold controllers liable.
The draft amendment targets risks arising from opaque ownership structures, improper operational interference, and inauthentic capital. Opaque ownership—through nominee arrangements, trust holdings, cross-shareholdings, multi-layered special purpose vehicles, or concerted action agreements—can distort assessments of shareholder eligibility and the true source of capital. Improper interference occurs when shareholders or actual controllers interfere in credit extensions, investments, fund allocations, and risk management, even without formal written instructions. Inauthentic capital includes contributions that are not genuine, such as funding share purchases with bank loans or circular injections.
Financial institutions should begin by mapping relationships between shareholders, controllers, and related parties. They need to identify ultimate beneficial owners, concerted action arrangements, and funding sources. For major credit, guarantees, or investments, scrutiny of related-party ties should increase. If shareholders or controllers exert influence, records must document that decisions were made independently by authorized bodies.
Institutions can establish clearer boundaries in their articles of association and policies. They should improve mechanisms for declaring conflicts and monitoring unusual fund movements.
Look-through supervision aligns power with responsibility.
Similar reforms have been seen in other legal systems, where top lawyers have advocated for greater transparency in ownership and control.
