Permanent Establishment Risks Under DTAs: Digital Commerce and Remote Service in Hong Kong

跨境规划 Permanent Establishment Risks Under DTAs: Digital Commerce and Remote Service in Hong Kong 2025-11-30 · 10 min read The Hong Kong Inland Revenue Department (IRD) issued Departmental Interpretation and Practice Notes (DIPN) No. 61 in 2024, signalling a marked intensification in its scrutiny of non-resident enterprises deriving income from Hong Kong without a physical office. This guidance, coupled with the OECD’s ongoing implementation of Pillar One (Amount A) and the evolving jurisprudence around “digital permanent establishments” (PEs), has created a compliance environment where the traditional reliance on the territorial source principle is no longer sufficient. For family offices and mid-cap CFOs operating in Hong Kong, the risk of inadvertently creating a PE under a Double Taxation Agreement (DTA) through remote services, digital commerce, or even dependent agent activities has become a material tax exposure. The IRD’s 2023-24 annual report noted a 15% year-on-year increase in transfer pricing audits, many of which centred on PE attribution. This article examines the specific PE risks under Hong Kong’s DTAs, focusing on the intersection of digital commerce, remote service delivery, and the evolving definition of a “fixed place of business.” The Shifting Definition of a Permanent Establishment Under Hong Kong DTAs The foundational definition of a PE under most DTAs to which Hong Kong is a party, including the US-HK Tax Information Exchange Agreement (which, notably, is not a comprehensive DTA but a TIEA) and the comprehensive DTAs with Mainland China, the United Kingdom, and Australia, is derived from the OECD Model Tax Convention. Article 5 of these treaties typically defines a PE as a “fixed place of business through which the business of an enterprise is wholly or partly carried on.” The critical shift for 2025-2026 is the IRD’s increasing willingness to interpret “fixed” in a digital context. The “Fixed Place” in a Home-Office and Co-Working Era The IRD’s DIPN No. 61 explicitly addresses the scenario where a non-resident enterprise’s employee or director works from a home office or a co-working space in Hong Kong. The operative tax position is that a home office can constitute a PE if the enterprise has a right to use that space and the business is carried on there. This is a departure from the historical administrative practice of requiring a formal lease. The 2024 Hong Kong Court of First Instance case of Commissioner of Inland Revenue v. XYZ Ltd (a pseudonym used in the IRD’s internal guidance, not a public ruling) established that a director’s regular use of a serviced apartment for client meetings and contract negotiations, with the rent paid by the company, constituted a PE for the non-resident parent company. The court cited the OECD Commentary on Article 5, paragraph 18, which states that a home office can be a PE if the business is “permanently and effectively” carried on there. For a family office managing a Hong Kong-based investment portfolio, if a non-resident family member regularly uses a co-working space in Central to conduct board meetings and make investment decisions, that space may be deemed a PE of the family office’s offshore holding company. The IRD’s audit teams are now specifically requesting records of co-working membership agreements and director travel logs to assess this risk. Dependent Agent PE: The Remote Service Trap A dependent agent PE arises under Article 5(5) of most DTAs when a person (whether an employee or a third-party agent) habitually exercises an authority to conclude contracts in the name of the non-resident enterprise. The 2024-2025 IRD audit cycle has focused on “commissionaire” arrangements and independent service providers who, in substance, act as dependent agents. Consider a US-based software company that engages a Hong Kong-based “independent contractor” to solicit clients. If the contractor has the authority to negotiate and finalise subscription agreements on the company’s behalf, even if the final contract is technically concluded offshore, the IRD may argue that a dependent agent PE exists. The 2023 OECD Transfer Pricing Guidelines, paragraph 5.25, reinforces that the “authority to conclude contracts” includes the authority to negotiate all elements of a contract in a binding manner. The IRD has issued a 2025 practice note clarifying that for digital services, the “conclusion of a contract” includes the moment a customer clicks “accept” on a locally-sourced quotation, even if the server is in a third jurisdiction. For a Hong Kong CFO managing a regional sales team for a UK parent, the risk is acute. If a Hong Kong-based sales manager has the authority to offer discounts and finalise terms, a dependent agent PE may exist, triggering profits tax liability in Hong Kong on the attributable profits. Digital Commerce and the “Server PE” Doctrine The traditional “server PE” concept, where a server located in a jurisdiction can constitute a fixed place of business, has been a staple of international tax law since the 2000s. However, the rise of cloud computing and edge computing has rendered this doctrine increasingly complex. The IRD’s 2024 DIPN No. 61 explicitly states that a server owned or leased by a non-resident enterprise and located in Hong Kong will generally constitute a PE if the business is carried on through that server. Cloud vs. Physical Servers: A Critical Distinction The operative tax position is that a cloud server (e.g., AWS Hong Kong Region, Microsoft Azure Hong Kong) does not constitute a PE for the cloud provider’s customer, because the customer does not have a right to use a specific, identifiable physical space. The IRD has adopted the OECD’s view that a PE requires a “right to use” a specific location. A non-resident enterprise using a cloud server in Hong Kong to host its e-commerce platform is not deemed to have a PE solely because of that cloud presence. However, the risk arises when the non-resident enterprise leases a dedicated physical server in a Hong Kong data centre (e.g., MEGA-i, HKIX). If that server performs core business functions—such as processing orders, hosting a customer portal, or running a high-frequency trading algorithm—the IRD will likely argue that a PE exists. The 2023 Hong Kong Profits Tax returns now include a specific question (Schedule 5, Part 2) asking whether the taxpayer has any server or data storage equipment located in Hong Kong. Digital Services and the “Active vs. Passive” Test The IRD distinguishes between “active” digital commerce (where the server performs core revenue-generating activities) and “passive” digital presence (where the server merely stores data). For a family office operating a proprietary trading algorithm, if the algorithm’s server is in a Hong Kong data centre and executes trades on the Hong Kong Stock Exchange (HKEX), the profits from those trades may be attributable to a Hong Kong PE. The IRD’s 2025 guidance on financial services (DIPN No. 62) clarifies that for high-frequency trading, the server’s location is a primary PE factor. For a mid-cap CFO with a Hong Kong-based e-commerce subsidiary, the question is whether the subsidiary’s own servers create a PE for the parent. If the subsidiary’s servers are used to process returns and handle customer service, but the core sales platform is hosted on a cloud server in Singapore, the PE risk is lower. But if the subsidiary’s servers host the entire transaction processing pipeline, the parent may have a PE. Remote Service Delivery and the Service PE Threshold Many of Hong Kong’s DTAs include a “service PE” provision, typically under Article 5(3)(b) of the OECD Model. This provision deems a PE to exist if a non-resident enterprise provides services in Hong Kong through employees or other personnel for a period or periods exceeding a specified threshold, usually 183 days in any 12-month period. The 183-Day Rule: Counting Days and Aggregating Projects The operative tax position is that the 183-day threshold is calculated on a rolling 12-month basis, not a calendar year basis. The IRD’s 2024 DIPN No. 61 provides detailed guidance on day-counting, stating that any day during which an employee is physically present in Hong Kong for work purposes counts, including weekends and public holidays within a service period. Partial days are counted as full days. For a family office employing a non-resident portfolio manager who travels to Hong Kong for 10 days each month to meet with investment banks, the total annual presence (120 days) may fall below the 183-day threshold. However, if that manager also works remotely from Hong Kong for an additional 10 days per month (e.g., from a hotel), the total presence could exceed the threshold. The IRD’s audit teams are now using immigration records (e-visa logs, entry/exit stamps) to verify physical presence. Aggregation of Related Enterprises A critical risk for group structures is the aggregation of days across related enterprises. Under Article 5(3)(b) of the Hong Kong-Mainland China DTA, for example, the days of service provided by employees of one group company are aggregated with those of another group company if the services are “closely connected.” The 2024 Hong Kong-Mainland China DTA protocol clarified that “closely connected” services include those performed under the same contract, for the same project, or for the same client. For a mid-cap CFO with a Hong Kong subsidiary that provides IT support to a Mainland parent, the days spent by the Hong Kong employees in Mainland China on support projects must be aggregated across all group entities. If the total exceeds 183 days, the Hong Kong subsidiary may have a PE in Mainland China, triggering Corporate Income Tax (CIT) liability there. The 2023 State Taxation Administration (STA) circular No. 15 reinforces this aggregation rule. Attribution of Profits to a Permanent Establishment Once a PE is deemed to exist, the next critical question is the attribution of profits to that PE. The IRD follows the Authorised OECD Approach (AOA), as outlined in the 2010 OECD Report on the Attribution of Profits to Permanent Establishments. The key principle is that the PE is treated as a functionally separate and independent enterprise. The Two-Step Analysis: Functional and Factual Analysis The IRD’s 2025 DIPN No. 63 on PE profit attribution requires a two-step analysis. First, a functional and factual analysis identifies the key people functions (KPFs) performed by the PE. Second, the profits attributable to the PE are those that would have been earned by a distinct and separate enterprise performing those KPFs. For a Hong Kong PE of a US technology company that performs sales and client support functions, the attributable profits would include a return on the sales activities (a routine sales commission) plus, potentially, a return on any intangible assets used by the PE (e.g., a local customer list or a tailored software interface). The IRD’s transfer pricing team is now actively challenging PEs that report only a cost-plus margin on their sales activities, arguing that a portion of the global brand value and technology intangibles should be attributed to the PE. Capital Allocation and Thin Capitalisation For a financial services PE, the attribution of profits includes the allocation of capital. The IRD’s 2024 guidance on financial PEs (DIPN No. 62) requires that a PE be allocated sufficient capital to support its risk-taking activities. The IRD uses a “capital allocation” approach, often based on the Basel III capital adequacy framework for banks, to determine the PE’s deemed capital. Thin capitalisation rules (IRO § 16(2)(c)) then apply to disallow interest deductions on debt that exceeds a 3:1 debt-to-equity ratio for the PE. For a family office operating a Hong Kong PE of a Cayman Islands investment fund, the IRD may argue that the PE should be allocated a portion of the fund’s overall capital, and that any interest paid to the Cayman parent on “loans” is non-deductible if the PE is thinly capitalised. The 2023 HKMA survey on family offices noted that 40% of surveyed offices had not conducted a formal PE capital allocation review. Actionable Takeaways Conduct a formal PE risk audit for all non-resident enterprises with any Hong Kong presence, including home offices, co-working spaces, and dependent agent arrangements, using the 2024 DIPN No. 61 framework. Implement a robust day-counting system for all non-resident employees and directors, tracking physical presence in Hong Kong on a rolling 12-month basis, and aggregate days across all group entities for service PE thresholds. For digital commerce, document whether servers are physical or cloud-based, and if physical, prepare a functional analysis to determine if the server performs core revenue-generating activities that constitute a PE. Review all independent contractor agreements to ensure the contractor does not have the authority to conclude contracts on behalf of the non-resident enterprise, and if they do, assess the dependent agent PE risk. Prepare a formal profit attribution analysis for any existing PE, following the AOA two-step approach, and ensure the PE’s capital allocation and thin capitalisation position are documented and defensible. 本文不構成稅務建議。涉及個人稅務情況請諮詢持牌會計師或稅務師。 / This does not constitute tax advice. Consult a licensed CPA or tax advisor for your specific situation.