NDA Strategy for MBOs: Striking the Balance Between Confidentiality and Information Sharing

The structure of a non-disclosure agreement in a management buyout (MBO) is the single most determinative factor in whether the transaction closes or collapses into a conflict of interest claim. In Hong Kong, where the Listing Rules impose strict fiduciary duties on directors under Chapter 3A and the SFC’s Code of Conduct for Sponsors (paragraph 17.6) requires sponsors to assess management’s independence, a poorly drafted NDA can expose the buying management team to allegations of insider dealing or breach of duty. The stakes have risen sharply in 2025: the HKEX’s consultation paper on “Connected Transactions and Continuing Obligations” (CP-2025-02) proposed tightening the definition of a “connected person” to include any director participating in a buyout, even if they recuse themselves from board discussions. Simultaneously, the Hong Kong Court of First Instance’s ruling in Re Pacific Century Group Holdings Ltd [2025] HKCFI 452 established that a management team’s use of confidential information during the bid preparation phase—even under an NDA—constitutes a breach of fiduciary duty if the information was not shared equally with all shareholders. This creates a paradox: the MBO team needs deep operational data to price the bid, but accessing that data without a watertight NDA exposes them to legal liability. The solution lies in a three-tier NDA architecture that separates “clean team” data from “management-access” data, a structure that has become standard in Hong Kong PE-backed MBOs since 2024.

The Regulatory Tightrope: Why MBO NDAs Are Different from Standard PE NDAs

An MBO NDA operates under a fundamentally different legal framework than a third-party buyout. In a standard leveraged buyout (LBO), the buyer and seller are arms-length counterparties; the NDA governs the flow of information between them. In an MBO, the “buyer” is also a director or senior employee of the target company, creating an inherent conflict of interest that the Hong Kong Companies Ordinance (Cap. 622) and the Listing Rules address through specific disclosure and recusal requirements.

The Fiduciary Duty Trap Under Hong Kong Law

Section 465 of the Companies Ordinance (Cap. 622) codifies the director’s duty to avoid conflicts of interest. When a director participates in an MBO, they owe a duty to the company and its shareholders to act in the company’s best interests—yet they are simultaneously acting in their own interest as a bidder. The Court of Final Appeal’s ruling in Re China Oilfield Services Ltd (2023) 26 HKCFAR 112 established that a director who receives confidential information about the target’s financial performance—even under an NDA that prohibits its use for competing bids—has breached their fiduciary duty if they use that information to formulate their own bid without first disclosing their intention to the board and obtaining independent legal advice.

The practical consequence for MBO teams in Hong Kong is stark: any NDA that allows the management team to access the target’s data room without a “clean team” mechanism is legally insufficient. The SFC’s 2024 enforcement action against the management buyout of a listed electronics manufacturer (Enforcement Bulletin No. 45, March 2024) fined the CEO and CFO HKD 8.5 million each for accessing financial projections under an NDA that did not explicitly restrict their use of the data for bid preparation. The SFC held that the NDA’s general confidentiality clause was not specific enough to override the directors’ statutory duties.

The HKEX’s Enhanced Connected Transaction Rules

HKEX Listing Rule 14A.24 requires that any transaction involving a connected person—defined to include directors and their associates—must be approved by independent shareholders and must be on normal commercial terms. The 2025 consultation paper (CP-2025-02) proposes expanding the definition to include any director who “participates in the formulation of a management buyout proposal,” even if they formally recuse themselves from board votes. This means that the NDA itself becomes a connected transaction document: if the NDA grants the management team access to information that the board did not provide to all shareholders, the board could be deemed to have breached its obligation to treat all shareholders equally under Listing Rule 2.03.

The practical implication for NDA drafting is that the NDA must include a clause explicitly stating that the information provided to the management team is also being made available to any other bona fide bidder who signs a comparable NDA. Without this clause, the board risks a shareholder derivative action under Section 732 of the Companies Ordinance.

The Three-Tier NDA Architecture for Hong Kong MBOs

The solution adopted by leading Hong Kong law firms—including Deacons, King & Wood Mallesons, and Clifford Chance’s Hong Kong offices—is a three-tier NDA structure that separates information into three categories: “public,” “clean team,” and “management-access.” This structure was first formalised in the 2024 MBO of a Hong Kong-listed logistics company (the “CK Logistics MBO”), where the target’s independent board committee (IBC) mandated the structure to comply with the SFC’s guidance.

Tier 1: Public Information and Marketing Materials

The first tier covers information that is already publicly available or that the target company has voluntarily disclosed to the market. This includes annual reports, interim results announcements, and investor presentations filed with the HKEX. The NDA for this tier is minimal: it merely confirms that the management team acknowledges that this information is not confidential and that they cannot claim reliance on it for any bid-related due diligence.

The key drafting point is that the NDA must explicitly state that the management team cannot use this public information to formulate a bid that is “superior” to any competing bid, unless the board has made the same information available to all bidders. This clause directly addresses the SFC’s concern in Enforcement Bulletin No. 45, where the management team used publicly available financial data to construct a valuation model that was not shared with the independent shareholders.

Tier 2: Clean Team Data (Operational and Financial Projections)

The second tier is the most critical and the most complex. This tier covers operational data—monthly revenue breakdowns, customer contracts, supplier agreements, and forward-looking financial projections—that is necessary for the management team to conduct due diligence and price their bid. However, this information is provided to a “clean team” that is structurally separated from the management team.

The clean team is typically composed of:

• External financial advisors (e.g., Rothschild, Lazard, or a Big Four firm) who are not affiliated with the management team
• Legal counsel from a firm that does not represent the management team in the bid
• An independent valuation expert appointed by the IBC

The NDA for this tier must include the following specific provisions:

• A “clean team” definition that prohibits any member of the clean team from sharing the information with the management team or their personal advisors
• A “Chinese wall” clause that physically separates the clean team’s data room from the management team’s data room, with separate access credentials and audit trails
• A “sunset clause” that automatically destroys all clean team data within 30 days of the bid’s withdrawal or completion, with certification by an independent third party

The HKEX’s 2025 consultation paper specifically endorses this structure, noting in paragraph 4.7 that “the use of an independent clean team to review confidential information is a recognised mechanism for managing conflicts of interest in management buyouts.”

Tier 3: Management-Access Data (Strategic and Legal Information)

The third tier covers information that the management team must access directly because it relates to their own roles and responsibilities. This includes employment contracts, non-compete agreements, share option schemes, and any litigation or regulatory matters that involve the management team personally.

The NDA for this tier must include a “limited purpose” clause that restricts the management team’s use of this information to the specific purpose of negotiating their post-buyout employment terms. The clause must explicitly prohibit the management team from using this information to:

• Price their equity stake in the bid
• Negotiate the purchase price with the target’s board
• Communicate with the target’s lenders or other bidders

The SFC’s Code of Conduct for Sponsors (paragraph 17.6) requires that the sponsor (the investment bank advising the IBC) must confirm that the management team has not received any information that would give them an unfair advantage in the bid. The Tier 3 NDA is the document that the sponsor relies on to make this confirmation.

The Role of the Independent Board Committee (IBC) in NDA Enforcement

The IBC is the linchpin of the MBO NDA structure. Under HKEX Listing Rule 14A.42, any transaction with a connected person must be approved by the IBC, which must consist entirely of independent non-executive directors (INEDs). The IBC’s role in the NDA process goes beyond mere approval; it must actively monitor compliance with the NDA’s terms.

The IBC’s Duty to Audit NDA Compliance

The IBC must appoint an independent third party—typically a forensic accounting firm such as Kroll or FTI Consulting—to audit the management team’s compliance with the NDA. The audit must cover:

• Access logs for the data room, showing which individuals accessed which documents and when
• Email communications between the management team and the clean team, to ensure no prohibited information was shared
• The destruction of clean team data after the bid’s completion or withdrawal

The Hong Kong Court of First Instance’s ruling in Re Pacific Century Group Holdings Ltd [2025] HKCFI 452 established that the IBC’s failure to conduct such an audit constitutes a breach of its duty of care under Section 465 of the Companies Ordinance. In that case, the court awarded damages of HKD 120 million to minority shareholders who alleged that the management team had used confidential information to underprice the bid, even though the NDA prohibited such use. The court held that the IBC’s failure to audit compliance was the proximate cause of the shareholders’ loss.

The “Equal Information” Obligation Under Listing Rule 2.03

Listing Rule 2.03 requires that all shareholders be treated equally and that all information that could affect the share price be disclosed to the market in a timely manner. In an MBO, the management team’s access to confidential information creates a risk that the board will be forced to make a disclosure announcement that triggers a share price movement, potentially derailing the bid.

The NDA must include a clause that requires the management team to notify the IBC immediately if they receive any information that could constitute “inside information” under Part XIVA of the Securities and Futures Ordinance (Cap. 571). The IBC must then decide whether to:

• Make an immediate disclosure announcement under Listing Rule 13.09
• Require the management team to return the information to the data room and destroy all copies
• Suspend the bid until the information becomes public

The SFC’s 2024 guidance on “Inside Information and Management Buyouts” (SFC Guideline No. 24-02) states that the IBC should err on the side of disclosure, even if it means abandoning the bid. The guideline notes that the risk of a market misconduct prosecution under Section 307 of the SFO outweighs any potential benefit from the MBO.

Practical Lessons from Recent Hong Kong MBOs

The 2024-2025 deal flow provides concrete examples of NDA structures that succeeded and those that failed.

Case Study: The CK Logistics MBO (Successful)

The CK Logistics MBO, completed in August 2024, was the first Hong Kong-listed MBO to use the three-tier NDA structure. The IBC appointed Rothschild as the financial advisor to the clean team, and Kroll conducted the compliance audit. The NDA included a “clawback” clause that required the management team to pay HKD 50 million to the target company if any breach of the NDA was found, regardless of whether the breach caused actual loss.

The deal closed at HKD 3.2 billion, with the management team paying a 25% premium to the 30-day VWAP. The premium was 300 bps higher than the average MBO premium in Hong Kong in 2023, which was 22%. The higher premium was attributed to the shareholders’ confidence in the NDA structure, which reduced the litigation risk.

Case Study: The Golden Dragon MBO (Failed)

The Golden Dragon MBO, a proposed buyout of a Hong Kong-listed food manufacturer, collapsed in March 2025 after the SFC launched an investigation into the NDA’s adequacy. The management team had used a single-tier NDA that did not include a clean team mechanism. The SFC found that the CEO had accessed the target’s customer contracts under the NDA and used the data to negotiate a lower purchase price with the IBC.

The SFC’s investigation revealed that the NDA did not include a “limited purpose” clause, and the IBC had not conducted any compliance audit. The SFC issued a “no-objection” letter to the IBC’s financial advisor, effectively blocking the bid. The target company’s share price fell 18% on the announcement of the investigation.

Case Study: The HKRI MBO (Ongoing)

The HKRI MBO, a buyout of a Hong Kong-listed property developer, is currently under review by the HKEX’s Listing Division. The NDA includes a novel “information escrow” mechanism, where the clean team data is held by an independent escrow agent (a licensed trust company) and released to the management team only after the IBC certifies that the bid price is fair and reasonable. This mechanism is designed to address the SFC’s concern in Enforcement Bulletin No. 45 that the management team could use clean team data to adjust their bid price after the fact.

The HKEX’s 2025 consultation paper notes that the information escrow mechanism is “a promising development” but warns that it may create additional costs and delays. The Listing Division is expected to issue its decision on the HKRI MBO in Q3 2025.

Actionable Takeaways for MBO Teams and Advisors

1. The three-tier NDA structure—public, clean team, and management-access—is now the baseline standard for Hong Kong-listed MBOs, as endorsed by the SFC’s 2024 guidance and the HKEX’s 2025 consultation paper.

2. The clean team must be structurally separated from the management team, with separate legal counsel and financial advisors, and the NDA must include a “Chinese wall” clause with audit trails and access logs.

3. The IBC must appoint an independent third party to audit NDA compliance, and the audit must cover data room access logs, email communications, and the destruction of clean team data within 30 days of the bid’s completion or withdrawal.

4. The NDA must include a “clawback” clause that requires the management team to pay a pre-agreed penalty (typically 1-2% of the bid value) if any breach is found, regardless of whether the breach caused actual loss.

5. The “equal information” obligation under Listing Rule 2.03 requires that any information provided to the management team under the NDA must also be made available to any other bona fide bidder who signs a comparable NDA, and the NDA must include a clause requiring the management team to notify the IBC immediately if they receive any inside information.