Has a customer or a bank just asked your company for ESG information?
More Hong Kong SMEs hear that question every year. ESG reporting started life as a listed-company obligation, but the requirements have been flowing steadily down supply chains into private businesses.
Here's who actually has to report, what's really being asked, and how a small company can answer without drowning in frameworks.
What it means
ESG stands for environmental, social and governance. How a company affects the world, and how it runs itself.
Reporting means measuring and disclosing that performance. Environmental covers emissions, energy and waste. Social covers employees, safety and community. Governance covers board oversight, ethics and risk controls.
The whole point is comparable information. Investors, banks and large customers use ESG data to decide who they fund and who they buy from.
Who legally has to report
The hard legal requirement sits with listed companies.
Companies listed on the Hong Kong Stock Exchange have to publish ESG reports under the HKEX framework, and climate-related disclosure requirements have been tightening in line with international standards.
Private companies have no equivalent statutory filing. If your company is unlisted, no regulator is sitting waiting for your ESG report. The pressure arrives from a completely different direction.
Why you're being asked anyway
Listed companies have to report on their supply chains, so they push questionnaires down to their suppliers. Banks factor ESG into lending decisions. Multinational customers screen vendors before awarding contracts.
The result is practical rather than legal. An SME that can't answer basic ESG questions starts losing tenders and hitting slower onboarding, whatever the law says.
A trading client was asked for emissions data by their largest European customer. No law compelled the answer. The contract renewal did.
What you'll actually be asked
The requests are far more basic than the frameworks make them sound. A typical questionnaire wants:
- Energy use and an estimate of carbon emissions
- How you handle waste, and any environmental policies
- Employee policies, safety record and anti-discrimination measures
- Anti-bribery, data privacy and governance policies
- Whether anyone in the company actually owns these topics
Most SMEs can answer all of that with fairly modest effort. The gap is nearly always documentation rather than virtue. You probably do most of it already, you just haven't written it down.
How to start without overbuilding
Match the effort to the demand.
Start with what you already have. Utility records, HR policies, safety logs, any existing code of conduct. Fill the obvious gaps with short written policies, put someone's name against them, and answer questionnaires from that base.
A full framework report following international standards only makes sense when a specific customer, lender or listing plan genuinely requires it. Don't commission one to answer a two-page questionnaire.
Where this is going
The direction of travel is one way.
Climate disclosure standards are converging globally, HKEX requirements keep expanding, and every expansion pushes more data demands further down into private supply chains. The SMEs that started recording basic data early answer each new questionnaire in an afternoon. The rest scramble every single time.
Treat ESG data the way you treat accounting records. Cheap to keep as you go, expensive to reconstruct afterwards.
The short version
ESG reporting is mandatory for listed companies and commercially unavoidable for a growing share of private ones.
For an SME the job is proportionate. Basic data, short policies, a named owner. Start when the first questionnaire lands, not when a contract depends on the answer.
Common questions
Is ESG reporting mandatory in Hong Kong?
For companies listed on HKEX, yes, under the exchange's framework with expanding climate disclosures. Private companies have no statutory ESG filing.
Why is my private company being asked for it?
Listed customers have to report on their supply chains, banks assess ESG in lending, and multinationals screen their vendors. The pressure is commercial, not legal.
What does ESG stand for?
Environmental, social and governance. Emissions and resources, employees and community, and how the company is directed and controlled.
What do SMEs typically need?
Energy and emissions estimates, waste practices, HR and safety policies, anti-bribery and data policies, and a named person responsible for them.
Do we need a full report to international standards?
Usually not. Save framework-level reporting for when a customer, lender or listing plan specifically demands it. Questionnaires want data, not volumes.
How should a small company start?
Collect what you already have, write short policies for the gaps, assign an owner, and keep the data current so each questionnaire gets faster to answer than the last.