持牌人責任：藥劑業及毒藥條例

藥劑業毒藥持牌人責任：持牌後義務的實務起點

當一家公司取得《藥劑業及毒藥條例》（第138章）下的西藥批發牌照後，持牌人的責任並非止於申請成功那一刻。相反，持牌人責任是一套持續、具體且具法律約束力的義務，涵蓋藥物儲存、紀錄備存、人員監督、處所管理及向監管機構通報變更等多個層面。對於香港的西藥批發商而言，理解這些責任不僅是合規的基本要求，更是避免牌照被暫停、撤銷或面臨刑事責任的關鍵。本文將聚焦於持牌人在日常營運中必須履行的核心責任，並以實務角度解釋如何建立有效的內部監控系統，以符合《藥劑業及毒藥條例》及其附屬法例的規定。

首先，持牌人必須明確認識到，牌照是授予特定法人實體及其獲授權人員的，而非授予個別員工或營運部門。因此，公司的董事、合夥人及最終擁有人均須符合「適當人選」的要求，這與香港海關在金錢服務經營者牌照制度下對持牌人的適當人選審查原則相類似。根據香港海關的相關表格，例如「Form 3A Fit and Proper Person Declaration for Individual」及「Form 3B Fit and Proper Person Declaration for Corporation」，監管機構會評估相關個人的誠信、財務狀況及刑事紀錄等，以確保其適合擔任持牌機構的管理角色。雖然藥劑業及毒藥條例的具體審查標準由藥劑業及毒藥管理局執行，但持牌人應預期類似的盡職審查會應用於其管理層變更時。

其次，持牌人責任涵蓋藥物批發業務的每個環節，包括但不限於：確保所有藥物均從合法來源採購、儲存條件符合標籤上的要求（如溫度控制）、保存完整的採購及銷售紀錄、以及確保所有銷售活動僅限於持牌處所內進行。這些責任並非靜態的，而是需要持牌人持續監察及更新內部政策，以應對法規變化或營運環境的轉變。例如，當公司計劃增加新的營運處所時，持牌人必須事先向監管機構申請批准，類似於香港海關的「Form 5 Application for adding new premises for money service」程序，以確保新處所符合所有法定要求。

最後，持牌人必須建立有效的通報機制，以便在發生任何重大變更時（如董事離任、處所搬遷或業務終止）及時通知藥劑業及毒藥管理局。這與香港海關的「Form 6 Notification of Changes in Particulars」及「Form 7 Notification of cessation of operating money service」的精神一致，旨在確保監管機構的紀錄始終準確反映持牌人的最新狀況。未能履行此類通報義務可能被視為違反持牌條件，並可能導致紀律處分。因此，持牌人應將責任視為一項持續的合規工程，而非一次性的事務。

Who Should Prioritise Licensee Responsibilities and What Planning Decisions Follow

This issue matters most to corporate license holders, their directors, partners, and ultimate owners—especially those who have recently obtained a Western medicine wholesale licence under the Pharmacy and Poisons Ordinance (Cap. 138) or are preparing to apply. Because the licence is granted to a specific legal entity, the people behind that entity carry ongoing obligations that go well beyond the initial approval. Similar to the fit and proper person assessments used by Hong Kong Customs for Money Service Operator licences, where individuals and corporations must submit declarations such as Form 3A and Form 3B, the Pharmacy and Poisons Ordinance regime expects responsible persons to maintain high standards throughout the licence period.

Before you commit to a licensing strategy, consider these core planning decisions:

1. Who Will Be Named as the Responsible Person?

Identify the individual who will supervise the wholesale operations and ensure compliance with storage, record-keeping, and reporting duties. This person should have sufficient authority and knowledge to implement internal controls. Confirm that they meet the fit and proper criteria and are prepared to accept personal accountability.

2. What Premises and Storage Arrangements Will You Maintain?

Your licence is tied to specific premises. Plan how you will secure and monitor those premises to meet the ordinance’s requirements for safe storage of medicines. Consider whether you need to add premises later and how you will notify the authorities of any changes—similar to the notification forms used in other regulated sectors, such as Form 6 for changes in particulars or Form 7 for cessation of operations.

3. How Will You Track and Report Changes?

Licence conditions often require you to inform the regulator about changes in partners, directors, ultimate owners, or premises. Establish a process to identify such changes early and prepare the necessary applications or notifications. For example, in the money service sector, Form 4 and Form 5 are used for adding partners or premises, and similar principles apply here.

4. What Record-Keeping and Audit Trails Will You Implement?

Maintain accurate records of medicine purchases, sales, and stock levels. Decide whether you will use digital systems or manual logs, and ensure staff are trained to follow procedures. Regular internal audits can help you spot gaps before regulators do.

By addressing these decisions upfront, you can build a compliance framework that supports your licence and reduces the risk of enforcement action.

Preparing for Licence Compliance: Information to Gather Before You Act

Before a corporate licensee begins day-to-day operations under the Pharmacy and Poisons Ordinance (Cap. 138), it must assemble a clear compliance file. This preparation stage is not merely administrative—it shapes how the company will meet its ongoing duties. Drawing on the approach used by other corporate registries, such as the Samoa Companies Registry, which requires both a physical and postal address for every company, a Hong Kong wholesale licensee should similarly document its registered business address and any operational premises. This ensures that regulatory correspondence and inspections can be directed to the correct location.

Another key preparatory step is to confirm the identity and suitability of all individuals who will exercise control or management over the licensed business. The SFC’s post-registration guidance for open-ended fund companies stresses that licensees must understand their continuing obligations, and the same principle applies here. Directors, partners, and ultimate owners should be prepared to demonstrate that they are fit and proper persons, and the company should keep records of their declarations and any supporting documents.

In addition, the licensee should map out its internal systems for record-keeping and staff supervision before any medicines are handled. This includes deciding who will be the responsible person for each licensed activity, how temperature logs and stock records will be maintained, and how changes to the company’s structure—such as a change of director or registered office—will be reported to the Pharmacy and Poisons Board. The Wyoming Secretary of State’s business resources remind filers to keep their registered agent information current, a parallel that underscores the importance of updating regulatory details promptly.

Finally, the company should review its application file to ensure that every statement made during the licensing process remains accurate. If any information changes after the licence is granted, the licensee must notify the Board without delay. By gathering these core details in advance, a licensee can build a compliance framework that supports its legal obligations and reduces the risk of inadvertent breaches.

Step-by-Step Compliance: Building Your Ongoing Licence Responsibility Framework

Once your Western medicine wholesale licence under the Pharmacy and Poisons Ordinance (Cap. 138) is granted, the real work begins. A structured, step-by-step approach helps you meet your ongoing obligations without guesswork. The first step is to designate a responsible person within your company—typically a director or senior manager—who will oversee all licence-related duties. This person should maintain a compliance calendar that tracks renewal dates, inspection schedules, and any required notifications to the regulatory authority.

Next, establish a documented system for record-keeping. This includes maintaining accurate logs of all medicines received, stored, and distributed, as well as records of any temperature monitoring or storage conditions. Your records should be readily available for inspection by authorised officers. The system should also capture any incidents, such as product recalls or complaints, and how they were resolved.

Third, implement a staff training programme. All employees handling medicines must understand their roles under the Ordinance, including proper storage, handling, and documentation procedures. Regular training sessions help ensure that everyone is aware of their responsibilities and the consequences of non-compliance.

Fourth, conduct periodic internal audits. These audits should review your compliance with the Ordinance, identify any gaps, and correct them promptly. An audit checklist can be adapted from the requirements of the Ordinance, covering areas such as premises security, record accuracy, and personnel qualifications.

Finally, stay informed about regulatory updates. The Hong Kong regulatory framework may evolve, and it is your responsibility to keep abreast of any changes. This can be done by subscribing to official updates or consulting with professional advisors who specialise in pharmaceutical licensing.

By following these steps, you create a proactive compliance culture that not only satisfies the law but also protects your business reputation.

Building Your Compliance Evidence File: What to Keep and Why

Once your Western medicine wholesale licence under the Pharmacy and Poisons Ordinance (Cap. 138) is active, the practical challenge shifts from obtaining approval to demonstrating ongoing compliance. Regulators expect you to prove, on request, that you are meeting your obligations. A well-organised evidence file is the backbone of that proof. This section sets out the key categories of documents you should maintain and explains why each one matters for your licence responsibilities.

1. Corporate and Ownership Records

Your licence is tied to a specific legal entity, so you must keep current records of your company’s structure. This includes the certificate of incorporation, business registration certificate, and any changes to directors, shareholders, or ultimate beneficial owners. As with the Samoa Companies Registry, which requires companies to provide both a physical and postal address and to record the full name and address of each shareholder, your Hong Kong company should maintain accurate and up-to-date ownership details. Why this matters: if the regulator needs to verify who controls the licensed entity, you must be able to produce this information quickly. Incomplete or outdated records can raise questions about your fitness to hold a licence.

2. Premises and Storage Documentation

Your licence will specify the approved premises for wholesale operations. Keep documents that prove the premises meet the required standards, such as tenancy agreements, floor plans, and records of temperature monitoring or security measures. The Samoa Companies Registry also highlights the need for a physical address—this is not just a formality; it is where your licensed activities occur. Why this matters: if the regulator inspects your site, you must be able to show that the premises are suitable for storing medicines safely and securely. Failure to maintain these records could lead to compliance findings.

3. Personnel and Supervision Records

You must ensure that all staff handling medicines are adequately supervised and trained. Keep records of job descriptions, training logs, and any internal authorisations for handling controlled drugs. The Securities and Futures Commission’s guidance on licensed persons notes that individuals performing regulated functions for a licensed corporation must be properly recorded. While that applies to the securities sector, the principle is similar: you should be able to identify who is responsible for each aspect of your wholesale operations. Why this matters: if something goes wrong, the regulator will ask who was in charge. Clear personnel records demonstrate that you have assigned responsibility and taken steps to ensure competence.

4. Transaction and Stock Records

Maintain detailed records of all purchases, sales, and disposals of medicines. This includes invoices, delivery notes, and stock adjustment logs. The Pharmacy and Poisons Ordinance requires you to keep records that allow the movement of medicines to be traced. Why this matters: accurate records help you respond to product recalls, investigate discrepancies, and prove that you are not supplying unauthorised products. They also support your annual licence renewal by showing that you have been operating within the law.

5. Incident and Complaint Logs

Keep a log of any incidents, such as suspected counterfeit products, temperature excursions, or customer complaints about product quality. Record the date, nature of the issue, actions taken, and any follow-up. Why this matters: a well-maintained log shows that you take your responsibilities seriously and are proactive in addressing problems. It also provides a clear narrative if the regulator asks about your handling of a specific event.

By assembling and maintaining these categories of evidence, you create a compliance trail that supports your licence responsibilities. The effort you invest in documentation today can save you from regulatory scrutiny tomorrow.

Common Compliance Gaps and How to Address Them

Even with a clear framework in place, licensees often encounter recurring compliance gaps. Recognising these patterns early can help you avoid enforcement action and maintain the trust of regulators, customers, and business partners.

Gap 1: Incomplete or Outdated Records

Regulators expect accurate, up-to-date records of all transactions, stock movements, and personnel changes. A common mistake is failing to update records promptly after a change—such as a new director or a change in registered address. As the Samoa Companies Registry notes, you must provide both a physical and postal address when incorporating a company, and you must record the full name and address of each shareholder. While this guidance applies to Samoa, the principle of maintaining current corporate details is universal. In Hong Kong, your licence is tied to the particulars you declared; any change should be reported without delay.

Gap 2: Overlooking the ‘Fit and Proper’ Requirement for New Personnel

Your licence is granted based on the suitability of your company’s directors, partners, and ultimate owners. If you add a new director or shareholder, you must ensure that person also meets the ‘fit and proper’ standard. This is similar to the approach taken by the Hong Kong Customs and Excise Department for Money Service Operator (MSO) licences, where forms such as ‘Form 3A Fit and Proper Person Declaration for Individual’ and ‘Form 3B Fit and Proper Person Declaration for Corporation’ are used to assess individuals and corporations. While those forms are specific to MSOs, the underlying expectation—that all key persons are suitable—applies to your pharmaceutical licence as well.

Gap 3: Failing to Notify Changes in a Timely Manner

Many licensees assume that minor changes—like a change in office hours or a new email address—do not need to be reported. However, regulators expect you to keep them informed of any change that affects your licence conditions. For example, the MSO regime requires licensees to submit ‘Form 6 Notification of Changes in Particulars’ and ‘Form 7 Notification of cessation of operating money service’. While your obligations under the Pharmacy and Poisons Ordinance may differ, the principle is the same: proactive communication is essential.

Decision Point: Build a Change-Management Process

To avoid these gaps, establish a simple internal process for managing changes. Assign one person to track all licence-related details, and require that any change—whether in personnel, address, or business scope—is documented and reported within a reasonable timeframe. This proactive approach not only keeps you compliant but also demonstrates to regulators that you take your responsibilities seriously.

Common Compliance Mistakes and Risk Controls for Pharmacy and Poisons Ordinance Licensees

Even with a structured compliance framework, licensees under the Pharmacy and Poisons Ordinance (Cap. 138) often fall into recurring pitfalls. Recognising these patterns early can prevent enforcement action and protect your licence. Below are the most frequent mistakes and practical risk controls to mitigate them.

Mistake 1: Treating Licence Compliance as a One-Off Event

Some corporate licensees assume that once the licence is granted, their obligations are largely complete. In reality, the licence imposes continuous duties—from record-keeping to premises management. This misconception often leads to lapses in documentation and oversight. To counter this, designate a responsible person—typically a director or senior manager—who maintains a compliance calendar and ensures all obligations are met on an ongoing basis. Regular internal reviews, at least quarterly, can help identify gaps before they become violations.

Mistake 2: Overlooking Changes in Personnel or Ownership

Changes in directors, partners, or ultimate owners are common in growing businesses, but failing to notify the regulator is a frequent oversight. Similar to the requirements under the Money Service Operator regime, where forms such as Form 4 (Application for adding Licensee’s Partners / Directors / Ultimate Owners) and Form 6 (Notification of Changes in Particulars) are used, the Pharmacy and Poisons Ordinance expects licensees to keep the authorities informed of any significant changes. Delays in notification can raise questions about your fitness to hold the licence. Implement a policy that any change in key personnel or ownership triggers an immediate compliance review and, where required, a formal notification.

Mistake 3: Inadequate Supervision of Authorised Persons

Your licence is granted to the corporate entity, but day-to-day operations are often handled by authorised persons. If these individuals are not properly supervised or trained, errors can occur—such as incorrect storage of medicines or incomplete transaction records. Establish clear lines of supervision, provide regular training, and document all training sessions. This not only reduces the risk of mistakes but also demonstrates to regulators that you have robust internal controls.

Practical Next Steps for Licensees

To strengthen your compliance posture, take these steps:

• Conduct a self-audit of your current records and procedures against the requirements of the Pharmacy and Poisons Ordinance.
• Review your internal notification process for personnel or ownership changes, ensuring it is prompt and documented.
• Schedule periodic training for all staff involved in handling or storing medicines.
• Consult with a professional service provider, such as World Enterprise, to review your compliance framework and identify any gaps.

By addressing these common mistakes proactively, you can reduce the risk of enforcement action and maintain the integrity of your licence. If you need assistance in reviewing your compliance practices, our team is ready to help.

Conclusion: Turning Ongoing Obligations into a Sustainable Compliance Culture

For a corporate licensee under the Pharmacy and Poisons Ordinance (Cap. 138), the responsibilities attached to a Western medicine wholesale licence are not a one-off administrative hurdle. They form a continuous cycle of vigilance, documentation, and timely action. From the moment the licence is granted, the licensee must treat compliance as a core business function—one that protects public health, preserves the company’s reputation, and secures its right to operate.

The practical steps outlined in this article—designating a responsible person, building a compliance calendar, maintaining a robust evidence file, and addressing gaps before they escalate—are all within reach for a well-organised company. Drawing on the approach of other regulated sectors, such as the Hong Kong Customs and Excise Department’s Money Service Operator licensing regime, which requires licensees to notify changes in particulars and submit fit and proper person declarations, a Hong Kong pharmaceutical wholesaler should adopt a similar mindset. Just as a money service operator must keep its regulator informed of changes to partners, directors, or ultimate owners, a pharmaceutical licensee must ensure that any change in its own corporate structure or key personnel is promptly reported and that all individuals remain fit and proper.

Ultimately, the goal is not merely to avoid penalties but to build a sustainable compliance culture. When every director, manager, and staff member understands their role in upholding the licence, the company is better positioned to respond to regulatory inquiries, pass inspections, and earn the trust of suppliers and healthcare professionals. The effort invested in compliance today is an investment in the company’s long-term stability and growth.

If you are navigating the complexities of licensee responsibilities under the Pharmacy and Poisons Ordinance, or if you need assistance in establishing a robust compliance framework, our team at World Enterprise is here to help. With experience in corporate services and regulatory compliance, we can guide you through the practical steps and help you maintain your licence in good standing. Contact us for a consultation to discuss your specific situation.