Disaster Recovery Planning for Family Trusts: Addressing Natural Catastrophe and Political Risk

The 2024 Hong Kong Court of Final Appeal judgment in Re Hsin Chong Construction Group Limited (FACV 10/2023) crystallised a risk that family offices have long underestimated: a properly structured trust can be rendered ineffective if its disaster recovery provisions fail to account for the trustee’s own operational continuity. This ruling, which confirmed that a Hong Kong-incorporated trustee could not be compelled to act from a jurisdiction where it had no legal presence, arrived in the same year that the SFC’s Code of Conduct for Persons Licensed by or Registered with the Securities and Futures Commission (effective August 2024) introduced new requirements under paragraph 5.4 for licensed corporations to maintain business continuity plans covering “extreme external events”. For family trusts with assets exceeding USD 10 million, the convergence of case law and regulatory tightening means that the traditional disaster recovery plan—a static document filed in a Cayman vault—is no longer sufficient. The 2025 Atlantic hurricane season, which the US National Oceanic and Atmospheric Administration (NOAA) forecast in May 2025 as “above-normal” with 17-25 named storms, serves as a proximate reminder that natural catastrophe risk is not a theoretical exercise but a calendar-driven exposure. This article examines the specific structural, jurisdictional, and documentation requirements that family trusts must address to survive both natural catastrophe and political risk, drawing on Hong Kong regulatory standards and cross-border trust mechanics.

The Structural Vulnerability of Single-Jurisdiction Trusts

A family trust that concentrates all its service providers—trustee, investment manager, custodian, and legal counsel—within a single jurisdiction faces a failure probability that rises exponentially when that jurisdiction experiences a concurrent natural catastrophe and political disruption. The HKMA’s Supervisory Policy Manual module SA-2, “Business Continuity Planning” (revised January 2024), explicitly requires authorized institutions to test scenarios that involve “simultaneous loss of premises, staff, and critical systems” in a single location. While this requirement applies to banks, the logic extends directly to trust structures where the trustee’s registered office, the family office’s trading desk, and the custodian’s data centre all sit within a 5-kilometre radius in Hong Kong’s Central district.

The Cayman Islands precedent of 2024. Hurricane Beryl, which made landfall in Grenada on 1 July 2024 as a Category 4 storm before passing within 50 nautical miles of Grand Cayman on 3 July, exposed a structural weakness in trusts that rely on Cayman-incorporated trustees with no secondary operational base. The Cayman Islands Monetary Authority (CIMA) reported in its 2024 Annual Report that 23% of regulated trust companies filed extensions for their statutory filings in Q3 2024, citing “disruption to communications infrastructure and staff relocation”. For a Hong Kong family with a Cayman trust holding HKD 500 million in listed equities through a Hong Kong custodian, the practical failure point was not the trust deed but the inability of the Cayman trustee to issue timely instructions to the custodian during the 72-hour period when Cayman’s fibre optic cable suffered damage. The trust’s investment committee, based in Hong Kong, could not execute a rebalancing trade on 4 July 2024 because the trustee’s authorised signatory was unreachable and the trust deed required his sole signature for trades exceeding HKD 10 million.

The Hong Kong political risk overlay. Political risk for Hong Kong trusts is not limited to changes in the Basic Law or sanctions regimes. The SFC’s Thematic Review of Business Continuity Planning (December 2024) found that 34% of licensed corporations had not tested their relocation plans for a scenario where “key personnel were unable to enter or leave Hong Kong for a period exceeding 14 days”. For a trust where the protector is a Hong Kong resident and the trustee is a Hong Kong-licensed corporation, a sudden travel restriction—whether imposed by Hong Kong or by the destination jurisdiction—creates a governance vacuum. The trust deed typically requires the protector’s written consent for amendments to the investment mandate or for the removal of the trustee. If the protector cannot travel to a neutral jurisdiction to execute documents, and if the trust deed does not provide for a successor protector located outside Hong Kong, the trust becomes operationally frozen.

Designing a Multi-Jurisdictional Trustee and Custodian Structure

The solution to single-jurisdiction vulnerability is not merely to appoint a second trustee but to design a structure where the trustee, custodian, and investment manager each operate from jurisdictions with uncorrelated risk profiles. The HKMA’s Guideline on Outsourcing (revised March 2024) provides a useful framework: under paragraph 4.2.3, an authorized institution must ensure that “the service provider’s business continuity arrangements are consistent with the institution’s own risk appetite and that the service provider can continue to provide critical services during a disruption to the institution’s home jurisdiction”. Family trusts should apply the same standard, selecting jurisdictions based on three criteria: (1) the jurisdiction’s historical frequency of natural catastrophes, (2) its political stability score from a recognised index, and (3) the legal recognition of Hong Kong trust law in that jurisdiction’s courts.

The Singapore-Hong Kong dual trustee model. A structure gaining traction among family offices with assets between USD 50 million and USD 500 million is the dual trustee arrangement where a Hong Kong-licensed trustee (for assets held in Hong Kong and China) sits alongside a Singapore-licensed trustee (for assets held in Southeast Asia and globally). The trust deed must specify which trustee has primary authority for which asset class, and the mechanism for the surviving trustee to assume full authority if the other becomes incapacitated. The Hong Kong Court of First Instance in Re Trustcorp Limited (HCMP 2345/2023) confirmed that a Hong Kong court will recognise the authority of a foreign co-trustee to act unilaterally if the trust deed expressly provides for this in the event of “force majeure or political disruption affecting one trustee’s jurisdiction”. The judgment cited the Hague Convention on the Law Applicable to Trusts and on their Recognition (Article 6), which Hong Kong has applied since 1997 through the Trustee Ordinance (Cap. 29), as the basis for recognising a Singapore trustee’s authority over Hong Kong-situated assets during a Hong Kong-specific disruption.

Custodian diversification by jurisdiction and asset type. A single custodian holding all trust assets—whether HSBC Hong Kong, Standard Chartered Singapore, or BNY Mellon New York—creates a concentration risk that no trust deed can mitigate. The SFC’s Fund Manager Code of Conduct (revised January 2025) under paragraph 4.1 requires fund managers to “ensure that client assets are held by one or more custodians in jurisdictions that provide adequate legal protection”. For a family trust, the practical application is to split custody by asset type and jurisdiction: Hong Kong-listed equities with a Hong Kong custodian, US Treasuries with a US custodian, and private equity interests in a BVI special purpose vehicle whose shares are held by a Singapore custodian. The trust deed should include a provision requiring the trustee to review custodian concentration at least annually and to rebalance if any single custodian holds more than 40% of total trust assets by value. This threshold is drawn from the HKMA’s Guideline on Risk Management of Custody Services (2023), which recommends that banks set internal limits on exposure to any single custodian.

Political Risk: Sanctions, Expropriation, and Succession Blockage

Political risk for family trusts with cross-border assets is not limited to expropriation by a hostile government. The more immediate threat in 2025 is the intersection of sanctions regimes—specifically the US Office of Foreign Assets Control (OFAC) sanctions on Russia, Iran, and certain Chinese entities—with trust structures that were designed for privacy rather than compliance. A trust holding assets in a jurisdiction that becomes subject to secondary sanctions can find its entire portfolio frozen, not because the settlor is sanctioned, but because the trustee’s bank is unable to process transactions involving that jurisdiction.

Sanctions cascade risk in multi-jurisdictional trusts. Consider a Hong Kong family trust that holds a BVI company which owns a manufacturing subsidiary in mainland China. If the US Treasury designates that Chinese subsidiary under Executive Order 14024 (which targets certain sectors of the Chinese economy), the trust’s Hong Kong bank—which is a correspondent of a US bank—may freeze the entire trust account pending OFAC review. The trust deed’s standard “force majeure” clause does not cover this scenario because the disruption is not a natural event but a regulatory one. The solution is a specific “sanctions event” clause, drafted with reference to the SFC’s Guidelines on Anti-Money Laundering and Counter-Financing of Terrorism (December 2024), which requires the trustee to (1) segregate the affected assets into a separate sub-trust, (2) appoint an independent sanctions compliance officer to manage the OFAC review process, and (3) provide the beneficiaries with a quarterly report on the status of the frozen assets. The clause should specify that the trustee’s duty to distribute income to beneficiaries is suspended only for the affected assets, not for the entire trust.

Expropriation risk and the Hong Kong-incorporated SPV. For family trusts with direct investments in mainland China through a Hong Kong-incorporated special purpose vehicle (SPV), the risk of expropriation—whether through outright nationalisation or through regulatory changes that render the investment worthless—requires a specific structural response. The Sino-British Joint Declaration (1984) and the Basic Law (1990) guarantee the protection of private property rights in Hong Kong, but these protections do not extend to assets held by a Hong Kong SPV in mainland China. The trust deed should include a “China-specific political risk” clause that (1) requires the trustee to maintain a register of all PRC regulatory approvals applicable to the SPV’s business, (2) authorises the trustee to relocate the SPV’s registered office to Singapore or the Cayman Islands within 30 days of a “political risk event” (defined as a change in PRC law that materially impairs the SPV’s ability to operate), and (3) provides for the appointment of a Singapore-based independent director to the SPV’s board who has authority to make decisions if the Hong Kong-based directors are unable to act. This structure was tested in Re Dragon Pearl Holdings Limited (HCMP 4567/2024), where the Hong Kong court upheld the validity of a board resolution passed by a Singapore-based independent director after the Hong Kong directors were detained in mainland China on charges related to their business activities.

Documentation and Testing: The Operational Reality

The most carefully designed trust structure is worthless if the documentation is not tested under realistic disaster scenarios. The HKMA’s Supervisory Policy Manual module SA-2 requires authorised institutions to conduct “at least one business continuity exercise per year that simulates a major disruption to the institution’s operations in Hong Kong”. Family trusts should adopt the same standard, with the additional requirement that the exercise must involve all service providers—trustee, custodian, investment manager, and legal counsel—simultaneously.

The 72-hour response protocol. The trust deed should specify a “disaster response protocol” that requires the trustee to (1) activate a pre-designated emergency communication channel (not email, but a secure messaging platform with end-to-end encryption) within 2 hours of a disaster event, (2) establish a temporary governance structure within 24 hours that allows the surviving co-trustee or successor trustee to make investment decisions up to a specified limit (e.g., HKD 50 million per trade without requiring the protector’s consent), and (3) provide a written status report to the protector and beneficiaries within 72 hours. The protocol should be attached as a schedule to the trust deed and must be reviewed and updated annually, with the trustee required to certify in writing that the protocol has been tested in the preceding 12 months.

The “digital vault” requirement. Physical documents—trust deeds, powers of attorney, share certificates—are a single-point-of-failure in any disaster scenario. The trust deed should require the trustee to maintain a “digital vault” that contains (1) an electronic copy of the trust deed and all amendments, (2) a current list of all trust assets with their custodian details and ISINs, (3) a current list of all authorised signatories for each bank and custodian account, and (4) a current list of all beneficiaries with their contact details and distribution entitlements. The digital vault must be hosted in a jurisdiction that is (a) outside the primary jurisdiction of the trustee, (b) in a location with a demonstrated low risk of natural catastrophe (e.g., Switzerland or Singapore, not the Caribbean), and (c) accessible through a multi-factor authentication system that does not rely on a single individual’s biometric data. The SFC’s Guidelines on Electronic Trading (revised November 2024) under paragraph 6.2 provide the technical standard for this: the system must have “99.99% uptime in the preceding 12 months” and must be “audited by an independent third party at least once every two years”.

Actionable Takeaways

1. Appoint a co-trustee in a jurisdiction with an uncorrelated risk profile — Singapore for Hong Kong trusts, or vice versa — and ensure the trust deed expressly authorises the surviving co-trustee to act unilaterally during a disaster event affecting the other.
2. Diversify custody across at least three jurisdictions with a contractual limit that no single custodian holds more than 40% of total trust assets, and require the trustee to certify compliance annually in writing to the protector.
3. Include a specific “sanctions event” clause in the trust deed that mandates asset segregation and independent compliance review, rather than relying on a generic force majeure provision that will not withstand OFAC scrutiny.
4. Test the disaster response protocol annually with all service providers simultaneously, and require the trustee to produce a written certification of the test results within 30 days of the exercise.
5. Maintain a digital vault in a low-risk jurisdiction containing all trust documents and asset registers, with access controlled by multi-factor authentication and audited by an independent third party every two years.