How to Set Up a Register of Registrable Controllers (RORC)

In order to increase the transparency of company ownership and control structures, the Singapore Companies Act (CA) has been amended to require all companies incorporated in Singapore (unless exempted) to maintain a Register of Registrable Controllers (RORC).

Companies in breach of their duties in relation to the RORC – as well as any company officer in default – can each be fined up to $25,000. It’s therefore important to get things right.

But fear not – creating and maintaining an RORC need not be difficult. This comprehensive guide will show you how by covering the following topics:

1. Scope of the article
2. The Register of Registrable Controllers (RORC)
3. Requirements to take reasonable steps to identify and obtain information on controllers
4. Keying controllers’ particulars into the RORC
5. Lodging of the RORC information with ACRA
6. Keeping the RORC up-to-date and accurate
7. Inspection of the RORC
8. Companies exempted from maintaining a RORC
9. RORC templates to get you started

(Already know how to set up an RORC and just need templates to get started? Skip to the bottom of this article!)

Scope of Article

This article aims to provide guidance to small business owners who:

• Have incorporated a company in Singapore; and
• Will be creating and maintaining their companies’ RORC in their capacity as company secretary (instead of engaging a registered filing agent to handle things for them).

This article also assumes that identifying the controllers of your company will be straightforward. It therefore won’t provide detailed guidance on thornier scenarios, such as where your company is majority-owned by another company listed on a foreign stock exchange.

If you are unsure of how to create or maintain your company’s RORC, you may wish to engage a corporate secretarial firm.

The Register of Registrable Controllers (RORC)

The Register of Registrable Controllers (RORC) is a private register that contains the particulars of your registrable controllers. It is a must-have for all companies (unless exempted) from 31 March 2017 onwards.

The Singapore Accounting and Corporate Regulatory Authority (ACRA) and other public agencies are empowered to require any company to produce its RORC for inspection and/or examination, so it is important that your company’s RORC is set up accurately and in a timely manner.

Who is a “registrable controller”?

A registrable controller is an individual or legal entity that has either “significant interest” in, or “significant control” over the company.

According to the CA, an entity has a “significant interest” in a company with a share capital if it:

1. Has an interest in more than 25% of the shares in the company; or
2. Has an interest in one or more voting shares in the company, and the total number of votes attached to that share(s) is more than 25% of the voting power in the company.

Shareholders who hold more than 25% of the shares in a company are considered to have a “significant interest” in that company. They are therefore controllers of the company.

(In the situation that your company does not have a share capital, an entity will have a “significant interest” in your company if it holds, whether directly or indirectly, a right to share in more than 25% of the company’s capital or profits.)

On the other hand, an entity has a “significant control” in a company if it:

1. Directly/indirectly holds the right to appoint or remove the directors who hold a majority of the voting rights at directors’ meetings on all (or substantially all) matters;
2. Directly/indirectly holds more than 25% of the rights to vote on matters which are to be decided through a vote of that company’s members; or
3. Has the right to exercise, or actually exercises, significant influence or control over the company.

Exempted registrable controllers

Generally, a company must enter its registrable controllers in its RORC. This is unless a controller fulfils the following 3 requirements:

1. Their significant interest or significant control in a company is only through another controller(s) of the same company;
2. They are the controller of this other controller(s); and
3. This other controller(s) is required to keep its own RORC, or is exempted from keeping a RORC.

Which particulars have to be recorded in the RORC?

If the registrable controller is an individual, the following of his or her particulars will have to be recorded in the RORC:

• Full name;
• Aliases, if any;
• Residential address;
• Email address
• Contact number
• Nationality;
• Identity card number/Passport number;
• Date of birth;
• Date on which the registrable individual controller became an individual controller of the company; and
• Date on which the registrable individual controller ceased to be an individual controller of the company, if applicable.

If, however, the registrable controller is a legal entity, the following particulars are required:

• Name;
• Unique entity number issued by the Registrar, if any;
• Address of registered office;
• Email address
• Contact number
• Legal form of registrable corporate controller;
• Jurisdiction where, and statute under which, the registrable corporate controller is formed or incorporated;
• Name of the corporate entity register of the jurisdiction in which the registrable corporate controller is formed or incorporated, if applicable;
• Identification number or registration number of the registrable corporate controller on the corporate entity register of the jurisdiction where the registrable corporate controller is formed or incorporated, if applicable;
• Date on which the registrable corporate controller became a corporate controller of the company; and
• Date on which the registrable corporate controller ceased to be a corporate controller of the company, if applicable.

The CA requires that the RORC be prepared in a specific format. You can purchase a template for RORC that we’ve prepared according to the requirements at the bottom of this article.

If you are unsure of certain particulars, such as the identification card number of a controller, make a note in the RORC that the controller has not confirmed these particulars.

However, that’s not the end of the story, as companies are legally required to take “reasonable steps” to obtain these particulars. More on this below.

Where is the RORC to be kept?

The RORC is to be kept at your company’s registered office or at the registered office of an appointed registered corporate service provider.

Must the RORC be in hard or soft copy?

The RORC can be kept in either hard or soft copy.

For example, you could create the register electronically (using e.g. either Microsoft Word or Excel), and then keep a hard copy printout of it for filing purposes.

Deadline to create the RORC

The deadline is dependent on the date of the company’s incorporation as follows:

• Companies incorporated on or after 16 June 2025: Starting on the date of the
  company’s incorporation;
• Companies incorporated on or after 31 March 2017 but before 16 June 2025:
  Within 30 days after the date of incorporation;
• Companies incorporated before 31 March 2017: Within 60 days after 31 March
  2017.

Further, companies which are not required to maintain the register but are subsequently required to do so must create an RORC within 60 days after the date of being required to maintain the register.

Requirement to Take Reasonable Steps to Identify and Obtain Information on Controllers

Companies are required to take “reasonable steps” to identify and obtain information on their registrable controllers.

The “reasonable steps” requirement is to be fulfilled by the sending of Notices. There are 2 types of Notices to be sent out:

1. Notice for Controllers; and
2. Notice for Persons Who May Know Controllers.

These Notices are to be sent within 2 business days after the date on which the company first knows the existence of, or first has reason to believe that there exists, a person to whom either Notice must be sent.

In addition, ACRA is of the view that the Notices must “minimally” be sent out to each company member and director annually to find out and identify their registrable controllers. However, you can choose not to send the Notices to certain members and/or directors if you are confident that they are not registrable controllers, and also do not know (or are not likely to know) the identities of the company’s registrable controllers.

The contents of these Notices will now be individually explained in more detail:

Notice for Controllers

The Notice for Controllers is to be sent to persons whom you know, or have reasonable grounds to believe, are registrable controllers of your company.

The Notice for Controllers must require the addressee to:

1. To state whether he/she is or is a registrable controller of the company;
2. To state whether he/she knows, or has reasonable grounds to believe, that any other person is a registrable controller of the company, or is likely to have that knowledge, and to give the particulars of that other person that are within his/her knowledge; and
3. To provide any other information as may be required.

Notice for Persons Who May Know Controllers

The Notice for Persons Who May Know Controllers is to be sent to persons whom you know, or whom you have reasonable grounds to believe so, that they know or are likely to know the identities of your company’s registrable controllers.

The Notice for Persons Who May Know Controllers must require the addressee to:

1. To state whether he/she knows or has reasonable grounds to believe that any other person is a registrable controller of the company, or is likely to have that knowledge;
2. To give the particulars of that person(s) that are within his/her knowledge; and
3. To provide any other information as may be required.

Keying Controllers’ Particulars Into the RORC

While waiting for replies to the Notices you’ve sent out, you can start keying the particulars of the persons who are likely to be registrable controllers of your company into the RORC first. Checking your company’s ACRA Business Profile for such information is a good start.

If any required particulars of a registrable controller have not been confirmed after a Notice has been sent, the company must enter a note in the RORC stating that the particulars have not been confirmed. This must be done within 2 business days after the expiry of 30 days from the date the Notice was sent to the controller.

If you get replies to your Notices

Once you get replies to your Notices, check them out to see whether the addressees of the Notices have declared themselves as registrable controllers of the company.

If the answer is “No”, make sure that the addressee’s particulars are omitted from the RORC.

If, however, the answer is “Yes”, update the RORC with the particulars provided by the addressee, correcting any inaccurate information as necessary.

Any updates to the RORC are to be made within 2 business days of receiving each reply to your Notice.

If you don’t get any replies to your Notices

If a person whom you know is definitely a registrable controller of your company doesn’t reply to your Notice, don’t worry.

So long as you’ve keyed the particulars of that registrable controller, which you already know, into the RORC, together with a note that the particulars have not been confirmed by the controller, you’ll already have fulfilled your duty under the law. You’re not obliged to chase the registrable controller for a response.

(That said, you may want to nudge controllers to provide their particulars, as a courtesy to them. This is because controllers are under a legal duty to provide the information required of them, and any changes to such information. Those who fail to comply can be fined up to $25,000.)

If your company has no registrable controllers

Where a company knows or has reasonable grounds to believe that:

• The company has no registrable controller; or
• The company has a registrable
  controller, but has not been able to identify the registrable controller,

each director with executive control, and each CEO of the company, is taken to be a registrable controller of the company. Their particulars must be entered into the RORC:

• Full name;
• Aliases, if any;
• Residential address;
• Email address
• Contact number
• Nationality;
• Identity card number/Passport number;
• Date of birth;
• Date on which the director is taken to be a controller; and
• Date on which the director ceased to be registrable controller, if applicable.

Lodging of RORC Information With ACRA

All companies that are required to maintain an RORC must ensure that the particulars of their registrable controllers are keyed into and maintained in the RORC. This information must then be lodged centrally with ACRA via the Update Register of Registrable Controller eService on BizFile+.

Whenever companies add new particulars to their RORC or update existing ones, they must also lodge such changes with ACRA within 2 business days of the addition or update.

There is no fee for this transaction.

Keeping the RORC Up to Date and Accurate

Companies are required to keep the information in the RORC up-to-date and accurate.

To do so, ACRA advises companies to review and update their RORC annually. This can be done by checking with each registrable controller, whose particulars are contained in the RORC:

• Whether there has been a relevant change to any of their particulars; and
• Whether any of the particulars are incorrect.

If the particulars in the RORC are still up-to-date and accurate, you should keep records to support your reasons for believing so in case public agencies ask for them when inspecting your register.

If, however, the reply from a registrable controller is such that you know or have reasonable grounds to believe that there has been a relevant change to his particulars, or that any of his particulars are incorrect, you will then have to send either a Notice for Change in Particulars (for the former situation), or a Notice for Incorrect Particulars (for the latter situation). This is unless the registrable controller has already provided updated and accurate information on the change(s) to his particulars.

If there are changes to a registrable controller’s particulars, these changes also have to be lodged with ACRA via BizFile+, using the same “Update Register of Registrable Controller” transaction.

The contents of these Notices will now be individually explained in more detail:

Notice for Change in Particulars

The Notice for Change in Particulars is to be sent to registrable controllers whose particulars you know, or have reasonable grounds to believe, have undergone a “relevant change” since being stated in the RORC.

There will have been a “relevant change” to a registrable controller’s particulars if:

1. The registrable controller has ceased to be a registrable controller of the company; or
2. The change has caused the particulars of the registrable controller stated in the RORC to be incorrect or incomplete.

The Notice for Change in Particulars must require the addressee to:

1. Confirm whether or not the change has occurred; and
2. If the change has occurred, the addressee is to provide the date of the change and the particulars of the change.

The Notice is to be sent within 2 business days after the date on which the company first knows, or has reason to believe, that a relevant change has occurred to a registrable controller’s particulars. This is unless a registrable controller has already informed the company of the change in their particulars, and such information is accurate.

Finally, ACRA recommends updating the RORC within 2 business days of receiving a reply from an addressee who confirms a change in particulars, and provides the details of such change.

Notice for Incorrect Particulars

The Notice for Incorrect Particulars is to be sent to registrable controllers whose particulars you know, or have reasonable grounds to believe, have been incorrectly stated in the RORC.

This may occur when you receive information from credible sources (e.g. newspaper articles) that certain of a registrable controller’s particulars may not be as what you have recorded.

The Notice for Incorrect Particulars must require the addressee to:

1. Confirm whether the particulars are correct; and
2. If the particulars are incorrect, the addressee is to provide the correct particulars.

ACRA recommends updating the RORC within 2 business days of receiving a reply from an addressee who confirms that his particulars are incorrect, and provides the correct particulars.

Other information to consider when sending Notices

The Notices don’t have to be signed by a company director or secretary before being sent out.

They can also be sent in either hard copy or electronic format. Registered mail is optional.

However, ACRA requires the Notices to follow a certain format and wording. You can obtain templates of these Notices at the bottom of this article upon your purchase of an RORC template.

Please note that the Notices don’t explain the important concepts required to complete them, such as the meanings of “controller”, “registrable”, “significant interest”, “significant control” and “relevant change”. You should therefore send the Notices together with some explanatory notes on the meanings of these concepts. (Sharing this article works!)

Inspection of the RORC

The RORC is not to be disclosed or made available for inspection by any member of the public. Companies (as well as any company officer) in default may be slapped with a fine of up to $25,000.

However, the RORC, the information contained in it, and any documents relating to them/the keeping of them must be made available to certain public agencies (and their officers). These include:

• ACRA
• Singapore Police Force
• Commercial Affairs Department
• Corrupt Practices Investigation Bureau
• Inland Revenue Authority of Singapore

Officers from these public agencies are allowed to inspect, examine and make copies of the RORC and its supporting documents.

Examples of supporting documents which officers from public agencies may request for include:

• For registrable controllers who are Singapore citizens or Singapore permanent residents: a copy of their NRIC.
• For registrable controllers who are foreign individuals: a copy of their passport, and document verifying their residential address (e.g. a utility bill).
• For registrable controllers who are foreign legal entities not registered in Singapore: a copy of the certificate of registration from the controller’s jurisdiction of incorporation. If the certificate does not show the controller’s registered office address, a document to verify the controller’s registered office address will also be required (e.g. a utility bill).
• Documentary proof of the particulars entered into the RORC, as sent by their corresponding registrable controllers. Such proof can include replies to notices, and other correspondence from the registrable controllers.

Companies Exempted From Maintaining an RORC

Not all companies are required to maintain an RORC. The following companies are exempted:

1. Public companies which shares are listed for quotation on an approved exchange in Singapore
2. Singapore financial institutions, and the wholly-owned subsidiaries of such companies
3. Companies wholly-owned by the Singapore Government, and the wholly-owned subsidiaries of such companies
4. Companies wholly-owned by statutory bodies established by or under a public Act for a public purpose, and the wholly-owned subsidiaries or such companies
5. Companies which have their shares listed on foreign stock exchanges and which are subject to regulatory disclosure requirements and requirements relating to adequate transparency in respect of their beneficial owners, as imposed through enforceable means (e.g. stock exchange rules, and law).

However, exempted companies must still inform ACRA of their exemption status through the Update Register of Registrable Controller eService, and declare that their business is exempt when filing their annual returns or annual declarations.

Register of Registrable Controllers (RORC) Templates to Get You Started

There are quite a few documents to be prepared when fulfilling your legal duty to create and maintain your company’s RORC.

Also, these documents cannot be created in any way you like. They must be in the form prescribed by the CA.

To save you the hassle of creating these documents from scratch, we’ve done the groundwork for you. You can purchase instant access to the Register of Registrable Controllers. As for the following notices, you can get them from ACRA’s website here:

• Notice for Controllers
• Notice for Persons Who May Know Controllers
• Notice for Change in Particulars
• Notice for Incorrect Particulars

Need a template for an RORC? You can get one here.

Buy Now at $10

After setting up your company’s RORC, it’s then just a matter of keeping it up-to-date.

Also, don’t forget to create a Register of Nominee Directors. Companies are also required to maintain one from 31 March 2017 onwards. You can check out our guide on setting up the Register of Nominee Directors here.

Need help customising an RORC? Check out our competitive rates for corporate secretarial services.