How to Set Up a Register of Controllers

In order to increase the transparency of company ownership and control structures, the Singapore Companies Act (CA) has been amended to require all companies incorporated in Singapore (unless exempted) to maintain a Register of Controllers from 31 March 2017 onwards.
Companies in breach of their duties in relation to the Register of Controllers – as well as any company officer in default – can each be fined up to $5,000. It’s therefore important to get things right!
But fear not – creating and maintaining a Register of Controllers need not be difficult. This comprehensive guide will show you how.
If you need help with the Register of Nominee Directors instead, check out our article on setting up a Register of Nominee Directors.
(Already know how to set up a Register of Controllers and just need templates to get started? Skip to the bottom of this article!)
Table of Contents
- Scope of article
- The Register of Controllers
- Who is a “controller”?
- “Significant interest” and “significant control”
- Exempted controllers
- Which particulars have to be recorded in the Register of Controllers?
- Where is the Register of Controllers to be kept?
- Must the Register of Controllers be in hard or soft copy?
- Deadline to create the Register of Controllers
- Requirements to take reasonable steps to identify and obtain information on controllers
- Notice for Controllers
- Notice for Persons Who May Know Controllers
- Keying controllers’ particulars into the Register of Controllers
- If you get replies to your Notice
- If you don’t get any replies to your Notice
- If your company has no registrable controllers
- Lodging of Register of Controllers information with ACRA
- Keeping the Register of Controllers up-to-date and accurate
- Notice for Change in Particulars
- Notice for Incorrect Particulars
- Inspection of the Register of Controllers
- Companies exempted from maintaining a Register of Controllers
- Register of Controllers templates to get you started
Scope of Article
This article aims to provide guidance to small business owners who:
- Have incorporated a company in Singapore; and
- Will be creating and maintaining their companies’ Register of Controllers in their capacity as company secretary (instead of engaging a registered filing agent to handle things for them).
This article also assumes that identifying the controllers of your company will be straightforward. It therefore won’t provide detailed guidance on thornier scenarios such as where your company is majority-owned by another company listed on a foreign stock exchange.
If you are unsure of how to create or maintain your company’s Register of Controllers, you may wish to engage a corporate secretarial firm.
The Register of Controllers
The Register of Controllers is a register of the registrable controllers of the company. It is a must-have for all companies (unless exempted) from 31 March 2017 onwards.
The Singapore Accounting and Corporate Regulatory Authority (ACRA) and other public agencies is empowered to require any company to produce its Register of Controllers for inspection and/or examination, so it is important that your company’s Register of Controllers is set up accurately and also in a timely manner.
Who is a “controller”?
A controller is an entity that has either “significant interest” in, or “significant control” over, the company. This controller can be either an individual (i.e. a human being), or a legal entity (e.g. another company).
According to the CA, an entity has a “significant interest” in a company with a share capital if it:
- Has an interest in more than 25% of the shares in the company; or
- Has an interest in one or more voting shares in the company, and the total number of votes attached to that share(s) is more than 25% of the voting power in the company.
Shareholders who hold more than 25% of the shares in a company are considered to have a “significant interest” in that company. They are therefore controllers of the company.
(In the situation that your company does not have a share capital, an entity will have a “significant interest” in your company if it holds, whether directly or indirectly, a right to share in more than 25% of the company’s capital or profits.)
On the other hand, an entity has a “significant control” in a company if it:
- Directly/indirectly holds the right to appoint or remove the directors who hold a majority of the voting rights at directors’ meetings on all (or substantially all) matters;
- Directly/indirectly holds more than 25% of the rights to vote on matters which are to be decided through a vote of that company’s members; or
- Has the right to exercise, or actually exercises, significant influence or control over the company.
Company directors are usually controllers because they generally have “significant control” over their companies.
(If a company director does not have “significant control” over the company, he may instead be a nominee director, who will be registered in the Register of Nominee Directors instead.)
Exempted controllers
Generally, all company controllers are registrable in their respective companies’ Registers of Controllers. This is unless a controller fulfils the following 3 requirements:
- Their significant interest or significant control in a company is only through another controller(s) of the same company;
- They are the controller of this other controller(s); and
- This other controller(s) is required to keep its own Register of Controllers, or is exempted from keeping a Register of Controllers.
Which particulars have to be recorded in the Register of Controllers?
If the registrable controller is an individual, the following of his or her particulars will have to be recorded in the Register of Controllers:
- Full name;
- Aliases, if any;
- Residential address;
- Nationality;
- Identity card number/Passport number;
- Date of birth;
- Date on which the registrable individual controller became an individual controller of the company; and
- Date on which the registrable individual controller ceased to be an individual controller of the company, if applicable.
If however the registrable controller is a legal entity, the following particulars are required:
- Name;
- Unique entity number issued by the Registrar, if any;
- Address of registered office;
- Legal form of registrable corporate controller;
- Jurisdiction where, and statute under which, the registrable corporate controller is formed or incorporated;
- Name of the corporate entity register of the jurisdiction in which the registrable corporate controller is formed or incorporated, if applicable;
- Identification number or registration number of the registrable corporate controller on the corporate entity register of the jurisdiction where the registrable corporate controller is formed or incorporated, if applicable;
- Date on which the registrable corporate controller became a corporate controller of the company; and
- Date on which the registrable corporate controller ceased to be a corporate controller of the company, if applicable.
The CA requires the Register of Controllers to be prepared according to a certain format. You can purchase a template for Register of Controllers that we’ve prepared according to the requirements at the bottom of this article.
If you are unsure of certain particulars, such as the identification card number of a controller, make a note in the Register of Controllers that the controller has not confirmed these particulars.
However, that’s not the end of the story as companies are legally required to take “reasonable steps” to obtain these particulars. More on this below.
Where is the Register of Controllers to be kept?
The Register of Controllers is to be kept at your company’s registered office.
Must the Register of Controllers be in hard or soft copy?
The Register of Controllers can be kept in either hard or soft copy.
For example, you could create the register electronically (using e.g. either Microsoft Word or Excel), and then keep a hard copy printout of it for filing purposes.
Deadline to create the Register of Controllers
If your company was incorporated on or after 31 March 2017, your company’s Register of Controllers must be created not later than 30 days after the date of the company’s incorporation.
If however your company was incorporated before 31 March 2017, its Register of Controllers must be created not later than 60 days after 31 March 2017, i.e. 30 May 2017.
Requirement to Take Reasonable Steps to Identify and Obtain Information on Controllers
Companies are required to take “reasonable steps” to identify and obtain information on their registrable controllers.
The “reasonable steps” requirement is to be fulfilled by the sending of Notices. There are 2 types of Notices to be sent out:
- Notice for Controllers; and
- Notice for Persons Who May Know Controllers.
These Notices are to be sent within 2 business days after the date on which the company first knows the existence of, or first has reason to believe that there exists, a person to whom either Notice must be sent.
In addition, ACRA is of the view that the Notices must “minimally” be sent out to each company member and director annually. However, you can choose not to send the Notices to certain members and/or directors if you are confident that they are not registrable controllers, and also do not know (or are not likely to know) the identities of the company’s registrable controllers.
The Notices don’t have to be signed by a company director or secretary before being sent out.
They can also be sent in either hard copy or electronic format. Registered mail is optional.
However, ACRA requires the Notices to follow a certain format and wording. You can obtain templates of these Notices at the bottom of this article upon your purchase of a Register of Controllers template.
Please note that the Notices don’t explain the important concepts required to complete them, such as meanings of “controller”, “registrable”, “significant interest” and “significant control”. You should therefore send the Notices together with some explanatory notes on the meanings of these concepts. (Sharing this article works!)
The contents of these Notices will now be individually explained in more detail:
Notice for Controllers
The Notice for Controllers is to be sent to persons whom you know, or have reasonable grounds to believe, are registrable controllers of your company.
The Notice for Controllers must require the addressee to:
- To state whether he/she is or is not a registrable controller of the company;
- To state whether he/she knows, or has reasonable grounds to believe, that any other person is a registrable controller of the company, or is likely to have that knowledge, and to give the particulars of that other person that are within his/her knowledge; and
- To provide any other information as may be required.
Notice for Persons Who May Know Controllers
The Notice for Persons Who May Know Controllers is to be sent to persons whom you know, or whom you have reasonable grounds to believe so, that they know or are likely to know the identities of your company’s registrable controllers.
The Notice for Persons Who May Know Controllers must require the addressee to:
- To state whether he/she knows or has reasonable grounds to believe that any other person is a registrable controller of the company, or is likely to have that knowledge;
- To give the particulars of that person(s) that are within his/her knowledge; and
- To provide any other information as may be required.
Keying Controllers’ Particulars Into the Register of Controllers
While waiting for replies to the Notices you’ve sent out, you can start keying the particulars of the persons whom are likely to be registrable controllers of your company into the Register of Controllers first. Checking your company’s ACRA Business Profile for such information is a good start.
As mentioned, you can grab a template Register of Controllers here.
If you don’t know certain of a registrable controller’s particulars, make a note in the Register of Controllers that the particulars of that controller have not been confirmed by the controller yet. This must be done within 2 business days after the end of 30 days after the date on which the Notice has been sent to the controller.
If you get replies to your Notices
Once you get replies to your Notices, check them out to see whether the addressees of the Notices have declared themselves as registrable controllers of the company.
If the answer is “No”, make sure that that addressee’s particulars are omitted from the Register of Controllers.
If however the answer is “Yes”, update the Register of Controllers with the particulars provided by the addressee, correcting any inaccurate information as necessary.
Any updates to the the Register of Controllers are to be made within 2 business days of receiving each reply to your Notice.
If you don’t get any replies to your Notices
If a person whom you know is definitely a registrable controller of your company doesn’t reply to your Notice, don’t worry.
So long as you’ve keyed the particulars of that registrable controller which you already know into the Register of Controllers, together with a note that the particulars have not been confirmed by the controller, you’ll already have fulfilled your duty under the law. You’re not obliged to chase the registrable controller for a response.
(That said, you may want to nudge controllers to provide their particulars, as a courtesy to them. This is because controllers are under a legal duty to provide the information required of them, and any changes to such information. Those who fail to comply can be fined up to $5,000.)
If your company has no registrable controllers
If you are sure that your company does not have any registrable controllers, key the following statement into your Register of Controllers:
“As of [date], the company knows or has reasonable cause to believe that there are no registrable controllers in relation to the company.”
Lodging of Register of Controllers Information With ACRA
All companies that are required to maintain a Register of Controllers must also lodge the information in this register with ACRA.
To do so, go to the BizFile+ website > eServices > Others. Then, click on the “Update Register of Registrable Controller ” transaction. There is no fee for this transaction.
Whenever companies add new particulars to their Register of Controllers or update existing ones, they must also lodge such changes with ACRA within 2 business days of the addition or update.
Keeping the Register of Controllers Up to Date and Accurate
Companies are required to keep the information in the Register of Controllers up-to-date and accurate.
To do so, ACRA advises companies to review and update their Register of Controllers annually. This can be done by checking with each registrable controller, whose particulars are contained in the Register of Controllers:
- Whether there has been a relevant change to any of their particulars; and
- Whether any of the particulars are incorrect.
If the particulars in the Register of Controllers are still up-to-date and accurate, you should keep records to support your reasons for believing so in case public agencies ask for them when inspecting your register.
If however the reply from a registrable controller is such that you know or have reasonable grounds to believe that there has been a relevant change to his particulars, or that any of his particulars are incorrect, you will then have to send either a Notice for Change in Particulars (for the former situation), or a Notice for Incorrect Particulars (for the latter situation). This is unless the registrable controller has already provided updated and accurate information on the change(s) to his particulars.
The Notices don’t have to be signed by a company director or secretary before being sent out.
They can also be sent in either hard copy or electronic format. Registered mail is optional.
Just like the Notices for Controllers and Persons Who May Know Controllers, the Notices for Change in Particulars and Incorrect Particulars have to follow a certain format and wording. These Notices can also be obtained at the bottom of this article upon your purchase of a Register of Controllers template.
And again, note that the Notices don’t explain the important concepts required to complete them, such as meanings of “relevant change”. You should therefore prepare some explanatory notes to be sent together with the Notices. (As mentioned, sharing this article also works!)
If there are changes to a registrable controller’s particulars, these changes also have to be lodged with ACRA via BizFile+, using the same “Update Register of Registrable Controller” transaction.
The contents of these Notices will now be individually explained in more detail:
Notice for Change in Particulars
The Notice for Change in Particulars is to be sent to registrable controllers whose particulars you know, or have reasonable grounds to believe, have undergone a “relevant change” since being stated in the Register of Controllers.
There will have been a “relevant change” to a registrable controller’s particulars if:
- The registrable controller has ceased to be a registrable controller of the company; or
- The change has caused the particulars of the registrable controller stated in the Register of Controllers to be incorrect or incomplete.
The Notice for Change in Particulars must require the addressee to:
- Confirm whether or not the change has occurred; and
- If the change has occurred, the addressee is to provide the date of the change and the particulars of the change.
The Notice is to be sent within 2 business days after the date on which the company first knows, or has reason to believe, that a relevant change has occurred to a registrable controller’s particulars. This is unless a registrable controller has already informed the company of the change in their particulars, and such information is accurate.
Finally, ACRA recommends updating the Register of Controllers within 2 business days of receiving a reply from an addressee who confirms a change in particulars, and provides the details of such change.
Notice for Incorrect Particulars
The Notice for Incorrect Particulars is to be sent to registrable controllers whose particulars you know, or have reasonable grounds to believe, have been incorrectly stated in the Register of Controllers.
This may occur when you receive information from credible sources (e.g. newspaper articles) that certain of a registrable controller’s particulars may not be as what you have recorded.
The Notice for Incorrect Particulars must require the addressee to:
- Confirm whether the particulars are correct; and
- If the particulars are incorrect, the addressee is to provide the correct particulars.
ACRA recommends updating the Register of Controllers within 2 business days of receiving a reply from an addressee who confirms that his particulars are incorrect, and provides the correct particulars.
Inspection of the Register of Controllers
The Register of Controllers is not to be disclosed or made available for inspection by any member of the public. Companies (as well as any company officer) in default may be slapped with a fine of up to $5,000.
However, the Register of Controllers, the information contained in it, and any documents relating to them/the keeping of them must be made available to certain public agencies (and their officers). These include:
- ACRA
- Singapore Police Force
- Commercial Affairs Department
- Corrupt Practices Investigation Bureau
- Inland Revenue Authority of Singapore
Officers from these public agencies are allowed to inspect, examine and make copies of the Register of Controllers and its supporting documents.
Examples of supporting documents which officers from public agencies may request for include:
- For registrable controllers who are Singapore citizens or Singapore permanent residents: a copy of their NRIC.
- For registrable controllers who are foreign individuals: a copy of their passport, and document verifying their residential address (e.g. a utility bill).
- For registrable controllers who are foreign legal entities not registered in Singapore: a copy of the certificate of registration from the controller’s jurisdiction of incorporation. If the certificate does not show the controller’s registered office address, a document to verify the controller’s registered office address will also be required (e.g. a utility bill).
- Documentary proof of the particulars entered into the Register of Controllers, as sent by their corresponding registrable controllers. Such proof can include replies to notices, and other correspondence from the registrable controllers.
Companies Exempted From Maintaining a Register of Controllers
Not all companies are required to maintain a Register of Controllers. The following companies are exempted:
- Public companies which shares are listed for quotation on an approved stock exchange in Singapore, and the wholly-owned subsidiaries of such companies
- Singapore financial institutions, and the wholly-owned subsidiaries of such companies
- Companies wholly-owned by the Singapore Government, and the wholly-owned subsidiaries of such companies
- Companies wholly-owned by statutory bodies established by or under a public Act for a public purpose, and the wholly-owned subsidiaries or such companies
- Companies which have their shares listed on foreign stock exchanges and which are subject to regulatory disclosure requirements and requirements relating to adequate transparency in respect of their beneficial owners, as imposed through enforceable means (e.g. stock exchange rules, and law).
Register of Controllers Templates to Get You Started
There are quite a few documents to be prepared when fulfilling your legal duty to create and maintain your company’s Register of Controllers.
Also, these documents cannot be created in any way you like. They must be in the form prescribed by the CA.
To save you the hassle of creating these documents from scratch, we’ve done the groundwork for you. The following are templates you’ll get instant access to upon your purchase:
- Register of Controllers
- Notice for Controllers
- Notice for Persons Who May Know Controllers
- Notice for Change in Particulars
- Notice for Incorrect Particulars
Need a template for a Register of Controllers? You can get one here.
After setting up your company’s Register of Controllers, it’s then just a matter of keeping it up-to-date.
Also, don’t forget to create a Register of Nominee Directors. Companies are also required to maintain one from 31 March 2017 onwards. You can check out our guide on setting up the Register of Nominee Directors here.
Need help customising a Register of Controllers? Check out our competitive rates for corporate secretarial services.
- What is a Nominee Director, How to Appoint and Other FAQs
- Independent Directors: Who are They and What is Their Role?
- Board of Advisors: Who Are They and What Is Their Role?
- Appointing Company Directors in Singapore: Eligibility, Process etc.
- Managing Director vs CEO in Singapore: Roles and Obligations
- Guide to Directors' Remuneration in Singapore
- Directors' Duties in Singapore
- Shadow Directors: Who are They and What Duties Do They Owe to the Company?
- How to Remove a Director from a Company in Singapore
- Removal and Resignation of Company Auditor in Singapore
- Appointing a Company Secretary: Roles and Responsibilities
- Appointing an Authorised Representative for Foreign Companies in Singapore
- Process Agents in Singapore
- Share Buybacks in Singapore: Procedure, Cost and More
- How to Split Shares (or Stocks) in a Singapore Company
- 2 Ways to Remove a Singapore Company Shareholder ASAP
- What are Treasury Shares? Guide for Singapore Companies
- Guide to Paid-Up Capital in Singapore (Is $1 Enough?)
- Preparing a Register of Shareholders for a Singapore Company
- How to Issue Shares in a Singapore Private Company
- Guide to Transferring Shares in a Singapore Private Company
- Your Guide to Share Certificates in Singapore: Usage and How to Prepare
- Shareholder Rights in Singapore Private Companies
- Shareholder Roles and Obligations in Singapore Companies
- Dividend Payments Guide for Singapore Business Owners
- Share Transmission: What Happens If a Shareholder Dies in Singapore?
- How to Reduce the Share Capital of Your Singapore Company
- Buy-Sell Agreements: How to Write & Fund Them in Singapore
- Oppression of Minority Shareholders
- Is Your Business Collaboration Competition Law-Compliant?
- Explained: Registered Filing Agent for Singapore Businesses
- Transfer Pricing Obligations of Singapore Companies
- Adhering to Trading Sanctions and Restrictions in Singapore
- Cyber Hygiene Compliance Guide for Singapore Companies
- Corporate Social Responsibility For Businesses in Singapore
- Essential Regulatory Compliance Guide for Singapore Companies
- Dormant Companies and Their Filing Obligations in Singapore
- Anti-Money Laundering Regulations and Your Business: What You Need to Know
- Price-Fixing, Bid-Rigging and Other Anti-Competitive Practices to Avoid
- Legally Conducting Lucky Draws for Singapore Businesses
- Restaurant Inspection and Food Safety Rules in Singapore
- Does Your Company Need a Legal Team (In-House Counsel)?
- Acqui-Hiring of Singapore Companies: How Does It Work?
- How to Change the Name of Your Singapore Company
- Can Directors be Liable for Company Debts in Singapore?
- Company Loans to Directors/Shareholders in Singapore
- 3 Types of Insurance Every Singapore Business Needs
- Creating and Registering Charges in Singapore: Guide for Companies
- Guide to Effective Business Continuity Planning in Singapore
- Business Asset Sale & Disposal in Singapore: How Do They Work?
- Business Partnership Disputes in Singapore: How to Resolve
- How to Commence a Derivative Action on Behalf of a Company in Singapore
- Business Will: How to Pass on Your Business to Your Successors in Singapore
- Record-Keeping Requirements for Singapore Companies
- Company Constitutions in Singapore and How to Draft One
- Company Memorandum and Articles of Association
- Company Resolutions: What are They?
- Board Resolutions in Singapore
- Minutes of Company Meeting in Singapore: How to Record
- How to Set Up a Register of Controllers
- How to Set Up a Register of Nominee Directors
- Guide to Filing Financial Statements for Singapore Business Owners
- Filing Annual Returns For Your Business
- Carbon Tax in Singapore: What is the Rate and Who Must Pay?
- Laws and Penalties for GST Evasion in Singapore
- 6 Common Taxes in Singapore For Individuals & Businesses
- Singapore Corporate Tax: How to Pay, Tax Rate, Exemptions
- Start-Up Tax Exemption Guide for New Singapore Companies
- GST Registration: Requirements and Procedure in Singapore
- What is Withholding Tax and When to Pay It in Singapore
- Singapore Influencers: Here's How to Calculate Your Income Tax
- Tax Investigation of Tax-Evading Business Owners in Singapore
- Small Business Accounting Services in Singapore
- Company Audits in Singapore: Requirements and Exemptions
- Suspect a PDPA Data Breach? Here's What to Do Next
- Must You Notify PDPC About a Data Breach in Your Business?
- Data Room: Should Your Singapore Company Set Up One?
- Victim of a Data Breach? Here’s What You Can Do
- Summary: Your Organisation's 10 Main PDPA Obligations
- Essential PDPA Compliance Guide for Singapore Businesses
- PDPA Consent Requirements: How Can Your Business Comply?
- Is It Legal for Businesses to Ask for Your NRIC in Singapore?
- Here's a 7-Step Plan for Companies to Prevent Unauthorised Disclosure When Processing and Sending Personal Data
- Cloud Storage of Personal Data: Your Business’ Data Protection Obligations
- Drafting a Comprehensive Privacy Policy For Your Singapore Website
- GDPR Compliance in Singapore: Is it Required and How to Comply
- Appointing a Data Protection Officer For Your Business: All You Need to Know
- How Can Companies Dispose of Documents Containing Personal Data?
- Check the Do-Not-Call Registry Before Marketing to Singapore Phone Numbers
- How to Legally Install CCTVs for Home/Business Use in Singapore
- Is Web Scraping or Crawling Legal in Singapore?
- Legal Options If Employees Breach Confidentiality in Singapore
- Social Media Marketing: Legal Guide for Singapore Businesses
- Your Guide to E-commerce Website Terms of Service in Singapore
- Dealing with Defamation of Your Business: Can You Sue?
- Sending Email Newsletters That Comply With Singapore Law
- A legal guide to drafting a social media policy for your company
- Your Guide to a Media Release Form in Singapore
- Your Guide to an Influencer Marketing Agreement in Singapore
- Outdoor Advertising: How to Legally Display Public Ads in Singapore
- A Guide to Digital Bank Regulation in Singapore
- Applying for a Major Payment Institution Licence in Singapore
- Applying to the MAS FinTech Regulatory Sandbox
- Payment Services Act Licensing Guide for Fintech Businesses
- How to Get a Payment Service Provider Licence in Singapore
- Financial Adviser's Licence Guide for Singapore Businesses
- Capital Markets (CMS) Licence Requirements in Singapore
- How to Offer E-Wallet Services in Singapore: Licensing Guide
- Digital Payment Token Services Licence Guide in Singapore
- How to Legally Offer Crypto Services in Singapore
- How to Restore a Struck-Off Company in Singapore
- Claw-Back of Assets From Unfair Preference and Undervalued Transactions
- Should You Save or Close Your Zombie Company in Singapore?
- Voluntary Suspension of Business in Singapore: How to Handle
- Winding Up a Singapore Company: Grounds and Procedure
- Closing Your Singapore Business: What You Need to Settle
- Striking Off a Company
- Restoring a Company That was Struck Off Without You Knowing
- Dissolution of partnerships in Singapore
- What Should a Creditor Do When a Company Becomes Insolvent?
- How to File a Proof of Debt Against a Company in Liquidation
- Validation of Payments Made by Companies Being Wound Up