Your Company's Hidden Compliance Gap: The Register of Registrable Controllers

Directors in Singapore spend considerable energy keeping their companies aligned with statutory requirements. The annual return filing, the financial statement preparation, the board resolution documentation — all of it demands time and precision. Yet one particular obligation sits quietly in the background, often unknown to the very people it affects. The Register of Registrable Controllers, known by the abbreviation RORC, requires companies to map and record the real individuals behind their ownership.

This is not a regulation you can afford to discover by accident. ACRA enforces it rigorously, and the penalties escalate with each passing day of non-compliance. What follows is a comprehensive look at the register’s background, the definitions it relies on, and the concrete actions your company must take.

The Catalyst: Why This Register Exists

Shell companies have fueled financial crime for decades. Their defining feature — obscured beneficial ownership — makes them ideal instruments for laundering money and financing illicit activity. Criminal networks exploit these entities by stacking holding companies across borders. By the time regulators attempt to trace the source of funds, the ownership trail has been deliberately fragmented beyond recognition.

Singapore’s government refused to accept this risk within its jurisdiction. The country’s economic identity is built on trust, and anonymous corporate structures threatened to erode that foundation. Policymakers decided that every local company would need to reveal the natural persons at the apex of its control hierarchy.

The RORC was born from this decision. It functions as the formal document where companies record identifying information about the people who truly direct their affairs. It is not a suggestion or a best-practice recommendation. It is a legal requirement backed by meaningful enforcement.

What Qualifies an Individual as a Controller?

The regulations set measurable boundaries around the concept. A registrable controller is not simply anyone with a passing connection to the company. The individual must exercise control that crosses a defined threshold.

The most common trigger involves share ownership. When a natural person holds more than 25% of a company’s issued shares, they meet the definition. An identical threshold applies to voting rights — controlling more than 25% of total votes carries the same consequence.

The framework does not stop at the surface. If your company is owned by a holding entity, the register must look through that corporate layer. Tracing upward through successive intermediaries until you identify the actual human beings exercising control is not optional — it is a statutory obligation.

Influence that exists independent of shareholding also counts. A founder with the contractual right to appoint and dismiss a majority of directors, for example, qualifies regardless of equity ownership. Assessing these layered criteria is one of the core competencies a company secretary brings to the table, and their input can prevent costly classification errors.

Who Falls Under the Obligation?

Singapore’s regulators cast a wide net. Every company incorporated within the country must maintain an RORC. This applies uniformly across industries and size categories. Branch offices registered by overseas companies are subject to the same rule. Limited liability partnerships are not exempt either.

Only companies listed on a recognized stock exchange escape the requirement. Their ownership information is already a matter of public record through market disclosure rules. For private companies — and the overwhelming majority of Singapore’s corporate population falls into this category — the obligation stands without exception.

Required Content of the Register

ACRA specifies exactly what the register must contain. Incomplete or informal records will not satisfy regulators if your company is examined.

For each controller, you record their full legal name and residential address. Nationality and date of birth are additional mandatory fields. The register must also state the date the person first qualified as a controller and describe the precise nature of their control. An entry might read, for example, “holds 40% of issued share capital” or “controls 30% of voting rights through a class of shares.”

Supporting documentation forms an integral part of the record. Every notice you send to shareholders seeking confirmation of their controller status must be retained. Replies from shareholders, along with documented evidence of non-response, must be kept alongside the register. All such materials require a minimum retention period of five years from the date of receipt.

Companies with extensive shareholder lists or intricate ownership arrangements often find that corporate secretarial services provide the most reliable method for organizing and preserving this documentation.

Gathering the Information You Need

The law demands proactive effort. You cannot simply assume who your controllers are and write their names in the register.

Within 30 days of incorporating, you must issue a formal written notice to each shareholder. This notice requests confirmation of the recipient’s controller status. It also asks whether they know of any other individual who meets the criteria.

New shareholders who join after incorporation receive the same notice within 30 days of their appointment. If a shareholder declines to respond, the law treats their silence as a breach on their part. Your company, however, must still demonstrate diligence by recording the fact that the notice was sent and no reply was received. This documentation serves as your defense in the event of an ACRA inquiry.

The register is an evolving record. Changes in ownership, shifts in address, and new appointments require ongoing correspondence. A company secretary manages this continuous cycle, ensuring that the register stays accurate as circumstances develop.

Filing Obligations with ACRA

For some time, companies stored the RORC exclusively at their registered address. ACRA retained the power to inspect the document, but it was not publicly visible.

That arrangement has since been replaced. Companies must now file controller particulars directly with ACRA using the BizFile+ platform. The submission involves completing an online form that captures each controller’s details in a standardized format.

The initial filing deadline is 30 days from the date of incorporation. Any subsequent change — whether triggered by a new controller, an updated address, or a drop below the qualifying threshold — must be reported within 30 days of the event.

Once filed, basic ownership information becomes part of ACRA’s public register. Any member of the public can look up a company and see the individuals behind it. Residential addresses remain confidential, but names and relationships are openly visible. Many firms rely on corporate secretarial services to handle these filings, ensuring accuracy and adherence to deadlines.

What Happens When You Fail to Act

Regulators regard the RORC as a serious compliance obligation. Failure to establish the register results in an initial fine from ACRA.

The compounding daily penalty structure represents the more significant financial risk. Each day of continued non-compliance adds another charge. A lapse that could have been corrected at minimal cost in the first week becomes a substantial liability within a month.

Directors carry personal accountability under the statute. The law does not confine penalties to the company alone. Officers who failed in their duty to create and maintain the register face fines assessed against them individually.

Shareholders who refuse to answer statutory notices face their own consequences, which can include fines and imprisonment for up to two years. The government’s enforcement approach leaves no ambiguity: corporate transparency is a binding legal requirement, not a voluntary practice.

Building a Compliance Routine That Lasts

The RORC requires sustained attention. It is not a task you complete once and cross off your list. Share transfers, restructuring events, and personnel changes each trigger potential updates to the register.

Every company incorporated in Singapore must appoint a company secretary within six months of formation. Among the many duties assigned to this role, maintaining the RORC ranks as one of the most consequential. The secretary oversees the entire process — from issuing statutory notices to collecting responses to filing updates with ACRA.

When businesses bring in corporate secretarial services, the register transitions from an uncertain obligation to a managed workflow. Notices are dispatched on schedule, BizFile+ submissions are completed within the prescribed window, and all supporting records are maintained for the five-year retention period.

In the event of an ACRA review, your secretary produces the complete evidentiary file. Every notice sent, every reply gathered, and every filing confirmation is assembled in an organized format. What might otherwise escalate into a stressful regulatory encounter resolves into a structured administrative exercise.

Do Not Wait for a Warning Letter

The international push toward beneficial ownership disclosure shows no sign of retreating. Jurisdictions across multiple continents are strengthening their transparency requirements. Singapore’s RORC aligns with this broader global movement.

Companies in the planning stage should integrate the register into their incorporation checklist from the outset. Established businesses that have not yet created one face a more pressing timeline.

Daily penalties begin accumulating silently well before ACRA reaches out. Engaging a professional to trace your ownership chain, construct the register, and manage all related filings is a prudent and straightforward measure. A company secretary Singapore can take charge of the entire process, keeping your company aligned with the law and your operations free from disruption.