Since 1 March 2018, every company incorporated in Hong Kong has been legally required to keep a Significant Controllers Register — yet a remarkable number of small and medium-sized HK businesses still don’t have one, or have one that isn’t actually maintained. The Companies Registry inspection programme has been gentle, but the underlying offences are not symbolic, and the rule has been enforced with increasing visibility since 2023.
This guide covers what the SCR is, the five legal tests that determine who counts as a significant controller, what particulars must be recorded, the role of the designated representative, where the register lives, who can inspect it, and the penalties for getting it wrong. Public limited companies and listed companies have separate rules; this guide is written for the private HK Ltd that almost every SME owner operates.
What the SCR is and who it applies to
The SCR was introduced by the Companies (Amendment) Ordinance 2018, slotting Part 12 Division 2A into the Companies Ordinance (Cap. 622). The policy aim is beneficial-ownership transparency — Hong Kong’s compliance with FATF anti-money-laundering standards. The legal aim is more concrete: every applicable company must keep a register, in English or Chinese, of every person or legal entity that exerts significant control, and must maintain that register on an ongoing basis.
The rule applies to every company incorporated in Hong Kong under Cap. 622 — that is, every HK private limited company. Listed companies and certain regulated entities are exempt because they’re already subject to disclosure regimes. Branches of foreign companies are not directly subject; the obligation sits with the foreign parent under its home jurisdiction’s rules. For the typical SME — a family-owned HK Ltd, a single-shareholder operating company, a holding company with a handful of investors — there is no exemption.
One consequence many SMEs miss: even a one-person company needs an SCR. The sole shareholder/director is themselves the significant controller, and the register must record them, formally, with the prescribed particulars. “We’re a one-person company so it doesn’t apply” is the single most common misconception.
Who counts as a significant controller — the five tests
A person (individual or legal entity) qualifies as a significant controller of a HK company if any of five conditions is met. Only one condition needs to be satisfied — they’re not cumulative.
- 1. Holds, directly or indirectly, more than 25% of the issued shares. The most common ground for SMEs. “Indirectly” includes shares held through a corporate vehicle the person controls.
- 2. Holds, directly or indirectly, more than 25% of the voting rights. Distinct from share ownership where there are multiple share classes with different voting weights.
- 3. Holds the right to appoint or remove a majority of the board. Captures shareholder agreements that grant board-control rights without majority economic ownership.
- 4. Has the right to exercise, or actually exercises, significant influence or control. A catch-all aimed at shadow directors and de-facto controllers behind nominee arrangements.
- 5. Has the right to exercise, or actually exercises, significant influence or control over the activities of a trust or firm that itself satisfies any of conditions 1–4. Catches the trustee or firm-controller stepping behind a vehicle.
Most SMEs will land on tests 1, 2 or 3. Tests 4 and 5 matter when there is a nominee shareholder or a family-trust structure — and getting those wrong is where SMEs most commonly get tripped up by the catch-all. If there is any doubt that a person sits behind a nominee arrangement, the conservative position is to record them.
What to record — the prescribed particulars
For each significant controller, the SCR must contain a defined set of particulars. The exact form varies between an individual controller and a corporate (legal-entity) controller.
For individual significant controllers, the register must record: full name, correspondence address, residential address (if different), HKID number or passport number, date on which the person became a significant controller, and the nature of control (which of the five tests is satisfied, and the percentage where applicable). For corporate significant controllers (a “registrable legal entity”), the particulars are: name, registration number, registered office address, legal form and governing law, date on which the entity became a significant controller, and the nature of control.
Two procedural points trip up first-time filers. First, the register must record a date of cessation when a person stops being a significant controller — you don’t delete the entry, you close it out with the cessation date. Second, the register must be updated within 7 days of the company becoming aware of any change. Acquiring a major investor mid-year, or buying out a co-founder, both trigger the 7-day update obligation.
The designated representative
Every company keeping an SCR must also designate at least one designated representative — a natural person who can act as the company’s contact point with law enforcement or the Companies Registry on SCR matters. The designated representative must be either a director, an employee of the company who is a HK resident, or a TCSP-licensed accounting/legal professional engaged by the company.
For an SME with a sole-director structure, the designated representative is usually the director themselves. For a company that engages a corporate service provider for company-secretarial work, the designated representative is typically a named individual at the CSP. The designation must be in writing, kept with the SCR, and updated when the designated person leaves.
The designated representative is the person the Companies Registry will write to if it has SCR-related queries, and the person law enforcement will approach if it needs SCR information for an investigation. Getting the designation wrong — naming a person who isn’t qualified, or failing to update when the designated person leaves — is itself an offence.
Where the register lives, and who can inspect it
The SCR must be kept at the company’s registered office or at another place in Hong Kong. The Companies Registry must be notified of the location (using Form NR2) within 15 days of the SCR being kept somewhere other than the registered office, and again whenever the location changes. The register is not filed at the Companies Registry — it lives at the company.
Inspection rights are narrow and specific. The SCR is not a public register. Three categories of person can inspect it: law enforcement officers (defined to include the Companies Registry, the Customs and Excise Department, the Inland Revenue Department, the Immigration Department, ICAC, the Hong Kong Monetary Authority, the Insurance Authority and the Securities and Futures Commission); the company itself; and the significant controllers named in the register (each can inspect their own entry).
There is no public-search facility — a member of the public, a journalist, or a competitor cannot demand to see the SCR. This is a deliberate policy choice to balance beneficial-ownership transparency for enforcement against privacy for ordinary commercial interests.
Penalties for non-compliance
The SCR offences are summary offences, but the fine structure is real. Failure to take reasonable steps to identify a significant controller, failure to keep the register, failure to update it, or failure to make it available for inspection by a law enforcement officer all carry a maximum fine of HK$25,000, plus a daily fine of HK$700 for each day the offence continues. Failure to designate a representative, or designating an ineligible person, carries the same headline fine plus daily continuation.
For a company that has gone two or three years without an SCR, the daily-continuation structure means the headline figure can multiply quickly. The Companies Registry has been issuing increasing numbers of inspection requests since 2023 as part of its rolling compliance programme — companies that have never set up an SCR are an obvious target, and the inspection itself triggers the visibility.
The simplest way to handle this is to set the SCR up at incorporation alongside the other statutory books, and update it whenever ownership changes. Catching it up retrospectively is procedurally straightforward but requires the company secretary or a TCSP to walk back through ownership history.
How Giga Accounting by 凌峰會計 can help
If you’re not sure whether your company has a current SCR — or whether the one you have actually meets the Cap. 622 particulars — that’s the right moment to check. Our bookkeeping and accounting service works alongside our company-secretarial partner to set up or audit your SCR, designate a qualified representative and keep the register current as ownership changes.
Get in touch for a 15-minute SCR review, or see our flat per-company pricing. For the company secretary cost benchmarks and the duties an SCR-aware secretary should be handling, see our company secretary services in Hong Kong guide; for the formation step where the SCR should be set up alongside the statutory books, see our Hong Kong company formation step-by-step; and for the broader accounting checklist for a new HK company, see setting up a company in Hong Kong.
