SECP's 2026 Rules Every Director Should Know

Here's an uncomfortable truth for a lot of company directors in Pakistan: you can be doing everything you think is right, and still be sitting on a compliance gap that could land you personally liable — not because you're careless, but because the rules changed and nobody told you. That's exactly what happened through a string of SECP regulatory updates in 2026. None arrived with much fanfare; all of them affect how boards, directors, and company secretaries need to operate right now.

Why SECP Keeps Tightening the Rules

Since the Companies Act 2017 came into force, the Securities and Exchange Commission of Pakistan has been steadily closing gaps that let companies operate with loose, undocumented governance — informal board decisions, paper share certificates nobody could easily verify, and murky ownership structures that became a major source of disputes, fraud, and drawn-out litigation. The 2026 changes push into three specific areas: proving compliance formally, digitizing share ownership, and verifying who actually owns a company during M&A activity.

The Three Changes That Actually Matter

1. Certificate of Statutory Compliance (SRO 875 of 2026)

This introduces a formal certificate confirming that a company has actually met its statutory obligations under the Companies Act. In a dispute, an SECP inquiry, or a transaction, "we believe we're compliant" is a much weaker position than "here's our compliance certificate" — the change shifts the burden toward proactive documentation rather than reactive explanation.

2. Mandatory Digitization of Physical Shares (SRO 328 of 2026)

Companies still holding physical share certificates must now convert them into digital form. Physical certificates have always been vulnerable to loss, forgery, and record-keeping errors that turn into years-long shareholder disputes; digitization closes much of that gap, but only if companies complete the conversion properly and on time.

3. Beneficial Ownership Verification in M&A (SRO 669 of 2026)

SECP now requires clearer verification of beneficial ownership during merger and acquisition transactions. Due diligence just got more demanding — a clean transaction can no longer rely on surface-level ownership documents, since regulators want to know who is actually behind the company, not just whose name is on the certificate.

What Happens If You Ignore These Changes

Directors who assume "we've always done it this way," without checking the new compliance certificate requirement, risk falling short in an SECP inquiry — the same kind of gap discussed in our earlier piece on directors' liabilities under the Companies Act 2017. Companies that delay share digitization risk ownership disputes precisely when it matters most, during a sale, an inheritance transfer, or a shareholder disagreement. And in M&A deals, skipping thorough beneficial ownership verification risks personally inheriting liabilities tied to a company structure never fully understood in the first place.

What You Should Actually Do This Quarter

• Confirm your company's current statutory compliance status through a formal review rather than assumption.
• Audit your share register and start digitizing physical shares now, rather than waiting until a transaction forces the issue.
• If involved in any M&A activity, revisit your due diligence checklist to explicitly build in beneficial ownership verification.
• Document board decisions properly, going forward — informal, undocumented decision-making is the biggest exposure point for directors.
• Get a corporate governance review from someone who actively tracks SECP's regulatory changes, since these SROs don't always get wide media coverage.

Common Mistakes Directors Make

• Treating compliance as a once-a-year filing exercise instead of an ongoing responsibility.
• Assuming physical share certificates are "fine for now" without a digitization timeline.
• Rushing M&A due diligence and treating ownership verification as a formality rather than a real risk check.
• Relying entirely on a company secretary without personally understanding director exposure under the Companies Act.

Conclusion

None of these three changes are dramatic on their own. Together, they signal a clear direction: SECP wants documented compliance, digital and verifiable ownership records, and real transparency in M&A activity — not assumptions and paper trails that fall apart under scrutiny.

Related Corporate Matters We Handle in Lahore

Questions about the 2026 SECP updates often lead to related corporate governance concerns. Our practice also covers:

Frequently Asked Questions