Introduction

Registering a private limited company with SECP is only the start. From that day, the company, its directors and its shareholders must follow the Companies Act 2017, SECP regulations and the company’s own articles of association. Our guide on how to register a private limited company with SECP covers the first step. This article covers what comes after, and complements our overview of company registration and compliance in Pakistan.

These rules matter because directors can face personal penalties for certain defaults. Shareholders rely on them to protect their investment, and banks, investors and regulators increasingly expect orderly records and transparent ownership. Many family businesses and start-ups only discover this when a dispute or a notice arrives.

This guide explains which governance rules apply to private companies, what directors and shareholders must do, which annual tasks matter and what is changing in 2026. It separates legal requirements from good practice and flags one pending bill that is not yet law.

Quick Answer: What Are the Corporate Governance Rules for Private Companies in Pakistan?

Private companies in Pakistan are governed mainly by the Companies Act 2017 and SECP regulations. Good governance means running an effective board, following the articles of association, passing valid resolutions, keeping statutory records, filing returns and accounts on time, and disclosing beneficial owners. Mandatory governance codes cover listed and certain other classes; SECP’s principles for non-listed companies are voluntary.

Key points:

• Directors and members must act within the Act and the company’s articles of association.
• Directors owe statutory duties, including acting in good faith in the company’s interests (section 204).
• Yearly tasks include the AGM, financial statements, the annual return and beneficial ownership disclosure.
• Changes in directors and other officers must be reported to SECP within 15 days.
• A Companies (Amendment) Bill 2026 has been reported as tabled, but it is not law yet.

What Is Corporate Governance in a Private Company?

Corporate governance is the framework of rules, roles and habits that decides how a company is directed, who is accountable and what must be disclosed. In a private company, it covers the board, shareholders, officers, meetings, records and reporting to SECP.

The Companies Act 2017 itself says one of its aims is to encourage good governance and protect minority interests. Governance is therefore part of the law’s purpose, not an optional extra.

How Does Corporate Governance Differ from Corporate Compliance?

Compliance means meeting specific legal requirements, such as filing a return by a deadline. Governance is wider: it is how the company is run and how its decision-makers are held accountable.

A simple example: filing the annual return on time is compliance. Having a board that reviews the accounts before approving them, and records that decision properly, is governance. Good governance makes compliance easier, because responsibilities and calendars are clear.

Who Regulates Private Companies in Pakistan?

The Securities and Exchange Commission of Pakistan (SECP) administers the Companies Act 2017, maintains the company register and receives statutory filings. Tax matters are separate and fall under the FBR. Our explainer on NTN, ATL, STRN and SECP registrations shows how these registrations differ. For the interaction between the two regimes, see how corporate law and taxation work together.

Which Laws and Rules Apply to Private Companies?

The main source is the Companies Act 2017, supported by SECP’s Companies Regulations (including the Companies Regulations, 2024), notified forms and circulars, and the company’s own articles of association. For the wider legal landscape, see our corporate law guide for Pakistan.

What Makes a Company “Private” Under the Act?

The Act defines a private company by what its articles do. The articles must:

• restrict the right to transfer shares;
• limit the number of members to fifty, not counting employees; and
• prohibit any invitation to the public to subscribe for shares or debentures.

Joint holders of a share count as one member. This is not just a label. If a company fails to comply with these conditions, it can lose the privileges and exemptions given to private companies (section 52), unless the Commission grants relief in a suitable case.

Private Company vs Public Company: What Differs?

Are Private Companies Bound by the Code of Corporate Governance?

No. SECP has issued mandatory governance frameworks for designated classes, such as listed companies, public sector companies and insurers. The Listed Companies (Code of Corporate Governance) Regulations apply to companies listed on the stock exchange. A private company is not directly bound by them, but it must still follow the Companies Act 2017.

What Are SECP’s Principles for Non-Listed Companies?

In August 2016, SECP approved Principles of Corporate Governance for Non-listed Companies. They are voluntary guidelines, not law, and SECP said at launch that they were aimed at over 60,000 non-listed companies.

The principles have two parts. Part 1 applies to all non-listed companies except small ones. It covers constitutive documents, the board and its meetings, board remuneration, internal controls, board training and general meetings. Part 2 applies to public interest and large companies. It may also help companies preparing for a future listing. Public sector companies fall under separate rules.

These principles make a useful checklist for family businesses and growing SMEs, even though nobody can fine you for ignoring them.

Who Does What? Board, Directors, Shareholders and Officers

How Many Directors and Members Must a Private Company Have?

A private company needs at least two members and at least two directors. A single member company needs one member and one director (SECP’s incorporation guidance; section 154).

If a private company’s membership falls below two and it keeps trading for more than 180 days, members who know this can become severally liable for the company’s debts incurred during that time (section 15). Single member companies are the exception.

What Is the Difference Between a Director, a Shareholder and a Manager?

One person can hold several roles, but the roles stay legally distinct. A shareholder who is also a director must wear the right “hat” when deciding.

Does a Private Company Need a Company Secretary?

The Act defines the company secretary’s role. Whether your particular private company must appoint one depends on the Act and SECP requirements for its class and size. Confirm this with SECP or a qualified professional rather than assuming either way.

Many small companies assign secretarial tasks to a director or outsource them. If you do appoint one, the appointment is reported to SECP on Form 29. To see what the role involves, read our company secretary career guide.

What Are Directors’ Legal Duties and Liabilities?

Directors must act within the Act and the articles, and in good faith in the company’s interests. Section 204 is the starting point. SECP has drawn boards’ attention to subsection (2): acting in good faith to promote the company’s objects for the benefit of members as a whole, and in the interests of the company, its employees, shareholders and the wider community.

Good governance practice also expects care and diligence, independent judgement and avoiding personal conflicts. Read section 204 itself for the exact wording, because the statute, not a summary, governs.

How Should Conflicts of Interest and Related-Party Transactions Be Handled?

Section 208 and its linked provisions (sections 207 to 209 are commonly cited) govern related-party transactions and contracts where directors are interested. The Companies (Related Party Transactions and Maintenance of Related Records) Regulations, 2018 add record-keeping requirements. Where the Act requires shareholder approval, companies commonly seek it by special resolution.

Practical steps for a private company:

1. Keep a written register of directors’ interests, and refresh it at least once a year.
2. Ask directors to declare interests at the start of each board meeting.
3. Follow the voting restrictions in the Act and your articles when an interested director is involved.
4. Record the commercial reasons and the basis on which terms are fair.
5. Keep the approvals with the board minutes.

This matters most in family businesses, where loans, rent and supply contracts between relatives and the company are common.

When Can a Director Be Personally Liable?

Most penalties fall on “the company and its officers in default”, but some examples show how personal exposure arises:

• Missing beneficial ownership filings: SECP has said penalties of up to Rs 1 million can fall on directors, officers or other responsible persons, and up to Rs 10 million on the company.
• Missing company name on documents: an officer who authorises cheques, invoices or other documents without the company name can become personally liable to the holder of a bill of exchange or order for money (section 24(2)).
• Operating below the minimum members: see section 15 above.

Penalty amounts and levels can change. Always check the current Act.

What Rights Do Shareholders Have in a Private Company?

Shareholders in a private company have statutory rights and rights under the articles. Together these protect owners who are not on the board.

What Information and Voting Rights Do Members Have?

• Notice and accounts: members receive notice of general meetings, normally at least 21 days before the meeting. Financial statements must be available to them before the AGM, and a copy is kept at the registered office for inspection for at least 21 days before the AGM.
• Documents: a member can ask for a copy of the company’s constitutive documents, and the company must send it within 14 days of the request, on payment of the fee the company sets (section 39).
• Voting: members vote on matters reserved to them, such as altering the articles (section 38) or changing the company’s name (section 12).
• Requisitioning meetings: members can requisition an extraordinary general meeting under section 133.

How Are Minority Shareholders Protected?

Alterations to the articles are made by special resolution. If an alteration affects the substantive rights or liabilities of members, it needs the agreement of at least three-fourths of the members affected (section 38).

Class rights have extra protection. Holders of at least 10 per cent of an aggrieved class can apply to the Court within 30 days of a resolution varying their rights (section 59). Disputes under the Act are heard by the Company Bench of the relevant High Court (section 5).

What Are the Rules for Share Transfers?

A private company’s articles must restrict share transfers, so always start with the articles. The Act also deals with offering shares to existing members before outsiders (section 76), and the articles determine the pricing method. Check both before you sell, gift or transfer shares.

Update the register of members and the share certificate after each transfer. A share certificate is prima facie evidence of title (section 62).

Shareholder Agreement vs Articles of Association: What Is the Difference?

The articles bind the company and its members once registered (section 17). They are filed with SECP and can only be changed by special resolution. A shareholders’ agreement is typically a private contract between named parties.

If an agreement contains terms that should bind the company itself, consider whether the articles should be amended too. Have both reviewed together so they do not contradict each other.

How Should Decisions Be Made and Recorded?

Decisions are valid when they are taken by the right body, in the right way, and recorded. For a private company, this means board resolutions for management matters and member resolutions for matters reserved to shareholders.

Ordinary Resolution vs Special Resolution

Board Resolution vs Shareholder Resolution

A board resolution records a decision of the directors acting collectively, such as approving accounts or authorising a bank mandate. A shareholder resolution records a decision of the members at a general meeting, such as altering the articles. Use the correct one. A decision taken by the wrong body can be challenged later.

How Should a Board Meeting Be Run?

Fixed meeting cycles are most clearly prescribed for listed companies. For a private company, the articles and the board’s own calendar usually set the rhythm, so check your articles. SECP’s voluntary principles encourage structured board meetings.

A sound process looks like this:

1. Check the articles for notice, quorum, voting and who chairs.
2. Circulate the agenda and papers in advance.
3. Record attendance and declarations of interest.
4. Take decisions through clearly worded resolutions.
5. Minute the decisions and have the minutes approved and signed as the articles require.
6. File the minutes in the minute book.

The board must also approve the annual financial statements (SECP cites section 183), and they must be signed on behalf of the board by the chief executive and at least one director (section 232).

What Are the Rules for AGMs and EGMs?

A company holds its first AGM within 16 months of incorporation. After that, it holds an AGM once in each calendar year, and the financial statements are laid before it within 120 days of the end of the financial year (section 132 read with section 223). The registrar can extend the period by up to 30 days on application for a special reason.

Notice of a general meeting is 21 days under the current Act. Any general meeting other than an AGM is an extraordinary general meeting (EGM).

What Must a Private Company Do Every Year?

Each year, a private company must hold its AGM, finalise and approve accounts, file what applies to it, and keep its ownership information current. Rules differ by size, so read the thresholds below carefully.

Annual Governance and Filing Checklist

For a step-by-step view of the return itself, read our guide to SECP annual return filing.

Illustrative Example: A Company with a 31 December Year-End

This is an illustration, not a real company. “Alpha Traders (Private) Limited” closes its books on 31 December 2026.

• The board approves the accounts in early April 2027 and sends the AGM notice with the accounts at least 21 clear days before the meeting.
• The AGM must be held by 30 April 2027 (120 days after year-end), unless the registrar grants an extension.
• If the AGM is held on 30 April, the annual return is due within 30 days, which is 30 May 2027.
• Form 19 goes in with the annual return.
• If a director resigns in February, Form 29 is due within 15 days of the resignation.

Always confirm how days are counted with your adviser, and diarise dates well before they fall due.

Which Companies Need Audited Accounts, and Which Must File Them?

Under SECP’s annual financial statements guidance:

• Listed companies, other companies (excluding private and single member companies with paid-up capital up to Rs 10 million) and foreign companies file audited statements with the registrar.
• Private and single member companies with paid-up capital up to Rs 1 million (not subsidiaries of a public company) are exempt from audit and file unaudited statements.
• In plain terms, a private company above Rs 1 million is generally audited, but one with paid-up capital up to Rs 10 million need not file its audited statements with the registrar.

These thresholds appear on SECP’s guidance pages and can be amended. Check the current position before relying on them.

What Is Beneficial Ownership Disclosure?

Under section 123A, every company must identify the natural persons who ultimately own or control it, whether directly or indirectly, and keep an internal register. SECP’s April 2026 notice on beneficial ownership disclosure says companies must file Form 19 on the eZfile portal along with the annual return, and keep the register updated annually and whenever changes occur.

In March 2026, SECP also launched a digital UBO registry under amendments to the Companies Regulations, 2024 (S.R.O. 1355(I)/2025). Newly incorporated companies provide the information through Form 1, while previously registered companies use Form 19.

Which Events Trigger Extra Filings?

• New or departing officers: Form 29 within 15 days, covering directors, chief executive, chief financial officer, company secretary, auditors and legal adviser. A new director also signs Form 28 consenting to act.
• Registered office: notify the registrar within 15 days of a change (section 21). Moving to another city also needs a special resolution.
• Articles altered: file a copy within 30 days of the resolution (section 38).
• Name change: needs a special resolution and the registrar’s approval (section 12). The former name must also appear alongside the new one for 90 days (section 13).
• Share allotments: file a return of allotment within 45 days (section 70), with the auditor’s or accountant’s report where shares are allotted for cash.
• Principal line of business: report a change within 30 days (section 26).

Section numbers come from the Act as published in the Gazette. Check the latest consolidated text for amendments.

Your company may also need other registrations alongside SECP filings. Our guides on business NTN registration and sales tax registration explain these.

Which Statutory Records Should a Private Company Keep?

At minimum, keep records that prove who owns and runs the company and what decisions were made:

• the certificate of incorporation, constitutive documents and every altered version filed with SECP;
• a register of members and share certificates or evidence of title;
• details of directors and other officers, supported by Form 28 and Form 29 filings;
• minutes of board and general meetings, and signed resolutions;
• the register of beneficial owners (section 123A);
• books of account covering money received and spent, sales and purchases, assets and liabilities, and cost records where relevant (section 2(1)(11));
• approved financial statements and filing acknowledgements.

The Act’s definition of “books and papers” includes records kept in electronic form, so digital filing is permitted. Keep clear version control and backups. Our guides on Odoo accounting and AI for bookkeeping look at software that can help.

What Happens If a Private Company Does Not Comply?

The company and its officers in default can face penalties under the Act, and the consequences can go beyond fines:

• Penalties: the Act sets penalties by “levels” on a standard scale. For example, failing to deliver financial statements on time attracts a level 1 penalty for a company other than a listed company (section 233, per SECP).
• Beneficial ownership: up to Rs 1 million on directors or officers and up to Rs 10 million on the company, according to SECP’s April 2026 notice.
• Loss of private-company privileges: see section 52 above.
• Personal exposure: see section 15 and section 24(2) above.
• Tax follow-on: weak records can also expose a company to FBR notices and a tax audit. A practical point, not a legal rule: untidy records make every dispute and due diligence exercise harder.

What Should You Do If You Have Missed a Deadline?

1. Identify exactly which filing or meeting is overdue.
2. Complete the late filing as soon as possible through SECP’s e-services.
3. Check whether SECP has announced any regularisation or relief for that default.
4. Record why it happened and put a calendar reminder in place.
5. Get professional advice if a notice has arrived or the default is long-standing.

How Can a Private Company Build a Governance Framework Step by Step?

Start simple and build up. A private company does not need a listed-company framework, but it does need clear roles, written policies and a calendar.

1. Map your legal baseline. Collect the certificate, articles, member and director details, and past filings.
2. Read your articles carefully. Note rules on share transfers, quorum, voting, director appointment and removal.
3. Define board roles. Decide who chairs, who signs, and which decisions need full-board approval.
4. Create a delegation of authority. Set limits for payments, contracts and bank mandates.
5. Adopt core policies. At a minimum: conflicts of interest and related parties, code of conduct, records management and internal controls.
6. Build a compliance calendar. Include the AGM, accounts, annual return, UBO update and tax dates. See the Pakistan tax calendar for the FBR side.
7. Review yearly. Have the board review policies, interests and the beneficial ownership register once a year.

Use SECP’s voluntary principles (constitutive documents, board and meetings, remuneration, internal controls, training, general meetings) to check your progress. Internal controls should also cover tax-facing processes such as digital invoicing.

Governance for Family-Owned Businesses

Separate family roles from company roles. Put understandings between shareholders in writing, apply the related-party steps above to every family transaction, and plan for succession and share transfers in the articles and any shareholders’ agreement.

Governance for Start-ups and SMEs

Early-stage companies should settle the basics before investors arrive: a clean register of members, board minutes, a clear cap table and beneficial ownership records. Our article on SECP’s start-up-friendly regulations explains recent facilitation measures.

What Does Governance Compliance Cost?

We have not quoted figures because fees change and depend on company size, volume of records and the adviser. For statutory filing fees, check SECP’s current fee schedule. For professional support, ask for an itemised written scope and a clear list of what is and is not included.

When Should You Involve a Professional?

Bring in a qualified professional when you are changing the articles, admitting investors, handling a shareholder dispute, restructuring, or have received a regulatory notice. For the business-advisory side, see how corporate law supports business advisory work.

What Are the Most Common Governance Mistakes?

• Treating the company like a sole proprietorship, so company funds and personal funds mix.
• Taking decisions verbally with no minutes or resolutions.
• Skipping the AGM or leaving accounts unapproved.
• Failing to file Form 29 after director changes.
• Ignoring beneficial ownership records.
• Copying a template without reading the articles, so practice contradicts the constitution.
• Leaving tax and corporate calendars separate. Our list of common tax mistakes made by Pakistani businesses shows where overlaps cause trouble.

What Are the Latest Rules and Developments for 2026?

Beneficial ownership is the headline change. In March 2026, SECP launched a digital UBO registry. In April 2026, it directed all companies to file Form 19 and said legal proceedings would follow for those that had not filed by 30 April 2026.

A Companies (Amendment) Bill 2026 has been reported as tabled. One media report dated 20 October 2026 says the bill was tabled in the National Assembly on 19 October 2026. As reported, it would:

• allow general meetings by electronic means or in hybrid form;
• drop the memorandum of association and keep the articles as the single founding document;
• reduce AGM notice for private companies to 14 days;
• let some private companies skip general meetings where the board holds at least three-quarters of the votes, with safeguards for members;
• make annual returns online-only from a date SECP notifies; and
• give SECP stronger powers to recover unpaid penalties.

We could not confirm these details on an official site at the time of writing. A bill is not law until it passes both houses and receives assent. Until then, keep following the current Companies Act 2017, and check the National Assembly and SECP websites before changing any practice.

For tax-side changes, our corporate tax guide for 2026 and article on corporate tax planning are good companions, as are our notes on IRIS registration for companies and income tax ordinance compliance.

Why Choose ICT for Company Secretary and Corporate Governance Training in Pakistan

The Institute of Corporate and Taxation (ICT) is a training institute, not a law firm. According to its About page, it offers corporate and taxation training from campuses in Islamabad, Karachi and Lahore.

Its Company Secretary Course covers SECP filings, corporate governance, board meeting documentation, statutory registers, board resolutions, AGM and EGM procedures, director appointments and regulatory reporting. Its outline also includes the Companies Regulations 2024. Graduates’ certificates can be checked on the certificate verification page. To compare options and career paths, see our guides to a corporate law course in Islamabad, why students prefer ICT for legal training and the corporate law careers outlook for 2026.

FAQs: Corporate Governance Rules for Private Companies in Pakistan

What are the basic governance rules for private companies?
Follow the Companies Act 2017 and your articles, keep a properly constituted board, pass valid resolutions, maintain records, file on time and disclose beneficial owners.

Who regulates private companies in Pakistan?
SECP administers the Companies Act 2017 and receives statutory filings. The FBR deals separately with tax.

Does a private company have to follow the listed companies’ Code of Corporate Governance?
No. That code applies to listed companies. SECP’s principles for non-listed companies are voluntary.

How many directors does a private company need?
At least two. A single member company needs one director.

How often must a private company hold an AGM?
The first AGM is due within 16 months of incorporation, then once in each calendar year, with accounts laid within 120 days of year-end.

What must a private company file every year?
Typically financial statements (where filing applies), the annual return (Form A or B) and beneficial ownership information (Form 19). Changes in officers are filed on Form 29 within 15 days.

What happens if the annual return or accounts are late?
The company and officers in default can face penalties under the Act. File as soon as possible and check for any SECP relief.

Can a director be personally liable?
Yes, in some cases. Examples include beneficial ownership penalties and personal liability where the company name is missing from documents.

Does every private company need a company secretary?
Not automatically. It depends on the Act and SECP requirements for the company’s class and size, so confirm with SECP or an adviser.

Can shareholders remove a director?
The Act and the articles provide routes for removal. The process and majority depend on both, so take advice before acting.

How often should governance policies be reviewed?
At least once a year. Beneficial ownership information also needs annual updating, according to SECP.

Conclusion

Governance in a private company comes down to a few habits: know your articles, give every decision to the right body, record it, keep your registers current and meet your yearly filings. Directors carry real duties under the Companies Act 2017, and shareholders hold meaningful rights. In 2026, ownership transparency is the area to watch, and the Companies (Amendment) Bill 2026 deserves attention while it moves through Parliament.

Start with a simple calendar and a clear set of records. Then build policies as the company grows. This article is general information, not legal advice, and the law is stated as at 3 November 2026.

Ready to handle SECP filings, board resolutions and statutory registers with confidence? Explore ICT’s Company Secretary Course, compare the Certified Business Advisor programme, browse all ICT courses, or contact the admissions team.