SSM's Revised Company Secretary Rules 2026: The Complete Guide for Foreign-Owned Sdn Bhds — New Practising Certificate Guidelines, Mandatory AMLA Training, CPE Requirements and Why Your Choice of Secretary Now Matters More Than Ever

When a foreign company sets up a Sdn Bhd in Malaysia, the company secretary is not a nice-to-have back-office role — it is a statutory requirement that must be satisfied within 30 days of incorporation, and getting it wrong can expose directors to fines, prosecution, and even company deregistration. On 22 October 2025, the Companies Commission of Malaysia (SSM) issued a comprehensively revised edition of its Guidelines Relating to Practising Certificate for Secretaries Under Section 241 of the Companies Act 2016, superseding the version that had been in force since August 2022. A second phase of these changes — mandatory Anti-Money Laundering Act (AMLA) training for all practising company secretaries — took effect on 1 January 2026. Together, these updates mark the most significant tightening of company secretary rules in several years, and they have direct, practical consequences for every foreign-owned Sdn Bhd operating in Malaysia today.

Why the Company Secretary Role Is Different in Malaysia — Background for Foreign Founders

Many first-time foreign investors arrive in Malaysia with a mental model shaped by jurisdictions where the company secretary is a clerical role. In Hong Kong, Singapore, the UK, and most Chinese legal practice, the position is administrative. In Malaysia, the law treats it very differently.

Under the Companies Act 2016 (CA 2016), the company secretary is a statutorily mandated officer — equivalent in legal standing to a director — whose appointment, qualifications, and conduct are directly regulated by SSM. The obligation is set out in Sections 235 and 236 of the CA 2016, which came into force on 31 January 2017 and have applied to every Sdn Bhd incorporated since then without exception. There is no size threshold, no revenue exemption, and no grace period beyond the 30-day appointment window.

The scope of the role is also far broader than most foreign founders expect. Your company secretary is not simply the person who files your annual return. They are responsible for: maintaining all statutory registers (members, directors, charges, secretaries); passing and certifying board and shareholder resolutions; lodging every statutory change — director appointments or resignations, address changes, share issuances, share transfers — with SSM via the digital portals; advising the board on compliance obligations; and, as of 2026, fulfilling obligations as a Reporting Institution under AMLA 2001 to detect and report suspicious financial activity.

For a foreign-owned company where the directors and shareholders are based overseas, the company secretary is often the only person on the ground in Malaysia who has direct visibility into the company's statutory health. Choosing a competent, actively licenced professional is therefore not a cost-cutting exercise — it is one of the most consequential decisions you will make when setting up in Malaysia.

The Legal Framework: Sections 235, 236 and 241 of the Companies Act 2016

Three sections of the CA 2016 define the company secretary regime that SSM administers:

• Section 235 — Qualification: Sets out who may be appointed. A company secretary must be an individual (not a corporate entity), a Malaysian citizen or permanent resident ordinarily residing in Malaysia, aged 18 or over, who is either licensed by SSM under Section 20G of the Companies Commission of Malaysia Act (CCMA) 2001, or a member of a professional body listed in the Fourth Schedule of the CCMA 2001.
• Section 236 — Appointment and vacancy: Every company must have at least one company secretary at all times. If a vacancy arises, it must be filled within 30 days. A director of a company is expressly prohibited from simultaneously serving as the sole company secretary of that same company.
• Section 241 — Practising Certificate: From 15 March 2019, anyone who acts as a company secretary must hold a current Practising Certificate (PC) issued by SSM. Acting without a valid PC is itself an offence. The SSM administers the PC system through the e-Secretary portal at esecretary.ssm.com.my.

It is Section 241 and its subordinate legislation — the Companies (Practising Certificate for Secretaries) Regulations 2019 — that SSM updated with the new guidelines issued on 22 October 2025. These guidelines govern everything from how a secretary obtains and renews their PC, to how many Continuing Professional Education (CPE) hours they must log, to the new AMLA training obligations now embedded in the renewal process.

The October 2025 Revision: What Changed and What It Means

SSM's revised Guidelines (effective 22 October 2025) represent a substantive upgrade to the 2022 framework, with two headline changes that directly affect every company that retains a company secretary in Malaysia:

1. Tightened CPE Requirements and Renewal Enforcement

Practising Certificates are renewable for periods of 1, 2, or 3 years, and renewal requires the accumulation of a specified number of CPE (Continuing Professional Education) hours during the validity period. The minimum CPE requirement for the first renewal is 20 CPE hours. Subsequent renewals must meet proportionate CPE thresholds based on the renewal period selected — with a maximum of 20 CPE hours per year recognised from structured training/courses, and a maximum of 8 CPE hours per year from other learning activities (such as self-directed study). At least 60% of total CPE hours must come from structured training, and no more than 25% from a single category.

The revised guidelines make three key enforcement points explicit:

• No exemption from CPE: There is no circumstance under which a company secretary is exempt from completing CPE hours for renewal. Illness, sabbaticals, and periods of reduced practice do not pause the clock.
• Retroactive application: The new guidelines apply to all applications made after 22 October 2025, regardless of when the previous PC expired. A secretary whose certificate lapsed before 22 October 2025 must still satisfy the updated CPE requirements when re-applying.
• Revocation for late renewal: If a PC renewal application is not lodged in time (no later than 30 days before the expiry date), SSM's Registrar will revoke the certificate — not merely suspend it. The secretary must then start over as a new applicant, losing all accumulated standing.

2. Mandatory AMLA/CFT Training — Effective 1 January 2026

This is the single most significant new obligation introduced by the 2025 guidelines. From 1 January 2026, company secretaries whose PCs are renewed on or after that date must complete mandatory Anti-Money Laundering Act (AMLA) / Counter-Terrorism Financing (CFT) training as part of their CPE portfolio.

The legal basis is straightforward but consequential: company secretaries are formally designated as Reporting Institutions (RIs) under AMLA 2001. In that capacity, they carry a legal obligation to actively detect and report suspicious transactions, maintain customer due diligence (CDD) records, and escalate potential cases of money laundering, terrorism financing, and proliferation financing to the relevant authorities. SSM is designated as the supervisory body for company secretaries acting as RIs, and the new training requirement is SSM's mechanism for ensuring that every licensed company secretary has baseline competency in AML/CFT.

For foreign-owned companies, this matters because your company secretary is effectively your company's first line of AML/CFT compliance defence in Malaysia. When they onboard your company as a client, they are legally required to perform CDD on your directors, beneficial owners, and business activities. This is not bureaucratic box-ticking — it is a regulated obligation with criminal liability attached to failures. Choosing a secretary who is properly trained in AMLA obligations therefore protects both them and you.

Qualification Routes and Who Can Legally Act as Company Secretary

Under Section 235 of the CA 2016 and the updated guidelines, a person may act as company secretary in Malaysia only if they satisfy all of the following:

One point that catches many foreign founders off guard: a foreign national cannot be appointed as a company secretary of a Malaysian company, even if they hold a foreign chartered secretary (FCIS/ACIS) qualification, unless they have obtained Malaysian permanent residency. This is a hard statutory requirement, not a policy preference. Your CEO, CFO, or regional head of compliance based in Shanghai, Taipei, or Singapore cannot hold this role by remote appointment. You must engage a Malaysia-resident, qualified professional.

The Full Compliance Calendar: What Your Company Secretary Does — and When

Understanding the breadth of what a company secretary must do on your behalf helps explain why the quality and licencing status of the person you appoint matters so much. The table below maps the key obligations and deadlines that flow through your company secretary every year:

Every single one of these deadlines runs through your company secretary. If they are unlicenced, under-qualified, or operating with a lapsed PC, none of these filings is legally valid — and your company is in breach of the Companies Act.

Step-by-Step: How a Foreign Company Appoints a Company Secretary in Malaysia

Here is the practical process a foreign-owned Sdn Bhd must follow, from incorporation through to a fully compliant company secretary appointment:

1. Identify a qualified firm or individual. Most foreign companies engage a professional company secretarial firm rather than an individual, because firms provide continuity of service — if one secretary leaves, another qualified professional takes over without creating a vacancy. Verify the firm's credentials via the SSM e-Secretary portal (esecretary.ssm.com.my) to confirm active PC status.
2. Confirm AMLA/CFT compliance. From 1 January 2026, ask your prospective company secretary to confirm that their PC renewal included mandatory AMLA/CFT training. A reputable firm will have this documentation readily available. This is especially important for foreign-owned companies because the CDD your secretary performs on you as a client is a regulated legal obligation — not a choice.
3. Confirm membership of recognised professional body. The secretary or firm should be a member of MAICSA, MIA, MICPA, the Malaysian Bar, MACS, Sabah Law Society, or the Advocates Association of Sarawak — or hold an SSM licence under Section 20G.
4. Pass a board resolution to appoint the secretary. Even before incorporation is complete (your incorporation agent will coordinate this), a written resolution or board resolution must formally appoint the company secretary, specifying the effective date of appointment.
5. Lodge Section 58 notification via MyCoID. Within 14 days of the appointment date, the company must lodge a "Notification of Change in the Register of Directors, Managers and Secretaries" (Section 58 notification) through MyCoID, attaching a certified extract of the resolution. Your company secretary handles this filing — but the obligation is yours as a company.
6. Provide all beneficial ownership information. As part of onboarding your company, your secretary will request KYC (Know Your Customer) and UBO (Ultimate Beneficial Owner) information from all directors, shareholders, and beneficial owners holding 20% or more of shares. This is now a regulated obligation under AMLA — it is not optional and refusing or delaying it puts your secretary in breach of their obligations.
7. Set a recurring PC verification check. Diarise an annual check to confirm your secretary's PC remains valid. You can verify status directly on the SSM e-Secretary portal. If a PC lapses without renewal, your company is immediately in breach of the CA 2016.

Worked Example: A Chinese-Owned Sdn Bhd Setting Up in Kuala Lumpur in 2026

To make this concrete, consider a manufacturing group headquartered in Shenzhen that has decided to establish a 100% foreign-owned Sdn Bhd in Kuala Lumpur as its regional procurement and distribution hub. The parent company has assigned its CFO (a Chinese national based in Shenzhen) to oversee the Malaysian entity.

The Challenges This Company Faces

• The CFO cannot be the company secretary — they are not a Malaysian citizen or PR, and they do not hold an SSM Practising Certificate.
• The company's Shenzhen-based legal counsel holds a PRC law qualification — this is not a recognised professional body under Malaysia's Fourth Schedule to the CCMA 2001. They too cannot act as company secretary.
• The company wants to minimise Malaysian professional fees. It finds an apparently cheap company secretarial service online — but the firm turns out to use an individual whose PC expired in September 2025 and has not been renewed under the new guidelines. This secretary cannot legally act. All filings they produce are invalid.

The Right Approach

1. Engage a Malaysia-resident, MAICSA-accredited company secretarial firm whose PCs are confirmed current via the SSM e-Secretary portal.
2. Confirm that the firm's secretaries have completed mandatory AMLA/CFT training required from 1 January 2026 — ask for proof of CPE completion with AMLA component before signing the engagement letter.
3. Provide the secretary with full UBO disclosure — the Shenzhen parent's ownership structure, including any ultimate beneficial owner holding 20%+ of shares.
4. After the secretary lodges the Section 58 notification confirming appointment, verify that MyCoID reflects the appointment correctly within the 14-day window.
5. Budget appropriately: a reputable Malaysia company secretarial firm in 2026 charges approximately RM 1,200–RM 3,000 per year for a foreign-owned Sdn Bhd requiring additional compliance work, including UBO register maintenance and AMLA CDD. This is not a cost to be minimised — it is a risk management investment.

The total cost of getting this wrong — failed filings, director fines, potential PC revocation proceedings, and the need to retrospectively correct years of invalid statutory records — vastly exceeds the cost of doing it right from day one. We handle this end-to-end through our Sdn Bhd incorporation service, including connecting you with a vetted, AMLA-compliant company secretary.

Common Mistakes Foreign-Owned Companies Make — and How to Avoid Them

Based on the pattern of issues that arise for foreign-owned companies, here are the most common and costly company secretary mistakes:

• Appointing a secretary without verifying their PC. SSM's e-Secretary portal makes verification straightforward. Never appoint without checking. A person can claim to be a licensed secretary without holding a current PC — this is unfortunately not uncommon in the market.
• Assuming your accountant or auditor can also be your secretary. Accounting and auditing qualifications (MIA membership) do qualify a person for company secretary appointment — but they must also hold a current SSM Practising Certificate. Many accountants do not hold this separate PC. Verify specifically.
• Treating the 30-day appointment window as a soft deadline. Section 236 imposes a hard 30-day window. There is no administrative discretion. Missing it means your directors are in breach from day 31.
• Not checking PC renewal dates. If your company secretary's PC renewal date passes without a valid renewal, their certificate is revoked. They must reapply as a new applicant. Meanwhile, your company has no lawful secretary — often without anyone noticing until a filing deadline is missed.
• Failing to provide UBO information for the AMLA CDD process. From 1 January 2026, your secretary is legally obligated to carry out AML/CFT due diligence on you as a client. Refusing or delaying this information is not just inconvenient — it places your secretary in breach of their AMLA obligations and could delay or invalidate their PC renewal.
• Choosing a secretary based on price alone. The market has many providers offering very cheap company secretarial services — often RM 500–800 per year. At this price point, the service typically covers only basic SSM filings, with no active compliance monitoring, no AMLA/CFT capability, and often a very high client-to-secretary ratio. For a foreign-owned company with directors overseas, active monitoring is essential.
• Not planning for secretary changes. When a company secretary resigns or retires, a vacancy arises. If the vacancy is not filled within 30 days, the company is in breach. Always engage a firm (rather than an individual) so that continuity is automatically assured.

What to Do Next: Checklist for Foreign-Owned Sdn Bhds

Whether you are incorporating a new Sdn Bhd in 2026 or reviewing the compliance status of an existing entity, use this checklist to assess your position:

• ☐ Verify that your company secretary holds a current SSM Practising Certificate (check via esecretary.ssm.com.my).
• ☐ Confirm that your secretary's most recent PC renewal included mandatory AMLA/CFT training (required from 1 January 2026).
• ☐ Check the expiry date of the current PC and confirm renewal will be lodged no later than 30 days before expiry.
• ☐ Confirm that the Section 58 notification of your secretary's appointment is correctly lodged in MyCoID.
• ☐ Ensure your company's Beneficial Ownership (UBO) register is up to date and accurately reflects all persons holding 20%+ of shares, including foreign parent companies.
• ☐ Confirm your Annual Return is filed within 30 days of your incorporation anniversary.
• ☐ If you are incorporating a new company, engage your company secretary at the same time you begin the incorporation process — do not treat it as an afterthought.

If you are ready to incorporate a new Sdn Bhd or need to review your existing company secretary arrangements, contact our team or explore our Sdn Bhd incorporation service — which includes full company secretary sourcing, MyCoID filing, and ongoing compliance coordination for foreign-owned companies.

This article is general information only, not legal, tax or immigration advice. Policies, thresholds and official fees are set by the relevant Malaysian authorities and may change. Talk to our consultants about your specific situation.