Share registrar clients and core duties in Hong Kong

A share registrar performs the operational work that keeps a company's shareholder records accurate and supports actions such as transfers, dividend processing and shareholder communications. Because those records affect ownership rights, the registrar's duties extend beyond data entry. The SFC Code of Conduct for Share Registrars sets expectations for how the service provider treats clients and protects the integrity of the market.

Who the registrar serves

Under the Code, a share registrar provides register-maintenance and related services for clients, including companies whose shares or warrants are registered and other relevant participants described in the Code. The SFC's Listing Rules provide that only an approved share registrar may be engaged to maintain a Hong Kong register of shareholders or warrantholders, and approval is linked to membership of the Federation of Share Registrars. Identify the registrar's service relationship rather than assume it represents each shareholder as an investment adviser.

Core principles

The Code's general principles require honesty and fairness, due skill, care and diligence, adequate capabilities and resources, and regulatory compliance. A registrar should avoid conflicts where possible; if a conflict cannot be avoided, it must ensure clients are treated fairly. The registrar must also account for and safeguard client assets promptly and properly.

Management and operating controls

Senior management bears primary responsibility for appropriate conduct standards and procedures. In practice, this means maintaining reliable processes for record updates, transfer instructions, authorization, reconciliation, complaint handling, access security and escalation. A registrar should have enough trained staff and systems to carry out its obligations and support its clients' Listing Rule compliance where registry services are involved.

Why accuracy and safeguards matter

A wrongly recorded transfer or weak control over a register can interfere with voting, distributions or ownership. Procedures should make changes traceable, protect confidential information and detect inconsistent instructions. If an issue affects client assets or the integrity of records, it should be escalated under the firm's controls rather than treated as a routine clerical correction.

Exam checklist

• A registrar maintains registers and performs related share-registry services.
• The Code emphasizes fairness, competence, resources, conflict management and compliance.
• Client assets must be properly accounted for and safeguarded.
• Senior management has primary responsibility for standards and procedures.
• Do not confuse registry services with investment advice or brokerage execution.

What registry work involves

A share registrar maintains records of registered holders and performs services such as processing transfers, recording changes, responding to holder inquiries and distributing dividends or other entitlements. Because these functions affect ownership records and valuable documents, accuracy, confidentiality and secure handling matter even where the registrar does not make investment decisions. The SFC Code of Conduct for Share Registrars sets conduct expectations for registrars within its scope.

Integrity, skill and client treatment

The Code expects a registrar to act honestly and fairly, exercise due skill, care and diligence, manage conflicts and comply with applicable requirements. A registrar should have competent staff and procedures for verifying instructions and changes to the register. Conflicts can arise where the registrar serves an issuer while also handling holder requests; the firm should identify the conflict, protect confidential information and treat affected clients fairly rather than letting commercial pressure determine the result.

Protect records, securities and payment instruments

Appropriate controls should protect registers, certificates, warrants, cheques, seals, account credentials and client information from loss, fraud or unauthorized alteration. Limit access by role, authenticate instructions, record changes and preserve audit trails that show who changed what and why. When handling assets or documents for clients or registered owners, establish documented custody and distribution procedures, including dual checks for high-risk movements. A secure data system still needs tested backup, access and incident controls.

Reconciliation and error investigation

Periodic review and reconciliation can expose omitted transfers, duplicate entries, stale instructions or unauthorized changes. When a discrepancy appears, preserve the original records, verify the source instruction, identify affected holders and correct the register through controlled authorization. Do not erase the history of an error. Escalate suspected fraud or material client impact, assess whether notification is required and verify that downstream issuer, custodian or payment records have also been corrected.

Confidentiality and permitted disclosure

Holder and client data should be used only for the registrar’s authorized functions unless disclosure is authorized or legally required. Staff should verify the requester and legal basis before sharing account information or changing contact and payment details. A request from an issuer or group company does not automatically justify unrestricted access. Maintain policies for data retention, secure transfer and breach response consistent with privacy law and the Code.

Conflicts should be managed in practice

A registrar’s issuer client may ask for information or processing that affects registered holders. The registrar should define who may approve such requests, verify that the issuer has the proper authority, protect holder confidentiality and maintain a record of the decision. Where interests conflict, the Code expects fair treatment and appropriate disclosure rather than silent prioritization of the commercial client. Staff incentives and service-level targets should not encourage shortcuts in identity checks or register updates.

Business continuity protects the register

A registrar should be able to restore accurate register records after a cyber incident, system failure or site disruption. Backups need access protection and testing; a backup that cannot be restored is not an effective control. Define who can authorize recovery, how changes made during downtime are reconciled and how affected issuers and holders are informed. Continuity planning is especially important around record dates, corporate actions and payment cycles.

Key takeaway

The registrar's job is recordkeeping and registry service under controls that protect clients and market integrity. Accuracy, fair treatment, conflict management and asset safeguards are central duties.