Singapore VCC insights

Beneficial Ownership Register Privacy: What Singapore, the BVI, Cayman, Jersey and the UAE Let Others See

By VCC Editorial Team · Published 7 November 2026

Short answer: In Singapore, beneficial ownership data is held privately and shared only with officers, service providers and public authorities. ACRA’s central register of controllers is closed to the public by statute, and a VCC’s register of beneficial owners under MAS Notice VCC-N01 has no public inspection right. The BVI, Cayman, Jersey and onshore UAE each draw the line differently.

For a family that holds wealth through companies, funds and trusts in several jurisdictions, beneficial ownership register privacy is now a practical question rather than a theoretical one: who, outside the family and its advisers, can find out that a particular person owns a particular entity? This article sets out what Singapore law requires of an ordinary company and of a variable capital company (VCC), how the Personal Data Protection Act 2012 (PDPA) interacts with those registers, and how access works in the British Virgin Islands (BVI), the Cayman Islands, Jersey and the onshore United Arab Emirates. Every rule cited was checked on official sites on 7 November 2026.

This article is general information only and is not legal, tax or immigration advice. For matters needing legal advice, we work with a panel of experienced Singapore law firms.

Who can see the beneficial owners of a Singapore company?

Only the company’s own officers, its corporate service provider and law enforcement or other public agencies. Neither the company’s private register nor ACRA’s central copy is open to the public, and shareholders who are not officers cannot inspect it either.

Part 11A of the Companies Act 1967 requires every company, foreign company and limited liability partnership (LLP) that is not exempt to keep a register of registrable controllers (RORC) under section 386AF. ACRA’s guidance describes the controllers recorded there as people or entities with an interest in more than 25% of the shares or voting power, or with significant control.

The same information is lodged with ACRA’s central register under section 386AN. Since 16 June 2025, section 386AN(5) has stated that the Registrar must not disclose that central register, or make it available for inspection, to any member of the public, and section 386AN(6) allows disclosure only of prescribed information to prescribed persons in prescribed circumstances. ACRA’s own guidance on the central RORC puts it plainly: members of the public cannot view or buy RORC information. Late filing exposes the company and officers in default to a fine of up to S$25,000.

The gap a family should notice is the register of members. ACRA’s VCC guidance draws the contrast itself: unlike companies, VCCs do not need to share their member lists with the public. If a family member holds shares directly, that name is visible. Privacy over the controller layer does not hide the shareholder layer. Our sister site explains how the RORC sits alongside the other company registers in its guide to the Register of Registrable Controllers.

How does a VCC’s register of beneficial owners differ?

A VCC keeps its beneficial owner register under an anti-money laundering notice from the Monetary Authority of Singapore (MAS), not under Part 11A, and the VCC Act also keeps its register of members out of public view. For a family fund, both layers are therefore private.

Section 84 of the Variable Capital Companies Act 2018 empowers MAS to issue directions to VCCs for the prevention of money laundering, terrorism financing and proliferation financing. MAS Notice VCC-N01, last revised on 30 June 2025, is that direction. Paragraph 7.17 requires a VCC to maintain an up-to-date register of its beneficial owners, defined as the natural persons who ultimately own or control the VCC. Paragraph 7.18 requires the register to be kept at the VCC’s registered office, the registered office of its manager or that of its eligible financial institution (EFI). Paragraph 7.19 lists the minimum contents: full name and aliases, an identification number, residential address, date of birth, nationality, and the dates on which the person became and ceased to be a beneficial owner. The Notice contains no right of public inspection.

The register of members is governed by sections 81 and 82 of the VCC Act. Section 82(1) obliges a VCC, despite any duty of confidentiality, to provide register information on request to its manager, the custodian of a non-umbrella VCC, a public authority enforcing written law, or a person entitled to inspect under a court order. Under section 82(2), a member may see only the part of the register relating to that member. Nothing in section 82 gives the public a right of inspection. ACRA’s VCC guidance confirms that, unlike companies, VCCs do not share their member lists with the public, although public authorities can ask to see them.

Section 84(4) makes contravention of a direction an offence carrying a fine of up to S$1 million, and section 85 allows MAS to inspect a VCC’s books “under conditions of secrecy”. Our earlier article on VCC AML/CFT obligations and beneficial owner records covers the EFI’s role in keeping this register accurate.

Where does the PDPA fit in for a family office?

The PDPA governs how a private organisation, including a single family office company or a VCC’s service providers, handles the personal data in these registers. It does not override a statutory duty to keep or disclose them.

Section 4(6)(b) of the Personal Data Protection Act 2012 provides that other written law prevails where it is inconsistent with the PDPA’s data protection Parts, so a lawful request under the Companies Act or the VCC Act is not blocked by consent rules. Section 4(1)(c) also takes public agencies outside those obligations. What the PDPA does regulate is everything around the register:

• Protection: under section 24, the organisation must protect the register and the identity documents behind it, whether held in-house or by a corporate secretary or administrator.
• Transfers abroad: section 26 prohibits transferring personal data outside Singapore except in accordance with the prescribed requirements for comparable protection. A copy of the register emailed to a family adviser in London or Dubai is a transfer.
• Breaches: under section 26D, a notifiable breach must be reported to the PDPC as soon as practicable and no later than 3 calendar days after the organisation assesses it as notifiable. Our guide to containing a personal data breach affecting a VCC walks through that assessment.
• Penalties: section 48J allows a financial penalty of up to 10% of annual Singapore turnover for an organisation with turnover above S$10 million, and up to S$1 million in any other case.

Note one boundary. Section 4(5) excludes business contact information from most PDPA obligations, so a director’s office address and work email do not attract the same protection as a principal’s residential address and passport number in the controller register.

Which hub offers the strongest beneficial ownership register privacy?

On the official texts checked, Singapore and onshore UAE keep central beneficial ownership data closed to the public, Jersey limits it to regulated firms doing due diligence, and the BVI and Cayman allow access to applicants who show a legitimate anti-money laundering interest. No hub offers secrecy from regulators, banks or tax authorities.

Hub and register	Who can access beneficial ownership data	Source checked
Singapore company: private RORC and ACRA central register	Company officers, the corporate service provider, and public agencies; no public access (s 386AN(5))	Companies Act 1967, Part 11A; ACRA central RORC guidance
Singapore VCC: register of beneficial owners and register of members	Beneficial owners: kept by the VCC, manager or EFI under VCC-N01, no public inspection right. Members: manager, custodian, public authorities, court order holders, members for their own entries	MAS Notice VCC-N01, paras 7.17 to 7.24; VCC Act, s 82
British Virgin Islands: Register of Beneficial Ownership	Under the policy published on 23 June 2025, a party with a legitimate AML, CFT or CPF purpose may request information on individuals holding 25% or more, through the VIRRGIN platform; the company is notified and may object, and owners may apply for exemption	Government of the Virgin Islands press release, 23 June 2025
Cayman Islands: search platform under the Beneficial Ownership Transparency Act, 2023	Journalists and academic researchers, AML civil society organisations, and persons in an actual or potential business relationship with the entity, each with a legitimate AML or terrorist financing interest; subject to access restriction orders	Legitimate Interest Access Regulations, 2024 (SL 47 of 2024), regs 3 to 5
Jersey: Obliged Entity Beneficial Owner (OEBO) register	From 24 February 2025, regulated firms performing customer due diligence only; misuse is a criminal matter. Directors and other significant persons are public	Jersey Financial Services Commission guidance, 20 February 2025
UAE (onshore, excluding financial free zones): Real Beneficiary Register	The Ministry of Economy and the Registrar may not disclose it without the beneficial owner’s written approval, except under the Resolution’s disclosure duties, AML law and international agreements; shared with competent authorities on request	Cabinet Resolution No. (109) of 2023, Articles 3, 16 and 17

Three qualifications apply to the table. First, the BVI government said its policy would be implemented after a transitional period, so confirm the access route is live before relying on it either way. Second, the Cayman regulations are cited as made in 2024; confirm the current consolidated text and fees with Cayman counsel. Third, Jersey’s government consulted between 31 October 2025 and 30 January 2026 on extending access to persons with a legitimate interest, so its position may move. Financial free zones, such as the DIFC and ADGM, are excluded from the UAE onshore resolution by its Article 3.

Does private mean the family’s ownership stays unknown?

No. A private register keeps names away from the public, competitors and the press. It does not keep them away from the parties a family deals with.

Every bank, custodian and fund administrator runs its own customer due diligence and asks for the ownership chart directly, and a VCC’s EFI may hold the register itself. Treat beneficial ownership register privacy as protection against unsolicited exposure, not as a way to hide who stands behind a structure. A nominee arrangement does not change this: Part 11A looks through nominees, and Singapore companies also keep registers of nominee directors and nominee shareholders under sections 386AKA and 386ALA.

Confidentiality is better built through governance: who holds shares, how sub-funds are segregated, and who receives which reports. Our earlier piece on the VCC for private wealth, succession and confidentiality covers those design choices, and why there is no public list of family offices in Singapore explains what MAS does and does not publish about single family offices.

How should a family office handle a request for register data?

Verify who is asking and on what legal basis, then disclose the minimum required through a secure channel and record it. The PDPA duties apply to every step even when the disclosure itself is mandatory.

1. Identify the requester through a known channel, not the contact details in the request.
2. Classify the request: a public authority, a court order, a member asking about its own entry, a bank doing due diligence, or a counterparty.
3. Match it to the legal basis. For a VCC’s register of members, check it falls within section 82; for a company’s controllers, remember the public has no right of access at all.
4. Limit the disclosure to what the requester needs, and confirm whether redacted or summary information will do.
5. If the recipient is outside Singapore, check that the transfer meets the PDPA section 26 requirements.
6. Send through an approved secure channel and keep a record of what was sent, to whom, when and why.

Our sister site works through a live example in a bank requesting a VCC member register.

Frequently asked questions

Can a journalist obtain the beneficial owners of a Singapore company?

No. Section 386AN(5) of the Companies Act 1967 prohibits the Registrar from disclosing the central register of controllers to members of the public, and the company’s own register is not open to inspection by the public either.

Does a Singapore VCC file its beneficial owners with ACRA’s central register?

ACRA’s central register covers companies, foreign companies and LLPs. A VCC keeps its register of beneficial owners under MAS Notice VCC-N01, at its registered office, its manager’s office or its EFI’s office.

Is a BVI company’s beneficial ownership now public?

Not to the general public. The BVI policy published on 23 June 2025 allows requests only for a legitimate AML, CFT or CPF purpose, limited to holders of 25% or more, with notice to the company and a right to object.

Does the PDPA let a family office refuse a lawful request from a Singapore authority?

No. Section 4(6)(b) of the PDPA gives other written law priority where there is inconsistency, and public agencies are outside the PDPA’s data protection obligations.

Need help with this? Call, SMS or WhatsApp +65 8501 7133, or email hello@rafflescorporateservices.com. Raffles Corporate Services works with a panel of corporate and employment law firms; this article is general information, not legal advice.

Last reviewed: 7 November 2026. The Editorial Team, Variable Capital Companies Act.