SECP Warns Companies: Appoint Legal Adviser on Retainer, File Form-9 or Face Action

By Bilal Ahmed  |  Business Desk  |  October 23, 2026  |  Updated: October 23, 2026

If your company has paid-up capital of more than Rs20 million, the Securities and Exchange Commission of Pakistan wants a lawyer on your books — on retainer, not on call. In a statement issued on October 22, 2026, the SECP warned incorporated companies above the capital threshold to appoint at least one practising advocate as legal adviser on a retainership basis under Section 10 of the Lawyers Welfare and Protection Act, 2023, and to report the appointment to the registrar on Form-9 under Section 197 of the Companies Act, 2017. Companies that fail to do so will face action under the relevant provisions of the applicable law.

That last line is the one directors should read twice. The requirement itself is not new — the 2023 Act has carried it for some time — but the SECP has now put the market on notice that enforcement is coming. This is the regulator’s Company Law Division doing what it has been doing all year: tightening routine corporate compliance instead of waiting for problems to surface. It is the same posture visible in the SECP’s recent Corporate Intelligence Unit push against Ponzi schemes — a regulator moving from reactive to preventive oversight.

For finance directors and company secretaries, the practical question is simple: does this apply to us, and if so, what exactly do we file? The answer turns on one number — your company’s paid-up capital — and one form: Form-9. Everything else in this article is a working walkthrough of that compliance task, including the advocate’s three-company limit, which catches more firms out than most people expect.

Who Has to Comply — and Who Doesn’t

The coverage test is mechanical, and deliberately so. Section 10 applies to every incorporated company whose paid-up capital exceeds Rs20 million. That is a low bar in today’s corporate Pakistan — it sweeps in not just listed giants but mid-sized private companies, subsidiaries, and a large slice of the SME corporate sector. If your memorandum and articles show paid-up capital of, say, Rs25 million or Rs500 million, you are in. If it sits at Rs15 million, you are outside the requirement.

Two points of precision matter here. First, it is paid-up capital, not authorised capital, that counts — the shares actually issued and paid for. A company with Rs100 million of authorised capital but only Rs10 million paid up falls below the line. Second, the threshold is “exceeding” Rs20 million, so a company at exactly Rs20 million is not captured by the literal reading of the directive. That said, anyone sitting close to the line should treat compliance as cheap insurance: paid-up capital changes with every fresh issue.

What “on a Retainership Basis” Actually Means

This is the part many companies will need to rethink. The Act does not ask for a lawyer you ring when litigation lands. It requires a practising advocate retained as legal adviser — a continuing engagement in which the advocate advises the company in the performance of its functions and the discharge of its duties in accordance with law.

In practice, that means a standing retainer agreement: the advocate reviews routine corporate actions, signs off on filings, advises the board on compliance with the Companies Act and SECP regulations, and is available for the company’s day-to-day legal questions. It is closer to an in-house counsel relationship delivered externally than to a litigation counsel arrangement. Companies that already have an advocate on retainer for general advisory work are likely already compliant on this limb — but they should still check the other two limbs: the three-company cap, and the Form-9 filing.

The Three-Company Rule: the Detail That Bites

Section 10 caps a practising advocate at three such companies at the same time. The policy logic is straightforward — the legislature did not want a handful of lawyers collecting dozens of nominal retainerships and giving none of them real attention. For companies, though, the cap creates a due-diligence step before every appointment: ask your chosen advocate, in writing, how many qualifying companies they already advise.

Corporate secretaries should treat this as a standing verification, not a one-off question, because an advocate who is compliant today may take on a fourth engagement tomorrow. And firms that already retain an advocate must confirm the filing exists — a retainer without the Form-9 particulars on record is half-compliance, and half-compliance is exactly what this warning targets.

How to Comply: the Form-9 Filing

The appointment alone is not enough. The SECP directed companies to submit the particulars of the appointed legal adviser to the registrar on Form-9, under Section 197 of the Companies Act, 2017. Form-9 is the statutory form for intimating changes in company particulars to the registrar, and it is the document that puts your compliance on the regulator’s record.

A sensible compliance sequence looks like this:

1. Check your paid-up capital against the Rs20 million threshold. Use the figure in your latest filed accounts, not your authorised capital.
2. Verify or appoint an advocate. If you have one, confirm in writing that they are a practising advocate, engaged on retainer, and within the three-company limit. If not, engage one through a retainer agreement.
3. File Form-9 with the registrar of the region where your registered office is situated, reporting the appointment under Section 197 of the Companies Act, 2017.
4. Keep proof of filing with your statutory records — the acknowledgement is your shield if questions come later.

Note the nuance: the SECP’s October statement specifies Form-9. Older enforcement orders sometimes reference Form 29 for legal-adviser changes, but per the current directive, Form-9 is the form to file. Follow the regulator’s stated form, not the history.

What Happens if You Ignore It

The SECP’s language is unambiguous: it will initiate action against non-compliant companies under the relevant provisions of the applicable law. What the statement does not do is name the provisions, the penalty amounts, or a filing deadline — and that silence is worth reading carefully.

It means the enforcement pathway exists but the calendar is not yet published. Companies should not read “no deadline stated” as “no rush.” Regulators issue this kind of warning precisely because the next step is enforcement, and the companies that scramble after a show-cause notice lands are the ones that pay the highest price — in penalties, in professional embarrassment, and in board time.

The broader context supports the urgency reading. Pakistan’s corporate regulator has been systematically tightening routine compliance through 2026, from anti-fraud monitoring to digitised FBR disposal procedures elsewhere in the state machinery. When regulators coordinate like this, follow-through is the norm, not the exception. And with capital markets active — the government raised Rs660 billion in its October T-bill auction — a company facing an SECP action order will find it noticed.

What to Watch Next

Three developments are worth tracking. First, whether the SECP publishes a filing deadline or a grace window — the announcement says nothing, but enforcement calendars often follow warnings like this. Second, whether the Commission issues guidance on how the three-company limit will be verified; a central register of legal-adviser appointments would be the obvious mechanism. Third, watch for the first adjudication orders: they will set the penalty benchmark and tell the market how seriously to take the threat.

For now, the action item is narrow and achievable: check the capital figure, check the advocate, file Form-9. It is one of the cheaper compliance tasks on any company’s list — which is exactly why there is no good reason to let it become an expensive one.

Frequently Asked Questions