Corporate Governance in Malaysia

Corporate governance in Malaysia sets out how companies are directed, controlled and held accountable to their shareholders and other stakeholders. It is not simply a compliance exercise under the Companies Act 2016. It is the framework that protects a company from unnecessary legal exposure, supports fair treatment of shareholders and builds the kind of trust that banks, investors and business partners look for before committing to a relationship. The specific obligations differ depending on whether a company is publicly listed or privately held, but the underlying principles apply across the board.

This article explains the legal duties directors and shareholders carry, the role the Malaysian Code on Corporate Governance (MCCG) plays for listed and private companies, and the practical steps a Malaysian business can take to strengthen its governance practices.

What Is Corporate Governance in Malaysia?

Corporate governance in Malaysia is the system of rules, relationships and processes that determine how a company is directed and controlled. It covers three main areas:

• Legal duties: statutory obligations placed on directors and companies under the Companies Act 2016.
• Regulatory oversight: enforcement by the Companies Commission of Malaysia (SSM) for all registered companies, and by the Securities Commission Malaysia (SC) and Bursa Malaysia for public listed companies.
• Best practice standards: voluntary guidance set out in the MCCG, which public listed companies are expected to adopt on a “apply or explain an alternative” basis.

Every company registered in Malaysia, from a small private limited company to a public listed company, is bound by the Companies Act 2016. The MCCG adds a further layer of expected practice for listed companies, though many private companies choose to adopt parts of it voluntarily.

The Legal Framework Governing Malaysian Companies

Four bodies of law and regulation shape corporate governance in Malaysia:

1. Companies Act 2016: sets out directors’ duties, shareholder rights, company secretary requirements, statutory filings and financial reporting obligations for all companies.
2. Companies Commission of Malaysia (SSM): registers companies, enforces the Companies Act, and receives annual returns and financial statements.
3. Securities Commission Malaysia (SC) and Bursa Malaysia: regulate public listed companies, including listing requirements on board composition, audit committees and related-party transactions.
4. Malaysian Code on Corporate Governance (MCCG): issued by the SC and last updated in 2021. As of 2026, the SC is reviewing Malaysia’s corporate governance framework and has sought public feedback on proposed enhancements.

Roles and Responsibilities in Corporate Governance

Duties of Directors Under the Companies Act 2016

Directors of Malaysian companies carry statutory duties that apply regardless of company size:

• Acting in good faith and in the best interests of the company.
• Exercising reasonable care, skill and diligence.
• Avoiding and disclosing conflicts of interest.
• Keeping the company’s accounting and other records in proper order.
• Not incurring debts when there are reasonable grounds to believe that the company will be unable to repay them as they fall due.

A director who breaches these duties can face personal liability, disqualification from holding future directorships, fines or imprisonment, depending on the severity of the breach. These duties apply to directors of private companies just as much as to directors of public listed companies.

Shareholders’ Role and Rights

Shareholders do not manage the company day to day, but they hold significant rights, including the right to:

• Vote on key resolutions at general meetings.
• Receive dividends in proportion to their shareholding.
• Access the company’s financial statements and statutory records.
• Approve major decisions, such as changes to the company’s constitution or certain related-party transactions.

Clear communication between the board and shareholders, particularly around financial performance and major decisions, reduces the risk of disputes and supports long-term confidence in the company.

The Board of Directors and Board Committees

The board is collectively responsible for the company’s strategic direction and oversight of management. For public listed companies, Bursa Malaysia’s Listing Requirements make an audit committee mandatory, and the MCCG recommends that companies also set up nomination and remuneration committees, with a majority of independent directors on each. Private companies are not required to form these committees, but doing so voluntarily, even in a simplified form, is a practical way to strengthen internal oversight as a business grows.

Core Principles Behind Corporate Governance in Malaysia

Regardless of company size, governance frameworks in Malaysia are built on a consistent set of principles:

• Accountability: directors and management answer for their decisions.
• Transparency: timely and accurate disclosure to shareholders and regulators.
• Fairness: equitable treatment of all shareholders, including minority shareholders.
• Responsibility: directors act within their legal powers and in the company’s interest.
• Independence: sufficient separation between management and oversight functions, particularly on the board and its committees.

The Malaysian Code on Corporate Governance (MCCG): What Businesses Should Know

The MCCG is issued by the Securities Commission Malaysia and sets out best practices for governance, covering board leadership, director selection, risk oversight, related-party transactions and sustainability reporting. It was last revised in 2021, and the SC is currently reviewing Malaysia’s corporate governance framework as part of the process for the next MCCG revision. The review includes areas such as board effectiveness, technology and AI governance, risk oversight and stakeholder engagement. 

The MCCG adopts an “apply or explain an alternative” approach for public listed companies. A listed company is expected to apply the recommended practices or explain how it has adopted an alternative approach in its corporate governance report. This provides companies with flexibility to adopt governance practices that are appropriate to their circumstances while maintaining transparency and accountability. 

Private companies in Malaysia are not required to comply with the MCCG. Many still adopt selected MCCG practices voluntarily, particularly when seeking bank financing, external investment or larger corporate clients, to demonstrate sound management and build credibility.

Compliance Requirements for Private Companies and SMEs

Private companies and SMEs are generally not subject to the MCCG, but they remain subject to applicable requirements under the Companies Act 2016. Common compliance obligations include:

• Appointing a licensed company secretary within the timeframe set by the Act.
• Maintaining statutory registers, including registers of members, directors and charges.
• Filing annual returns and financial statements with the SSM.

• Holding an annual general meeting (AGM) where required under the Companies Act 2016 or the company’s constitution.
• Keeping accounting records sufficient to explain the company’s transactions and financial position.

Missing these obligations can result in penalties for the company and its directors, including late filing fees and, in more serious cases, prosecution.

Governance Requirements: Public Listed Companies vs Private Companies

The Role of Corporate Secretarial and Compliance Support

Meeting these obligations, from statutory filings to board minute-keeping and directors’ duty compliance, takes ongoing attention. Many Malaysian companies engage a corporate secretarial and compliance provider to:

• Manage SSM filings, annual returns and statutory register updates.
• Advise directors on their duties and on decisions that carry compliance implications.
• Prepare and organise board and shareholder meetings, including notices, minutes and resolutions.
• Flag related-party transactions, conflicts of interest or other matters that need board attention before they become compliance problems.

For growing private companies, this support closes the gap between what the Companies Act requires and what an internal team, often without a dedicated compliance function, has time to manage.

Common Corporate Governance Risks for Malaysian Companies

Several recurring risks affect Malaysian companies of all sizes:

• Concentrated ownership: many Malaysian companies, including listed ones, have controlling shareholders or family ownership structures, which can create tension between majority and minority shareholder interests if oversight is weak.
• Related-party transactions: transactions between a company and parties connected to its directors or major shareholders need clear disclosure and independent review to avoid conflicts of interest.
• Board independence in practice: appointing independent directors is one step, but genuine independence depends on whether those directors have the information, time and willingness to challenge management decisions.
• Inconsistent internal controls: smaller companies in particular can lack documented approval processes, exposing the business to fraud, error or disputes between directors and shareholders.
• Late or incomplete statutory filings: missed SSM deadlines or incomplete statutory records are a common and avoidable source of penalties.

Building Strong Governance Practices: Practical Steps

Malaysian businesses looking to strengthen governance, whether preparing for growth, external investment or eventual listing, can start with the following:

1. Put board roles and decision-making authority in writing, even in a simple board charter.
2. Separate the roles of chairman and managing director or CEO where the business is large enough to support this.
3. Set up an audit function or, at minimum, an independent review of financial statements, even before it becomes a legal requirement.
4. Keep statutory registers and accounting records current and reviewed on a set schedule, not only at filing deadlines.
5. Train directors, particularly new appointees, on their statutory duties under the Companies Act 2016.
6. Review related-party transactions and conflicts of interest at board level before they proceed, not after.

Conclusion

Corporate governance in Malaysia rests on the Companies Act 2016 for every registered company, with the MCCG adding a further layer of expected practice for public listed companies. Directors carry personal legal duties regardless of company size, and shareholders hold real rights to information and a say in major decisions. Private companies and SMEs are not required to follow the MCCG, but building sound governance habits early, clear board processes, accurate statutory records and proper handling of related-party transactions, positions a business for growth, investment and, where relevant, an eventual listing.

Frequently Asked Questions

What are the 7 principles of corporate governance?

The seven principles commonly cited in corporate governance frameworks are accountability, fairness, transparency, independence, responsibility, discipline and social responsibility. In the Malaysian context, these principles appear across the Companies Act 2016’s directors’ duties and the MCCG’s best practices, though the MCCG itself is organised around broader pillars rather than a list of exactly seven separate principles.

Is the MCCG compulsory in Malaysia?

No. The MCCG is not law and is not compulsory in the way the Companies Act 2016 is. It applies formally to companies listed on Bursa Malaysia, which must report their adoption of MCCG practices on a “apply or explain an alternative” basis under the Listing Requirements. Private companies and SMEs are not required to comply with the MCCG at all, though many adopt parts of it voluntarily to strengthen their governance credentials with banks, investors or larger business partners.

What are the four pillars of corporate governance?

The four pillars most often referenced are accountability, transparency, fairness and responsibility. Some frameworks add independence as a fifth pillar. These pillars underpin both the Companies Act 2016’s directors’ duties and the MCCG’s recommended practices, and apply in substance to every Malaysian company, whether or not it is legally required to follow the MCCG.

What are the major corporate governance issues in Malaysia?

Regulatory monitoring by the Securities Commission Malaysia has consistently flagged a few recurring issues. Concentrated or family-controlled ownership structures can weaken protections for minority shareholders where oversight is not independent. Related-party transactions and conflicts of interest need closer disclosure and board scrutiny in many companies. Adoption of certain MCCG practices, such as detailed remuneration disclosure and board diversity targets, remains inconsistent among listed companies even where overall MCCG adoption is strong. Regulators have also flagged emerging oversight gaps around technology, cybersecurity and sustainability governance as areas boards will need to address as the MCCG itself is revised.