Fund compliance in Singapore: regulation, controls and reporting

Compliance responsibilities

Fund compliance covers the legal, regulatory and conduct requirements that apply to a fund management company’s activities. In Singapore, MAS supervises fund managers within the applicable licensing framework. A compliance programme translates those obligations into governance, controls, monitoring and reporting procedures.

Purpose of the compliance framework

A compliance framework identifies applicable obligations, assigns responsibility and records how the firm meets them. Its purpose includes investor protection, financial-crime prevention and clear oversight of fund operations.

Safeguarding Investors and Stability

Governance standards and internal controls address the risk of financial mismanagement. They give the board and senior management a basis for reviewing conduct, responding to failures and protecting investors.

Cross-border reporting

International reporting frameworks, including FATCA and the Common Reporting Standard (CRS), affect funds with cross-border investors. Managers and their providers need clear processes for investor information, classification and reporting.

Mitigating Risks

AML/CFT controls address money-laundering and terrorism-financing risks through due diligence, monitoring and reporting. Their effectiveness depends on implementation and continuing review.

The Regulatory Framework Governing Compliance

The applicable framework depends on the firm’s activities and licensing status. The principal legislation and MAS instruments are outlined below.

Securities and Futures Act (SFA)

The SFA sets licensing and conduct requirements for fund management companies.

Financial Advisers Act (FAA)

The FAA regulates financial advisory services to prevent conflicts of interest and safeguard investors from misrepresentation.

AML/CFT Guidelines

These guidelines enforce robust Know Your Customer (KYC) and reporting measures, aiming to prevent money laundering and terrorism financing.

MAS Notices and Circulars

MAS regularly issues directives on risk management, cybersecurity, and compliance with Environmental, Social, and Governance (ESG) standards to help FMCs stay aligned with evolving regulatory expectations.

Core Responsibilities of Fund Compliance

The compliance programme should connect each applicable obligation to an accountable person, a documented procedure and a review process.

Licensing and Registration

A company carrying on fund management generally requires a CMS licence unless a specific exemption applies. A licensed manager and an exempt entity have different regulatory statuses. The RFMC registration regime was repealed on 1 August 2024. Directors and key personnel remain subject to the applicable fit-and-proper requirements.

Risk Management

FMCs must implement robust frameworks to mitigate risks such as market volatility, operational failures, and regulatory non-compliance. Regular stress testing and scenario analyses are mandated to ensure resilience.

Client Protection

Comprehensive AML and KYC policies are integral to investor protection. Enhanced Due Diligence (EDD) is applied to politically exposed persons (PEPs) and other high-risk clients, while transaction monitoring systems identify and report suspicious activities.

Governance and Internal Controls

Independent decision-making boards and clearly defined roles for compliance officers are crucial for sound governance. Compliance manuals tailored to each business model guide employees on operational and regulatory obligations.

Financial Reporting and Transparency

FMCs are required to submit annual audited financial statements and disclose key metrics, including fund performance, risks, and fee structures, to maintain investor trust.

Cybersecurity

MAS’s Technology Risk Management (TRM) guidelines mandate robust cybersecurity measures to protect sensitive data and ensure resilience against breaches. Annual IT audits further strengthen these defenses.

ESG Compliance

To align with the global emphasis on sustainability, FMCs must meet MAS’s standards for ESG fund labeling and reporting. These measures help prevent greenwashing and ensure transparency in sustainability-driven investments.

Technology in compliance operations

Regulatory technology supports repeatable compliance tasks, including data collection, screening and monitoring. Its role should be defined within the firm’s control framework.

RegTech Solutions

RegTech tools simplify client onboarding, KYC verification, and real-time transaction monitoring, reducing the operational burden on compliance teams.

Advantages

Automation can reduce manual processing and help teams identify exceptions. Assess the quality of the underlying data, the reliability of alerts and the process for investigating unresolved cases.

Assessing compliance effectiveness

Assess a compliance programme through the quality of its controls, reporting and response to identified issues. The sections below consider its implications for investors, counterparties and cross-border operations.

Investor Trust

Clear reporting helps investors understand fund performance, risks, fees and the manager’s responsibilities.

Market Credibility

Documented adherence to applicable requirements supports counterparty due diligence and gives the firm evidence of how it operates.

Global Competitiveness

Cross-border operations require coordination between Singapore obligations and the rules applicable to overseas investors and activities.

Implementation priorities

Start with the firm’s activities and applicable requirements. Assign responsibility for each control, maintain evidence of monitoring and review, and address exceptions promptly. Technology can support this work, but governance, staff capability and oversight determine how the programme operates in practice.

Frequently asked questions

FAQs

1. What is fund compliance in Singapore?
Fund compliance in Singapore refers to the regulatory and ethical frameworks that Fund Management Companies (FMCs) must follow to ensure legal and transparent operations. It is overseen by the Monetary Authority of Singapore (MAS) to safeguard investors and maintain financial stability.

2. Why is fund compliance important? Compliance addresses investor protection, financial-crime risks and the quality of governance and reporting. It gives the firm a documented basis for meeting applicable obligations and responding to failures.

3. What regulations govern fund compliance in Singapore?
Fund compliance is governed by several frameworks, including the Securities and Futures Act (SFA), the Financial Advisers Act (FAA), MAS AML/CFT Guidelines, and various Notices and Circulars that provide specific directives on risk management, cybersecurity, and ESG compliance.

4. What are the core responsibilities of Fund Management Companies (FMCs) under compliance?
Key responsibilities include:

• Holding an MAS Capital Markets Services licence for fund management, or qualifying for a licensing exemption such as a single family office managing only its own family's assets.
• Implementing AML/KYC policies.
• Managing risks through stress testing and internal audits.
• Ensuring accurate financial reporting and investor transparency.
• Following cybersecurity and ESG compliance guidelines.

5. How does RegTech support fund compliance? Regulatory technology supports tasks such as client onboarding, KYC verification and transaction monitoring. It can reduce manual work and improve the consistency of records, subject to reliable data, appropriate configuration and oversight.

6. What are the benefits of a sound compliance framework? It provides a basis for investor reporting, counterparty due diligence and oversight of regulated activities. Its effectiveness depends on the controls being implemented, monitored and updated.

7. How does compliance relate to FATCA, CRS and ESG reporting? These frameworks address different reporting and disclosure obligations. Firms should identify which requirements apply to their activities and funds, and maintain the information needed to meet them.

8. What cybersecurity measures must FMCs follow?
FMCs must adhere to MAS’s Technology Risk Management (TRM) guidelines, which include implementing robust data protection measures, conducting annual IT audits, and ensuring resilience against cyber threats.