How should a company respond to an SECP show-cause notice?

A show-cause notice issued by the Securities and Exchange Commission of Pakistan (SECP) should be treated as the commencement of a defined regulatory proceeding, not as a final determination of wrongdoing. The recipient must identify the statutory power being exercised, the alleged facts, the legal requirement said to have been contravened, the person or company against whom liability is asserted and the relief or penalty the Commission may impose. A generic denial that the company has complied with all laws rarely provides an adequate regulatory defence.

SECP regulates activities under several distinct statutes, including the Companies Act, 2017, Securities Act, 2015, Futures Market Act, 2016, insurance legislation and rules for non-banking financial institutions and other intermediaries. A notice under one statute cannot safely be answered by quoting a procedure or defence from another. The legally correct response is a disciplined paragraph-wise submission supported by records, addressed to the actual allegations and requested within the prescribed time.

Read the notice as a legal instrument

Record the date of issue, date and mode of service, authority or officer signing, relevant statutory sections, regulations cited, alleged events, required response date and scheduled hearing. Separate formal requests for information from notices alleging a specific contravention and proposing enforcement action.

An officer may refer to a licensing condition, a reporting obligation or a statutory duty of directors. The company's first task is to identify the operative text in force during the period in question. A subsequently amended regulation may not necessarily describe the earlier obligation, and a consultation paper is not equivalent to law that has been notified and commenced.

The response should not repeat the notice's language without testing it. Prepare a table matching each allegation to the instrument, date, required conduct, available evidence and proposed answer. Where the notice is ambiguous or omits material relied upon, consider seeking the relevant record or clarification while preserving the response deadline.

Establish who the notice is actually against

A regulator may address a notice to the company, chief executive, directors, compliance officer or other responsible persons. These are not interchangeable respondents. Determine whether the statutory provision creates direct responsibility for the regulated entity, responsibility for a designated officer or possible personal exposure for management.

A company cannot assume that every director is automatically liable merely because the board supervised business operations. Equally, directors and officers cannot safely deny responsibility only by stating that a designated compliance employee handled filings. The statutory duty, delegation, knowledge and actual conduct must be examined.

Where several respondents are named, consider whether separate replies are necessary to protect their individual positions. A single company response should not make admissions of personal conduct on behalf of individuals without proper instructions and review.

Preserve records before drafting explanations

Issue an appropriate internal document-preservation direction. Relevant material may include licences, statutory filings, board and committee minutes, emails, regulatory portal acknowledgements, correspondence, internal compliance reports, account statements, customer complaints, marketing material and prior SECP observations.

Documents should be kept in their original forms and with reliable dates and metadata where relevant. An after-the-event reconstruction can be useful as an explanatory chronology, but it must not be presented as a contemporaneous record. Deleting messages or retroactively altering minutes can cause far greater difficulty than the underlying filing error.

Appoint a responsible coordinator for the response and preserve a log of which person supplied each document. This is particularly important if the notice concerns representations made in a licence application, beneficial ownership, director eligibility or regulated transactions.

Test jurisdiction and the statutory ingredients

For each alleged contravention, ask whether the Commission or named official has the power invoked, whether the respondent is within the statutory class to which the obligation applies, and whether the conduct described satisfies each legally necessary element. Regulatory powers can depend on the status of the entity or the particular period involved.

A company may have been incorporated but never commenced the regulated activity alleged. A person may have resigned before a specific act, or a filing obligation may have arisen only after a defined triggering event. Such facts are potentially important but should be supported by contemporaneous evidence.

Do not assume that an administrative defect is automatically fatal or that every procedural objection guarantees the proceedings will be struck down. Materiality, prejudice and the available statutory procedure should be analysed. A challenge based solely on form, without engaging with the substantive record, may be strategically weak.

Answer paragraph by paragraph

A professional response should follow the notice's numbered allegations and state, in each case, whether the relevant fact is admitted, denied or requires qualification. Identify the accurate position and cite the annexure establishing it. Where compliance occurred late, distinguish the fact of lateness from the company's explanation or any statutory basis for mitigation.

Avoid sweeping admissions. If a director lacked the specified experience, describing the person as generally competent does not answer the regulatory criterion. If a return was filed on a particular date, provide the portal acknowledgement rather than insisting without proof that it had been submitted earlier.

The reply should distinguish legal submissions from factual representations. A statement such as 'the company has not conducted securities-advisory business' is a factual claim requiring a review of the services, promotions and clients. A submission that certain activity does not fall within a licensing definition is an interpretive legal argument requiring analysis of the statute and regulations.

Do not substitute remedial undertakings for a legal answer

Corrective action can be valuable, but the scope and legal effect of a proposed undertaking must be clear. SECP may require a company to appoint an eligible officer, cease an unlicensed activity, amend governance, improve compliance or rectify information. Implementing a cure does not necessarily extinguish all exposure for an earlier contravention.

An undertaking to cease a business should state precisely which business, by what date and with which corporate approvals. If an associated company advertised investment advice without a required licence, the undertaking should be capable of verification through amended service descriptions, discontinued activity and relevant records.

At the same time, the company should not promise actions it cannot lawfully or practically deliver. An open-ended pledge to ensure absolute compliance with every law may add little and create uncertainty. A more credible proposal links each remedial step to the specific concern raised by the Commission.

Analyse procedural fairness and hearing rights

A meaningful opportunity to respond may require adequate disclosure of the material allegations, a reasonable opportunity to present evidence and consideration by the competent decision-maker. The actual statutory procedure determines how these rights operate. The company should request inspection of material relied upon where necessary rather than submit an incomplete reply and assume the defect can be cured later.

Prepare for an oral hearing by identifying the issues that remain genuinely disputed. Counsel should carry a properly indexed hearing bundle and be ready to direct the officer to the exact record, regulatory provision and requested relief. Submissions should be concise enough to make the legal point without sacrificing necessary detail.

Keep a record of hearing notices, adjournments, questions and written submissions. If additional information is requested orally, confirm the request and timeframe in writing where appropriate.

The role of board resolutions and corporate authority

The response may need formal company authorisation, especially where it contains undertakings, acknowledgements or commitments to reorganise management. Review the articles and delegations to confirm who may instruct counsel and sign the regulatory correspondence.

A compliance officer's title does not necessarily empower that officer to make every admission or bind the board to a major restructuring. A director who signs without authority may create a separate corporate issue. Obtain a suitable resolution or existing delegated authority and retain it in the file.

Where the same issue has generated internal disagreement between shareholders or officers, legal advice should address the identity of the client and potential conflicts before separate individuals' positions are included in one submission.

Consider evidence of compliance and the materiality of the breach

A missed statutory return, failure to retain a document, unlicensed regulated activity and misstatement in a capital-market application do not necessarily carry the same legal consequences. The response should identify the nature and seriousness of the matter rather than treat all observations as clerical.

Evidence may demonstrate that the substance of a regulatory condition was satisfied notwithstanding an inaccurate form, or that a particular obligation did not apply at the relevant time. Alternatively, the record may establish a breach that is difficult to contest. In that event, an accurate explanation, prompt remediation and properly framed mitigation may be more persuasive than an unsustainable denial.

The company should also assess whether other filings, disclosures or clients may be affected. A reply narrowly correcting one form while leaving the underlying system unchanged can invite repeated observations.

Distinguish an observation letter, an order and an appeal

A preliminary observation from a licensing desk does not have the same legal effect as a show-cause notice, refusal of a licence, penalty order or direction suspending an existing authorisation. The available response and appellate route depend on the specific decision and the law under which it was made.

Once a final order is issued, obtain the certified order where necessary and calculate the correct appeal or review period immediately. Some SECP decisions may involve specialist appellate mechanisms. A company should not assume that a constitutional petition is the ordinary first remedy for every regulatory dispute.

An application for interim relief may require separate consideration where the order affects operating rights or compliance status. Delay in bringing the proper challenge can cause practical damage even where a substantive point exists.

Common mistakes in regulatory replies

The most frequent weakness is a reply that asserts compliance but fails to match facts to the regulatory text. A second mistake is providing inconsistent dates across the main letter, CVs, statutory forms and annexures. Another is naming an officer as responsible for a compliance function without evidence of the actual reporting arrangements.

Companies sometimes respond defensively to every observation even where a simple factual correction would resolve it. They may also make unnecessary admissions about unlicensed activity while trying to demonstrate cooperation. The balance requires judgment: concede what the record proves, explain what the law requires and preserve legitimate defences.

The response should avoid inflammatory allegations against the regulator unless there is reliable evidence and a relevant legal reason to raise them. Professional precision is generally more effective than rhetorical criticism.

A practical example from licensing

Suppose an applicant for a regulated capital-market licence receives a notice questioning whether its proposed chief executive satisfies a role-specific experience requirement, whether a director meets prescribed eligibility criteria and whether an associated advisory business carries on regulated activities. The three issues require distinct answers.

For experience, provide a dated employment chronology, responsibilities and independent supporting records. For eligibility, identify the exact education or other criterion and the documentary basis for satisfaction. For the associated business, explain what services are actually offered, the relevant licensing perimeter and any lawful corrective action. A single paragraph promising future compliance will not address these three separate regulatory questions.

The annexures should be indexed and consistent. Where the applicant changes its proposed management, the corresponding corporate approvals and filings should be addressed rather than relying on a statement that a replacement is intended.

Opinion and recommended response structure

An SECP show-cause notice should be answered through a precise legal and factual response founded on the governing statute, the actual allegation and the evidence. The company should first preserve records and verify statutory provisions, then identify its respondent capacity, prepare a paragraph-wise response, obtain proper signing authority and attend the hearing with a disciplined bundle.

Where a breach is not established, explain which legally required element is missing and support the conclusion. Where the record shows a remediable lapse, state the facts accurately, implement proportionate corrective measures and make a focused submission on the lawful consequence. Do not confuse cooperation with admitting allegations that have not been proved.

The correct relief may be closure of proceedings, reconsideration of an observation, acceptance of compliance, reduction of a proposed sanction or another remedy permitted by the relevant statute. It should be requested expressly and supported by the operative law. A serious response protects the company's position by accuracy, not by length alone.

Principal authorities for verification: The specific statute and regulations cited in the notice, which may include Companies Act, 2017, Securities Act, 2015, Futures Market Act, 2016 or other SECP-administered legislation; current SECP regulations, relevant directions and the notice and supporting record.