The EU’s beneficial ownership (UBO) transparency framework has evolved substantially since the original 4th Anti-Money Laundering Directive (AMLD4) in 2015 — through AMLD5 in 2018, the 2022 Court of Justice of the European Union (CJEU) judgment limiting public access, and the 2024 AML Authority Regulation (AMLAR) and 6th AML Directive (AMLD6) consolidating the framework. The result in 2026 is a complex landscape where EU member states maintain UBO registers with country-specific variations on what is disclosed, who can access, what conditions apply, and what penalties apply for non-compliance.
For founders operating EU companies (Estonia OÜ, Cyprus Ltd, Irish Ltd, German GmbH, French SAS, Dutch BV, etc.), UBO compliance is mandatory and well-enforced. The era of “non-public ownership” through opaque structures has substantially closed in the EU. What remains is choosing how to comply correctly — accurate disclosure, prompt updates, understanding which countries’ registers are public vs restricted-access, and managing the practical privacy implications of disclosure.
This guide walks through EU UBO register requirements in 2026 — the EU-level framework, country-by-country variations, who must register, what must be disclosed, who can access the data, the CJEU public-access decision and its aftermath, penalties for non-compliance, and practical guidance for founders managing UBO obligations across jurisdictions.
EU UBO rules continue to evolve. This is general educational content — consult qualified counsel in each jurisdiction for specific compliance requirements.
Key Highlights
- UBO register is mandatory across all EU member states for legal entities, trusts, and certain other arrangements.
- UBO threshold: Typically 25%+ direct or indirect beneficial ownership; lower thresholds in specific contexts (some countries 10% or other levels).
- What’s disclosed: UBO’s name, date of birth, nationality, country of residence, nature and extent of beneficial interest, sometimes ID document number.
- Who can access (post-2022 CJEU): Public access was struck down in November 2022 (Sovim case) for unrestricted access. Current access typically restricted to: competent authorities, obliged entities (banks, lawyers, accountants, etc.), and “legitimate interest” parties (varies by country).
- 2024 AML Reform Package: AMLAR established the European AML Authority (AMLA); AMLD6 consolidates and tightens framework with consistent EU rules.
- Penalties for non-compliance: Vary substantially by country — from administrative fines (€1K-100K+) to criminal penalties in some jurisdictions.
- Beyond UBO: Significant Controllers Register (UK), BOSSS (BVI), FinCEN BOI Report (US) — global beneficial ownership transparency continues to expand.
The EU UBO Framework: Recent History
Three major regulatory waves established the current EU UBO framework:
AMLD4 (2015)
Required EU member states to establish UBO registers for companies and trusts. Initial implementation in 2017-2018. UBO threshold set at 25%+ (with national variations).
AMLD5 (2018)
Extended UBO requirements; introduced public access to UBO registers in most EU member states; expanded scope to certain trust structures and additional legal arrangements.
CJEU Sovim Decision (November 2022)
The Court of Justice of the European Union held that AMLD5’s public-access provision for UBO registers — granting access to any member of the public without legitimate-interest demonstration — was inconsistent with the EU Charter’s rights to respect for private life and protection of personal data. Member states scrambled to restrict access following the decision.
AMLAR + AMLD6 (2024)
The 2024 AML reform package consolidates the framework, establishes the European AML Authority (AMLA) for coordinated supervision, and tightens UBO transparency through restricted-access provisions consistent with the CJEU decision.
What UBO Register Requires Today
Who must register
Generally, every legal entity registered in an EU member state — including:
- Limited companies (Ltd, GmbH, BV, SAS, SARL, S.p.A., Sàrl, OÜ, etc.)
- Partnerships with limited liability features
- Trusts with EU-resident trustees or holding EU assets
- Foundations
- Certain other legal arrangements
Some exemptions for listed companies and certain regulated entities.
UBO definition
UBO is typically defined as:
- Natural person who ultimately owns or controls 25%+ of the legal entity (direct or indirect)
- If no UBO at 25%+ threshold, senior managing official(s)
- For trusts: settlor, trustees, protectors, beneficiaries, anyone with control
- For foundations: equivalent concepts
Information disclosed
- Full name
- Date of birth
- Nationality
- Country of residence
- Nature and extent of beneficial interest
- In some countries: ID document number / passport number
The “nature and extent” of beneficial interest is increasingly specific — moving beyond pure ownership percentages to include control mechanisms (voting rights, board appointment rights, etc.).
Who can access
Post-Sovim decision, access is typically restricted to:
- Competent authorities — tax, financial, law enforcement, regulatory bodies
- Obliged entities conducting customer due diligence — banks, lawyers, accountants, real estate agents, casinos, etc.
- Legitimate interest parties — journalists, NGOs, academics demonstrating specific legitimate interest (definition varies by country)
“Public access” (any member of the public) has been narrowed substantially.
Country-by-Country Variation (Major EU Member States)
Germany
- Transparenzregister maintained by Bundesanzeiger Verlag
- UBO at 25%+ direct or indirect
- Access: restricted to authorities, obliged entities, legitimate interest parties
- Penalties for late registration: €1,000-100,000+
- Active enforcement
France
- Registre des bénéficiaires effectifs (RBE) maintained centrally by INPI (Institut National de la Propriété Industrielle)
- UBO at 25%+
- Access: restricted post-Sovim
- Penalties: €7,500 fine + 6 months imprisonment possible for willful violations
Italy
- Registro dei Titolari Effettivi maintained by Camere di Commercio (Business Register)
- UBO at 25%+ direct or indirect
- Status: register suspended since May 2024 (Consiglio di Stato) and non-operational through 2025; in September 2025 the EU Commission opened infringement proceedings against Italy for failing to provide AMLD6-compliant access
- Penalties: administrative fines
Netherlands
- UBO Register maintained by Kamer van Koophandel (Chamber of Commerce)
- UBO at 25%+
- Access: post-Sovim, restricted; legitimate-interest parties may access
- Penalties: administrative fines up to €21,750+
Spain
- Registro Mercantil maintained at provincial commercial registries
- UBO at 25%+
- Access: restricted
Cyprus
- Registry of Beneficial Owners of Companies maintained by Cyprus Registrar
- UBO at 25%+ direct or indirect
- Access: restricted post-Sovim
- Penalties: €100 on the first day of default plus €50 for each subsequent day, capped at €5,000 (imposed on the company; Law L.141(I)/2024, in force from Feb 2025)
Ireland
- Central Register of Beneficial Ownership (RBO/CRBO) maintained by the Companies Registration Office (CRO) via the Registrar of Beneficial Ownership
- UBO at 25%+
- Access: restricted post-Sovim
- Penalties: up to €5,000 fine + summary conviction
Estonia
- Estonian e-Business Register UBO module
- UBO at 25%+
- Access: post-Sovim, restricted (legitimate interest required)
- Penalties: administrative fines
Malta
- UBO Register maintained by Malta Business Registry
- UBO at 25%+
- Access: restricted post-Sovim
Luxembourg
- Registre des Bénéficiaires Effectifs maintained by Luxembourg Business Registers
- UBO at 25%+
- Access: restricted post-Sovim
UK Separately (Post-Brexit)
UK is no longer EU member state. UK maintains its own beneficial ownership register through Companies House:
- People with Significant Control (PSC) Register — established 2016
- UK Companies House makes PSC information publicly accessible (no Sovim restriction in UK)
- Threshold: 25%+ direct or indirect, or significant influence/control
- Active enforcement; criminal penalties for non-compliance
UK’s broader transparency framework is among the most transparent globally — public access to PSC remains.
The 2022 CJEU Sovim Decision: What Changed
The Sovim decision (Joined Cases C-37/20 and C-601/20 — Luxembourg Business Registers) struck down the AMLD5 provision granting “any member of the general public” access to UBO registers, finding this incompatible with privacy and data protection rights.
Key implications:
- EU member states had to restrict their UBO register access following the decision
- “Public access” was replaced with restricted access to specific categories (competent authorities, obliged entities, legitimate interest)
- “Legitimate interest” became a key concept — typically requiring demonstration of specific journalism, research, or civil society purpose
- Implementation varies by member state — some applied more restrictive interpretations than others
The post-Sovim landscape is heterogeneous. Some EU member states (Cyprus, Luxembourg, others) restricted access more substantially; others adopted differing “legitimate interest” criteria. In Italy the register was suspended outright from May 2024 and remained non-operational into 2025, with the EU Commission opening infringement proceedings in September 2025 over the lack of AMLD6-compliant access.
How to Comply Correctly
Step 1: Identify all UBOs
- Map the beneficial ownership chain back to natural persons
- Identify direct and indirect ownership above threshold
- Identify control through means other than ownership (voting agreements, board appointment rights, contractual control, etc.)
- For complex structures (multi-jurisdictional, trusts, foundations), engage qualified counsel
Step 2: Register with each applicable register
- Each entity in each EU jurisdiction has its own UBO registration
- Deadlines vary by country — typically 14-30 days from entity registration or UBO change
- Specific forms / portals for each country’s register
Step 3: Update for changes
- UBO changes (new UBO, lost UBO status, change in beneficial interest %, change in personal details) must be reflected promptly
- Failure to update is the most common compliance failure
Step 4: Maintain records
- Internal records of UBO determination methodology
- Supporting documents (ownership chains, voting agreements, etc.)
- UBO identity verification documentation
Step 5: Coordinate with banks and other obliged entities
- Banks request UBO information during onboarding and periodic reviews
- UBO information provided to banks should match registered information
- Inconsistencies create operational problems
Privacy Implications and Practical Considerations
For founders concerned about privacy of UBO information:
What’s still private (under restricted-access regime)
- Random members of the public cannot access UBO data
- Competitors typically cannot access UBO data unless they qualify as legitimate interest
- Casual commercial research / data brokering largely blocked from UBO registers
What’s still visible
- Competent authorities (tax, regulatory, law enforcement) have access
- Banks, lawyers, accountants, real estate agents, etc. have access via obliged entity status
- Investigative journalists with demonstrated legitimate interest can typically access
- NGOs with demonstrated legitimate interest can access
- Other EU member states’ authorities have access through cross-border cooperation
Privacy hygiene
- Provide accurate but not excessive personal information (some registers ask for ID document numbers; provide what’s required, no more)
- Be aware that home addresses in some registers may be visible to specific access categories — use a separate “service address” where the option exists (UK PSC, some others)
- Update promptly when UBO changes occur
UBO Beyond Europe
Global UBO transparency continues to expand:
- UK PSC Register — public access continues
- US FinCEN BOI Report — under the interim final rule of 26 March 2025, all U.S.-formed entities and all U.S. persons are exempt from BOI reporting; only entities formed under foreign law and registered to do business in a US state must file (and they do not report U.S.-person beneficial owners); non-public register
- BVI BOSSS — non-public; authority-accessible
- Cayman Islands — beneficial ownership register; restricted access
- Singapore — Register of Registrable Controllers (RORC), lodged centrally with ACRA since 2020 in addition to being kept at the registered office
- Hong Kong — Significant Controllers Register (SCR) — maintained at company registered office
- Australia — proposed beneficial ownership register
The “non-public but authority-accessible” pattern is becoming the global norm.
Common Mistakes Founders Make
1. Believing offshore = non-disclosed. All major offshore jurisdictions now maintain beneficial ownership data accessible to authorities. The “hidden offshore owner” model is largely closed.
2. Failing to update for changes. Material UBO changes must be reflected promptly. Late updates trigger penalties.
3. Skipping UBO registration entirely. Substantial penalties; also creates banking and operational problems.
4. Misidentifying UBOs. Complex structures with voting agreements, trusts, options, indirect ownership require careful analysis. Misidentification (overstatement or understatement of UBO threshold) creates compliance gaps.
5. Inconsistency between UBO register and bank disclosures. Banks cross-check. Discrepancies flag compliance issues.
6. Not reviewing UBO position annually. Ownership changes (option grants, vesting, transfers) may change UBO status. Annual review prudent.
7. Treating UBO compliance as administrative checkbox. Modern enforcement is real. Treat compliance seriously.
Frequently Asked Questions
Am I a UBO if I own exactly 25%? Generally yes — most thresholds are “25%+” or “more than 25%.” 25% directly meets most thresholds. Verify country-specific.
What if no individual owns 25%+? Senior managing officials are typically registered as UBOs (CEO, managing director).
Can I be UBO without ownership? Yes — if you have control through other means (voting agreement, contractual control, board appointment rights, etc.).
What about trust structures? Trusts have specific UBO rules — settlor, trustees, protectors, beneficiaries, anyone with control are typically UBO-equivalent.
Are my UBO details now public in the EU? No — post-Sovim, restricted access. Specific categories can access. Random public access blocked.
What if my country shows my home address? Some countries allow service addresses (separate address for register purposes). Check country-specific rules.
How quickly must I update for changes? Varies — typically 14-30 days. Each country has its own deadlines.
What about minor children as beneficiaries? Minor children of UBOs can themselves be UBOs (e.g., as beneficiaries of trusts). Specific rules apply.
Can I see who has accessed my UBO data? Some countries provide access logs; varies by country.
How Unity Consulting Helps with UBO Compliance
Unity Consulting supports founders managing UBO obligations across jurisdictions:
- UBO identification for complex structures
- Initial registration across applicable EU and non-EU registers
- Ongoing updates when UBO changes occur
- Consistency check between UBO registers and banking disclosures
- Multi-jurisdictional coordination for groups operating in several EU member states
- Privacy hygiene guidance — service addresses where available, minimum-required-information principle
Book a free compliance consultation.
→ Book a compliance consultation
Disclaimer: This article is general educational content about EU UBO register requirements. It is not legal, regulatory, or financial advice. EU AML rules and implementing legislation continue to evolve. Always consult qualified counsel in each jurisdiction for specific compliance requirements.
Kateryna Melnyk focuses on international tax residency, substance requirements and reporting regimes such as CRS and Pillar Two. She translates dense regulation into practical steps founders can actually follow.