Cyprus UBO Register + AML Thresholds 2026 — Filing Obligations, Access Rules, Penalties

1. Legal framework

Cyprus's UBO Register is established by AML Law 188(I)/2007 as amended in 2018, 2021, 2024 — transposing EU AMLD4 (2015/849), AMLD5 (2018/843), and AMLD6 (2024/1640 / AMLR 2024/1624). Maintained by the Registrar of Companies. Operates electronically via the central Beneficial Ownership Register portal.

2. Who is a UBO?

• Direct ownership: any natural person owning ≥25% of shares + voting rights + profit entitlement.
• Indirect ownership: any natural person controlling ≥25% via intermediary entities (look-through).
• Control by other means: significant influence beyond ownership (e.g., shareholders' agreement giving veto rights).
• If no UBO meeting the 25% threshold: SENIOR MANAGEMENT becomes the disclosed default (Article 3(6)(b)(ii) AMLD).

3. What data is filed

• Full name + date of birth + nationality + place of birth.
• Tax identification number(s) — Cyprus + home country.
• Address.
• Nature + extent of beneficial interest (e.g., 35% direct shareholding).
• Identification documents on file (passport / national ID).
• If indirect: full ownership-chain disclosure including all intermediary entities.

4. Filing timeline

• Initial filing — within 14 days of incorporation (for the founding UBOs).
• Changes — within 14 days of the change (new UBO arising, UBO leaving, ownership-percentage change crossing the 25% threshold).
• Annual confirmation — every Cyprus company confirms (or refiles) its UBO data annually as part of HE32 cycle.
• Sanctions for late filing: up to €100,000 + daily continuing penalty.

5. Access rules — post-CJEU 2022

Public access to UBO Registers was significantly CURTAILED after the CJEU's 22 November 2022 ruling (Joined Cases C-37/20 + C-601/20) holding that PUBLIC access without 'legitimate interest' breached EU fundamental rights to privacy + data protection.

Cyprus and other EU member states have since reformed access — typically permitting access to: (a) competent authorities (tax + AML + law enforcement), (b) obliged entities for AML/KYC purposes (Cyprus banks, EMIs, accountants), (c) media + civil society where 'legitimate interest' demonstrated case-by-case.

6. Practical compliance

1. 1Onboarding — Cyprus accountant / advocate / formation agent runs UBO due diligence at incorporation.
2. 2Annual review — UBO data refreshed each year + filed on HE32 cycle.
3. 3Change-event tracking — any share transfer, director change, or shareholders'-agreement amendment is reviewed for UBO impact.
4. 4Nominee structures — beneficial owner (not nominee) is filed as UBO.
5. 5Trust structures — settlor + protector + identifiable beneficiaries + (where appropriate) class of beneficiaries.
6. 6Record retention — UBO file kept by the Cyprus company + its accountant for 6 years minimum.

Frequently Asked Questions

Share this article

Disclaimer: This article is for informational purposes only and does not constitute legal, tax, or financial advice. Tax laws change frequently. Consult a qualified Cyprus adviser for guidance specific to your situation. The information on this page is general guidance only and does not constitute legal, tax, accounting, immigration or financial advice. Specific advice should be obtained based on the facts of each case.