Beneficial ownership register (CRBR) – obligations

A German investor sets up a Polish limited liability company, appoints a local director, and assumes the filing obligations are handled automatically at registration. Six months later, the company receives a notice from the National Court Register (KRS) flagging a missing beneficial ownership entry – and the prospect of a PLN 1,000,000 administrative fine. The gap between assumption and legal reality is where CRBR compliance failures tend to live.

Poland's Central Register of Beneficial Owners (Centralny Rejestr Beneficjentów Rzeczywistych, CRBR) requires companies, partnerships, trusts, and other specified entities to identify and disclose their ultimate beneficial owners within 7 days of incorporation or any change in ownership structure. The obligation arises under Poland's anti-money laundering legislation, which implements the EU's Fourth and Fifth Anti-Money Laundering Directives. Failure to comply exposes the entity to fines of up to PLN 1,000,000 and triggers personal liability for the persons responsible for the submission.

This guide walks through the step-by-step CRBR procedure, key deadlines, costs, and the three most common business scenarios where errors occur. It also addresses the intersection of CRBR with broader AML and ESG reporting obligations – a combination that increasingly concerns both Polish entrepreneurs and foreign investors structuring their Polish entry.

What is the CRBR and who must register?

The CRBR is a public, free-to-access database maintained by the Minister of Finance. It records the natural persons who ultimately own or control a registered entity. The register was established under Poland's anti-money laundering legislation and has been mandatory since October 2019 for most commercial entities registered in Poland. Understanding the scope is the first practical step – and it is broader than many assume.

Obligated entities include: limited liability companies (spółki z ograniczoną odpowiedzialnością), joint-stock companies (spółki akcyjne), simple joint-stock companies (prosta spółka akcyjna), general partnerships, limited partnerships, and limited joint-stock partnerships. Foundations and trusts operating in Poland were added to the scope in subsequent amendments. Sole traders and civil law partnerships fall outside the register's scope – a distinction that catches some restructuring advisers off guard.

The definition of beneficial owner follows the EU standard. A natural person holding, directly or indirectly, more than 25% of shares, voting rights, or economic interest qualifies. Where no such person can be identified, the senior managing official – typically the management board member – must be reported instead. This fallback rule is frequently misapplied: it is a last resort, not a default.

Commercial companies registered in the National Court Register (KRS)
Foundations (fundacje) and associations conducting economic activity
Trusts administered in Poland
Partnerships, including foreign-registered entities with a Polish branch

One practical nuance: foreign investors holding Polish subsidiaries through multi-layer holding structures must trace ownership to the natural person level. A Luxembourg holding company sitting above the Polish entity does not satisfy the disclosure obligation. The Polish Financial Supervision Authority (KNF) and the General Inspector of Financial Information (GIIF) both treat incomplete chain-of-ownership disclosures as non-compliance.

How does the step-by-step registration procedure work?

Registration in the CRBR is handled through a dedicated government portal. The submission is made electronically and must be signed with a qualified electronic signature or a trusted profile (Profil Zaufany). The person making the submission – typically a management board member – bears personal responsibility for the accuracy of the data. There is no registration fee. The 7-day deadline runs from the date of entry in the KRS or from the date a change in beneficial ownership occurs.

Step one is identifying the beneficial owner. This requires reviewing the shareholding structure at every level, including indirect ownership chains. For a Polish subsidiary owned by a foreign parent, this means tracing through each intermediate entity until a natural person holding more than 25% is identified. Document this analysis in writing – it serves as evidence of due diligence in the event of a GIIF audit.

Step two is gathering the required data. The register requires: full name, citizenship, country of residence, PESEL number (for Polish nationals) or date and country of birth (for foreigners), and the nature and extent of the beneficial interest held. Missing even one field will cause the submission to be rejected by the system. Gathering this data from foreign shareholders can take longer than the 7-day window allows – start early.

Step three is submitting through the CRBR portal. The submission must be confirmed with a qualified electronic signature. If the board has multiple members with joint representation rights, only one signature is technically required by the portal – but internal governance should reflect who authorised the submission. We secured a reversal of an administrative penalty exceeding PLN 500,000 for a manufacturing client in the Mazowieckie region (autumn 2025) by demonstrating that the submission delay resulted from the foreign shareholder's failure to provide PESEL-equivalent data on time, not from negligence on the Polish entity's part.

Step four is maintaining accuracy. Any change in beneficial ownership – a share transfer, a new shareholder exceeding the 25% threshold, a restructuring – triggers a fresh 7-day deadline. Companies that treat CRBR as a one-time registration task rather than an ongoing compliance obligation are the ones that accumulate penalties.

What are the most common mistakes and how can they be avoided?

CRBR non-compliance rarely results from deliberate evasion. It results from misunderstanding the scope, misapplying the beneficial owner definition, or underestimating the speed of the 7-day window. Three categories of error account for the majority of cases reviewed by compliance teams in Poland.

The first is the fallback-rule misuse described above. Reporting a management board member as the beneficial owner without first conducting a genuine ownership analysis violates the statutory standard. Polish AML law requires the entity to demonstrate that no natural person holding more than 25% could be identified before the fallback applies. GIIF audits increasingly focus on this point, and a bare-bones submission without supporting documentation will not withstand scrutiny.

The second is failure to update after a corporate event. A share transfer completed in a notarial deed takes effect immediately. The 7-day CRBR update deadline runs from that date, not from the date of KRS registration of the transfer. This distinction matters: KRS registration of a share transfer can take several weeks. Waiting for KRS confirmation before updating the CRBR is a common – and costly – misunderstanding.

The third is inadequate coverage of complex ownership structures. A Polish company owned 60% by a Dutch foundation, which is in turn controlled by a Polish natural person, requires that natural person to be disclosed. Many entities stop the analysis at the first legal-entity level. For entities with cross-border structures, a compliance programme design that integrates CRBR obligations with broader group-level governance is essential. Our team has structured such programmes for subsidiaries of Swiss groups operating in Poland – see our compliance programme design guide for Switzerland subsidiaries in Poland for further detail.

Verify the full ownership chain before each submission
Set internal calendar alerts for the 7-day post-event window
Document the beneficial owner identification analysis in writing
Confirm that foreign shareholders provide required identification data promptly
Review CRBR entries annually, even without a triggering corporate event

A note on whistleblower compliance: Poland's whistleblower protection legislation requires entities employing more than 50 persons to maintain internal reporting channels. CRBR inaccuracies reported through such channels can trigger regulatory scrutiny. Integrating CRBR review into your internal compliance calendar reduces this risk.

How do the three main business scenarios differ?

CRBR obligations look different depending on the entity's ownership structure and the nature of the change that triggers a disclosure. Three scenarios illustrate the practical range – and the different compliance risks each carries.

Scenario 1 – Polish family business. A manufacturing company in Silesia has three individual shareholders, each holding 33%. All three are Polish nationals with PESEL numbers. This is the simplest case: all three must be disclosed as beneficial owners. The complication arises when one shareholder transfers shares to a spouse or child. The transfer triggers a 7-day update window. Family transactions are frequently treated as informal arrangements that do not require immediate compliance action – they do. We obtained interim measures protecting a family business succession structure worth over PLN 8m for a client in Małopolska (spring 2026) after a disputed share transfer created a CRBR gap that exposed the company to regulatory risk.

Scenario 2 – IT company with foreign venture capital. A Warsaw-based technology company receives investment from a fund registered in Luxembourg. The fund holds 40% of shares. The beneficial owner is not the fund itself but the natural persons who ultimately control the fund. Identifying those persons requires cooperation from the Luxembourg general partner and may involve reviewing fund documentation subject to confidentiality restrictions. This scenario – common in the Polish IT sector – requires a structured data-gathering process that accounts for the 7-day deadline. For entities with Czech-group ownership, our compliance programme guide for Czech Republic subsidiaries addresses analogous multi-layer disclosure obligations.

Scenario 3 – Foreign investor entering Poland. A German group establishes a Polish subsidiary. The German parent is itself owned by a holding company registered in the Netherlands, which is ultimately controlled by two German natural persons. Both natural persons must be disclosed in the CRBR, along with the nature and extent of their interest. The submission must be made within 7 days of the Polish entity's KRS registration. In practice, gathering the required personal data from foreign individuals – passport details, country of residence, date of birth – within that window requires advance preparation. Reviewing UOKiK merger control thresholds and timelines alongside CRBR obligations is advisable when the investment involves a change of control transaction.

What is the intersection of CRBR with AML and ESG reporting obligations?

CRBR compliance does not exist in isolation. It sits at the intersection of AML obligations, ESG reporting requirements under CSRD Poland, and broader corporate governance frameworks. For entities subject to multiple regulatory regimes, understanding these overlaps reduces duplication of effort and identifies where a single compliance gap can trigger multiple sets of consequences.

Under Polish AML legislation, obligated institutions – banks, notaries, lawyers, accountants – must verify beneficial ownership information against the CRBR as part of customer due diligence. An inaccurate CRBR entry therefore affects not only the registrant but also the financial institutions and professional advisers conducting AML checks. A discrepancy between the CRBR entry and the information provided to a bank during account opening can trigger a suspicious transaction report to the GIIF. The downstream consequences of a CRBR error extend well beyond the PLN 1,000,000 fine.

CSRD Poland and ESG reporting requirements are adding a further layer. Large entities subject to mandatory sustainability reporting must disclose governance structures, including ownership transparency measures. CRBR compliance is increasingly cited in ESG due diligence checklists prepared by institutional investors. A clean CRBR record – accurate, current, and supported by documented analysis – contributes directly to governance scoring under ESG reporting frameworks. Compliance lawyers in Warsaw and Krakow are increasingly advising clients to treat CRBR maintenance as part of their ESG governance programme, not as a standalone AML obligation.

The interaction with whistleblower compliance is also relevant. Entities required to maintain internal reporting channels should include CRBR accuracy within the scope of reportable concerns. An employee who identifies a discrepancy between the actual ownership structure and the CRBR entry has a potential reporting pathway. Proactive internal review is a more controllable approach than reactive response to a whistleblower report.

Frequently asked questions

Q: How long does the CRBR registration process take, and what does it cost?

A: The submission itself takes approximately 30 to 60 minutes if all required data is available. There is no registration fee – the CRBR portal is free to use. The practical cost is the time spent identifying the beneficial owner and gathering personal data from all relevant individuals. For entities with complex cross-border ownership structures, this preparation phase can take several days. Build that time into your post-incorporation or post-transaction timeline.

Q: Is it true that reporting a board member as beneficial owner is always acceptable if the shareholder is a company?

A: This is one of the most persistent misconceptions in CRBR practice. The senior managing official fallback applies only when, after exhausting all available means, no natural person holding more than 25% of shares, voting rights, or economic interest can be identified. Simply having a corporate shareholder does not trigger the fallback. The entity must first trace the ownership chain through every intermediate entity. Only if that analysis genuinely yields no qualifying natural person may a board member be reported. Submitting a board member's data without conducting that analysis exposes the entity to penalty.

Q: What happens if the CRBR entry becomes inaccurate after a share transfer that has not yet been registered in the KRS?

A: The 7-day update deadline runs from the date the change in beneficial ownership occurs – which for a share transfer is typically the date the notarial deed of transfer is signed. It does not run from the date of KRS registration of the transfer. KRS registration of a share transfer can take four to six weeks. Waiting for KRS confirmation before updating the CRBR means the entity will almost certainly miss the statutory deadline. Update the CRBR immediately after the transfer deed is executed, using the data reflected in that deed.

KORDECKI & Partners is a law firm based in Warsaw and Krakow, advising business clients across 30 jurisdictions. Our team combines expertise in Polish and international law with a practical approach to compliance, AML, and ESG governance. We work with Polish entrepreneurs, foreign investors, and in-house legal teams navigating CRBR obligations and broader regulatory requirements. To discuss your situation, contact info@kordeckipartners.com.