A Kraków-based IT firm completes its incorporation at the National Court Register (Krajowy Rejestr Sądowy, KRS) and assumes the filing work is done. Three months later, a routine anti-money laundering (AML) audit flags the company as non-compliant – it never reported its beneficial owners to the Central Register of Beneficial Owners (Centralny Rejestr Beneficjentów Rzeczywistych, CRBR). The fine arrives before the company's management even knew the obligation existed.

Polish law requires most commercial companies, foundations, and certain trusts to disclose their beneficial owners in the CRBR within seven days of incorporation or any change in ownership structure. The obligation flows from Poland's implementation of the EU's Anti-Money Laundering Directives and is enforced by the Minister of Finance. Failure to file on time exposes the company to a financial penalty of up to PLN 1,000,000.

This guide walks through who must register, how the process works step by step, where companies most often go wrong, and what the three most common business scenarios look like in practice. It covers timelines, costs, and the questions clients ask most frequently – so your company can stay on the right side of Poland's AML framework from day one.

Who must register in the CRBR and why?

The CRBR obligation reaches broadly. General partnerships, limited partnerships, limited joint-stock partnerships, limited liability companies (spółki z ograniczoną odpowiedzialnością, sp. z o.o.), and joint-stock companies registered in the KRS are all covered. Foundations and associations conducting economic activity are included as well. If your entity has a legal personality and operates in Poland, the default assumption is that it falls within scope.

The underlying logic is AML-driven. Poland's financial intelligence unit – the General Inspector of Financial Information (Generalny Inspektor Informacji Finansowej, GIIF) – uses CRBR data to trace the real human beings who ultimately own or control a legal entity. A beneficial owner is any natural person who directly or indirectly holds more than 25 percent of shares, voting rights, or ownership interest, or who otherwise exercises effective control. Where no natural person meets that threshold, the senior managing official is treated as the beneficial owner by default.

Foreign-owned Polish subsidiaries deserve particular attention here. The beneficial owner of a sp. z o.o. owned by a Luxembourg holding company is not the Luxembourg entity – it is the natural person who controls that holding company. Tracing the chain upward is the company's responsibility, not the register's. Missing one link in that chain is one of the most common errors we see.

Two exemptions are worth noting: publicly listed companies subject to disclosure requirements equivalent to EU standards, and certain investment funds supervised by the Polish Financial Supervision Authority (Komisja Nadzoru Finansowego, KNF), are exempt from CRBR registration. All others should assume they are in scope and verify with counsel.

What is the step-by-step CRBR filing procedure?

The filing is made electronically through the Ministry of Finance portal at crbr.podatki.gov.pl. There is no paper option and no filing fee – the process is free of charge. However, the submission must be signed with a qualified electronic signature or a trusted profile (Profil Zaufany), and the signatory must be a person authorised to represent the entity under KRS records. A proxy cannot sign on the company's behalf unless that proxy is itself registered as an authorised representative.

The seven-day deadline runs from the date of entry in the KRS, not from the date of the founding act. For changes – a new shareholder, a share transfer, a change of management – the same seven-day window applies from the date the change occurs, not from the date it is registered. This distinction trips up many companies. A share sale agreed on 1 April must be reported to the CRBR by 8 April, even if the KRS amendment takes weeks longer.

The practical steps are as follows:

  • Identify every natural person who qualifies as a beneficial owner under the 25 percent threshold or effective-control test.
  • Collect the required personal data: full name, nationality, country of residence, PESEL number (or date of birth for foreign nationals without a PESEL), and citizenship.
  • Log into the Ministry of Finance portal using a Profil Zaufany or qualified electronic signature.
  • Complete the online form, selecting the correct legal basis for each beneficial owner's status.
  • Submit and retain the confirmation receipt for your compliance records.

One practical note: where the ownership chain runs through multiple tiers, document the analysis in writing before filing. If the GIIF queries the disclosure later, that internal memo is your first line of defence.

Where do companies most often go wrong?

We secured a correction of a CRBR enforcement notice for a manufacturing client in the Mazowieckie region (autumn 2025), where the original filing had named a corporate entity rather than the ultimate natural person. The error was structural – the company's legal team had stopped the ownership analysis one layer too early. Remedying it required a corrected filing plus a formal explanation to the GIIF.

The most frequent mistakes cluster around four points. First, companies file the corporate shareholder rather than the natural person behind it. Second, they miss the seven-day change deadline because they track KRS registration dates rather than the underlying transaction date. Third, they fail to update the CRBR when a beneficial owner's personal data changes – a new address or a change of citizenship triggers the same seven-day obligation. Fourth, newly formed companies in multi-entity groups assume that a parent company's compliance covers the subsidiary. It does not. Each entity files separately.

There is also a subtler issue with nominal shareholding. Where shares are held by a nominee on behalf of a third party, Polish AML law looks through the nominee arrangement. The economic beneficiary must be disclosed. Relying on a nominee structure to avoid CRBR disclosure is not a valid strategy – it is an AML violation.

For companies with cross-border ownership structures, coordinating CRBR filings with equivalent registers in other EU member states adds a further layer of complexity. Our compliance programme guides for Czech Republic subsidiaries in Poland and for Switzerland subsidiaries in Poland address how to align multi-jurisdictional beneficial ownership disclosures efficiently.

How do three common business scenarios play out?

Understanding the CRBR obligation in the abstract is one thing. Seeing it applied to recognisable situations is another. Three scenarios illustrate the range of issues that arise in practice.

Scenario 1 – Polish manufacturing company. A Silesian sp. z o.o. has two individual Polish shareholders, each holding 50 percent. Both qualify as beneficial owners. The filing is straightforward: two natural persons, both with PESEL numbers, both identifiable from the KRS articles of association. The company files within seven days of incorporation and updates the CRBR each time a share transfer occurs. Cost: zero. Time: approximately 30 minutes per filing.

Scenario 2 – IT company with foreign investor. A Warsaw-based software firm is 60 percent owned by a German GmbH, which is in turn wholly owned by a Dutch holding BV, which has two individual shareholders each holding 50 percent. The beneficial owners of the Polish sp. z o.o. are those two Dutch individuals. They lack PESEL numbers, so their dates of birth and nationalities are filed instead. The company must obtain and verify their personal data before filing – a step that can take several days if the foreign parent is slow to respond. Missing the seven-day deadline in this scenario is easy and costly.

Scenario 3 – Foundation with economic activity. A Warsaw foundation runs a commercial training programme. It falls within CRBR scope. Its beneficial owners are the members of its management board, reported as default beneficial owners because no natural person controls more than 25 percent of the foundation's assets. The foundation must update the CRBR whenever board membership changes – even if the change is temporary. Many foundations overlook this, treating CRBR as a one-time formality rather than an ongoing obligation.

For disputes arising from enforcement actions – including penalty decisions issued by the Ministry of Finance – understanding cost recovery rules in Polish civil proceedings becomes relevant if the company decides to challenge the fine in court.

We obtained a full withdrawal of a CRBR penalty notice for a technology client in the Pomerania region (spring 2026), where the company had filed on time but used an incorrect ownership percentage. A corrected submission accompanied by a legal opinion on the calculation method resolved the matter without litigation.

Frequently asked questions

Q: Does a newly formed company have seven days from signing the founding act or from KRS registration?

A: The seven-day deadline runs from the date of entry in the KRS – not from the date the founding act is signed. However, for changes to beneficial ownership that occur after incorporation (such as a share transfer), the deadline runs from the date of the transaction itself, regardless of when the KRS is updated. Companies should maintain a compliance calendar that tracks both types of triggering events separately.

Q: What is the actual penalty for late or incorrect CRBR filing, and how is it assessed?

A: The Ministry of Finance may impose a financial penalty of up to PLN 1,000,000 per violation. The penalty is administrative in nature and does not require proof of intent. Assessments take into account the duration of the breach and whether the company cooperated with the GIIF during any inquiry. A corrected filing submitted before a formal notice is issued is treated more favourably than one filed in response to enforcement proceedings. There is no fixed tariff – the amount is determined case by case.

Q: Is CRBR compliance connected to CSRD Poland or ESG reporting obligations?

A: CRBR is an AML-driven register, not an ESG reporting instrument. However, in practice, the two overlap for larger entities. Companies preparing for ESG reporting under CSRD Poland must map their ownership and governance structures in detail – the same exercise that feeds a CRBR filing. A well-maintained CRBR record also supports whistleblower compliance programmes and internal AML policies, since it provides a verified baseline of who controls the organisation. A compliance lawyer Warsaw-based or otherwise advising on CSRD implementation will typically review CRBR accuracy as part of the governance audit.

What to prepare before your CRBR filing:

  • Full ownership chart showing every legal entity and natural person in the chain above the Polish company.
  • Personal data for each beneficial owner: full name, date of birth, nationality, country of residence, and PESEL or passport number.
  • KRS extract confirming current authorised representatives who may sign the submission.
  • Written analysis of the ownership percentage or effective-control basis for each person disclosed.
  • Qualified electronic signature or active Profil Zaufany for the authorised signatory.

Your company's specific ownership structure carries consequences that cannot be undone once an enforcement notice is issued. A penalty of up to PLN 1,000,000 is assessed administratively – no court order required – and the record of non-compliance can affect AML due diligence in future transactions.

If your company has not yet verified its CRBR status, or if a recent share transfer may have triggered a filing obligation, contact info@kordeckipartners.com for a tailored compliance assessment covering your ownership structure, applicable deadlines, and any corrective steps needed.

KORDECKI & Partners is a law firm based in Warsaw and Krakow, advising business clients across 30 jurisdictions. Our team combines expertise in Polish and international law with a practical approach to AML compliance, beneficial ownership disclosure, and ESG governance. We work with Polish entrepreneurs, foreign investors, and in-house legal teams. To discuss your situation, contact info@kordeckipartners.com.

Disclaimer: This publication is provided for informational purposes only and does not constitute legal advice. The information herein should not be relied upon as a substitute for professional legal counsel tailored to your specific circumstances. KORDECKI & Partners assumes no liability for actions taken or not taken based on the contents of this material. For advice regarding your particular situation, please contact info@kordeckipartners.com.