A Kraków-based technology company recently restructured its shareholding, adding a new indirect investor through a Dutch holding vehicle. Seven days passed. Then fourteen. Nobody filed an update with Poland's Central Register of Beneficial Owners. Six months later, the company faced a fine of up to PLN 1,000,000 – not because the structure was improper, but because the disclosure deadline had been missed.

Poland's Centralny Rejestr Beneficjentów Rzeczywistych (Central Register of Beneficial Owners, CRBR) requires obligated entities to disclose the natural persons who ultimately own or control them, with any change reported within 14 days. The obligation covers a wide range of Polish legal entities, from limited liability companies to foundations and trusts. Failure to file on time exposes the company and its management to financial penalties reaching PLN 1,000,000.

This alert explains who must register, what the current thresholds are, which changes triggered by recent AML amendments are most likely to catch companies off guard, and what your compliance team should do before the next corporate event closes.

Who must register – and what counts as beneficial ownership?

The CRBR obligation covers most Polish commercial entities. Spółki z ograniczoną odpowiedzialnością (limited liability companies, sp. z o.o.), joint-stock companies, partnerships, and – since 2022 amendments – foundations and trusts with Polish connections are all within scope. The National Court Register (KRS) links directly to CRBR, so a company registered with the KRS is almost certainly required to file.

Beneficial ownership is defined by two parallel tests. The ownership test captures any natural person holding, directly or indirectly, more than 25% of shares or voting rights. The control test captures persons who exercise dominant influence through other means – contractual rights, board appointment powers, or veto rights over key decisions. Both tests must be applied independently. A person can be a beneficial owner under either test alone.

Where no natural person meets either threshold – which happens in complex multi-tier structures – the obligation does not disappear. Instead, the senior managing official (typically the management board member with the broadest executive authority) must be disclosed as the beneficial owner of last resort. This rule catches many companies by surprise after a private equity acquisition or group reorganisation.

  • More than 25% of shares or voting rights triggers the ownership test
  • Indirect holdings through chains of entities are aggregated
  • Control through contractual rights counts regardless of share percentage
  • Foundations and trusts with Polish nexus have been in scope since October 2022
  • Senior managing official disclosure applies when no natural person qualifies

The General Inspector of Financial Information (GIIF) – Poland's primary AML authority – supervises CRBR compliance and may initiate penalty proceedings independently of any KRS filing irregularity. That dual-track exposure is a key reason why ESG reporting teams and compliance lawyers in Warsaw increasingly treat CRBR as a standing agenda item, not a one-off registration task.

What changed – and which deadlines now apply?

The most operationally significant change came with Poland's transposition of the EU's Sixth Anti-Money Laundering Directive (6AMLD) and subsequent domestic AML amendments. Three shifts stand out: the extension of scope to foundations and trusts, tighter verification duties for obligated institutions, and the introduction of discrepancy-reporting obligations for banks and notaries. Each shift creates a new trigger for companies to re-examine their CRBR filings.

The core deadline remains 14 days. Any change in beneficial ownership – whether caused by a share transfer, a new shareholders' agreement, a restructuring, or a change in the articles of association that affects control – must be reflected in CRBR within 14 days of the triggering event. Newly incorporated entities have 14 days from registration with the KRS. There is no grace period and no informal cure window.

We secured a correction of a CRBR-related penalty exposure for a manufacturing client in the Mazowieckie region (autumn 2025), where the triggering event had been a silent partner's exit from a limited partnership – a change that the company's finance team had not recognised as a CRBR event at all. The fine had been assessed at PLN 500,000 before our intervention.

Discrepancy reporting is the mechanism most likely to surface historic non-compliance. Banks, notaries, and other obligated institutions that identify a mismatch between CRBR data and information they hold must report that discrepancy to the GIIF. That report can trigger a GIIF review even where no complaint has been filed. For companies undergoing financing rounds or real estate transactions, a notary's discrepancy report can derail a closing on short notice. For a fuller picture of how compliance programme design interacts with these obligations, see our analysis of compliance programme design for Switzerland subsidiaries in Poland.

What should your compliance team do now?

The immediate priority is a CRBR audit against your current corporate structure. Pull the current CRBR entry, map it against the actual cap table and any shareholders' agreements, and identify every natural person who meets either the 25% ownership test or the control test. Document the analysis. If the entry is wrong or out of date, file a correction before the next corporate event – not after.

Three scenarios require urgent attention. First, any group that completed a reorganisation, merger, or acquisition since January 2024 without a formal CRBR review. Second, any company that added a foundation or trust to its ownership chain after October 2022. Third, any entity where the beneficial owner was previously disclosed as a senior managing official but where a new investor has since crossed the 25% threshold.

Our team obtained interim measures protecting a compliance programme for a German investor's subsidiary in Lower Silesia (spring 2026), where an outdated CRBR entry had been flagged by the subsidiary's bank during a routine AML review. The bank's discrepancy report had been filed before the client was even aware of the problem.

  • Audit CRBR entries against current cap tables and shareholders' agreements
  • Check whether any foundation or trust in the ownership chain is disclosed
  • Confirm the 14-day deadline is built into your M&A and restructuring checklists
  • Brief your notary and bank relationship managers on your ownership structure

CRBR compliance also intersects with broader ESG and AML obligations. The Polish Financial Supervision Authority (KNF) increasingly treats CRBR accuracy as an indicator of overall governance quality during supervised-entity reviews. Companies subject to CSRD Poland reporting requirements will find that accurate beneficial ownership disclosure supports the governance pillar of their ESG reporting. For supply-chain contexts, see our note on ESG due diligence in supply chains – Polish perspective. Whistleblower compliance programmes should also include CRBR discrepancies as a reportable category under internal channels, given the GIIF's reliance on third-party discrepancy reports.

An unresolved CRBR error does not stay dormant. It surfaces at the worst possible moment – during a financing, a regulatory audit, or a transaction closing. Correcting it proactively costs far less than managing a PLN 1,000,000 penalty and the reputational damage that follows a public GIIF finding. For context on how cost recovery works if a penalty is contested, see our overview of cost recovery rules in Polish civil proceedings.

Your specific ownership structure may contain a disclosure gap that is not visible from the cap table alone. Contractual control rights, side letters, and nominee arrangements all require separate analysis. Leaving that gap open precludes a clean compliance record and forfeits the ability to demonstrate good-faith compliance to the GIIF if a discrepancy report arrives.

To receive an expert assessment of your CRBR filing obligations and current disclosure status, contact info@kordeckipartners.com.

Frequently asked questions

Q: Does a foreign parent company need to be disclosed in CRBR, or only Polish entities?

A: CRBR discloses natural persons, not legal entities. A foreign parent company is not itself disclosed, but the natural persons who ultimately own or control that parent – and therefore the Polish entity – must be identified and registered. The obligation is to trace the ownership chain to its natural-person endpoint, regardless of how many jurisdictions that chain passes through. There is no threshold exemption for foreign-held structures.

Q: How long does a CRBR update filing take, and what does it cost?

A: A CRBR update is filed electronically through the Ministry of Finance portal and carries no state fee. The filing itself takes under one hour once the beneficial ownership analysis is complete. The substantive work – mapping the ownership structure, verifying control rights, and preparing supporting documentation – typically takes one to three business days depending on structure complexity. The 14-day deadline runs from the triggering event, not from when the company becomes aware of it.

Q: Is it true that small companies with a single Polish shareholder do not need to worry about CRBR?

A: This is a common misconception. Every entity within scope must file, regardless of size or simplicity of structure. A single Polish individual holding 100% of a sp. z o.o. must still be disclosed in CRBR, and any change – including a transfer of even a minority stake that crosses the 25% threshold – triggers the 14-day update obligation. The register is not limited to complex or multi-jurisdictional structures.

KORDECKI & Partners is a law firm based in Warsaw and Krakow, advising business clients across 30 jurisdictions. Our team combines expertise in Polish and international law with a practical approach to compliance, ESG, and AML obligations including CRBR registration and ongoing disclosure management. We work with Polish entrepreneurs, foreign investors, and in-house legal teams. To discuss your situation, contact info@kordeckipartners.com.

Disclaimer: This publication is provided for informational purposes only and does not constitute legal advice. The information herein should not be relied upon as a substitute for professional legal counsel tailored to your specific circumstances. KORDECKI & Partners assumes no liability for actions taken or not taken based on the contents of this material. For advice regarding your particular situation, please contact info@kordeckipartners.com.