Beneficial ownership register (CRBR) – obligations

A Warsaw-based IT company completes a shareholder restructuring in March. Three weeks later, the managing director realises the Centralny Rejestr Beneficjentów Rzeczywistych (Central Register of Beneficial Owners, CRBR) entry still reflects the old ownership chain. The deadline for updating the register has already passed. The company now faces a fine of up to PLN 1,000,000 – and the exposure is personal for each board member who failed to act.

Polish AML legislation requires every company registered in the National Court Register (KRS) to disclose its beneficial owners in the CRBR within seven days of incorporation or any change in ownership. Failure to file on time, or filing inaccurate data, exposes the entity to administrative fines reaching PLN 1,000,000. The obligation applies regardless of company size, sector, or whether the ultimate owner is a Polish or foreign national.

This guide walks through the step-by-step filing procedure, the key deadlines, the three most common mistakes, and how different business scenarios – manufacturing, IT, and foreign-investor structures – interact with the register. It also addresses how CRBR intersects with broader ESG reporting and whistleblower compliance obligations that Polish companies increasingly face.

What is the CRBR and who must register?

The CRBR is a publicly accessible database maintained by the Minister of Finance. It was established under Poland's AML legislation implementing the EU's Fourth and Fifth Anti-Money Laundering Directives. The register records the natural persons who ultimately own or control a legal entity – the beneficial owners. Transparency is the core purpose: regulators, banks, and counterparties can verify who genuinely stands behind a Polish company.

The obligation covers a wide range of entities. These include limited liability companies (spółka z ograniczoną odpowiedzialnością, sp. z o.o.), joint-stock companies (spółka akcyjna, S.A.), simple joint-stock companies (prosta spółka akcyjna, P.S.A.), partnerships, and trusts or similar arrangements operating in Poland. Foundations and associations conducting business activity also fall within scope. Non-profit entities that do not conduct commercial activity are generally exempt, but legal counsel should verify this on a case-by-case basis.

Identifying the beneficial owner requires tracing the ownership chain to the natural person who holds – directly or indirectly – more than 25% of shares, voting rights, or profit entitlement. Where no such person can be identified, or where the structure is genuinely diffuse, the senior managing official (typically the management board member) is reported as the beneficial owner of last resort. This fallback rule catches many companies off guard, particularly those with complex holding layers.

Sp. z o.o., S.A., P.S.A., and partnerships registered in the KRS
Trusts and similar arrangements with a Polish nexus
Business-active foundations and associations
Foreign entities with a Polish branch or subsidiary obliged to register
Entities undergoing restructuring that alters the ownership chain

The Polish Financial Supervision Authority (KNF) and the General Inspector of Financial Information (Generalny Inspektor Informacji Finansowej, GIIF) both rely on CRBR data for supervisory purposes. Banks and payment institutions are required by AML rules to verify CRBR entries before opening accounts or processing certain transactions. An outdated or absent entry can therefore block commercial operations – not just trigger a fine.

How does the step-by-step filing procedure work?

Filing is done electronically through the Ministry of Finance portal at crbr.podatki.gov.pl. There is no registration fee. The person submitting the entry must hold a qualified electronic signature or a trusted profile (Profil Zaufany) issued by a Polish public authority. This is a practical obstacle for foreign directors who have neither – obtaining a trusted profile from abroad typically takes two to three weeks.

The filing itself requires the following data for each beneficial owner: full name, nationality, country of residence, Polish PESEL number (or, if unavailable, date of birth and citizenship), and the nature and extent of control. For indirect ownership chains, each intermediary entity must also be described. The system does not automatically validate the accuracy of the data – the company bears full legal responsibility for what is submitted.

We secured a correction of a CRBR entry challenged by a KAS tax audit for a manufacturing client in the Mazowieckie region (autumn 2025). The original filing had described a Dutch holding company as the beneficial owner rather than tracing through to the natural person behind it. Correcting the entry took four working days once the full corporate documentation was assembled.

The seven-day deadline runs from the triggering event: incorporation, registration of a change in the KRS, or any change in the factual ownership situation even if not yet reflected in the KRS. This last point is critical. A share transfer agreement signed on day one starts the clock immediately – the company cannot wait for the KRS to update before filing with the CRBR. The two registers operate on parallel, not sequential, timelines.

For compliance programme design in subsidiaries of foreign groups, the CRBR filing procedure must be built into the post-closing integration checklist. Our guide on compliance programme design for Sweden subsidiaries in Poland sets out a practical framework that applies equally to other jurisdictions.

What are the penalties and what triggers personal liability?

Non-compliance with CRBR obligations carries an administrative fine of up to PLN 1,000,000 per entity. The fine is imposed by the Minister of Finance following a supervisory procedure. There is no minimum threshold – even a one-day delay can in principle attract a penalty, though enforcement practice tends to focus on persistent non-compliance or materially inaccurate entries rather than technical lateness alone.

Personal liability of management board members arises separately. Under Polish corporate legislation, directors who knowingly provide false information to a public register may face criminal sanctions. The AML statute reinforces this by making the person who submits the CRBR entry personally responsible for its accuracy. This creates a direct line of exposure from a defective filing to the individual who signed the submission – not just the company.

Three scenarios trigger the most serious exposure. First, failing to update the register after a share transfer – the most common oversight. Second, reporting a legal entity (a holding company) as the beneficial owner instead of tracing through to the natural person. Third, omitting a beneficial owner altogether because the ownership chain runs through a jurisdiction that does not maintain a public register, making verification difficult. None of these errors is treated as a minor technicality by the GIIF.

The irreversible consequence of a materially false entry is that it can invalidate AML customer due diligence performed by banks and notaries who relied on it. This can, in practice, unwind transactions and forfeit commercial relationships that took years to build. The risk is not theoretical – Polish banks are required to flag discrepancies between CRBR data and their own client files to the GIIF.

How do three business scenarios affect CRBR compliance?

Different business structures interact with the CRBR in distinct ways. Understanding the specific pressure points for each scenario prevents the most costly errors.

Manufacturing company with a domestic shareholder base. A Polish manufacturing sp. z o.o. with two individual shareholders each holding 50% presents the simplest case. Both shareholders are reported directly. The complication arises when one shareholder transfers part of their stake to a family member or creates a holding vehicle. The seven-day clock starts on the date of the transfer agreement, not the date of the notarial deed or KRS registration. Manufacturing companies undergoing ownership succession – a common event in Poland's mid-market – face this trigger repeatedly.

IT company with an employee stock option plan. Equity incentive plans create a moving ownership picture. If options vest and are exercised in batches, each exercise event that pushes a natural person above the 25% threshold requires an immediate CRBR update. IT companies with distributed cap tables must therefore build CRBR monitoring into their equity administration process, not treat it as a one-off compliance task.

Foreign investor entering Poland. For a German or Luxembourg investor acquiring a Polish subsidiary, the beneficial owner is typically the natural person at the top of the foreign holding chain. Identifying that person, obtaining their personal data (including PESEL or date of birth), and submitting the entry within seven days of closing requires coordination across jurisdictions. Our article on compliance programme design for Luxembourg subsidiaries in Poland addresses the specific challenges of EU holding structures in detail.

We obtained a binding interpretation of the CRBR filing obligations for a German investor's Polish joint venture in Lower Silesia (spring 2026), clarifying that the foreign parent's ultimate beneficial owner – resident in Switzerland – had to be disclosed even though Switzerland is not an EU member state. The filing was completed within the statutory deadline.

What are the most common mistakes and how can they be avoided?

Compliance lawyers in Warsaw see the same errors repeatedly. Awareness of these patterns is the most efficient form of risk management. Three mistakes account for the majority of CRBR enforcement cases seen in practice.

Mistake one: treating CRBR as a one-time task. Many companies file correctly at incorporation and then forget the register exists. Every subsequent ownership change – share transfer, pledge, usufruct, proxy arrangement conferring control – is a separate triggering event. A practical fix is to include a CRBR review clause in every shareholder agreement and share transfer deed, requiring the management board to assess and update the register within five days of signing.

Mistake two: relying on the KRS timeline. As noted above, the CRBR deadline runs from the factual event, not the KRS registration date. Companies that wait for the KRS to confirm a change before updating the CRBR will routinely miss the seven-day window. The KRS process for a routine shareholder change typically takes two to four weeks – far longer than the CRBR deadline allows.

Mistake three: incomplete tracing of indirect ownership. Where a Polish company is owned by a foreign holding entity, the filing must identify the natural person at the end of the chain, not the intermediate company. This requires obtaining corporate documentation from each layer of the holding structure. For complex multi-tier structures, this documentation assembly should be completed before any transaction closes – not after the deadline has started running.

Build CRBR review into every share transfer and restructuring checklist
Set the internal deadline at five days to create a buffer before the statutory seven
Obtain beneficial owner data (including PESEL or date of birth) from all natural persons before closing
Verify that the submission describes natural persons, not intermediate entities

CRBR compliance also intersects with whistleblower compliance requirements under Poland's transposition of the EU Whistleblowing Directive. Internal reporting channels must be designed to receive reports of potential AML and CRBR violations. This connection is explored further in our article on evidence standards in Polish court proceedings, which is relevant when CRBR disputes escalate to litigation.

Specific situations facing your company require tailored analysis. A missed CRBR deadline or inaccurate entry can preclude banking relationships and forfeit regulatory standing that is difficult to restore.

If your company has undergone an ownership change, restructuring, or foreign acquisition and you are uncertain whether the CRBR entry is current and accurate – we will review your structure, identify any gaps, and manage the filing: info@kordeckipartners.com.

Frequently asked questions

Q: Does the seven-day deadline apply to changes that are still being negotiated but not yet signed?

A: No. The clock starts when the legal change takes effect – typically the date a share transfer agreement is signed or a corporate resolution is adopted. Preliminary agreements and letters of intent do not trigger the obligation. However, companies should prepare the filing in advance so it can be submitted on the day of signing rather than scrambling afterwards.

Q: Can a company be fined if it reported the correct beneficial owner but used an incorrect format or missing data field?

A: Yes, technically. The AML statute requires the entry to be complete and accurate in all respects. A missing PESEL number (where one exists and is obtainable) or an incorrect country of residence can constitute a defective filing. In practice, the GIIF has focused enforcement on materially incorrect or absent entries, but the legal risk of formal defects is real. Verification by a compliance lawyer before submission eliminates this exposure.

Q: How much does CRBR compliance cost for a company with a simple ownership structure?

A: The filing itself is free of charge. For a straightforward sp. z o.o. with one or two Polish individual shareholders, an experienced lawyer can prepare and submit the entry in two to three hours. For foreign-owned structures requiring multi-jurisdictional documentation, the process is more involved – allow for a full working day of legal time plus document translation costs. Annual monitoring for a mid-size company with periodic ownership changes is typically structured as a flat-fee retainer.

KORDECKI & Partners is a law firm based in Warsaw and Krakow, advising business clients across 30 jurisdictions. Our team combines expertise in Polish and international law with a practical approach to AML compliance, ESG reporting, and beneficial ownership register obligations. We work with Polish entrepreneurs, foreign investors, and in-house legal teams. To discuss your situation, contact info@kordeckipartners.com.