UBO / CRBR in Poland: Who Must File, When, and Penalties

UBO / CRBR in Poland: Who Must File, When, and Penalties

The Central Register of Beneficial Owners (CRBR) is a Polish public register that collects information on a company’s ultimate beneficial owners (UBO). The register is part of Poland’s anti-money laundering framework and is regulated primarily by the Act of 1 March 2018 on Counteracting Money Laundering and Terrorist Financing (the “AML Act”) [1].

Correction (accuracy): CRBR collects information not only on UBOs, but also on persons holding certain functions in the entity, as required by the AML Act (e.g., persons authorised to represent the entity, and – depending on the entity – also persons authorised to act on its behalf). The exact scope depends on the entity type under the statutory catalogue [1], [2].

From a business perspective, CRBR compliance is not only a formal filing obligation. Incorrect or late disclosures can disrupt onboarding with banks and counterparties, trigger enhanced due diligence, and create reputational risk during transactions and audits.

CRBR Poland – who is a beneficial owner (UBO) under Polish rules

Under the AML Act, a “beneficial owner” is a natural person (never a company) who ultimately owns or controls a customer, or on whose behalf a transaction or activity is carried out. For corporate entities, beneficial ownership is typically assessed through:

• direct or indirect shareholding or voting rights,
• control through other means (e.g., shareholder agreements, special rights),
• the ability to exercise decisive influence over the entity’s actions.

The exact identification method depends on the factual structure (including multi-layer holdings and control rights). The AML Act provides detailed criteria and requires entities to hold documentation on the arrangements and circumstances determining the beneficial owner (and to make it available upon request to obliged institutions and competent authorities) [1].

UBO register Poland filing – who must file to CRBR

CRBR filings are required for Polish entities listed in the AML Act. In practice, this covers most standard corporate vehicles used for business in Poland, including:

• spółka z ograniczoną odpowiedzialnością (sp. z o.o.),
• spółka akcyjna (S.A.) that is not a public company,
• simple joint-stock company (PSA),
• partnerships such as registered partnerships and limited partnerships (depending on the category set out in the AML Act).

Obligations may also apply to other entity types listed in the AML Act. Qualification should be confirmed against the current statutory catalogue, because the scope has changed over time and depends on the entity’s legal form [1].

Three exceptions – when CRBR filing does not apply

The AML Act provides exclusions from CRBR filing for specific categories. The following three exceptions apply:

• natural persons conducting business activity (sole proprietors) – as they are not entities entered in KRS for CRBR purposes,
• civil law partnerships (spółka cywilna) – which are not KRS-registered entities,
• public companies – i.e., entities whose securities are admitted to trading on a regulated market and which are subject to disclosure requirements ensuring adequate transparency of beneficial ownership under EU law (as reflected in the AML Act scope/exclusions).

These exclusions are interpreted strictly. For example, a corporate group operating in Poland through a sp. z o.o. still files even if the ultimate parent is listed, unless the Polish entity itself falls within an exclusion expressly provided by law.

CRBR update deadline – key timing rules for initial filing and updates

CRBR obligations are time-sensitive. The AML Act sets deadlines for submitting initial information and for updating filings after changes. The timing differs depending on whether the entity is newly registered or already operating and what type of change occurs.

Initial CRBR submission

As a rule, newly formed entities file CRBR information after registration in the National Court Register (KRS). Under the AML Act, the standard deadline for the initial filing is 14 days from entry in KRS (with statutory exclusions for certain periods/days when calculating time limits) and transitional provisions applied to entities existing before CRBR was launched [1], [2].

Updates after a change

Updates must be filed after any change to the disclosed information, including changes in:

• UBO data (e.g., name, citizenship, country of residence),
• the nature or extent of beneficial ownership or control,
• persons authorised to represent the entity (e.g., management board changes in a sp. z o.o.).

Under the AML Act, the standard deadline to update CRBR information is 14 days from the date of the change (with statutory rules for calculating time limits). The “date of change” can be fact-dependent in staged or conditional transactions (e.g., when control is obtained upon closing), so timing should be assessed against the transaction structure and documentation [1], [2].

CRBR submission for sp z oo – practical data points and typical issues

For a sp. z o.o., CRBR filings typically require identifying UBOs through the shareholder chain and disclosing persons authorised to represent the company (management board members). Common issues seen in practice include:

• multi-level foreign ownership with intermediate entities in multiple jurisdictions,
• minority shareholdings paired with control rights granting decisive influence,
• inconsistent data between KRS records, corporate documents, and CRBR submissions,
• group reorganisations where UBO changes occur without visible changes in the Polish company’s share ledger.

From a risk management perspective, the critical point is documenting the control analysis. Financial institutions and counterparties often request explanations supporting the UBO designation, not only the CRBR confirmation.

CRBR penalties – what happens if an entity fails to file or files incorrectly

The AML Act provides administrative sanctions for non-compliance with CRBR obligations. A failure to submit information, submitting information inconsistent with facts, or failing to update information within the statutory period may result in a financial penalty imposed under the AML Act. Under the AML Act, the maximum administrative fine for breach of CRBR obligations is up to PLN 1,000,000 [1], [2].

Separately from financial penalties, inaccurate CRBR data may trigger operational consequences:

• delays in bank account opening and payment services due to AML checks,
• transaction delays (M&A, financing) when CRBR data does not match due diligence findings,
• increased scrutiny by compliance teams and auditors,
• reputational risk if stakeholders treat inaccuracies as a red flag for governance or transparency.

How to manage CRBR compliance in ongoing operations

Effective CRBR management is typically built around internal governance rather than one-off filings. For international groups, good practice includes:

1. mapping beneficial ownership and control rights across the group (including indirect holdings),
2. maintaining a change log for share transfers, reorganisations, and management changes,
3. coordinating CRBR updates with KRS filings and corporate resolutions,
4. assigning responsibility for monitoring changes that may affect UBO status (legal/compliance function).

This is informational material, not legal advice. The correct CRBR approach depends on the ownership and control structure and should be confirmed against the AML Act and current practice of authorities.

To reduce execution risk in filings and updates, consider a structured review of the UBO analysis and CRBR documentation and contact us before time-sensitive transactions close.

FAQ – CRBR Poland

1) Is CRBR the same as KRS in Poland?

No. KRS is the National Court Register for entities and their statutory data. CRBR is a separate register focused on beneficial owners (UBOs) and information required by the AML Act, including (for in-scope entities) data on persons authorised to represent the entity [1], [2].

2) Who is the beneficial owner Poland requires to be disclosed?

A beneficial owner is always a natural person who ultimately owns or controls the entity, including through indirect holdings or control by other means. The identification is based on the AML Act criteria and the factual structure [1].

3) What is the CRBR update deadline after a shareholder change?

Under the AML Act, the standard update deadline is 14 days from the date of the change (with statutory rules for calculating time limits). The exact “date of change” can be fact-dependent in staged or conditional transactions, so timing should be assessed against the transaction structure and documentation [1], [2].

4) Does a sp. z o.o. always need CRBR submission?

In most cases, yes. A sp. z o.o. is generally within the scope of CRBR obligations under the AML Act, unless a specific statutory exclusion applies. The exclusions should be read narrowly and verified against the current wording of the AML Act [1].

5) What are CRBR penalties for late filing?

The AML Act provides for financial administrative penalties for failure to file, failure to update, or filing incorrect information. The maximum administrative fine for breach of CRBR obligations is up to PLN 1,000,000; the actual amount depends on the circumstances and the authority’s assessment under the AML Act [1], [2].

6) Does an ultimate parent listed on a stock exchange remove the CRBR obligation for a Polish subsidiary?

Not automatically. The exclusion applies to public companies as defined in the AML Act (in practice: the entity whose securities are admitted to trading on a regulated market and which is subject to adequate transparency requirements). A non-public Polish subsidiary (e.g., sp. z o.o.) may still be required to file its UBO data, depending on the statutory scope and the entity type [1].

Bibliography

[1] Act of 1 March 2018 on Counteracting Money Laundering and Terrorist Financing (Journal of Laws of Poland, as amended).

[2] CRBR official portal (Central Register of Beneficial Owners) – https://crbr.podatki.gov.pl/