Will European UBO registers no longer be publicly accessible?

Why was this decision taken?

For the EU, finding the right balance between data protection (GDPR) and AML is problematic. Although the GDPR does not cover businesses, beneficial owners are individuals the GDPR protects.

Therefore on 22 September 2021, the Head of the European Data Protection Supervisor said - concerning the European Commission’s proposed AML package issued in July 2021, « I recognize the importance of combatting money laundering and the financing of terrorism. At the same time, it is also important that the measures envisaged to achieve this goal are fully in line with the EU’s data protection laws and principles. In particular, the processing of individuals’ personal data must remain limited to what is necessary and proportionate in light of the specific purpose(s) set out in the proposals.

The Ondorse analysis

We believe this is a positive move regarding compliance and risk around business identity.

General public access to all information in UBO registers can help fraudsters who may use this information to defraud other businesses by stealing someone else’s business identity. Restricting its access has the benefit of limiting - but not eliminating - such a risk.

However, it means all organizations will need to demonstrate their legitimate interest to local authorities. It should be reasonably straightforward for regulated entities but might become more problematic for unregulated ones such as marketplaces or BaaS agents. Their access to gated information on UBOs for onboarding and compliance purposes will likely be affected.

If you are a BaaS agent or a marketplace that needs to access gated UBO registers as part of your onboarding, compliance, and risk management, Ondorse can accompany you in this process; get in touch with us

‍