On 22 November 2022 the Court of Justice of the European Union (“CJEU”) ruled that the provision of Directive (EU) 2015/849, as amended (“AML (EU) Directive”) providing that Member States must ensure that information on the beneficial ownership of legal entities is accessible in all cases to any member of the general public is invalid.
In addition to granting access to the public on beneficial owner information, the AML (EU) Directive also allows Member States to provide for an exemption to the public’s access on a beneficial owner’s information where the access would expose the beneficial owner to “disproportionate risk, risk of fraud, kidnapping, blackmail, extortion, harassment, violence or intimidation, or where the beneficial owner is a minor or otherwise legally incapable”. This exemption for restricting access “in exceptional cases” and on a “case-by-case basis”, did not prevent the CJEU from ruling that the provision for granting the right to such access is invalid.
The judgement concerned CJEU’s joined Cases C-37/20, Luxembourg Business Registers and C-601/20, Sovim. The two cases were referred to the CJEU following a request for a preliminary ruling from the tribunal d’arrondissement de Luxembourg (Luxembourg District Court) pursuant to Article 267 of the Treaty on the Functioning of the European Union.
The concerned provision
The question referred to the CJEU concerns, inter alia, the provision of Article 30(5)(c) of the AML (EU) Directive which reads as follows:
Member States shall ensure that the information on the beneficial ownership is accessible in all cases to:
(a) […]
(b) […]
(c) any member of the general public.
The persons referred to in point (c) shall be permitted to access at least the name, the month and year of birth and the country of residence and nationality of the beneficial owner as well as the nature and extent of the beneficial interest held.
[…]
Conflict with the EU’s Charter of Fundamental Rights
In declaring invalid the provision permitting the general public’s access to information on beneficial ownership, the CJEU stressed in its decision that the concerned provision constitutes a serious interference with the fundamental rights enshrined in Article 7 (Respect for private and family life) and Article 8 (Protection of personal data) of the EU’s Charter of Fundamental Rights.
Effect on Cyprus AML legislation
The Cyprus AML Law transposing the respective AML (EU) Directive includes a similar provision permitting members of the general public to have access “in all cases” to information on the beneficial owner’s name, the month and year of birth, the nationality, the country of residence and the nature and extent of the beneficial interest held.
The CJEU’s decision is expected to impact the general public’s access “in all cases” on information concerning beneficial owners. It remains to be seen whether the AML (EU) Directive will provide express grounds for the public’s access to such information or whether such grounds will be left to the discretion of each Member State, however, such grounds must be based on a proportionate and balanced approach without violating the Charter’s rights.
In the meantime, the Cyprus AML Law will need to be amended so that access of the public to information on beneficial owners is subject to grounds which are aligned with the EU’s Charter on Fundamental Rights and specifically Article 7 (Respect for private and family life) and Article 8 (Protection of personal data).
As of 23 November 2022, the Cyprus Department of Registrar of Companies and Intellectual Property suspended the access to the register of beneficial owners for the general public, in response to CJEU’s decision. Obliged entities will continue to have access to information maintained in the beneficial owner’s register by submitting a solemn declaration confirming that the information is requested within the context of performing customer due diligence.
Our services
Ioannides Demetriou LLC advises on matters concerning regulatory AML compliance and the protection of fundamental rights such as your right to the protection of personal data and your right for private and family life.
Reach out to our team to ensure that your regulatory obligations are protected in a manner that respect and safeguard your fundamental rights.
You can contact us directly by calling + 357 22 022 999 or by email at [email protected]
The information provided in this article does not and is not intended to constitute legal advice; instead, all information contained in this article is for general informational purposes only. If you require assistance with any legal matter, including a matter referred to in this article, you should contact one of our attorneys to obtain advice tailored to your specific circumstances.
