Central Credit Register — Ireland’s CIP obligations
Most firms discover the Central Credit Register three months too late. Ireland’s national credit register is not a voluntary bureau and not only for banks. It reaches any regulated financial service provider established in the State that offers a loan, a deferred payment or any other form of financial accommodation — and the onboarding clock starts three months before the first euro is advanced. This piece sets out who is a credit information provider, what counts as credit, the two thresholds that drive everything, and how the monthly submission and the enquiry duty work.
1. What the Central Credit Register is
The Central Credit Register (CCR) is a national, mandatory database of personal and credit information operated by the Central Bank of Ireland under the Credit Reporting Act 2013, amended by the Markets in Financial Instruments Act 2018, which narrowed the definition of trade credit. The mechanics sit in the Credit Reporting Act 2013 (Section 11) (Provision of Information for Central Credit Register) Regulations 2016 (S.I. No. 486/2016) — which is what makes the Personal Public Service Number part of the mandatory data set.
Two features separate it from a commercial credit bureau. Consent is irrelevant — no permission is needed to submit data or to enquire. And it is bidirectional by law: the firms that must report must also check it before granting credit above a threshold.
The operational rules are the CCR Handbook: the Guidance on the Central Credit Register for Credit Information Providers, currently Version 2.7 (October 2025), above the Onboarding Manual, the Submission Manual with its field-level validations, and the enquiry specifications. The Guidance interprets; the manuals reject files.
2. Are you a credit information provider?
A credit information provider (CIP) is a regulated financial service provider (RFSP), the National Asset Management Agency, a local authority, or any other person who provides credit — excepting the Central Bank of Ireland or another central bank, and a pawnbroker within the meaning of the Pawnbrokers Act 1964. Appearing on any of the Central Bank’s registers settles the first limb: an RFSP is a CIP, and the only remaining question is whether what it provides is credit in scope.
The Guidance sets out a two-part scope test — am I a CIP, and am I providing credit in scope — and one branch of it decides the question for passporting firms. For EU-based lenders the test is establishment in the State: a lender established in Ireland is a CIP, one that is not falls outside the current implementation phase. Individuals providing credit are not CIPs in this phase. The obligation therefore attaches to the legal-entity footprint rather than to the lending decision — an Irish branch changes the answer, cross-border provision from another Member State currently does not. The Central Bank is explicit that reaching that conclusion is the lender’s own responsibility.
3. What counts as credit — and the exception that does not save a licensed firm
Credit for CCR purposes is a loan, a deferred payment or any other form of financial accommodation. The Guidance’s examples run from personal, car and student loans through mortgages, hire purchase and personal contract plans, overdrafts, credit and store cards, in-store credit, premium financing and commercial loans.
The Act carves out employer-to-employee credit; credit connected with a utility or other service supplied on a continuing basis; interbank credit; credit to a related undertaking; credit to government or an international organisation; and credit carrying no requirement to pay interest or any other charge in any circumstances — though the Guidance warns that a “0% interest” proposition is generally still in scope, because such products normally carry other charges.
The exception that matters most to a licensed payments or e-money firm is trade credit, because it looks like the escape route and is not. All four conditions must hold: both parties act in the course of business, trade or profession; the credit is repayable in full by a date not later than six months after provision; its purpose is to facilitate the purchase of goods or services from the provider; and the provider is not a regulated financial services provider. A merchant financing its own buyer may be inside the exception; a licensed institution financing the same purchase never is.
Two boundaries sit alongside it. Deposits, loan notes, securities and other tradeable instruments are outside the current phase. And the phasing has moved: consumer lending in 2017, non-consumer lending in 2018, asset finance and goods-or-service-linked credit in 2019, and from 1 February 2025 guarantors and guarantees — those entered into on or after that date in respect of credit agreements also entered into on or after it, and only where the CIP holds a legally enforceable guarantee.
4. The two thresholds
Almost every CCR question resolves to one of two amounts.
| Amount | Term | What it triggers |
|---|---|---|
| €500 or greater | Qualifying credit application / agreement | The reporting obligation — personal and credit information, monthly |
| €2,000 or greater | Relevant credit application | The duty to access the register under section 14 before deciding |
Section 14 places the duty to enquire on any relevant credit application, and the amount may be amended by order of the Minister for Finance. Section 15 is the permissive counterpart: a CIP may access the register below €2,000, to assess a guarantee or indemnity offered with an application, or where the borrower asks to change the nature or term of an agreement or has failed to comply with an obligation under one. The threshold is measured on the principal applied for, so the duty can bite before any assessment is made — a €2,000 application declined at first screening still required an enquiry.
5. The monthly submission
Reporting begins at drawdown of an instalment loan, or when funds are made available under a non-instalment product or credit card, and continues monthly until closure. The cadence is fixed: the reporting reference date for every CIP is the last calendar date in the month, and data must reach the register within five working days of it.
The Submission Manual classifies every field, and the class determines what a mistake costs. M (Mandatory) fields must be reported every month — omit one and the record is rejected. D (Dependent) fields must follow an attached rule, and breaking it also rejects the record. NM (Non-Mandatory) fields must be reported where the CIP holds the information. Above them sit standardised business scenarios following the contract life cycle: drawdown, restructure, arrears, closure.
Three details cause most of the remediation. All financial data on the register is in euro, so lending in another currency must be converted. A revolving facility whose operating credit limit is cut below €500, or removed, does not fall out of reporting — the Guidance treats continued reporting as a legal requirement and gives it a named monthly scenario. And accuracy is statutory twice over: section 21 requires reasonable steps to verify information obtained from the borrower, and Regulation 6 of S.I. No. 486/2016 all reasonable steps on the accuracy of personal information submitted, plus notification of changes. Accuracy is what makes the register’s Single Borrower View work.
6. Enquiries, footprints and use limits
An enquiry is not a free look. A new application enquiry reports its own data set — contract request date, consumer flag, role of the subject, credit limit or amount sought, product type, purpose of credit type — retained six months. The footprint lives far longer: five years on the borrower’s own credit report and two years on the report other CIPs see, recording the date, the purpose and the person’s role. The enquiring firm’s name appears only on the borrower’s own report.
A monitoring enquiry is the separate instrument for existing agreements — a missed obligation, or a request to restructure or change the nature or term — and where a guarantee is involved it must carry the purpose value Related to a Guaranteed Agreement. Use is restricted by that purpose: information obtained after a missed payment may be used only to monitor that failure. A CIP must keep a record of its access, and enquiring “to refresh the file” is not permitted.
7. Getting it wrong, and fixing it
All corrections to credit-agreement data go through the formal Amendment Process — not through a quietly different figure in next month’s file. It covers both data reported inaccurately and a gap: a correct present and historic position with months missing in between. The sequence is prescribed. The CIP applies in writing to the CCR as soon as possible and before the next reporting date, stating the number of affected records, the relevant Provider Contract numbers and a brief outline. In parallel it submits corrected data through the secure submission channel using the right file type: Submission File Type 1 for an error in contract data, Submission File Type 2 for a gap, and the Deletion of Records file type where records must be deleted before resubmission. The wrong file type is the most common way a correction fails silently.
Where the borrower initiates the correction the clock is theirs: they must be told within 20 days whether a decision has been made or more time is needed, extendable to not more than 40 days from receipt, with a note added to the record meanwhile. A borrower refused an amendment may still enter an explanatory statement of not more than 200 words under section 13. Two duties that are not about data at all also bind: section 23 requires CIPs to make borrowers and guarantors aware of their rights, and section 24 a notice on credit application forms stating that the Act requires information to be provided to the register.
8. Three worked examples
The tests above become concrete only against facts.
Example one: pay-in-three, launched from an Irish entity. Facts: an authorised firm established in Ireland launches a purchase-linked instalment product, average ticket €700, some baskets above €2,000, no interest but a late fee. Rule: deferred payment is credit; trade credit fails on its fourth condition because the firm is an RFSP; the no-charge exception fails on the late fee. Action: report every agreement of €500 or more monthly, build the section 14 enquiry into the decision flow at €2,000, and start dummy-data testing three months before the first advance. Outcome: a product that would otherwise have gone live invisible to the register is reported from month one.
Example two: the branch that created the obligation. Facts: an EU-authorised lender lending into Ireland cross-border decides to establish an Irish branch. Rule: the scope test turns on establishment in the State. Action: treat the establishment date, not the first Irish loan, as the trigger, and sequence onboarding so submission testing completes first — enquiry access follows it, and the firm must be able to enquire from the day it accepts applications. Outcome: the register is live on day one instead of three months into a book that cannot be reported.
Example three: the limit cut that did not end the obligation. Facts: a business revolving facility with a €1,500 limit is trimmed to €400; separately, the firm finds it stopped reporting another contract for four months during a migration and has since resumed correctly. Rule: cutting a limit below €500 does not remove the obligation; a missing stretch between a correct history and a correct present is a gap, not an error. Action: keep reporting the trimmed facility, and for the migration apply in writing before the next reporting date, submitting a Type 2 file rather than the Type 1 the team’s instinct suggested. Outcome: one continuous history instead of two.
Does a payment or e-money institution have to report to the CCR?
If it is a regulated financial service provider established in the State and it provides credit — including deferred payment — then yes, for every qualifying agreement of €500 or more. Being a payments firm rather than a lender by name changes nothing; the definition of credit does the work.
Is buy-now-pay-later in scope?
Deferred payment is expressly within the definition of credit, and the trade-credit exception cannot be used by a regulated financial services provider. A licensed firm offering purchase-linked instalments should assume scope once the principal reaches €500, and take legal advice on the specific product.
How long does an enquiry stay visible?
The credit data captured at a new application enquiry is retained six months; the footprint is visible five years on the borrower’s own report and two years on the report other providers see.
Do guarantors have to be reported?
Since 1 February 2025, yes — for guarantees, including all-sums guarantees, entered into on or after that date in respect of credit agreements entered into on or after it, and only where the CIP holds a legally enforceable guarantee.
9. What to do, today
- Run the scope test on the entity, not the product: an RFSP established in the State that provides credit outside the listed exceptions is in.
- If you are authorised, delete the trade-credit exception from your analysis — its fourth condition excludes RFSPs.
- Put the two thresholds in different places: €500 in the reporting scope rules, €2,000 in the credit-decision workflow as a hard gate; and work back three months from the first advance to book the dummy-data submission test, since enquiry access follows it.
- Make the five-working-day window after month end a named control with an owner.
- Write the M / D / NM field classes into data-quality checks, and document the correction routes: Type 1 for an error, Type 2 for a gap, Deletion of Records where records must go before they come back.
- Check the section 24 notice is on the application form.
Related: CIRBE — Spain’s credit register · Centrale dei Rischi — Italy’s credit register · FICP — declaring credit incidents to Banque de France · Branch versus freedom of services
