RBO Ireland — filing, Tier Two access and discrepancies

Ask an Irish customer for a copy of its RBO filing and it cannot give you one. The Register of Beneficial Ownership closed the filing view after submission: a company can see that it filed, not what it filed. What it can produce is its own internal beneficial-ownership register — and the gap between that document and the central register is precisely what S.I. No. 110 of 2019 asks a designated person to notice and report. Ireland has no annual confirmation, a five-month runway for new entities and a fourteen-day clock for changes, and it puts the discrepancy duty on you rather than on the registrar.

1. What the RBO is, and what it is not

The RBO is the central register of beneficial ownership of companies and industrial and provident societies incorporated in the State, held by the Registrar of Beneficial Ownership under S.I. No. 110/2019, the European Union (Anti-Money Laundering: Beneficial Ownership of Corporate Entities) Regulations 2019. It is a separate instrument from the beneficial-ownership register for trusts, and separate again from the company filings held by the Companies Registration Office — an RBO account is not a CRO account, and the two logins do not interchange.

The practical consequence for a payments firm is that “the Irish register” is three registers, and the one you need depends on the customer’s legal form. Asking a trustee for an RBO extract produces nothing; asking a company for its CRO annual return produces the wrong document.

That combination is unusual. The five-month runway is generous by EU standards, the fourteen-day follow-up obligation is tighter than most, and the absence of any annual confirmation means an RBO record can sit undisturbed and unverified for years. An extract with an old date is not evidence of anything having been checked.

2. What is actually on the register — and what is hidden

Regulation 21(1) sets a short field list: the name, date of birth, nationality and residential address of each beneficial owner; a statement of the nature and extent of the interest held or control exercised; and the entity’s own name and number as they appear on the register kept under the Companies Act 2014 or the Industrial and Provident Societies Acts.

Regulation 21(2)(a) then adds the PPS number of each beneficial owner to whom one has been assigned — but only for verification. Regulation 21(5) prohibits the Registrar from disclosing it, and Regulation 21(6) requires that only a hashed version be stored, generated by a mathematical function that does not allow the number to be recovered. The PPSN is a matching key, never an output. The register validates the forename and surname filed against the name held by the Department of Social Protection, which is why filings fail on a customary name where the legal name differs.

Where a beneficial owner has no Irish PPSN, the route is a Form BEN2 / Form VIF, a declaration as to verification of identity, which produces an Identified Person Number (IPN) issued by the CRO Registrar. One VIF per beneficial owner; the IPN is then reusable for later filings. It is an offence under Regulations 28(5) and 28(7) to seek an IPN for someone who already has a PPSN — a point worth making to a group that treats the VIF as the easier path for all its non-resident directors.

3. Two tiers of access, and where a payment firm sits

Regulations 24 and 25 create unrestricted and restricted access, which the RBO presents as Tier One and Tier Two.

Tier One — unrestricted. Authorised officers of An Garda Síochána, FIU Ireland, the Revenue Commissioners, the Criminal Assets Bureau, the Central Bank of Ireland, the Department of Justice, the Property Services Regulatory Authority, the Legal Services Regulatory Authority, the Law Society of Ireland, the General Council of the Bar of Ireland and designated accountancy bodies within the meaning of Part 4 of the Criminal Justice (Money Laundering and Terrorist Financing) Act 2010, plus an inspector appointed by the Director of Corporate Enforcement under section 764(1) of the Companies Act 2014. Regulation 24(9) lets the Garda, Revenue, competent authorities and the CAB pass the information to a corresponding competent authority in another Member State.

Tier Two — restricted. Designated persons required by Part 4 of the 2010 Act to carry out customer due diligence. “Designated person” is defined in section 25 of that Act as amended in 2018 and covers credit institutions, financial institutions, auditors, external accountants, tax advisers, property service providers, casinos and persons trading in goods in transactions of at least €10,000. An authorised EMI or payment institution is a financial institution for this purpose.

The public sees only the entity profile and the number of beneficial owners filed — the consequence of the Court of Justice ruling on indiscriminate public access. A screening vendor claiming full Irish beneficial-ownership coverage from public sources is describing something that no longer exists.

Tier Two access is applied for through the RBO Customer Portal and is administered rather than granted once: an account administrator adds and removes sub-users directly, and a sub-user’s e-mail address must sit on the organisation’s own domain. Reports are purchased from a pre-funded balance, so the account has to be topped up before an urgent onboarding, not during it. The RBO states that refunds — including partial refunds — are not available on a top-up, which makes the balance a small budgeting decision rather than a float.

4. The discrepancy duty is yours, and it has two instruments

This is the part of the Irish regime most often collapsed into a single idea. There are two different notices and they report different failures.

A Discrepancy Notice arises under Regulation 20(3). Where particulars from a relevant entity’s own beneficial-ownership register come to a designated person’s knowledge — whether in the course of customer due diligence or otherwise — and the designated person forms the opinion that there is a discrepancy between those particulars and the information in the central register, the designated person shall deliver notice of that opinion to the Registrar in a timely manner, specifying the particulars in which the discrepancy exists. The same duty falls on a “relevant person” under Regulation 26(1): a competent authority, the Garda, the Revenue Commissioners or the CAB.

A Non-Compliance Notice is the other case: the searcher finds no beneficial-ownership details on the RBO for the entity at all, and reports an apparent failure to comply with Regulations 20 and 21. There is nothing to be discrepant with; the filing is absent.

What follows a discrepancy notice is set out in Regulation 20(4). The Registrar may enter a statement in the central register that the notice has been received and what it concerns, and serves notice on the entity requiring it either to explain why the opinion is not well founded or to deliver amended particulars. Regulation 20(5) then does something quietly important: neither the designated person’s notice nor the entity’s submission is, of itself, to be regarded as defamatory matter. The statutory protection is there because the duty is uncomfortable, and it removes the usual reason given for not filing.

5. Three files, three outcomes

Scenario one — the customer cannot show you its filing. An Irish private company is asked during periodic review to evidence its RBO position. It sends a screenshot of a submission confirmation and says the detail is no longer visible to it. Rule: information filed on the RBO is not viewable after filing; the entity’s obligation under Part 2 is to keep and maintain its own internal beneficial-ownership register. Action: ask for the internal register, and pull the RBO extract yourself under Tier Two access. Outcome: you now hold the two documents that Regulation 20(3) compares — which is the only position from which a discrepancy can be identified at all.

Scenario two — the empty entity. A newly onboarded Irish company, incorporated four months ago, returns an RBO profile showing zero beneficial owners filed. The relationship manager wants to raise a discrepancy notice. Rule: Regulation 20(2) gives a new entity five months from incorporation; nothing has yet been breached, and a Non-Compliance Notice reports a failure under Regulations 20 and 21 rather than a mismatch. Action: record the incorporation date and the five-month expiry, diarise the check for month six, and take the internal register in the meantime. Outcome: the notice, if it is still needed, is filed against an actual breach and on the correct form — and the firm has not reported a company that is inside its statutory runway.

Scenario three — a change the customer treated as housekeeping. A customer tells you in March that one shareholder bought out another in February and the share register was updated the same week. The RBO extract still shows the old split. Rule: Regulation 23(5) requires the central register to be brought into line within fourteen days of the obligation to amend the internal register falling due — and Regulation 20(3) makes the mismatch a reportable discrepancy once it comes to your knowledge. Action: put the dates on the file, deliver a discrepancy notice to the Registrar specifying the particulars, and continue the onboarding or review on the evidence you actually hold. Outcome: the duty is discharged in a timely manner, and Regulation 20(5) covers the notice against a defamation argument from the customer.

FAQ

6. What to do, today

• Stop asking Irish customers for their RBO filing. Ask for the internal beneficial-ownership register, and pull the central extract yourself. Requesting a document the customer cannot produce delays onboarding and generates no evidence.
• Apply for Tier Two access before you need it, and keep the balance funded. Sub-user e-mail addresses must sit on your own domain, and top-ups are not refundable, so provision the account for a quarter rather than a case.
• Diarise the five-month mark for every newly incorporated Irish customer. An empty profile inside the runway is not a breach; after it, it is a Non-Compliance Notice.
• Write the discrepancy duty into the procedure, with the two forms distinguished. Regulation 20(3) is mandatory once the opinion is formed, and Regulation 20(5) removes the defamation objection.
• Treat a fourteen-day-old ownership change as a live reporting trigger. Ireland has no annual sweep to catch it, so the follow-up obligation is the only mechanism keeping the register current.
• Check which register the customer is even on. Companies and industrial and provident societies are on the RBO; trusts are not, and CRO filings are a different document again.

Related: Beneficial ownership registers — filing and discrepancies · Discrepancy reporting on UBO registers · What is a beneficial owner · The Central Bank of Ireland Portal — PI and EMI returns