Ultimate Beneficial Owners in Portugal

Portugal has a specific statutory regime centred on the RCBE. It was approved by Law No. 89/2017 of 21 August and is contained in the Legal Regime of the Central Register of Beneficial Owners (RJRCBE), enacted as an annex to that law, which transposed Chapter III of Directive (EU) 2015/849. It operates together with Law No. 83/2017 of 18 August, the main AML/CFT statute, which contains the criteria for determining beneficial ownership.

The RCBE is managed by the IRN and is constituted as a database holding sufficient, accurate and current information on the natural persons who, even indirectly or through third parties, own or effectively control the entities subject to registration. The duty is not merely formal: the entity must declare the relevant natural persons, the circumstances evidencing that status and the economic interest held.

The regime has been amended, notably by Law No. 58/2020 of 31 August and by Decree-Law No. 115/2025 of 27 October. The latter is particularly significant because it changed the access model, aligning Portuguese law with the post-Sovim EU framework and with Directive (EU) 2024/1640, by requiring demonstration of a legitimate interest for public-facing access to beneficial ownership information.

Entities and arrangements subject to the RCBE

The scope of the RCBE is deliberately broad. It is not confined to ordinary trading companies: it also captures non-profit entities, foreign entities with a Portuguese nexus, representations, certain non-personified arrangements and trust-like structures. The following are covered:

• Portuguese commercial companies. Includes quota companies, single-member quota companies, public companies (S.A.) and other commercial forms, unless a specific exclusion applies.
• Portuguese civil companies. Covered where they fall within the statutory wording.
• Associations. Covered unless expressly excluded. The analysis is functional, focusing on who exercises equivalent control or economic influence.
• Cooperatives. Subject to the same declaration, update and confirmation duties.
• Foundations. Equivalent criteria to those for non-corporate legal persons apply.
• Foreign entities with activity or an act in Portugal requiring a NIF. Relevant for foreign entities acquiring Portuguese assets, entering certain transactions or otherwise requiring Portuguese tax identification.
• Representations of foreign or international legal persons. Expressly covered where they carry on activity in Portugal.
• Non-personified arrangements with their own objectives. Captured where they fall within the statutory formula.
• Fiduciary management instruments (trusts) registered in the Madeira Free Trade Zone. Specific content requirements apply.
• External financial branches in the Madeira Free Trade Zone. Expressly included in the statutory scope.
• Fiduciary funds and similar non-personified collective-interest centres. Conditionally covered where the statutory triggers apply, namely a NIF, a business relationship or occasional transaction with an obliged entity, or Portuguese establishment or residence of the trustee or manager.
• Subsidiaries of listed companies. Usually covered unless themselves exempt. A subsidiary is not automatically exempt merely because its parent is listed.
• Companies in insolvency. Covered. The company remains subject; the insolvent estate, as such, is excluded.

Main exclusions

The RJRCBE provides express exclusions, which should be read restrictively. Where the facts do not clearly fall within an exclusion, the prudent position is to assume that the entity is subject to registration or to obtain specific advice. The main excluded categories are:

• Diplomatic and consular missions and recognised public international organisations. Applies to organisations recognised by convention or headquarters agreement involving Portugal.
• Public-sector services and entities. Includes the central, regional and local State administration subsectors. Official guidance treats public companies as falling within this exclusion.
• Independent administrative entities. Includes certain regulators and entities operating alongside Parliament, as defined by statute.
• Banco de Portugal and the media regulator. Express statutory exclusion.
• Professional orders. Express statutory exclusion.
• Companies with shares admitted to trading on a regulated market. Excluded where the issuer is subject to EU or equivalent disclosure rules. Their permanent representations are also excluded.
• Consortia and complementary business groupings. Express statutory exclusion, without prejudice to the participants' own duties.
• Certain condominiums. Excluded if the statutory patrimonial value and ownership or control thresholds are met; otherwise a case-by-case analysis is required.
• Insolvent estate. Excluded. The insolvent company should not be treated as excluded merely because insolvency proceedings are pending.
• Jacente and undivided inheritances. Excluded since Decree-Law No. 115/2025, with effect from 1 November 2025.

The duty to declare rests, in the first place, on the entity subject to the RCBE. The declaration may be filed by the members of the management body of companies or by persons performing equivalent functions in other legal persons. In trust-like arrangements, the duty may fall on the trustee, the person legally responsible for management, or whoever exercises de facto or de jure administration, depending on the structure.

The law also permits filing by lawyers, notaries, solicitors and certified accountants, whose powers of representation are presumed for this purpose. Founders may also file through the special immediate or online incorporation procedures.

The declaration is made by electronic form. Assisted electronic completion at registry services is possible in defined cases, but the ordinary practice is online submission through the RCBE portal, with authentication by the competent person or professional.

Filing timeline

• Initial declaration for legal persons. Generally within 30 days after the incorporation registration or the first entry in the Central Register of Legal Persons, depending on whether the entity is subject to commercial registration. Treat it as a mandatory post-incorporation step and as a closing item in incorporations.
• Entity ceases to be excluded. Within 30 days of the fact that makes it subject to the RCBE. Relevant for condominiums, foreign entities and structures whose status changes.
• Trust-like arrangements with special triggers. Before the provision of services, before a business relationship or occasional transaction with an obliged entity, or within 30 days of attribution of a Portuguese NIF, depending on the trigger. Obliged entities may make the relationship or transaction conditional on proof of RCBE compliance.
• Updates after a change. As soon as possible and never later than 30 days from the fact determining the change. Applies to changes in beneficial owners, economic interest, control chain or relevant data.
• Annual confirmation. By 31 December each year; entities filing IES may confirm through the IES. Dispensed if the entity already updated the information in the same year and no subsequent change occurred.
• Voluntary dissolution or extinction. The entity may only be voluntarily dissolved or extinguished after updating the RCBE information or confirming that it remains current. Compliance should be checked before liquidation or dissolution workflows.
• Foreign entities performing occasional acts. The obligation is fulfilled each time the act is performed, rather than by a standing update rule. Relevant for foreign investors and asset-acquisition structures with episodic Portuguese transactions.

The criteria are set out in Law No. 83/2017. In general terms, beneficial owners are the natural persons who ultimately own or control the client and the natural persons on whose behalf a transaction or activity is conducted. The analysis is substantive and risk-based: the aim is to identify the final natural person or persons, not merely the first shareholder in a corporate chain.

Corporate entities

For corporate entities, the law focuses on ownership and control under Article 30. A natural person who directly or indirectly holds a sufficient percentage of shares, voting rights or capital is a beneficial owner. One point that many guides over-simplify deserves emphasis: Portuguese law does not rigidly fix 25% as the sole and exclusive threshold, but rather as an indicium of a sufficient percentage; a holding above 25% through one or more companies controlled by the same natural person may evidence indirect ownership. This is an indicative threshold, not the only possible criterion.

A person may also qualify as a beneficial owner by exercising control by other means, even without reaching the capital threshold. Examples include control of voting rights, powers to appoint or remove managers or directors, veto or consent rights over strategic decisions, contractual dominance, shareholders' agreements, nominee or voting-trust structures, financing arrangements with control features, family or fiduciary arrangements, de facto influence or common-control mechanisms.

If, all possible means having been exhausted, no natural person is identified, or doubts remain as to the identity of the true beneficial owner, and provided there is no suspicion, the persons holding senior management positions may be treated as beneficial owners on a fallback basis. This should be documented as an exception, not used as a shortcut.

Trusts, fiduciary arrangements and analogous figures

For trusts and analogous arrangements, the analysis is functional. The law refers to the settlor or founder, the trustees or fiduciary administrators, any protector or curator, the beneficiaries or categories of beneficiaries, and any other natural person who exercises ultimate control through direct or indirect ownership or by other means.

Where beneficiaries are defined by class and not yet individually determined, the declaration must contain the circumstances enabling identification of the category or categories of persons in whose main interest the arrangement was created or operates.

Foundations, associations and other non-corporate legal persons

For non-corporate legal persons, such as foundations, and for analogous collective-interest centres without legal personality, the law applies positions equivalent or similar to those used for trusts. This is particularly relevant for associations and foundations, where there are no shareholders and no capital percentage to apply.

In these structures, the analysis should examine the statutes, the powers reserved to founders, appointment or removal rights over the governing bodies, the persons entitled to assets or benefits, who controls the application of funds, any protectors or supervisory figures, funding dependence, de facto control and any special rights. The decisive question is who ultimately controls or benefits from the entity or arrangement.

Listed companies and securities structures

Companies whose shares are admitted to trading on a regulated market and that are subject to EU or equivalent transparency duties are, as a rule, excluded from the RCBE. This does not mean that all entities in their group are. A non-listed Portuguese subsidiary normally remains subject to the RCBE and must identify its own beneficial owners or, where appropriate, apply the senior-management fallback.

For public companies (S.A.), the RCBE should be read together with securities-law and corporate-law sources. Portugal no longer allows bearer shares, but the Commercial Register does not operate as a live shareholder register for S.A.s. Beneficial ownership analysis may require issuer records, financial-intermediary records, CMVM disclosures for listed or open companies and documentation from the company.

The RCBE declaration must contain information on the entity subject to registration, on the beneficial owner or owners determined under Law No. 83/2017 and on the declarant. In trust-like cases it must also include special information on the arrangement and on the persons occupying trust-equivalent roles. The main categories are:

• Entity data. Portuguese NIPC or NIF; for non-residents, foreign NIF or equivalent if any; corporate name; legal nature; registered office and jurisdiction for foreign entities; CAE; LEI if applicable; institutional email. It should be aligned with the Commercial Register, the Central Register of Legal Persons, tax records and constitutional documents.
• Beneficial owner data. Full name; date and place of birth; nationality or nationalities; full permanent residence address with country; identity document data; Portuguese NIF where applicable and foreign NIF or equivalent; contact email. Not all collected data is publicly accessible: full address, ID document data and full date of birth are protected personal data.
• Non-resident beneficial owners. Where a fiscal representative exists, the representative's name, address and NIF are additionally identified. Particular care is needed with foreign individuals without Portuguese tax registration.
• Declarant and representative of a minor or incapacitated beneficial owner. Name; address or professional domicile; identity document or professional-card data; NIF; capacity in which acting; contact email. Decree-Law No. 115/2025 clarified data-minimisation concerns regarding representatives of minors and accompanied adults.
• Indicia and economic interest. Circumstances evidencing beneficial ownership and the economic interest held, including the control chain where applicable. Listing names without explaining the control or ownership basis is insufficient.
• Source of information. The declaration must identify the source supporting the indicia and the economic interest, such as public databases, notably the Commercial Register, or sufficient documents where public sources are unavailable. Useful documents include group charts, registers, constitutional documents, shareholders' agreements, securities statements or trust and foundation documentation.
• Trust-like arrangements. NIPC or NIF or equivalent; name and identification; date of constitution and duration; modifying or extinguishing facts; object or type; governing law; assets; trustee or manager data; rights and obligations among plural trustees; management-company data if applicable. This applies to Madeira trusts and other fiduciary or collective-interest arrangements where the statutory triggers apply.

Companies' internal record duty

In addition to filing the RCBE declaration, commercial companies must maintain an updated internal record of the identification elements of shareholders, of the natural persons who directly or indirectly own the holdings, and of those who otherwise exercise effective control. Shareholders must inform the company of changes to the relevant identification elements within the statutory period; non-compliance, after notice, may have corporate consequences, including possible amortisation of the holdings under the applicable company-law mechanisms.

Public information obtained from the RCBE

The information obtainable through the public-facing RCBE layer is deliberately narrower than the full declaration. Following the 2025 amendment, it is made available electronically to persons or organisations that demonstrate a legitimate interest. The publicly available information includes entity identification data and, for the beneficial owner, name, month and year of birth, nationality, country of residence and economic interest held. It does not include the full date of birth, full address, ID document data, contact email or the supporting file. Accesses are logged for audit purposes for a period of five years, including the legitimate interest invoked.

For due diligence purposes, foreign lawyers should distinguish between four things: the information legally obtainable by RCBE consultation; the RCBE proof or access code supplied by the entity; beneficial ownership information verified by an obliged entity under AML/CFT duties; and private documents requested from the client or counterparty under a confidentiality agreement.

Being identified as a beneficial owner in the RCBE is, first and foremost, a transparency and AML/CFT consequence. It does not, by itself, make the beneficial owner liable for the company's commercial, tax or employment debts. It is not a general piercing of the corporate veil and should not be confused with the shareholder, director, tax, insolvency or criminal liability regimes.

The status nonetheless has several practical and legal effects. The beneficial owner's personal data may be processed within the statutory purposes of the RCBE and the AML/CFT framework; the beneficial owner may be contacted in connection with the declaration; may request correction of inaccuracies; and may request access restrictions where statutory risk grounds exist. False declarations or inaccurate information may also give rise to civil and criminal liability for the person who makes or causes them.

Practical duties in banking and AML/CFT relationships

When a company establishes or maintains a business relationship with an obliged entity, such as a bank, it must provide sufficient, accurate and current information on its formal holders, beneficial owners, the nature of control and the underlying economic interests. The obliged entity must identify and verify the beneficial owners and understand the ownership and control chain on a risk-sensitive basis.

For account opening, this has immediate practical significance. Financial institutions may not allow operations, make payment instruments available or change account ownership before the identity of the customer and the beneficial owner has been verified in accordance with legal and regulatory rules. In practice, banks routinely request RCBE proof, group charts, identity documents and supporting ownership and control documents.

PEPs, sanctions and enhanced due diligence

If the beneficial owner is a politically exposed person, a sanctioned person, a person connected with high-risk jurisdictions or one raising other risk factors, the status may trigger enhanced due diligence, senior management approval, source-of-wealth and source-of-funds enquiries, transaction monitoring and, where appropriate, refusal, abstention or suspicious-transaction reporting by the obliged entity.

No automatic civil liability

The RCBE creates no automatic personal guarantee or debt assumption by the beneficial owner. Nonetheless, the information may be relevant evidence in other areas: corporate-group analysis, abuse of legal personality, de facto or shadow management, tax residence or abusive planning, insolvency culpability, asset recovery, criminal proceedings, sanctions screening, anti-corruption investigations or conflict-of-interest analysis.

Access to RCBE information is tiered. It is not a single, unrestricted public database. Portuguese law distinguishes between public-facing access based on legitimate interest, access by AML/CFT obliged entities, access by authorities, access by the entity and the beneficial owner, and special restrictions in sensitive cases. The access routes are:

• Public-facing legitimate-interest access. Open to persons or organisations demonstrating a legitimate interest. Limited information: entity data and, for the beneficial owner, name, month and year of birth, nationality, country of residence and economic interest. Accesses are logged for audit, including the legitimate interest invoked.
• AML/CFT obliged entities. Banks, payment institutions, financial firms, auditors, accountants, lawyers, notaries and solicitors in covered transactions, real estate professionals and other entities under Law No. 83/2017. Broader access to the information necessary for AML/CFT duties, with authentication, audit logs and purpose limitation; access to declarant data is limited by statute.
• Competent authorities. Judicial, police, supervisory, fiscal and AML/CFT authorities, within their statutory powers. Access to all relevant RCBE information, including audit data, for prevention, supervision, investigation and enforcement.
• Entity and declarant. The registered entity and persons with appropriate filing or representation powers may file, update, confirm and obtain proof and codes, subject to authentication and representation rules.
• Beneficial owner. The person indicated as beneficial owner may be notified and trigger rectification or discrepancy processes, and may request restrictions where statutory risk grounds exist.
• Special access restrictions. In risk cases or for minors and accompanied adults, disclosure may be wholly or partly restricted if it may expose the beneficial owner to fraud, threat, coercion, persecution, kidnapping, extortion or other violence or intimidation. Restrictions do not prevent access by authorities and certain obliged entities.

GDPR and data-protection limits

The RJRCBE expressly incorporates GDPR considerations. The IRN is the controller of the RCBE database, which has a statutorily defined purpose: to keep updated information on the natural persons who own or effectively control covered entities, with a view to reinforcing transparency in commercial relations and supporting AML/CFT duties. Access must be necessary, purpose-bound and legally justified.

For this reason, RCBE access should not be treated as a general investigative tool for personal-data mining. The full declaration contains sensitive personal data, including full address, date of birth, identity document data and contact details. Such data is not generally public and should be processed only where a legal basis and a proportionate purpose exist.

Data retention and historical information

Personal data may be retained in the RCBE database for 10 years after cancellation of the entity's registration, without prejudice to ongoing investigations or judicial proceedings. When a person ceases to be a beneficial owner, the relevant personal data passes to a historical archive and may likewise be retained for 10 years from the update declaration. Disclosure for historical, scientific or statistical purposes is permitted only in non-identifiable form and within the statutory framework.

Portuguese law combines administrative, transactional, registry, AML/CFT and civil and criminal consequences. The most important practical point is that non-compliance does not merely create a theoretical fine: it can block profit distribution, public procurement, real estate transactions, access to public funds and bank onboarding.

Statutory restrictions while declarative duties are unmet

While the entity has not complied with its declaration and rectification duties, the following acts are prohibited or blocked, without prejudice to other legal prohibitions:

• distribution of annual profits or advances on profits during the year;
• entering into supply, public-works or services and goods acquisition contracts with the State, autonomous regions, public institutes, local authorities and certain publicly financed social-solidarity institutions, as well as renewal of existing contracts;
• competing for public service concessions;
• admitting capital or convertible instruments to trading on a regulated market;
• launching public offerings of financial instruments issued by the entity;
• benefiting from European structural and investment funds or other public funds;
• acting as a party to transactions transferring ownership of real estate or creating, acquiring or disposing of rights in rem of enjoyment or security over real estate.

Proof of compliance is made by electronic consultation of the RCBE. In real estate transactions, the notary, registrar, lawyer or other title-maker must check compliance and state the reason for refusal if the act cannot be formalised due to RCBE non-compliance.

Public tenders and procurement

The RCBE is of particular importance in public procurement. An entity in default may be prevented from entering into supply, works or services contracts with public entities and from renewing existing contracts. In practice, proof of RCBE compliance should form part of the eligibility documentation alongside tax, Social Security and other requirements.

Banking, financing and ongoing business relationships

Banks and other obliged entities must consult the RCBE where the client is subject to beneficial ownership registration in Portugal, and must make the establishment or continuation of the relationship, or the occasional transaction, conditional on compliance with the registration duty when due. They must also report discrepancies, omissions, inaccuracies or outdated information detected in the RCBE. This makes RCBE compliance a practical condition for opening accounts, obtaining financing, appointing payment services and maintaining regulated business relationships.

Administrative offences, false declarations and civil exposure

A company's failure to maintain an updated internal beneficial ownership record is an administrative offence punishable by a fine of EUR 1,000 to EUR 50,000. This regime applies, with the necessary adaptations, to the other entities subject to the RCBE. Separately, anyone who makes false declarations for RCBE purposes incurs criminal liability under Article 348-A of the Portuguese Criminal Code, the offence of false declarations, and civil liability for the damage caused.

Where a discrepancy is detected, the entity may be notified to correct the information or justify why rectification is not due. Failure to comply or to justify may lead to publicising the non-compliance in the RCBE, with potential reputational effects and an immediate impact on counterparties' willingness or ability to proceed.

Interaction with AML/CFT sanctions

Obliged entities that fail to identify, verify, update or report beneficial ownership information may themselves incur sanctions under the AML/CFT regime. For lawyers and law firms, the analysis must distinguish ordinary legal advice from the activities covered by Law No. 83/2017, such as assistance with the acquisition or sale of real estate or commercial establishments, the management of funds, accounts or assets, the creation or management of companies or other entities, or other listed operations.

The RCBE should be used as an essential due diligence source, but not as stand-alone proof of ownership. A robust Portuguese beneficial ownership due diligence process compares RCBE information with the Commercial Register, constitutional documents, share or quota records, group charts, contractual control arrangements and KYC and AML information obtained from the client or counterparty. A practical sequence is:

• Step 1. Identify the entity by exact legal name, NIPC or NIF and jurisdiction. This avoids confusion between similarly named entities and supports registry, tax and court searches.
• Step 2. Obtain the permanent commercial certificate and the latest articles of association, confirming registered legal status, company type, management, binding rules and capital.
• Step 3. Request current RCBE proof or access code from the entity, allowing verification of the latest declaration or confirmation and detection of apparent non-compliance.
• Step 4. Map the legal ownership chain to the final natural persons, because beneficial ownership may be indirect, through multiple corporate layers or foreign entities.
• Step 5. Check whether any shareholder is a listed company, fund, trust, foundation, nominee or fiduciary structure, as these require special analysis and may not fit a simple shareholding-percentage test.
• Step 6. For public companies (S.A.), request share-register or securities-account evidence and, if listed or open, review CMVM disclosures, since the Commercial Register is not a current public shareholder register for S.A.s.
• Step 7. Compare the RCBE with bank KYC, AML questionnaires and transaction documents, since differences may trigger discrepancy reporting and must be reconciled before closing.
• Step 8. Screen beneficial owners for PEP, sanctions, adverse media and high-risk jurisdiction factors, which determine enhanced due diligence, source-of-funds and source-of-wealth requirements and potential refusal or abstention.
• Step 9. In public tenders, request confirmation of RCBE compliance early, because non-compliance may block contracts, renewals and concessions.
• Step 10. Include RCBE warranties, covenants and conditions precedent where relevant, which is useful in M&A, financing, real estate, public procurement and regulated-sector transactions.

Suggested transaction clauses and evidence

• Condition precedent. Delivery of updated RCBE proof or access code and confirmation that no update is pending or overdue.
• Warranty. The company has filed sufficient, accurate and current RCBE information and no discrepancy notice is pending.
• Covenant. The seller, borrower or participant undertakes to update the RCBE within the statutory deadlines if any change occurs before closing or during the facility or contract period.
• Information undertaking. Delivery of the full ownership and control chain, the documents supporting beneficial ownership determinations and copies of any filings in equivalent foreign registers.
• Public procurement evidence. Electronic proof of RCBE compliance should accompany tax and Social Security compliance documents where required.

The RCBE is not a shareholder register

Foreign counsel sometimes expect a beneficial ownership register to reveal the full cap table. The RCBE does not. It identifies the natural persons who are beneficial owners under the statutory criteria and displays only limited information to those with a legitimate interest. Minority shareholders below the threshold may not appear unless they exercise control by other means.

Public companies require separate ownership evidence

For S.A.s, current legal ownership is generally not obtained from the Commercial Register. The RCBE may identify beneficial owners, but title verification may require the share register, securities-account statements, intermediary confirmations, issuer records and, for listed or open companies, market-disclosure searches. This is particularly important in M&A, enforcement, insolvency, public procurement and conflict-of-interest analysis.

Associations and foundations are covered

Associations and foundations are sometimes incorrectly treated as outside the beneficial ownership rules because they have no shareholders. They are expressly within scope unless excluded. The analysis shifts from ownership percentage to control, benefit, appointment powers and trust-equivalent or foundation-equivalent positions.

Foreign entities and the Portuguese NIF nexus

A foreign entity may become subject to the RCBE because it carries on activity in Portugal or performs an act or legal transaction in Portugal requiring a Portuguese NIF. This can arise in asset acquisitions, real estate transactions, financing, public procurement, branch or representation activity and certain regulated relationships. It should not be assumed that non-Portuguese incorporation avoids RCBE duties.

Obliged entities may not rely blindly on the RCBE

RCBE consultation does not relieve obliged entities of their own AML/CFT duties. Banks, auditors, accountants, lawyers acting in covered matters and other obliged entities must identify and verify beneficial owners using adequate documents and measures, understand the ownership and control chain and report discrepancies where detected.

Data-protection limits are material

Because beneficial ownership information involves natural persons, the GDPR and the RJRCBE data-protection rules materially limit access and use. The legitimate-interest model does not turn the RCBE into an open personal-data database. Information should be requested and processed only for a defined, lawful and proportionate purpose.

Timing matters

The 30-day update duty is easily missed after intra-group transfers, changes in a foreign parent company, shareholders' agreements, changes in control rights or changes in the beneficial owner's personal data. Due diligence should therefore request not only the existing RCBE proof, but also confirmation that no event has occurred which should have triggered an update.