Legislating for effective beneficial ownership transparency reforms for extractive sectors
This guidance aims to support on effective legislation for creating a beneficial ownership register.
Introduction
Key resources are included at the end of this note to support further investigation. An increasing number of global standards and requirements are moving towards beneficial ownership (BO) transparency through implementing central registers.
Since 2013, the Extractive Industries Transparency Initiative (EITI) Standard has “recommended that implementing countries maintain a publicly available register of the beneficial owners of the corporate entity(ies) that bid for, operate or invest in extractive assets”. Three years later, the EITI Standard introduced a landmark requirement, mandating the disclosure of beneficial owners of oil, gas and mining companies. As the EITI Standard was one of the first international standards to call for beneficial ownership transparency through central registers, some early implementers focused on extractive sector-specific registers. In some cases, these were later incorporated into or superseded by full-economy registers. This guidance is relevant for economy-wide beneficial ownership registers – which many jurisdictions are implementing to meet other international standards, such as those related to anti-money laundering (AML) – but is intended for countries developing such registers to meet requirements related to the EITI Standard.
Creating a beneficial ownership register requires legal reforms to define the scope and parameter of disclosure, including identifying which individuals and corporate vehicles will be subject to reporting requirements; which agency will be tasked to collate such information; as well as how to mandate a range of data and systems-related considerations. Legislating for effective reforms is one of the key stages of the implementation of beneficial ownership transparency, and it ensures the sustainability of the reforms by making them able to withstand potential legal challenges.
Purpose of this guidance
This guidance aims to support those designing, drafting, advocating for and reviewing legislation to understand the various components that make up effective legislation, providing the foundation for a beneficial ownership register. Legislation refers to the body of laws – including primary and secondary, or delegated, legislation – rules, policies and guidance emanating from parliament, the executive or other regulatory or lawmaking authority. It focuses on the technical characteristics of a good legislative framework for beneficial ownership rather than the external political, social, economic and cultural factors that are known to influence implementation and impact.
The process of creating an enabling framework for the effective collection, storage and sharing of beneficial ownership information can be challenging, as it may involve new and technical concepts. Additionally, due to the differences in legal systems and contexts, there is no single best method.
Consequently, this guidance focuses on identifying the minimum components for effective legislation. Those who seek to deepen their understanding of the full range of considerations when legislating for beneficial ownership registers may consult Open Ownership’s legislative guidance, on which this technical guidance draws, and which includes examples of legislation.
The EITI Standard and its requirements related to beneficial ownership
The 2023 EITI Standard contains a set of requirements that must be adhered to by countries implementing the EITI Standard and by extractive companies operating in them. Requirement 2.5 focuses on beneficial ownership disclosure, while Requirements 2.2, 2.3 and 2.6 also contain provisions related to beneficial ownership.
The objective of Requirement 2.5 is to enable the public to know who ultimately owns and controls the companies operating in the country’s extractive industries, particularly those identified by the multi-stakeholder group as high risk, to help deter improper and corrupt practices in the management of extractive resources and to help monitor the beneficial ownership of politically exposed persons (PEPs). Provisions under this requirement include the following:
- Implementing countries are required to request, and companies are required to publicly disclose, beneficial ownership information of corporate entities that apply for or hold a participating interest in an exploration or production of oil, gas or mining license or contract.
- Implementing countries are encouraged to maintain a publicly available register of the beneficial owners of the corporate entities that apply for or hold a participating interest in an exploration or production of oil, gas or mining license or contract, including the identities of their beneficial owners (name, nationality, country of residence, whether the natural person is a PEP; the level of ownership; and details about how ownership or control is exerted).
- Implementing countries are required to request full disclosure of PEPs’ beneficial ownership information regardless of their level of ownership.
- The multi-stakeholder group is required to:
- Document the government’s policy and its discussion on beneficial ownership disclosure, including details on the relevant legal provisions; actual disclosure practices; and any reforms planned or underway.
- Agree on a definition of the term “beneficial owner”, in line with the EITI Standard, including an ownership threshold aligned with the type and level of risk the country aims to address (10% or lower is encouraged). It must also specify reporting obligations for PEPs.
- Disclose any significant gaps or weaknesses in reporting on beneficial ownership information, including any entities that failed to submit all or some beneficial ownership information.
- Assess any existing mechanisms for assuring the reliability of beneficial ownership information and agree on an approach to assure the accuracy of the information they provide.
- Publicly listed companies (PLCs) and wholly owned subsidiaries are required to disclose the name of the stock exchange and include a link to the stock exchange filings where they are listed to facilitate public access to their beneficial ownership information. The multi-stakeholder group is encouraged to review the comprehensiveness and reliability of ownership information disclosed in the stock exchange filings.
- State-owned enterprises (SOEs) are required to disclose the name of the states owning or controlling the SOE, the level of ownership and details about how ownership or control is exerted.
- Implementing countries are required to disclose the legal owners of the corporate entities, including share of ownership. Companies are encouraged to disclose their ownership structure.
In addition, the 2023 EITI Standard has reinforced the connection between licensing and beneficial ownership information, helping ensure that licenses are granted to transparent and accountable entities. Requirements 2.2 on Contract and license allocations and 2.3 on Registers of licenses state:
- “Where licenses are awarded through a bidding process, the government is required to disclose the list of applicants, including their beneficial owners in accordance with Requirement 2.5, and the bid criteria.”
- “Implementing countries are encouraged to link publicly available license registers to other government platforms that disclose or hold information in accordance with Requirement 2.5 on the legal and beneficial owners of oil, gas and mining companies.”
The 2023 EITI Standard also encourages, under Requirement 2.6.e), for SOEs to disclose the identity and beneficial ownership of their agents or intermediaries, suppliers or contractors for material transactions, which can help close avenues for corruption.
Under Requirement 1.2.b), both EITI supporting companies and reporting companies are expected to publish an anti-corruption policy setting out how they manage corruption risk, including their use of beneficial ownership data. Such information can help the private sector to actively tackle risks by identifying with whom they are doing business.
This guidance is aimed at drafting effective beneficial ownership transparency legislation, and may not be the only way to comply with the EITI Standard. It should be read together with, and does not serve as a replacement for, the EITI Standard.
How to use this resource
The potential impact of a beneficial ownership disclosure system will largely depend on the policy, legal, systems and technological aspects of its implementation. Open Ownership has developed a policy framework for considering the elements that influence whether the implementation of reforms to improve the beneficial ownership transparency of corporate vehicles will lead to effective beneficial ownership disclosure. Effective disclosure generates high-quality, reliable data that is usable, useful and used. The various aspects of this framework cover disclosure and collection; storage and auditability; and quality and reliability. They are covered in primary and secondary legislation to varying extents.
This technical guidance will discuss the various approaches to legislative reform, including considerations for including provisions either in primary or secondary legislation, and subsequently discuss the various components of effective legislation, grouped together based on where they may commonly be found in legislation.
For each component, this guidance provides a brief background, including its relevance to the EITI Standard and the extractive sector, as well as a checklist of what should be included in effective legislation. In addition to the EITI Standard, this guidance and the checklists are informed by the Open Ownership Principles for effective beneficial ownership disclosure (OO Principles) and international standards set by the Financial Action Task Force (FATF) and the United Nations Convention Against Corruption (UNCAC). The aspects covered by the checklist are a component of effective reforms and not necessarily exhaustive, and they should be covered by the whole body of legislation.
Approaches to legislative reform
Creating new laws or amending existing laws
There are various approaches to legislating for beneficial ownership transparency. Some governments opt for new, standalone laws. Other governments opt for amending existing legislation. Some countries do this in a staged way, while others do so in a single piece of legislation. There are advantages and disadvantages to each approach, and the best approach will depend on the context; legislative drafting customs and processes; and legal and government systems of the jurisdiction in question.
For example, enacting a standalone law on beneficial ownership transparency can ensure that all relevant provisions are in the same legislative act, which can enable consistency and enforceability. However, this legislation may also take longer to table, debate and pass. A standalone law may also remove any doubt as to the authority of the tasked agencies and can clearly restate the policy goals behind implementation. However, this means that the success or failure of the reforms may depend on a single law. In all cases, most governments will need to carefully consider all relevant existing legislation. Neither approach precludes sector-specific beneficial ownership transparency requirements in sector-specific laws.
As countries are likely to be implementing registers to meet other international requirements, government authorities relevant to the extractive industry and prospective data users should ensure they are part of the policy discussions and consultations as well as legislative drafting processes.
Primary and secondary legislation
Irrespective of the approach, consistency across laws is key. Governments have taken different approaches to the amount of detail on specific aspects of beneficial ownership disclosure to include in either primary or secondary legislation.
There are a number of context-specific considerations that may determine how best to strike this balance. For example, it is typically more difficult to amend primary legislation than secondary legislation. Including many details in primary legislation can protect reforms against future political changes. However, it will also require a higher level of technical knowledge among parliamentarians during its passage. This will make it more difficult to make changes and iterations to the reforms. As beneficial ownership transparency is a nascent policy area, and standards are still changing, some iteration will be expected and required.
Placing certain details in secondary legislation can enable an iterative approach, provided there is a sufficient level of technical and legal knowledge in the executive to produce regulations. However, placing too many details in secondary legislation may avoid the parliamentary scrutiny and oversight necessary to produce good reforms that are broadly supported and understood. All these aspects should be considered when assessing which level should be placed in primary legislation versus secondary legislation. Considerations of the enforceability of beneficial ownership transparency provisions in sector-specific legislation may also necessitate certain provisions to be better placed in primary legislation.
In general, the components listed below should be contained in the full body of legislation. The checklists under each component will cover the minimum level of detail expected in primary legislation. Where certain details are not contained in primary legislation, these should be sufficiently covered in secondary legislation. In all cases, globally accepted best practices on legislative drafting and regulatory policy should be applied.
It is also worth noting that some countries may implement beneficial ownership transparency within different legal systems, such as civil, common, customary law or a combination, as well as different systems of government; for example, a presidential system where legislation can issue decrees that are enacted without parliamentary intervention. While the specific drafting, codification and implementation processes may vary according to each country’s specific context, the core components of a robust legislative framework outlined below apply in all cases.
Notwithstanding the approach to legislative reform and the considerations on the extent of detail that should be in primary or secondary legislation, an effective legislative framework should:
- Consider the full range of existing legislation
- Be coherent and consistent
- Appropriately balance the level of detail included in primary and secondary legislation
- Follow global best practices on legislative drafting and regulatory policy
Components of effective legislation
1. Policy objectives and purpose of the legislation
The objective of a bill is its backbone, and it should be identified clearly at the beginning of proposed legislation. Subsequent provisions should be consistent with these policy objectives, and they should be necessary and appropriate to achieving those aims.
The policy details should be clear prior to drafting legislation. They should be set out in policy papers and impact assessments, and consultations with government departments, especially those that are potential users of the data, such as mining or extractive licensing agencies; the private sector, including those operating in the extractive sector; any additional users of the data, such as civil society organisations (CSOs) and non-governmental organisations (NGOs); and the general public.
Consultations can help consider the range of possible policy objectives and define and broaden the goals for beneficial ownership transparency reforms. Once legal provisions are being proposed, drafted and debated, broad consultations with experts, civil society and other stakeholders remain key.
Governments should identify all relevant objectives and specify these in law. The implementation of a beneficial ownership register may face legal challenges, especially where access to personal data is provided to a broad range of users beyond government to maximise the impact of the reforms. In these instances, courts will look at whether the measures are necessary and proportionate to achieving the stated objectives. Ideally, these should be anchored in broad terms in the public interest, while covering specific obligations such as those in the EITI Standard, the FATF Recommendations, and the UNCAC. Broadly, these can include providing transparency, accountability and oversight to the general public, e.g. over natural resources (see Box 2) or public spending; deterring and tackling illicit activities, including corruption, money laundering and terrorist financing; and facilitating economic growth, e.g. by improving the business environment and enabling the proper functioning of corporate vehicles; among others.
Ensuring transparency and tackling corruption in the extractive sector
In numerous countries, extractives have been identified as a high-risk sector for corruption. Consequently, many countries have passed sector-specific legislation incorporating requirements regarding the beneficial ownership of companies engaged in activities within this industry. With the increased adoption of central beneficial ownership registers focusing on all sectors, a growing number of countries are pursuing transparency in extractives. However, these countries might incorporate more stringent requirements for the extractive sector, or allow broader access to this information.
Beyond the policy objective of tackling corruption within high-risk sectors, there is an overarching case for transparency in extractives, distinct from other industries. This revolves around the recognition embedded in many constitutions that deems citizens as the ultimate owners of natural resources. This underscores the need to reflect these constitutional principles within the legislative framework.
By incorporating these elements, countries can improve the efficacy of their legislative frameworks. This ensures that these frameworks are finely tuned to address the unique challenges and considerations prevalent within the extractive industry, thereby fostering a more robust and accountable governance structure.
Checklist
The legislative framework:
- Includes a clear policy objective at its beginning, anchored broadly in transparency and the public interest
Has been widely consulted with relevant parties, including but not limited to:
- Ministries responsible for extractives
- Licensing agencies
- Companies in the extractive sector
- EITI national secretariats
- NGOs and CSOs
- Other relevant stakeholders
- Is supported by policy documentation and impact assessments, which have also been widely consulted on with relevant parties
2. Defining the beneficial ownership of corporate vehicles in law
Building a legislative framework for beneficial ownership transparency starts with clearly and unambiguously defining beneficial ownership. The definition should cover all aspects of what constitutes a beneficial owner, and it should clearly prescribe low thresholds to ensure that all relevant ownership and control interests are covered. The 2023 EITI Standard includes minimum requirements for the legal definition of beneficial ownership under 2.5(f)(i), in line with other international standards.
The prescription of thresholds is particularly relevant to the extractive sector. The EITI Standard requires countries to “include ownership threshold(s), which should be informed by the country context and the type and level of risk that the country aims to address”. It encourages countries to “adopt an ownership threshold of 10% or lower for beneficial ownership reporting”, as well as “request full disclosure of [PEPs’] beneficial ownership regardless of their level of ownership” for the extractive sector.
The definition should cover the full range of ways a natural person can exercise ownership or control over, or benefit from, a corporate vehicle. Legislation should be complemented by guidance on how to calculate ultimate ownership where such ownership is indirectly held.
As legislation may already contain a definition of beneficial ownership, new legislation should create a single, unified definition. This could be done by expressly adopting, consolidating or amending definitions in existing legislation. Ideally, a broad definition will be contained in primary legislation, with additional secondary legislation referring to this definition and specifying what the definition means when applied to certain corporate vehicles, such as companies or legal arrangements, including providing specific thresholds. This approach can also be applied to sector-specific requirements, such as lower thresholds for the extractive sector. This is to ensure coherence across legislation, and enable compliance and potential additional verification mechanisms, like discrepancy reporting, to function effectively.
Often, a definition will also refer to the corporate vehicles to which it will apply. Defining which criteria constitute beneficial ownership will also determine whether a specific corporate vehicle can be beneficially owned. For a beneficial ownership disclosure regime to be comprehensive, definitions should consider all forms of ownership and control in an economy, and all corporate vehicles with or without distinct legal personalities through or by which assets can be owned, benefitted from and controlled. These corporate vehicles should be required to make declarations about their beneficial ownership. According to the 2023 EITI Standard 2.5(c), this should include at the very minimum “corporate entity(ies) that apply for or hold a participating interest in an exploration or production oil, gas or mining license or contract”. License applicants or holders should not necessarily be limited solely to entities registered within the country. International best practice recommends broadening the scope to encompass subsidiaries of license holders, as well as intermediaries and subcontractors associated with these corporate entities engaged in activities within the extractive sector.
While some types of corporate vehicles, such as listed companies, may be exempt from the full disclosure requirements, excluding certain corporate vehicles from any type of disclosure can create loopholes. Corporate vehicles exempt from disclosing their beneficial ownership should still be required to make declarations, including the basis for their exemption. Although SOEs and listed companies are often exempted, the EITI Standard includes specific disclosure requirements for both, covered later in this guidance. Any exemptions from full declaration requirements should be clearly defined and justified, made public and reassessed on an ongoing basis. Therefore, they are best placed in secondary legislation. Exemptions from disclosing beneficial ownership may be granted when a corporate vehicle is already disclosing sufficient information and this information is accessible through alternative mechanisms. For example, a listed company may be subject to sufficient disclosure and transparency requirements to a stock exchange or a regulator. SOEs often do not meet these criteria, yet are exempted by many countries. This is particularly relevant for the extractive sector, as many of the corporate vehicles will be listed or have some state ownership. Any exemptions should mention specific criteria (e.g. a list of stock exchanges or jurisdictions) rather than constitute blanket categories. All exemptions should be interpreted narrowly.
Checklist
The legislative framework:
- States that a beneficial owner should be a natural personCovers all relevant forms of ownership, control and deriving substantial benefit from
- Specifies that these interests can be held both directly and indirectly
- Includes a single, unified, catch-all definition of what constitutes beneficial ownership, ideally in primary legislation
- Includes a non-exhaustive list of example ways in which beneficial ownership can be held, ideally in secondary legislation
- Specifies a threshold for relevant corporate vehicles, or multiple thresholds based on risk, which is justified in policy documentation, with a threshold of 10% or lower for the extractive sector (or for all sectors)
- Includes a clear prohibition of agents, custodians, employees, intermediaries or nominees acting on behalf of another person qualifying as a beneficial owner
- Specifies that the criteria for beneficial ownership can be met through joint action, and when joint action is assumed
- Defines additional concepts, such as significant control or substantial benefit, as required
- Applies to all corporate vehicles through or by which assets can be owned, benefitted from and controlled, unless exempt
- Exemptions are clear and justified, and this information is made public
- Exempt corporate vehicles are still required to submit declarations
- Is accompanied by guidance to help declarants understand the definition
3. Reporting obligations
Legislation should clearly specify upon whom reporting obligations fall. Usually, this falls on the corporate vehicle itself. Under international AML standards, companies are also required to hold and maintain their own registers. Therefore, there may also be obligations on the beneficial owner to provide information to the company, and powers for the company to compel the beneficial owners to provide information on request and issue penalties for failures to comply.
The legislation should make the provisions of beneficial ownership information one of the requirements for incorporating a corporate vehicle. For existing corporate vehicles, the legislation should specify which events trigger reporting. Following an initial requirement for existing corporate vehicles to declare their beneficial ownership information after the introduction of new legislation, these should include incorporation or formation; any and every subsequent changes to beneficial ownership information; and annual statutory reporting (e.g. annual returns). Information should be required to be updated within a short, defined time period after these events. To close a loophole explained in Figure 1, all changes in beneficial ownership should be legally required to be reported.
Figure 1. Reporting requirements loophole for changes in beneficial ownership
Legislation should specify clearly what information should be included in a declaration. This should generally comprise information about the beneficial owner; the corporate vehicle; the relationship between them; and the individual submitting the information. Sufficient information should be collected to be able to identify the individuals and corporate vehicles, and to allow the information to be verified. The 2023 EITI Standard includes minimum requirements for information to be made available, with specific requirements for all corporate vehicles (2.5(d) and (g)), PLCs (2.5(f)(iii)), joint ventures (2.5(f)(iv)) and SOEs (2.5(f)(v)). For example, all corporate vehicles are required to disclose whether their beneficial owner is a PEP, as well as their legal owners and shareholders. PLCs and wholly owned subsidiaries are required to disclose the name of the stock exchange and include a link to the stock exchange filings where they are listed to facilitate public access to information on their beneficial owners. SOEs are required to disclose the name of the states owning or controlling the SOE; the level of ownership; and details about how ownership or control is exerted. For more information, see Box 1.
Governments should either collect this information through beneficial ownership disclosures or collect sufficient information to connect disclosures to this information. For example, if a government has a PEP register, sufficient information should be collected to identify individuals disclosed in the register of PEPs.
Information required to be disclosed should be clearly enumerated in law and limited to what is necessary, in line with common requirements in privacy and data protection legislation. Information should be collected, ideally through online forms with accompanying guidance. It is not considered good practice to include the specific disclosure forms in legislation, as these may need to be amended.
In some countries, extractive regulators may be legally required to collect beneficial ownership information from companies they regulate, or as part of licensing or permit applications, in addition to the information being centrally collected. As the EITI Standard mandates the disclosure of beneficial ownership information for those applying for, holding or transferring licenses, even without an enabling legal framework, the EITI process includes the requirement to collect beneficial ownership information from companies operating in the sector through EITI reporting. It is imperative that forms used for collecting beneficial ownership information either by the EITI process or extractive regulators are modelled after existing disclosure forms and processes of the authority primarily responsible for collecting beneficial ownership information. This is important in ensuring uniformity in the data fields collected. Ideally, this information should be checked against and consolidated with any existing information held in order to avoid a situation where a government may hold conflicting information on the beneficial ownership of a single corporate vehicle. Alternatively, these corporate vehicles can be required to confirm the information held by the registrar is correct, and to include an extract from the register.
Checklist
The legislative framework:
Clearly states which events should trigger a disclosure, including:
- Initial declaration within a specified time from when the obligation in law is created
- Every subsequent new registration or incorporation
- Any and every change to beneficial ownership
- Annual reporting
Clearly enumerates which information should be collected about the individual; the corporate vehicle; and the relationship between them, and:
- This is sufficient information to either include or identify information required to be disclosed by the EITI Standard 2.5(d), (f) and (g)
- Does not include more information than is considered strictly necessary to achieve the stated objectives
- Includes provisions for this information to be collected in online forms – or analog forms which are subsequently digitised – without copies of these forms being included in legislation
- Is accompanied by guidance to help declarants understand their obligations
4. The registrar and the register
Legislation should clearly identify the authority to which information should be submitted, and delegate the powers, mandate and responsibility to this authority to create and oversee a register. If part of country-wide beneficial ownership transparency efforts, these authorities are often corporate registrars, tax authorities or financial investigative units. Sometimes, different authorities oversee registers for different corporate vehicles, for example, legal arrangements such as trusts, or non-profit organisations. In this event, the law should enable sufficient cooperation and exchange of information.
The laws should specify how and for how long records should be kept, which should be a reasonable and specified number of years, including for dormant and dissolved corporate vehicles. To ensure beneficial ownership information is useful, it should be collected, stored and shared as structured and interoperable data. Primary legislation does not need to specify this in detail, but could place a responsibility on the registrar to ensure information is stored digitally in an organised, accessible and usable way. It is important that legislators do not accidentally design digital systems through legislation, for example, by including disclosure forms in legislation, or including language that is overly specific or not technology neutral.
Where other authorities – e.g. industry regulators, license issuers or a national EITI secretariat – are also mandated to collect beneficial ownership information, ideally this information should be interoperable and consolidated with the central register.
Checklist
The legislative framework:
- Establishes a register
- Designates a registrar, i.e. an authority in charge of overseeing the register
- Includes the necessary powers, mandate and responsibilities for this authority to collect information, and to administer and maintain the register, including a clear legal basis for collecting and processing information in line with existing privacy and data protection legislation
- Specifies how long information should be kept for
- Enables the collection, storage and sharing of information in a digital and structured format
- Does not prescribe or place limits on the design of those systems
5. Verifying beneficial ownership information for accuracy
In order for beneficial ownership information to be useful and usable, governments should put in place mechanisms to verify its accuracy. Information is accurate when it reflects reality at the point of submission: for example, that the beneficial owner is who they say they are, and that that person is actually the beneficial owner. Inaccuracies may be due to accidental errors or omissions, or deliberate falsehoods.
Verifying the identity of the beneficial owners and the means through which ownership or control is exercised in a corporate vehicle is a specific requirement of the FATF Recommendations. Additionally, the EITI Standard’s Requirement 2.5(e) mandates multi-stakeholder groups to “assess any existing mechanisms for assuring the reliability of beneficial ownership information and agree [on] an approach [...] to assure the accuracy of the beneficial ownership information they provide”, while 2.5(c) requires that beneficial ownership information must include the “identity(ies) of their beneficial owner(s); the level of ownership; and details about how ownership or control is exerted”. Additionally, countries are recommended to verify the information provided about the corporate vehicle and the individual making the declaration. There are many different approaches to verification, and there is no one-size-fits-all solution. Generally, primary legislation will not detail specific mechanisms, but should include provisions to require and powers to enable the registrar to ensure accuracy, including the ability to share data with other relevant authorities.
Verification may involve third parties. For example, information may be allowed or required to be submitted, or checked by AML-regulated entities such as financial institutions or notaries through discrepancy reporting. Lawmakers should ensure suitable obligations and oversight are in place, and that no existing legislation could prevent the registrar from doing its job (e.g. lawyer/client confidentiality).
Checklist
The legislative framework:
Places the responsibility on the registrar to ensure the accuracy of information
- Provides the mandate and powers for the registrar to ensure the accuracy of information, including
- Powers to require information
- Powers to remove material from the register
- Powers to correct or query information
- Powers to take action against those failing to provide information
- Data sharing and processing powers
Includes suitable obligations, oversight and sanctions for third-parties involved in beneficial ownership disclosure
6. Sharing and accessing beneficial ownership information
To maximise the impact of the reforms, all actors who can use the relevant information to further a country’s policy aims and strengthen citizens’ involvement in corruption mitigation measures should have access to the information when they need it. The legislation should make provisions for the sharing of and access to beneficial ownership information in line with privacy and data protection requirements. beneficial ownership information comprises, by definition, personal information, and therefore has a bearing on privacy. Privacy and, increasingly, data protection, are practically universal, legally protected human rights. All access provisions should be legislated for in line with domestic privacy and data protection legislation and obligations, and should seek to balance access to the information with any interference with legally protected rights. This balance will be highly context-specific and should consider policy aims as well as the domestic legal context and norms around privacy in society. Where these aims are anchored broadly in the public interest, the potential benefit of broader access to information should be carefully weighed against private interests. Generally, implementing governments should consider how to safeguard legally protected rights as much as possible while trying to preserve the usefulness and usability of the information.
Ideally, the government will have identified potential data users inside and outside government in supporting policy documents, and included them in both consultations and user research as part of developing and designing a system. Consultations and user research should also inform the information that various users need, and its format. To minimise the interference with the right to privacy, data users should only be provided with the information they require. Generally, this means that a user such as law enforcement will have access to sensitive information such as ID numbers, while others may not. Different layers of access can be created for different users. Where possible and justified, the easiest way to meet the information needs of the widest range of relevant data users is by making it publicly available.
Where information is made available to the public, generally a subset of the data is provided, comprising the minimum number of fields to identify an individual. This often involves removing the individual’s day of birth to lower the risk of identity theft. Other sensitive fields, such as an individual’s sex or gender, are often published unnecessarily. Governments should carefully consider and design access provisions, and conduct an assessment of the potential impact on privacy of their intended measures. The 2023 EITI Standard includes specific requirements regarding which data fields should be made publicly available, including: the name of the beneficial owner; their nationality; and their country of residence; as well as identifying any PEPs and specific data accessibility requirements under Requirement 7.2. This is considered best practice in mitigating risks in the extractive sector. Where information is made publicly available, making this free to access will maximise its impact. Charging a fee for this information will decrease its use, and may be counterproductive.
Governments should provide for a mechanism by which individuals with disproportionate risk to personal safety can apply to suppress the publication of certain or all data on a case-by-case basis, sometimes called a protection regime. Provisions for this may be included in legislation. The grounds for withholding the publication of any data should be clearly defined, proportionate, fairly applied and published.
Generally, personal data should only be used for specified purposes, and the risk to privacy arises from information being misused for different purposes. Various approaches can be taken by governments to prevent and detect misuse. Governments should have already spelled out their policy objectives in the law and various supporting policy documents, as covered above. The EITI Standard’s policy objectives relate to transparency, accountability and oversight. Legislation will be more likely to withstand legal challenges if the purpose of access to information is to achieve these broad public interest aims.
Methods to reduce misuse include providing information to certain users with a legitimate interest, particularly where this concerns access to a large amount of information, and high flexibility in how this information can be searched and used. This can be implemented in addition to, rather than instead of, public access. Other measures can include registration; attestations to use the data in line with specific purposes; and data licenses. While these specific measures are not likely to be included in primary legislation, broad provisions for access may be. Alternatively, legislation may designate certain user groups as having a legitimate interest by default. The EITI Standard places certain requirements on the format and access of EITI data under Requirement 7.2. Countries could consider specific access provisions for the subset of corporate vehicles covered in Requirement 2.5(c) (see Box 3).
In order for beneficial ownership information to be effectively used, additional legislation and rules may be required. For example, licensing legislation and rules may mandate and require the use of beneficial ownership information from central registers for specific purposes, and they may need to change to enable the use of beneficial ownership information in licensing due diligence and decision-making. These types of legislative changes are not within the scope of this guidance.
Sharing data across agencies to use beneficial ownership information in licensing
Legislation should enable data sharing across agencies to enable active use of beneficial ownership information for specific policy objectives. In the case of the extractive sector, two requirements under the 2023 EITI Standard reinforce the connection between licensing and beneficial ownership information, helping ensure that licenses are granted to transparent and accountable entities.
- Requirement 2.2(c): “Where licenses are awarded through a bidding process, the government is required to disclose the list of applicants, including their beneficial owners in accordance with Requirement 2.5, and the bid criteria”.
-
Requirement 2.3(d): “Implementing countries are encouraged to link publicly available license registers to other government platforms that disclose or hold information in accordance with Requirement 2.5 on the legal and beneficial owners of oil, gas and mining companies”.
Linking information can help regulators analyse who is behind the corporate vehicles applying for, holding or transferring licenses.
Checklist
The legislative framework:
Takes into account the specific requirements about public access to beneficial ownership information – considered best practice in mitigating risks in the extractive sector – and its format under requirements 2.2, 2.3, 2.5 and 7.2 of the 2023 EITI Standard.
Includes a clear legal basis for sharing and accessing information, clearly stating its purpose
- Where the purpose is broadly anchored in the public interest, such as where ownership of natural resources is involved, consider whether public access is necessary and proportional
- Considers domestic obligations and rights with respect to privacy and data protection under existing legislation
- Makes provisions for access for relevant data users identified in policy documents, which is both necessary and proportional to the stated objectives
- Mitigates interference with legally protected rights to the extent possible
- Makes provisions for a protection regime, including clear criteria so exemptions to access are not discretionary or arbitrary
- Clearly states which data fields are made available to which user groups in a system of layered access, based on the minimum data needed
- Includes additional relevant safeguards commensurate to the access
7. Sanctions for noncompliance
Finally, the legislation should include sanctions to ensure compliance. These should be effective, proportionate, dissuasive and enforceable. Sanctions should exist for all forms of noncompliance, and they should cover all the persons involved in declarations as well as key persons of the corporate vehicle. Sanctions are not the only way to achieve compliance. Many aspects covered above, e.g. public consultations and education, accessible guidance and easy-to-use forms, can all contribute to higher compliance levels.
Sanctions should include both administrative and criminal sanctions. In order to be effective, financial sanctions should be set sufficiently high. Low financial sanctions can be seen as the cost of doing business and may lead to corporate vehicles opting for noncompliance. Financial sanctions should be complemented by non-financial sanctions, which can be more effective.
For example, preventing financial institutions from doing business with corporate vehicles that have not met their reporting requirements is a highly effective approach to ensuring compliance. These can also be specific to the extractive sector. For instance, sanctions could prevent noncompliant individuals or companies from holding extractive licenses.
Primary legislation should contain provisions authorising regulatory agencies to issue administrative sanctions. Details of these sanctions can be set out in secondary legislation.
Checklist
The legislative framework:
Includes sanctions for all types of noncompliance, including:
- Non-submission
- Late submission
- Incomplete submission
- Incorrect submission, clearly distinguishing this from a deliberately false submission
- Persistent noncompliance
- Other obligations related to beneficial ownership disclosure (e.g. for third parties)
Includes sanctions on all parties involved in disclosure, including:
- Beneficial owner(s)
- Declaring person
- Company officers
- The declaring corporate vehicle
Includes administrative and criminal sanctions
Includes financial and non-financial sanctions
- Sanctions are sufficiently high to be dissuasive, yet proportional
- Sanctions are enforceable, and automated where possible
Clearly determines which authority is responsible and authorised to enforce sanctions
Ensures the registrar has the authority to issue basic administrative sanctions and enforce the collection of information
Provides sufficient resources, legal mandate and powers to all authorities involved in the sanctions to enforce them
Conclusion
Comprehensive legislation, based on a broadly consulted policy framework, is the foundation of any beneficial ownership transparency regime. Good legislation provides a solid legal basis for disclosure by making the policy objectives clear and defining new concepts. It will also ensure that all ensuing provisions related to the obligations, rights and responsibilities of individuals and corporate vehicles, and to the powers, mandate and responsibilities of various government agencies are consistent and appropriate to achieving the stated objective.
Effective legislation further ensures clarity and compliance, and promotes the sustainability of reforms by making them better able to withstand potential legal challenges. There is no one-size-fits-all solution to legislating for beneficial ownership transparency. This technical guidance aims to provide the minimum aspects of a legal framework. Those considering, drafting or reviewing legislation are encouraged to consult other parties and resources in conjunction with the use of this guidance.
The Open Ownership Principles (OO Principles) are intended to support governments implementing effective beneficial ownership transparency reforms and guide international institutions, civil society and private sector actors in understanding and supporting reforms. They are a tool to identify and separate issues affecting implementation, and they provide a framework for assessing and improving existing disclosure regimes. If implemented together, the OO Principles enable disclosure systems to generate actionable and usable data across the widest range of policy applications of beneficial ownership data.
For more information, please see: Open Ownership, Open Ownership Principles for effective beneficial ownership disclosure (s.l.: Open Ownership, updated 2023).