Legal Q&A · Compliance, Registers & Licences

Who is a beneficial owner, and how are they identified?

Law as at 24 July 2026

Short answer

A beneficial owner is always an individual, never a company. In a company, this particularly includes anyone with a direct or indirect interest of at least 25% in voting rights or registered capital, the right to appoint or remove statutory or supervisory bodies, control by other means, or entitlement to at least 25% of the economic benefit. If no such individual can be identified, senior management, meaning the statutory body, is treated as the beneficial owner.

Can a company be a beneficial owner?

The Act on the Register of Public Sector Partners has no independent beneficial owner definition. It refers to Act No. 297/2008 Coll. on preventing the laundering of proceeds of crime. Section 6a(1) defines a beneficial owner as every individual who actually controls a legal entity, entrepreneur or asset arrangement, and every individual for whose benefit those entities conduct their activities or transactions.

Understand this before drawing an ownership chart: the search is always for a person. If another company is a member of your s. r. o., that company is not the beneficial owner. Trace through it until individuals are reached. That is why multi-layer structures require an investigation, rather than just an extract.

What criteria identify a beneficial owner?

For legal entities, the Act lists who is included in particular. These are examples, rather than an exhaustive list. A beneficial owner is an individual who:

  1. Has a direct or indirect interest, or their combined total, of at least 25% in voting rights or registered capital, including bearer shares.
  2. Has the right to appoint, otherwise install or remove a statutory, management, supervisory or control body, or any of its members.
  3. Controls the legal entity by other means.
  4. Is entitled to at least 25% of the economic benefit from the entity’s business or other activity.

The third criterion is often underestimated. Control by other means can cover a members’ agreement giving a minority member a veto, actual dependence on a sole creditor or a silent partner. Percentages are only the most visible criterion. A registration based solely on a table of interests may not withstand scrutiny.

A beneficial owner also includes an individual who does not meet the criteria alone but does so together with another person acting in concert or jointly (Section 6a(3)). Four members with 20% each are therefore not automatically excluded; how they make decisions matters.

Special rules apply to other forms. For general and limited partnerships, every partner is a beneficial owner, or the person controlling a corporate partner. For a silent partnership, it is an individual entitled to at least 25% of the economic benefit. For asset arrangements and foreign trusts, the Act lists the settlor, trustee or administrator, supervisor and beneficiaries. Foreign trusts in an ownership structure therefore always signal a more demanding investigation. We address them through holding structures.

What if nobody meets the criteria?

If no individual meets the criteria under point (a), senior management, meaning the statutory body or its members, is treated as the beneficial owner (Section 6a(2)). This provision cannot be used merely because the structure is hard to uncover. It applies only after it is established that nobody actually meets the criteria. For RPVS registration, this must also be specifically demonstrated in the documentation; a bare assertion is insufficient.

Why this matters for RPVS

For registration in the Register of Public Sector Partners, an authorised person, a lawyer, notary, bank, auditor or tax adviser, identifies and verifies beneficial owners and bears responsibility for doing so. Incorrect or incomplete information leads to fines for the company and its statutory representative and may result in deletion. Identification is also repeated at each calendar year-end and on other statutory events.

We can handle beneficial owner identification and the entire registration through RPVS registration and authorised-person services. Uncertainty about whether your ownership structure gives a clear answer is itself a reason to review it with a lawyer before anything is registered.

This answer provides general information on the law as at 24 July 2026. It does not constitute legal services or replace an assessment of an individual case. The details of your situation may differ. Book a consultation to discuss them.

More legal questions

All questions and answers
  1. We are developing a non-custodial crypto wallet. Do we need a CASP authorisation? Software or hardware for a wallet in which the private keys are held exclusively by the user generally does not require an authorisation as a crypto-asset service provider, because it is not custody on behalf of clients. MiCA says so expressly in recital 83. You do need an authorisation, however, if you gain control over the crypto-assets or the means of access to them, for instance through key management or recovery, or if the application itself provides exchange, receives orders or executes transfers on behalf of users.
  2. We hold a CASP authorisation in Slovakia. How do we start providing crypto-asset services in Czechia? You do not need a new authorisation from the Czech National Bank. A CASP authorisation granted by the National Bank of Slovakia permits you to provide services throughout the Union, but before starting services in Czechia you must notify NBS of the list of Member States, the services, the intended start date and your other activities. NBS forwards the information to the Czech single point of contact within 10 working days, and you may start on the day it notifies you of that transmission, and at the latest on the 15th calendar day after submitting the notification. You may provide only the services covered by your authorisation.
  3. Our company has been hit by a cyberattack. To whom and by when must we report it? If you are an essential service operator, you report a serious cybersecurity incident to the National Security Authority through the unified cybersecurity information system. The early warning must be sent within 24 hours of detection, the notification with an initial assessment within 72 hours, and the final report no later than one month after the notification. Alongside reporting, you must address the incident, secure evidence, and report to the police or law enforcement authorities any criminal offence of which you credibly learn.
  4. Must we undergo a cybersecurity audit, or is a self-assessment enough? An essential service operator must verify the effectiveness of its security measures by a cybersecurity audit within two years of the date of entry in the register; the audit is carried out by a certified auditor and the final report must be submitted to the authority within 30 days. Apart from the transitional rules running until the end of 2026, only an operator that does not operate a critical essential service may replace the audit with a self-assessment through the unified information system, and even that operator must undergo an audit within five years of registration. The audit is also repeated after every change with a significant effect on the security measures.

Cannot find your question? Ask your own question

Facing this situation?

Tell us what you need help with.

Describe your situation. We will review it and usually tell you within 24 hours whether and how we can help, including an indicative fee.

  1. 1Send your enquiry via this form
  2. 2Usually within 24 h you get a price confirmation and plan
  3. 3We start work only after your approval
Mgr. Patrik Tulinský, LL.M. Czech and Slovak attorney · SAK 300422 · ČAK 19654

Not keen on calls or email? Message us on WhatsApp →
Prefer to book a time right away? Book a consultation →
Or email us about this matter.

PDF, Word, images, ZIP… max 10 MB per file, 30 MB total.

Submitting this form does not create an engagement or attorney-client relationship. Before taking on a matter we run a conflict-of-interest check, so please do not send sensitive originals until we confirm the matter together.

Contact a lawyer