The CRS (Common Reporting Standard) is the international legal framework under which financial institutions automatically report account information held by foreign tax residents to their home jurisdiction';s tax authority. Developed by the OECD and adopted by over 100 jurisdictions, CRS is the primary mechanism through which governments share financial data across borders. For international businesses, investors and high-net-worth individuals, understanding CRS is not optional - it determines what information flows between countries, who is affected, and what legal obligations fall on banks, brokers and other financial intermediaries.
This guide covers the legal definition of CRS, its scope and participating jurisdictions, the obligations it creates for financial institutions and account holders, how it operates in practice, and the consequences of non-compliance.
---
CRS is a standard developed by the Organisation for Economic Co-operation and Development and endorsed by the G20. It was published in the OECD';s Standard for Automatic Exchange of Financial Account Information in Tax Matters, commonly referred to as the CRS standard. The framework establishes a uniform set of rules for collecting, reporting and exchanging financial account information between participating jurisdictions on an annual, automatic basis.
The legal basis for CRS in each jurisdiction is typically a domestic law that implements the standard, combined with a bilateral or multilateral agreement that authorises the exchange of data. The Multilateral Competent Authority Agreement on Automatic Exchange of Financial Account Information is the principal international instrument through which jurisdictions activate CRS exchanges with one another. Each signatory jurisdiction agrees to collect specified data from its financial institutions and transmit it to the relevant foreign tax authority.
CRS replaced a patchwork of bilateral tax information exchange agreements for most participating countries. Its defining feature is automaticity - information is exchanged without a prior request, on a scheduled annual cycle, covering a broad range of account types and financial institutions.
---
CRS applies to financial institutions, which the standard defines broadly. The category includes banks, custodial institutions, investment entities and certain insurance companies. Each of these entities is required to identify account holders who are tax residents of a foreign participating jurisdiction, collect specified information about those accounts, and report that information to the domestic tax authority for onward transmission.
The accounts covered include deposit accounts, custodial accounts, equity and debt interests in certain investment entities, and cash-value insurance and annuity contracts. The standard distinguishes between pre-existing accounts - those open before a jurisdiction';s CRS implementation date - and new accounts opened after that date. Different due diligence procedures apply to each category, with stricter requirements generally applying to new accounts.
Account holders subject to reporting are individuals and entities that are tax residents of a participating jurisdiction other than the one where the account is held. For entities, CRS also requires look-through to controlling persons - typically individuals who own or control more than 25% of the entity - who are themselves foreign tax residents. This means that a corporate account held by a company incorporated in one jurisdiction may trigger reporting obligations based on the tax residency of its ultimate beneficial owners.
---
Financial institutions bear the primary compliance burden under CRS. They must implement due diligence procedures to determine the tax residency of their account holders. For new individual accounts, this typically requires collecting a self-certification form at account opening, in which the account holder declares their tax residency and provides their tax identification number.
For pre-existing accounts, financial institutions must review available records - including know-your-customer documentation, address records and other electronically searchable data - to identify indicia of foreign tax residency. Indicia include a foreign address, a foreign telephone number, standing instructions to transfer funds to an account in another jurisdiction, and similar markers. Where indicia are found, the institution must either obtain a self-certification resolving the question or treat the account as reportable.
A common mistake made by account holders is providing incomplete or inconsistent self-certification information. Where a self-certification is unreliable or contradicted by other information held by the institution, the institution is required to treat the account as reportable regardless of what the self-certification states. In practice, founders and investors who hold accounts through complex structures should ensure that their tax residency declarations are accurate and consistent across all institutions.
---
The information exchanged under CRS is standardised across all participating jurisdictions. For each reportable account, the financial institution must report the name, address, jurisdiction of residence and tax identification number of the account holder. For individual account holders, date and place of birth are also required. For entity accounts, the same information is required for each controlling person who is a foreign tax resident.
In addition to identifying information, the financial institution reports the account number, the account balance or value at the end of the relevant calendar year, and the total gross amounts of interest, dividends, other income and proceeds from the sale of financial assets credited to the account during the year. This gives the receiving tax authority a comprehensive picture of the account holder';s financial position and income flows in the reporting jurisdiction.
The data is transmitted from the reporting financial institution to the domestic tax authority, which then forwards it to the competent authority of the account holder';s jurisdiction of tax residence. The receiving authority can use this information to verify tax returns, identify undisclosed foreign income and initiate compliance inquiries. For international business owners, this means that income earned and held abroad is visible to their home tax authority in a systematic and automatic way.
If you are structuring cross-border operations and need to understand how CRS reporting affects your specific arrangements, contact info@vlolawfirm.com. We can help structure the setup correctly the first time.
---
CRS has been adopted by a large and growing number of jurisdictions. Participating countries include all EU member states, the United Kingdom, Switzerland, the Cayman Islands, Singapore, Hong Kong, the United Arab Emirates, Australia, Canada, Japan and many others. The OECD maintains an updated list of activated exchange relationships, which specifies which pairs of jurisdictions are actually exchanging data with one another.
Not all jurisdictions participate. The United States is the most significant non-participant. The US operates its own parallel regime - the Foreign Account Tax Compliance Act - which imposes similar reporting obligations on foreign financial institutions with respect to US account holders, but does not participate in CRS exchanges. This creates an asymmetry: US financial institutions report information about foreign account holders to their home jurisdictions under CRS, but the US does not receive CRS data in return through the standard framework.
For international business owners, the practical implication is that the jurisdiction where accounts are held determines whether CRS reporting applies. An account held in a CRS-participating jurisdiction by a person tax-resident in another participating jurisdiction will be reported. An account held in a non-participating jurisdiction will not be subject to CRS, though other reporting regimes may apply.
Two practical scenarios illustrate this. First, a German-resident entrepreneur who holds a brokerage account in Singapore will have that account reported by the Singapore institution to the Inland Revenue Authority of Singapore, which will transmit the data to the German tax authority. Second, a UAE-resident investor holding accounts in Switzerland will have those accounts reported to the Swiss Federal Tax Administration, which will forward the data to the UAE';s competent authority - provided the UAE has an activated exchange relationship with Switzerland.
---
Non-compliance with CRS obligations can arise on two sides: financial institutions that fail to implement adequate due diligence and reporting procedures, and account holders who provide false or misleading self-certifications.
For financial institutions, domestic implementing legislation in most jurisdictions provides for administrative penalties, regulatory sanctions and reputational consequences. Supervisory authorities - typically the financial regulator or tax authority - conduct audits and can impose fines for systematic failures. In practice, financial institutions have invested heavily in CRS compliance infrastructure, and the risk of institutional non-compliance is lower than in the early years of the standard';s implementation.
For account holders, the risk is different. Providing a false self-certification - for example, claiming tax residency in a non-participating jurisdiction to avoid reporting - constitutes a legal violation in most jurisdictions and can amount to tax fraud under domestic law. Tax authorities that receive CRS data routinely cross-reference it against filed tax returns. Where discrepancies are identified, they can trigger audits, assessments of additional tax, interest and penalties, and in serious cases, criminal proceedings.
Many underestimate the reach of the look-through rules for entity accounts. A non-obvious requirement is that even a dormant holding company with a single account can trigger reporting obligations if its controlling persons are tax-resident in a participating jurisdiction. Founders who use layered corporate structures for asset holding should review whether each entity and each account in the chain is correctly classified and reported.
---
What is the difference between CRS and FATCA?
CRS and FATCA are parallel but distinct regimes for the automatic exchange of financial account information. CRS is an OECD standard adopted by over 100 jurisdictions and operates on a reciprocal basis - participating countries both send and receive data. FATCA is a US law that requires foreign financial institutions to report information about US account holders to the US Internal Revenue Service, but the US does not participate in CRS as a sending jurisdiction. The practical result is that US persons are subject to FATCA reporting by foreign institutions, while non-US persons holding accounts in CRS-participating jurisdictions are subject to CRS reporting. Businesses with US connections must assess both regimes separately.
How quickly does CRS data reach a foreign tax authority, and what triggers an inquiry?
CRS data is exchanged annually, typically within nine months of the end of the relevant calendar year. Once received, a tax authority may use the data immediately or batch it for systematic review. An inquiry is typically triggered when the reported account balance or income does not appear in the account holder';s filed tax return, or when the account itself was not disclosed. The timeline from data exchange to a formal inquiry varies by jurisdiction and the capacity of the receiving tax authority, but account holders should assume that discrepancies will be identified within one to three years of the relevant reporting period.
Does CRS apply to accounts held through trusts or foundations?
Yes. CRS applies to accounts held through trusts, foundations and similar legal arrangements. The financial institution holding the account must identify the reportable persons connected to the arrangement - which may include the settlor, trustees, protectors, beneficiaries and any other persons who exercise effective control. Each of these individuals who is tax-resident in a participating jurisdiction may be a reportable person. The specific classification depends on whether the trust is treated as a financial institution in its own right or as a passive non-financial entity, which in turn depends on its activities and the rules of the jurisdiction where it is established.
---
CRS is the cornerstone of modern international tax transparency. It creates systematic, automatic flows of financial account information between participating jurisdictions, making undisclosed foreign accounts visible to tax authorities worldwide. For international businesses, investors and asset holders, understanding the legal definition, scope and practical operation of CRS is essential for structuring compliant cross-border arrangements.
VLO Law Firms advises international clients on CRS compliance, account classification and cross-border tax transparency matters. We can assist with due diligence reviews, self-certification procedures, entity classification analysis and coordination with financial institutions. To request a consultation, contact: info@vlolawfirm.com