Pseudonymising Beneficial-Owner Disclosures for AML Compliance Review – UK GDPR-compliant anonymisation per Bribery Act 2010
A beneficial-owner disclosure document is a record identifying natural persons who own or control a corporate structure — prepared for AML compliance under the Bribery Act 2010. Under Companies Act 2006 Part 21A, any person holding 25 percent or more must be registered; UK GDPR fines reach £17.5 million or 4% of turnover. anonym.legal pseudonymises those individuals so compliance advisers assess the framework without exposing personal data.
When this applies
This task applies when beneficial-owner disclosure documents are reviewed by AML compliance consultants, legal advisers, or internal audit teams assessing the robustness of the entity's adequate-procedures framework, and those reviewers require sight of the disclosure structure and methodology rather than the individuals' identities. According to ECCTA 2023 — in force from November 2023 — Companies House received enhanced powers to verify PSC and beneficial-owner data, making accurate record-keeping with real identities essential for regulatory submissions while pseudonymised copies serve internal review.
How anonym.legal handles it
- Upload the beneficial-owner disclosure document or UBO register extract.
- The engine identifies named beneficial owners, their nationalities, dates of birth, and addresses.
- Each individual is pseudonymised consistently; ownership percentages, control thresholds, and the tracing methodology are preserved.
- A mapping table is produced with UK/EU data residency.
- Release the pseudonymised version for compliance review; restore originals before submission to any regulatory body or counterparty.
What you provide
- Beneficial-owner disclosure document or UBO register extract
- Corporate structure chart showing ownership chain (if separate)
- Any certification or declaration signed by named beneficial owners
Limitations & cautions
- Beneficial-owner information submitted to regulatory bodies, counterparties, or financial institutions must contain the real identities of the beneficial owners — the pseudonymised version is for internal compliance review only. Breaches of UK GDPR in processing UBO data can attract fines of up to £17.5m or 4% of global annual turnover under Art. 83.
- The Bribery Act 2010 s.7 adequate-procedures assessment requires specialist legal and compliance advice; pseudonymisation of the disclosure document does not itself constitute compliance.
- The tool pseudonymises personal data in the disclosure but does not verify the accuracy or completeness of the underlying beneficial-ownership information. ECCTA 2023 (in force from 4 March 2024) introduced enhanced verification requirements for PSC and UBO data filed at Companies House — cross-check filings after any disclosure review.
FAQ
Can I share a pseudonymised UBO disclosure with an overseas correspondent bank?
No. Correspondent banks require the actual identities of beneficial owners for their own AML obligations. Share the re-identified version for formal AML submissions.
How does the tool handle complex multi-tier ownership structures?
The engine processes all individuals named in the ownership chain, regardless of the number of tiers. Each natural person receives a unique pseudonym; the ownership percentages and structural relationships between entities are preserved.
Is this tool suitable for use in the context of sanctions screening?
Sanctions screening must be conducted against the real identities of beneficial owners, not pseudonymised versions. Use this tool only for the internal review of disclosure methodology, not for sanctions checks.
Does the Bribery Act 2010 require beneficial-owner disclosures to be retained?
The Bribery Act 2010 requires adequate procedures but does not itself mandate a specific retention period for UBO disclosures. Retention requirements may arise under anti-money-laundering regulations — obtain specialist compliance advice. According to the Limitation Act 1980, civil claims may arise within 6 years of breach, so retain mapping keys for at least that period.
How does ECCTA 2023 affect beneficial-owner disclosure obligations?
According to ECCTA 2023, from November 2023 onwards Companies House can query and reject inaccurate information about PSCs and beneficial owners. The identification doctrine reform also means that offences committed by a senior manager acting within the scope of their authority can now be attributed to the corporate entity. Beneficial-owner disclosure documents used in regulatory submissions must contain real identities; pseudonymised versions are for internal compliance review only.