Cayman Islands Beneficial Ownership in 2026: How BOTA Actually Works

Last updated: 27 October 2026 · Reviewed against the Beneficial Ownership Transparency Act (2026 Revision), the Beneficial Ownership Transparency (Amendment) Regulations 2026, the Legitimate Interest Access (Amendment) Regulations 2026, the General Registry’s access-restriction guidance, the EU Council’s tax-list revision of 9 October 2026 and the FATF list of June 2026

For most of the last decade, the Cayman Islands has carried the public perception of an opaque jurisdiction — a place where beneficial ownership data simply did not exist outside the offices of corporate service providers.

That perception is now substantially out of date.

On 31 July 2024, the Cayman Islands Beneficial Ownership Transparency Act, 2023 (BOTA) and its accompanying Regulations came into force, replacing and consolidating the entire prior framework. Enforcement against in-scope entities commenced on 1 January 2025. On 28 February 2025, the Legitimate Interest Access (LIA) Regulations went live, opening a supervised pathway for journalists, civil society organisations, and counterparties in active business relationships to apply for beneficial ownership data on a specific legal person. Penalties for non-compliance include strike-off of the entity at the third offence. Funds, exempted limited partnerships, and foundation companies that were exempt from the old regime are now in scope. In January 2026 an amending Act let the Competent Authority share register data with other governments and confirmed that administrative fines are maximums; amending Regulations cut the deadline for reporting a discrepancy from 30 days to five. And on 18 March 2026 the price of a legitimate-interest search rose from CI$30 to CI$75.

For compliance teams onboarding a Cayman counterparty in 2026, the operational reality is closer to UK PSC than to Delaware. The data exists. There is a working register. There is a defined access pathway. The question for an MLRO is no longer whether the data is collected — it is collected. The question is which access route applies to your firm, what it costs, how long it takes, and what to do when the answer comes back.

This guide explains how the Cayman Islands beneficial-ownership regime actually works as of October 2026: the in-scope entities, the access tiers, the LIA mechanism, the alternative-routes-to-compliance for funds, and the penalty framework. It covers the operational workflow for verifying a Cayman UBO across the four most common counterparty types — exempted companies, LLCs, exempted limited partnerships, and CIMA-registered investment funds.

1. The Cayman regime in 2026: what BOTA actually does

The Beneficial Ownership Transparency Act, 2023 (BOTA) is the consolidated statute governing beneficial-ownership disclosure for Cayman Islands legal persons. It replaced and merged the previous beneficial-ownership rules that had been spread across multiple entity-specific statutes since 2017. BOTA came into force on 31 July 2024 alongside the Beneficial Ownership Transparency Regulations, 2024, with a transitional grace period until 1 January 2025 — after which enforcement against non-compliant entities began.

Three operational decisions sit at the heart of the regime:

• The data is held by the Competent Authority for Beneficial Ownership, located within the Cayman Islands General Registry. Information is filed by licensed Corporate Service Providers (CSPs) on behalf of each in-scope entity. For the underlying concept of beneficial ownership, see our guide to UBO definitions.
• The register is centralised but not openly public. No member of the general public can search for beneficial owners by typing an entity name into a website. Access is tiered — for competent authorities, for Licensed Financial Institutions and DNFBPs that pay a fee, and (since February 2025) for applicants demonstrating a "legitimate interest".
• Enforcement is structured around strike-off as the ultimate sanction. Civil and criminal penalties apply for non-compliance, but the meaningful deterrent — for an offshore vehicle whose entire commercial purpose depends on its existence — is being struck off the register at the third offence.

2. Who is in scope — and what changed from the old regime

BOTA defines the universe of in-scope entities — collectively referred to as "legal persons" — broadly. The expansion from the prior framework is one of the most consequential operational changes of 2024–2025.

The single most important change for compliance teams is the inclusion of Exempted Limited Partnerships. ELPs are the workhorse vehicle for Cayman private equity funds, hedge funds, and carry vehicles. Under the prior regime, an ELP that sat above a CIMA-regulated fund was typically exempt from beneficial-ownership reporting. Under BOTA, that exemption is removed — ELPs must either maintain a beneficial-ownership register or use one of the alternative routes. For an EU or UK bank running CDD on a Cayman ELP in 2026, this means data should exist where it did not in 2023.

3. The 25% threshold, indirect ownership, and the SMO fallback

BOTA defines a beneficial owner as a natural person who meets at least one of three tests, applied in sequence. The tests echo the UK PSC framework and the FATF Recommendation 24 standard.

1. Test 1 — Ownership or voting rights. Any natural person who, directly or indirectly through a chain of ownership or by any other means, owns or controls 25% or more of the shares, voting rights, or partnership interests in the legal person. If anyone meets this test, they are the beneficial owner.
2. Test 2 — Ultimate effective control. If no one meets the 25% test, identify the natural person who exercises ultimate effective control over the management of the legal person — through the right to appoint or remove directors, contractual arrangements, or significant influence over policy decisions.
3. Test 3 — Senior Managing Official (SMO). If neither preceding test identifies a beneficial owner, the natural person holding the senior management position — typically a director or chief executive officer — is treated as the beneficial owner by default.

The Beneficial Ownership Transparency (Amendment) Regulations 2026, in force since 23 January 2026, did not move the threshold. They added a definition of "legal entity" that reaches entities established overseas and similar to a Cayman legal person, clarified how references to voting rights are construed, removed the 25% discount on an administrative fine where the corporate services provider had filed on time, and cut the window for notifying the Competent Authority of a discrepancy from 30 days to five. For layered fund structures, the overseas-entity definition is the change that matters: a foreign corporate layer is now squarely a "legal entity" in the chain.

4. The CSP filing model: how data reaches the General Registry

Unlike the UK PSC register — where the entity files directly — BOTA operates through licensed Corporate Service Providers. The CSP is the operational intermediary between the entity and the Competent Authority. Every in-scope Cayman entity must maintain its registered office through a licensed CSP, and that CSP carries the filing burden.

The mechanics:

1. The in-scope entity provides beneficial-ownership information to its CSP — name, date of birth, residential address, nationality, nature of control, date the person became a beneficial owner.
2. The CSP verifies the information using documentary evidence (passport, address proof, ownership documentation).
3. The CSP records the data in the entity's beneficial-ownership register, held by the CSP.
4. The CSP files the data with the Competent Authority's central search platform.
5. The entity must notify its CSP of any change in beneficial ownership, and registrable owners must report relevant changes within 30 days of becoming aware of them; updates flow through to the central platform.

For compliance teams downstream, this matters in two ways. First, the CSP is the operational source of truth — though the General Registry holds the centralised version. Second, changes reach the central platform only after the owner tells the entity and the CSP files them, so there is an inherent lag between an ownership change and its appearance on the platform. For high-velocity counterparty changes, the CSP-level data is more current.

5. The three access tiers: who can get what, and how

The Cayman beneficial-ownership platform is not openly public. Access is structured in three tiers, each with distinct eligibility, cost, and turnaround.

For an EU or UK bank, the practical question is whether you qualify as a Tier 2 LFI or whether you must apply under Tier 3 LIA. The Cayman Islands has not published a definitive list of which non-Cayman financial institutions qualify as "licensed financial institutions" for platform access purposes, and the Ministry has been deliberately cautious on this point. In practice, most non-Cayman banks accessing the data for CDD purposes will need to use the Tier 3 LIA pathway.

6. How the Legitimate Interest Access pathway works in practice

The Legitimate Interest Access Regulations, 2024 commenced on 28 February 2025 and represent the most operationally significant change for non-Cayman compliance teams in years. The LIA pathway is the primary route through which an external CDD team — for example, a European bank running due diligence on a Cayman counterparty — can obtain beneficial-ownership data without being a Cayman-regulated institution.

To qualify for LIA access, an applicant must fall into one of four categories defined in the Regulations:

• Journalism — a person engaged in the work of collecting, writing, and publishing news, stories, or articles for newspapers, magazines, broadcast, or websites. The definition is deliberately broad.
• Academic research — bona fide academic researchers affiliated with recognised institutions, conducting research related to financial crime, corruption, or money laundering.
• Civil society organisation — an organisation whose purpose includes the prevention or combating of money laundering, its predicate offences, or terrorism financing.
• Business relationship — a person seeking the information in the context of a potential or actual business relationship or transaction with the legal person about whom the information is sought.

The fourth category is the operational door for external compliance teams. A European bank onboarding a Cayman counterparty, a UK private equity firm performing due diligence on a Cayman target, an EU asset manager evaluating a Cayman fund — all can apply under the business-relationship limb of LIA. The application must demonstrate that the legitimate interest is for the purpose of preventing, detecting, investigating, combating, or prosecuting money laundering, its predicate offences, or terrorism financing.

Application mechanics:

• Submission via the General Registry electronic portal
• Required documentation: identity confirmation, description of the relationship or transaction, declaration that the data will be used solely for AML/CTF prevention purposes
• Fee (since 18 March 2026): CI$75 (US$91) for one legal person, up from CI$30; CI$100 (US$122) for an application covering more than one legal person; or CI$250 (US$305) covering any number of applications within one year
• Turnaround: no statutory service standard is published; build the application into the onboarding timeline rather than assuming same-week data
• The beneficial owner subject to the request is not notified of the access (notification would defeat the AML purpose)

An approved applicant receives a narrower data set than a Cayman competent authority or supervised institution sees, and nothing at all on an owner who holds an access restriction from the General Registry. Treat the response as confirmation of who the register names, not as identity verification.

7. Alternative routes to compliance for CIMA-registered funds

The removal of fund-specific exemptions was one of BOTA's most consequential changes. Under the prior framework, a mutual fund registered under the Mutual Funds Act or a private fund registered under the Private Funds Act was simply exempt from maintaining a beneficial-ownership register. Under BOTA, such funds are now in scope — but the legislation provides "alternative routes to compliance" that recognise the practical reality of fund ownership (often hundreds of LPs, none of whom individually exceed the 25% threshold).

The principal alternative route works as follows. A CIMA-registered fund vehicle may, instead of maintaining its own beneficial-ownership register, provide its CSP with details of a Contact Person located in the Cayman Islands. The Contact Person must be:

• A person licensed or registered under a Cayman regulatory law for providing beneficial-ownership information, or
• Another person in the Cayman Islands authorised under a regulatory law to hold this information

The Contact Person undertakes to produce beneficial-ownership information to the Competent Authority within 24 hours of a lawful request. The fund itself does not file routine data to the central platform — but it must be able to surface the data when asked.

For compliance teams running CDD on a CIMA-registered fund, this creates a practical workflow:

1. Confirm the fund's CIMA registration via the CIMA entity search
2. Identify whether the fund has opted for the Contact Person alternative route
3. Where you have a defined business relationship, apply through the LIA pathway for the General Registry to require the Contact Person to provide data
4. Where the LIA pathway is impractical or denied, request the data directly from the fund's general partner or investment manager under your contractual onboarding terms

8. Sector-specific obligations: who is regulated by whom

BOTA's UBO obligations apply across all in-scope legal persons, but the downstream compliance load — what you have to do once you've identified the UBO — varies materially by sector. Cayman's AML supervision is split across multiple regulators, and the obligations land differently on banks, funds, trust companies, real estate professionals, and crypto firms.

Cayman Islands Monetary Authority (CIMA) — banks, insurers, funds, trust companies

CIMA supervises financial services entities under the Banks and Trust Companies Act (2025 Revision) — itself updated in 2025 to incorporate explicit BOTA cross-references — alongside the Insurance Act, Mutual Funds Act, Private Funds Act, and Securities Investment Business Act. Under CIMA supervision, the BO obligations stack:

• Banks (Class A and Class B licensees) must maintain CDD/KYC on every customer including UBO identification at the 25% threshold under BOTA, plus ongoing transaction monitoring, sanctions/PEP screening, and FATF Travel Rule compliance on wire transfers. CIMA can revoke a licence, suspend operations, or require director removal for compliance failures under section 18 of the Banks and Trust Companies Act.
• Trust companies are subject to the same CIMA supervisory regime as banks. Cayman-licensed trust companies operating as trustees must identify the UBO of every trust they administer — which is a meaningfully different threshold from BOTA's entity-level scope. Trusts themselves are not in scope of BOTA, but the trustees are CIMA-regulated and must apply UBO standards to trust structures internally.
• CIMA-registered mutual funds and private funds use the alternative-route Contact Person model described in section 7. Where the fund has hundreds of LPs and none individually exceeds 25%, the fund still maintains internal records sufficient to produce data on request within 24 hours.
• Insurance companies, insurance managers, insurance agents and brokers are CIMA-regulated under the Insurance Act and are required to apply CDD/UBO standards to their counterparties.

Department of Commerce and Investment (DCI) — DNFBPs

The DCI supervises Designated Non-Financial Businesses and Professions: real estate brokers and agents, dealers in precious metals and stones, company formation agents, and independent directors. Every DNFBP must register with the DCI and apply the AML Regulations (2025 Revision), including BOTA-equivalent UBO identification for legal entity customers. The DCI has power to cancel DNFBP registration under Regulation 55G of the AML Regulations for compliance failures.

Cayman Islands Institute of Professional Accountants (CIIPA) — accountants and auditors

CIIPA regulates the accountancy and audit profession under the Accountants Act (2024 Revision). Auditors of Cayman entities apply UBO standards as part of their AML compliance programme. CIIPA acts as both the professional body and the AML supervisor for accountants.

Legal Services Supervisory Authority (LSSA) — lawyers and law firms

The LSSA, established under the Legal Services Act 2020, supervises law firms and attorneys for AML/CFT compliance. Cayman law firms acting as CSPs (which is common — many Cayman registered offices are provided by law firms) are doubly regulated: as lawyers under LSSA, and as CSPs under the licensed corporate services regime.

Virtual Asset Service Providers (VASPs)

Cayman VASPs are regulated by CIMA under the Virtual Asset (Service Providers) Act (2024 Revision) — known as the "VASP Act". Crypto exchanges, custodians, broker-dealers, and token issuers operating in or from Cayman must register with or obtain a licence from CIMA, maintain BOTA-compliant UBO data, apply the FATF Travel Rule to virtual asset transfers, and operate continuous transaction monitoring. The exemption from BOTA that previously applied to VASPs under the Virtual Assets (Services Providers) Act has been removed under the 2024 reforms — VASPs are now squarely in scope.

9. How to verify a Cayman UBO: step-by-step workflow