How to Verify a UBO in Canada (2026): The Complete 14-Jurisdiction Guide

Canada is the most fragmented UBO regime in the developed world — and one of the most accessible.

That's the paradox. Beneficial ownership disclosure rules vary across 14 jurisdictions: federal plus 10 provinces plus 3 territories. Some require public disclosure. Some require private internal registers. Two have no rules at all. The federal CBCA register went live January 2024 with partial public access. Quebec's REQ has had full public ultimate-beneficiary disclosure since 2023, with name-based people search since July 2024 — making it Canada's most powerful UBO data source.

For obliged entities, this means UBO verification on a Canadian counterparty depends entirely on where the entity is incorporated and where it operates. Get the jurisdiction wrong and you've checked the wrong register. For a comparison of how Canada's framework sits alongside other major jurisdictions, see our global UBO regulations index.

This guide cuts through it. What each register holds, what's actually public, the new FINTRAC discrepancy reporting regime, and the practical workflow for verifying a Canadian UBO from anywhere.

The 14-Jurisdiction Map: Where Canadian UBO Data Lives

Unlike single-register countries (UK Companies House, Ireland RBO), Canada operates a decentralised system. Federal incorporation gives a company the right to operate nationwide but does not displace provincial registries. A federal corporation operating in Ontario must register in Ontario. A British Columbia corporation operating in Quebec must register in Quebec. Each jurisdiction has its own beneficial ownership rules.

The takeaway: Canadian UBO verification depends entirely on jurisdiction. A Quebec-operating entity is highly transparent. A Toronto-headquartered Ontario-incorporated company offers minimal public ownership data. An Alberta corporation offers almost none.

The Federal CBCA Register: Partial Public Access Since 2024

The Canada Business Corporations Act (CBCA) governs federally incorporated business corporations. Approximately 600,000 entities are registered under the CBCA. Since June 2019, all CBCA corporations have been required to maintain an internal register of "individuals with significant control" (ISCs). Since 22 January 2024, they have been required to file that information annually with Corporations Canada — and a portion of it is publicly searchable.

Who is an ISC under the CBCA

An "individual with significant control" is a natural person who:

• Owns, controls, or directs 25% or more of the voting rights attached to all of the corporation's outstanding voting shares
• Owns, controls, or directs shares representing 25% or more of the corporation's outstanding shares measured by fair market value
• Has direct or indirect influence that, if exercised, would result in control in fact of the corporation
• Is one of two or more persons whose joint rights or interests meet any of the above thresholds (joint control)

Where no individual meets the threshold, the corporation must record this fact in its register. There is no "senior managing official" fallback in the CBCA — unlike the EU regime, the Canadian framework does not require a default UBO when no natural person meets the threshold.

What's reported, what's public

The data is searchable through Corporations Canada's online search at ised-isde.canada.ca. Search by corporate name, corporation number, or business number. There is no fee for searching. Bulk data downloads are not available through the public interface.

Exemptions

Wholly-owned subsidiaries of public companies are exempt from filing ISC information with Corporations Canada. The exemption applies to subsidiaries of:

• Reporting issuers under Canadian provincial securities laws
• Companies listed on a designated stock exchange (which includes most major exchanges globally — NYSE, NASDAQ, LSE, etc.)
• Crown corporations (but not foreign equivalents)

For obliged entities running due diligence, this exemption matters: a CBCA subsidiary of a foreign-listed parent will not have ISC data on Corporations Canada. Verification has to start at the listed parent in its home jurisdiction.

Penalties for non-compliance

Failure to file ISC information, or filing false information, attracts both corporate and personal penalties:

• Corporation: fines up to CA$100,000
• Directors, officers, and shareholders who knowingly authorise, permit or acquiesce in non-compliance: fines up to CA$1,000,000 and/or 5 years imprisonment
• Administrative dissolution: Corporations Canada can administratively dissolve a non-compliant CBCA corporation

Quebec REQ: Canada's Most Transparent Register

Quebec's Enterprise Register (Registraire des entreprises du Québec, REQ) is operated under the Act respecting the legal publicity of enterprises (LPA). Following amendments via Bill 78 that came into force on 31 March 2023, the REQ is now Canada's most powerful publicly accessible beneficial ownership database.

What makes Quebec different:

• Universal scope. The disclosure obligation applies to all entities registered with the REQ — not just Quebec-incorporated entities. Any corporation, partnership, trust, or foreign entity carrying on business in Quebec must register and disclose its ultimate beneficiaries. This includes federally incorporated companies operating in Quebec, foreign companies with Quebec branches, and entities incorporated elsewhere in Canada that operate in Quebec.
• Fully public access. Ultimate beneficiary information is freely available via the REQ public search at registreentreprises.gouv.qc.ca. No login required. No fee.
• Reverse name search. Since 31 July 2024, the REQ allows search by an individual's name. Type a person's first and last name and the REQ returns every Quebec-registered enterprise where they appear as director, officer, shareholder, partner, or ultimate beneficiary.
• Stricter standard. Quebec requires registrants to take "necessary measures" to identify ultimate beneficiaries — not merely "reasonable measures" as under the CBCA. Quebec considers this a higher bar requiring legal analysis, not just inquiry.

What's reported in the REQ

• Full name of each ultimate beneficiary
• Residential address
• Date of birth (filed but not displayed publicly)
• Other names used in Quebec
• Type of control exercised, or percentage of shares/units held
• Date on which the person became an ultimate beneficiary

Updates must be filed within 30 days of any change. Annual updating declarations are required, with deadlines that vary by entity type within a 6-month window each year.

Quebec's penalties

• Individuals: fines from CA$500 to CA$5,000 per offence
• Entities: fines from CA$1,000 to CA$25,000 per offence (doubled for repeat offences)
• Administrative cancellation: failure to file annual updating declarations can lead to cancellation of the entity's registration, paralysing operations in Quebec — including loss of access to Revenu Québec and CNESST services

The Quebec Enterprise Registrar is required by section 3 of the LPA to take "reasonable measures to optimise the reliability of the information contained in the register" — and is actively de-registering non-compliant entities.

Jurisdiction-by-Jurisdiction Reference Guide

Below is the complete operational reference for each Canadian jurisdiction in 2026. For each: what UBO and shareholder data is available, what's free, what's paid, who can access it, where to search, and the contact details for each registry.

The status pills:

• Fully public — beneficial ownership data searchable online by anyone
• Partial public — some UBO/ISC fields publicly searchable, others restricted
• Internal only — beneficial ownership records required, but not publicly searchable
• No regime — no beneficial ownership transparency legislation in force

The Canada's Business Registries (CBR) portal

The federal government also operates a unified search portal called Canada's Business Registries (CBR), at ised-isde.canada.ca/cbr-rec. The CBR allows basic free search across 8 of the 14 Canadian registries. It is the closest thing to a single nationwide search interface, but it is not comprehensive — it does not include all jurisdictions, returns basic data only, and does not surface UBO/ISC fields. For full UBO verification, you must still query each jurisdiction's primary registry.

For obliged entities, the practical takeaway from this 14-jurisdiction map: only Quebec offers comprehensive public UBO data. The federal CBCA register is partially public but limited in scope (~600,000 entities of millions). Everywhere else, the workflow combines basic public registry data with internal-register requests directed at the entity, supported by Enhanced Due Diligence where the public data is thin.

The FINTRAC Discrepancy Reporting Regime: New for 2025

One of Canada's most significant 2025 developments was not a new register — it was a new obligation for the entities that use the registers. Effective 1 October 2025, FINTRAC reporting entities are required to compare beneficial ownership data they collect during customer due diligence against the data published in Corporations Canada's CBCA register, and to report material discrepancies.

Who must report

Reporting entities under section 5 of the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA):

• Banks, credit unions, trust and loan companies
• Life insurance companies and brokers
• Securities dealers, portfolio managers, investment fund managers
• Money services businesses
• Real estate brokers and developers
• Casinos
• Accountants and accounting firms (in specified circumstances)
• Notaries (BC), lawyers (where engaged in financial activities subject to PCMLTFA scope)
• Dealers in precious metals and stones
• Title insurers (excluded from this specific obligation)

When reporting is mandatory vs. voluntary

Reports are submitted through the My ISED Account portal. After submitting, the reporting entity receives an acknowledgment within 10 business days. Corporations Canada uses these reports to investigate and validate ISC data. The discrepancy regime is one of the strongest enforcement levers in any G7 UBO framework — it makes obliged entities into a distributed verification network.

Canadian Trusts: A Parallel UBO Regime

Canadian beneficial ownership doesn't end at corporations. Trusts have a separate disclosure regime that runs alongside the corporate transparency framework — and for many wealth structures, real estate holdings, and family offices, the trust regime is the more important one. Most articles miss it.

Two parallel systems govern Canadian trust disclosure: the federal T3 Schedule 15 regime under the Income Tax Act, and the provincial corporate transparency regimes (which treat trustees as ultimate beneficiaries when a trust holds shares in a registrable entity).

T3 Schedule 15: Beneficial Ownership Information of a Trust

Effective for trust taxation years ending after 30 December 2023, most express trusts resident in Canada must file an annual T3 Trust Income Tax and Information Return that includes Schedule 15 — Beneficial Ownership Information of a Trust. The schedule is filed with the Canada Revenue Agency, not Corporations Canada, and is non-public.

For each "reportable entity" (trustees, settlors, beneficiaries, and any controlling person), Schedule 15 requires:

• Full legal name
• Address
• Date of birth (where applicable)
• Jurisdiction of tax residence
• Tax identification number (SIN, business number, trust account number, or foreign equivalent for non-residents)
• Type of relationship to the trust

"Controlling person" includes anyone who can override trustee decisions on appointment of income or capital — typically a protector under the trust deed. For tax years ending on or after 31 December 2024, partnerships are also reportable entities.

The bare trust deferral

Bare trusts (where one party holds legal title while another retains full beneficial ownership and control) were originally captured by the new rules. After backlash from accountants and taxpayers who didn't realise common arrangements like "parent on title to child's home" qualified as bare trusts, the CRA repeatedly deferred mandatory bare trust filing:

Bill C-15 was tabled on 18 November 2025 and enacted on 26 March 2026, codifying the deferral and broadening exemptions for low-value family trusts. Compliance teams should plan for material expansion of trust filings starting with the 2026 tax year.

Foreign trusts with Canadian ties

The new trust reporting rules also catch many non-resident trusts that previously had no Canadian filing obligation. A foreign trust may now be required to file a T3 if any of the following apply:

• A person who is, or was, a Canadian resident transferred or loaned property to the trust
• A Canadian resident is a beneficiary of the trust
• The trust holds taxable Canadian property

This dramatically expands the disclosure perimeter. A Cayman trust whose settlor became a Canadian resident, or whose beneficiary class includes a Canadian resident, can now have a T3 filing obligation — even if the trust has no other Canadian connection.

Trusts in corporate ownership chains

Where a trust holds 25% or more of the shares of a CBCA corporation or a provincial registrable entity, the trustees are typically reported as ISCs (or ultimate beneficiaries in Quebec) for that corporation. The corporate transparency framework treats the trustee as the natural-person owner — not the underlying beneficiaries.

Where the trust is itself opaque (a discretionary family trust, for instance, with a class of beneficiaries rather than named individuals), this creates the classic UBO challenge. The trustees are legally identified, but the economic beneficiaries may be a class — children and remoter issue, charitable purposes — that cannot be enumerated. Best practice for obliged entities: collect both the trustee identification and the trust deed (or a summary), and apply Enhanced Due Diligence.

PIPEDA and the Limits on Sharing UBO Data

Even where Canadian UBO data is accessible — through Quebec's REQ, the federal CBCA register, or Ontario's internal registers — the personal information collected is subject to Canadian privacy law. For obliged entities operating across borders, the limits matter.

The Personal Information Protection and Electronic Documents Act (PIPEDA) is Canada's federal private-sector privacy law. It applies to organisations that collect, use, or disclose personal information in the course of commercial activity. UBO data — name, date of birth, residential address, citizenship, country of tax residence, identification number — is personal information under PIPEDA.

What this means in practice

• Limit collection. Obliged entities can collect UBO data needed for AML/CFT compliance, but cannot collect more than necessary. Pulling a full Quebec REQ profile of every entity an individual controls — beyond what's needed for the specific customer relationship — risks breaching PIPEDA's limiting collection principle.
• Limit use and disclosure. UBO data collected for KYC/CDD can only be used for that purpose. Re-using the data for marketing, credit decisions outside AML, or general business intelligence violates PIPEDA.
• Cross-border transfer. Sharing Canadian UBO data with a parent company or affiliate outside Canada (for example, an EU bank's compliance team accessing Canadian customer UBO records) requires contractual safeguards. PIPEDA's accountability principle holds the Canadian entity responsible even when data is processed abroad.
• Retention limits. UBO data must not be kept longer than necessary. Most reporting entities under the PCMLTFA must retain records for five years; PIPEDA permits this but requires deletion or anonymisation after.
• Breach notification. Loss or unauthorised disclosure of UBO data — even from a corrupted internal database — triggers PIPEDA's mandatory breach notification rule where there is "real risk of significant harm" to affected individuals.

Provincial overlays

Quebec, Alberta, and British Columbia have their own private-sector privacy laws deemed substantially similar to PIPEDA. Organisations subject to those laws are generally exempt from PIPEDA for in-province activity, but PIPEDA continues to apply for cross-provincial and cross-border data flows. Quebec's Law 25 (Act respecting the protection of personal information in the private sector, as amended in 2021) imposes the strictest regime — including mandatory privacy impact assessments and explicit consent requirements that exceed PIPEDA's standard.

Practical takeaway: even where UBO data is publicly accessible (Quebec REQ, partial CBCA fields), the obliged entity collecting and processing that data has independent privacy obligations. Public availability of source data does not authorise unlimited downstream use.

What This Means for Cross-Border UBO Verification

For a foreign obliged entity verifying a Canadian counterparty in 2026, the practical position is:

1. Start with the federal CBCA register. If the entity is federally incorporated, partial public ISC data is available at no cost.
2. Always check the Quebec REQ. Even for non-Quebec entities — if they operate in Quebec, the REQ has the most comprehensive public ownership data in Canada. Use the name search to find every entity an individual controls.
3. For BC entities, confirm internal register and request disclosure. Not publicly available yet.
4. For Ontario, Manitoba, Saskatchewan, NS, NB, NL, PEI: request the internal register from the entity directly. The corporation is legally required to maintain it; obliged entities can require its production as part of CDD.
5. For Alberta and the territories: there is no public UBO data. Verification relies on self-disclosure backed by Enhanced Due Diligence.
6. Stress-test against Quebec. If the entity has any Quebec operations, the REQ is the most reliable single source — use it as the primary cross-check against entity self-disclosure.

A worked example: Toronto entity, BC parent, Quebec subsidiary, Cayman trust

Here's how a real cross-border verification plays out. Names are anonymised but the structure is typical of mid-market Canadian holdings.

The target entity is Northgate Holdings Ltd., an Ontario-incorporated holding company. Compliance team is a UK bank onboarding the entity as a corporate customer.

What this shows in practice:

1. Ontario gives nothing public. Northgate Holdings is registered in the OBR but has no public BO disclosure — internal register only.
2. Quebec breaks it open. The Quebec subsidiary triggers REQ disclosure, which names the natural-person ultimate beneficiary at the top of the chain. This single data point is the verification anchor.
3. BC requires direct request. The BC subsidiary's transparency register is held internally — the bank requests it as part of CDD. The entity provides it (failure to do so would itself be a red flag).
4. The federal CBCA cross-check confirms. The 25% federal CBCA holding shows the same individual as ISC. Two independent sources agree on the UBO.
5. The Cayman trust is a dead end. But the BC parent only owns 75% of the next layer — and the Cayman branch is below the 25% threshold for the BC entity. Not material to the UBO determination.

The verification result is defensible: a named natural-person UBO, supported by two independent government-source disclosures (Quebec REQ + federal CBCA), with the opaque branch confirmed as non-material to the threshold test. The entire workflow takes seconds via an automated platform — but several days if executed manually across the five jurisdictions.

Common Failure Points in Canadian UBO Verification

Where teams typically get this wrong:

• Checking only the federal register. Most Canadian businesses are provincially incorporated. The federal CBCA register covers ~600,000 entities; total active entities across all jurisdictions number in the millions. A federal-only check misses the bulk of the market.
• Missing the Quebec REQ for non-Quebec entities. The REQ applies to any entity carrying on business in Quebec, regardless of where incorporated. A federal corporation with Quebec operations files in both registers. Skipping the REQ means missing ultimate beneficiary data that's publicly available.
• Treating Alberta entities as if they have UBO data. Alberta has no beneficial ownership transparency legislation. The "top 5 shareholders" data in annual returns is not the same as a UBO.
• Confusing ISCs with directors. Federal CBCA filings report individuals with significant control — these are not necessarily the directors. Many compliance teams pull the wrong data.
• Using outdated DOB data. The CBCA register publishes only month and year of birth — full date is filed but not public. Sanctions screening with partial DOB has higher false-positive rates.
• Skipping the FINTRAC discrepancy regime. Canadian reporting entities are now obligated to identify and report material discrepancies on high-risk CBCA corporations. Foreign-headquartered firms with Canadian subsidiaries may inherit this obligation through their Canadian operations.
• Treating the public CBCA register as a complete dataset. The register is being populated as corporations file their annual returns, which staggers throughout the year. New filings appear continuously. A single point-in-time pull may miss recent updates.