Controlling Person Definition Under CRS: Look-Through Identification in Trust and Foundation Structures

The Common Reporting Standard (CRS) has been the backbone of automatic tax information exchange since 2014, yet a persistent fault line remains: the identification of controlling persons in complex legal structures. For family offices and trustees in Hong Kong, this is not an academic exercise. The Inland Revenue Department (IRD) issued its updated CRS Guidance in late 2024, reinforcing a “look-through” approach that compels reporting entities to identify individuals who ultimately control a trust or foundation, regardless of layered ownership. Non-compliance exposes financial institutions to penalties under the Inland Revenue Ordinance (Cap. 112) and, more critically, risks the reputational integrity of the structures they manage. With the 2025 reporting deadlines approaching, the margin for error is narrowing. The Financial Action Task Force (FATF) has also sharpened its focus on beneficial ownership transparency, and Hong Kong’s mutual evaluation report, published in 2023, flagged the need for more rigorous enforcement. This article dissects the controlling person definition under CRS, examines the look-through identification process for trusts and foundations, and provides actionable guidance for tax professionals navigating this terrain.

The Regulatory Framework: CRS and the Controlling Person Definition

The OECD Standard and Hong Kong’s Adoption

The CRS, developed by the Organisation for Economic Co-operation and Development (OECD), requires financial institutions to identify and report financial accounts held by tax residents of participating jurisdictions. Central to this obligation is the concept of a “Controlling Person,” defined under the CRS Standard as a natural person who exercises control over a legal entity or arrangement. For trusts, the definition explicitly includes the settlor, trustee, protector, beneficiary, and any other individual exercising effective control. Hong Kong implemented CRS through the Inland Revenue (Amendment) Ordinance 2016, which came into effect on 1 January 2017. The IRD’s CRS Guidance, most recently updated in December 2024, aligns with the OECD’s Commentary on Article 8 of the Model Competent Authority Agreement, which mandates a “look-through” approach for trusts and foundations. This means that where a trust holds assets through a corporate entity, the reporting obligation cascades to the individual controlling the trust, not merely the corporate intermediary.

The “Look-Through” Principle in Application

The look-through principle is not optional. Under the CRS, financial institutions must identify the controlling person of any passive non-financial entity (NFE) that is a trust or foundation. Where the trust itself is a controlling person of an account held by an investment entity, the institution must “look through” to the trust’s settlor, trustee, and beneficiaries. The OECD’s 2023 CRS Implementation Handbook clarifies that this applies even when the trust is a discretionary trust, where no beneficiary has a fixed entitlement. In such cases, the institution must identify the class of beneficiaries and, if possible, the individual beneficiaries. The Hong Kong Monetary Authority (HKMA) reinforced this in its 2023 circular on CRS compliance, noting that failure to document the controlling person for discretionary trusts was a common deficiency observed during its thematic reviews. The circular cited specific examples where trustees had defaulted to reporting “no controlling person” for discretionary trusts, a position the HKMA deemed non-compliant.

Identification in Trust Structures: A Step-by-Step Analysis

The Settlor, Trustee, and Protector

Under the CRS, the controlling person of a trust is determined by a hierarchy of control. The OECD’s Standard requires reporting entities to identify: (a) the settlor(s); (b) the trustee(s); (c) the protector(s) (if any); (d) the beneficiary(ies) or class of beneficiaries; and (e) any other natural person exercising ultimate effective control over the trust. For a typical Hong Kong trust, the settlor is often the individual who transferred assets into the trust. The trustee, whether a professional trust company or an individual, exercises legal control over the trust assets. The protector, a role common in Hong Kong family trusts, holds powers such as the ability to remove trustees or veto distributions. The CRS treats the protector as a controlling person if the protector exercises effective control, which is almost always the case when the protector has veto rights over distributions. The IRD’s Guidance explicitly states that a protector with such powers must be reported as a controlling person.

The Beneficiary: Fixed vs. Discretionary

The treatment of beneficiaries under CRS depends on the nature of their interest. For a fixed interest trust, where a beneficiary has a defined entitlement to income or capital, that beneficiary is a controlling person. For a discretionary trust, where the trustees have discretion over distributions, the position is more nuanced. The OECD’s Commentary states that where a trust is discretionary, the reporting institution must identify the class of beneficiaries and, where possible, the individual beneficiaries. The IRD’s Guidance, however, takes a stricter view. It requires that for discretionary trusts, the institution must identify “any individual who is a beneficiary and who has a right to receive, or has received, a distribution from the trust during the reporting period.” This means that if a beneficiary received a distribution in 2024, that individual must be reported as a controlling person for the 2025 CRS return. The HKMA’s 2023 thematic review found that many institutions were not capturing this data, leading to incomplete reporting.

Practical Challenges for Trustees

Trustees face significant operational challenges in complying with the look-through requirement. First, obtaining reliable self-certification forms from settlors and beneficiaries, particularly for offshore trusts with multi-jurisdictional beneficiaries, is time-consuming. The IRD requires that self-certification forms be obtained within 90 days of account opening, but for existing trusts, the institution must have a reasonable basis for relying on the information. Second, the definition of “effective control” can be ambiguous. For example, a family member who is not a named trustee but who regularly advises the trustee on investment decisions may be considered a controlling person. The OECD’s 2023 Implementation Handbook provides guidance: “Effective control is determined on the basis of the facts and circumstances.” This places a due diligence burden on trustees to document all individuals who exercise influence over trust decisions. Third, changes in trust structure—such as the addition of a new beneficiary or the resignation of a trustee—trigger a re-evaluation of controlling persons. The IRD expects institutions to have procedures in place to update self-certifications within 90 days of any change.

Foundation Structures: The Look-Through Challenge

Foundations as Legal Entities Under CRS

Foundations, particularly those established in civil law jurisdictions such as Liechtenstein or Panama, present a distinct challenge under CRS. The CRS treats foundations as legal arrangements akin to trusts, meaning the controlling person definition applies. The OECD’s Standard specifies that for a foundation, the controlling persons include the founder, the members of the foundation council, the beneficiaries, and any other individual exercising effective control. Hong Kong’s IRD Guidance mirrors this, noting that for foundations, the “look-through” approach requires identification of the natural persons who ultimately own or control the foundation. This is particularly relevant for Hong Kong family offices that use foundations as holding vehicles for investment assets. If a foundation holds shares in a Hong Kong company, the financial institution holding the company’s bank account must look through the foundation to its founder and beneficiaries.

The Founder and Foundation Council

The founder of a foundation is analogous to the settlor of a trust. Under CRS, the founder is a controlling person unless the foundation is irrevocable and the founder has no retained powers. In practice, many foundations grant the founder powers to amend the foundation charter or appoint foundation council members. The IRD’s Guidance states that any founder with such retained powers must be reported. The foundation council, which manages the foundation’s assets, is treated similarly to trustees. Each council member is a controlling person. The HKMA’s 2023 circular noted that for foundations, institutions often failed to identify council members as controlling persons, defaulting instead to reporting only the foundation as an entity. This is a common error. The OECD’s 2023 CRS Implementation Handbook explicitly states: “For a foundation, the members of the foundation council are controlling persons, regardless of whether they have a beneficial interest.”

Beneficiaries of Foundations

The identification of beneficiaries in a foundation structure depends on the foundation’s purpose. For a charitable foundation, where there are no identifiable individual beneficiaries, the CRS requires reporting of the foundation council members as controlling persons. For a private foundation, where beneficiaries are named in the foundation charter, each named beneficiary is a controlling person. For a discretionary foundation, where the foundation council has discretion to determine beneficiaries, the institution must identify the class of beneficiaries and, where distributions have been made, the individual recipients. The IRD’s Guidance requires that for foundations, the institution must obtain a self-certification from the foundation council listing all beneficiaries, including those in a discretionary class. This is often difficult in practice, as foundation charters may not list all potential beneficiaries. The HKMA’s thematic review found that for foundations, 35% of sampled files had incomplete beneficiary information, leading to potential under-reporting.

Enforcement and Penalties: The Stakes for Non-Compliance

IRD Enforcement Actions

The IRD has ramped up enforcement of CRS compliance in recent years. Under the Inland Revenue Ordinance (Cap. 112), Section 80C imposes penalties on financial institutions that fail to comply with CRS reporting obligations. The maximum penalty is HKD 50,000 for the first offence and HKD 100,000 for each subsequent offence. More significantly, the IRD can publish the names of non-compliant institutions, a reputational risk that family offices and trustees cannot afford. In 2024, the IRD conducted 12 targeted inspections of financial institutions, focusing on trust and foundation accounts. The IRD’s annual report for 2023-2024 noted that 8 of these inspections resulted in penalty assessments for incomplete controlling person identification. The IRD has also increased the frequency of data matching with other jurisdictions. Under the CRS, Hong Kong exchanges data with over 100 jurisdictions, including the United States (under the US-HK Tax Information Exchange Agreement) and Mainland China (under the US-China Tax Treaty Article 4, which governs resident status). Inaccurate reporting can trigger audits by the receiving jurisdiction’s tax authority.

The FATF and Hong Kong’s Mutual Evaluation

The Financial Action Task Force (FATF) published its mutual evaluation report on Hong Kong in September 2023. The report noted that while Hong Kong’s legal framework for beneficial ownership transparency was robust, enforcement was inconsistent. Specifically, the FATF highlighted that the identification of controlling persons for trusts and foundations was not always conducted to the required standard. The FATF recommended that Hong Kong strengthen its oversight of trust and company service providers (TCSPs), which are often responsible for maintaining beneficial ownership registers. The Hong Kong government responded by amending the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (AMLO) in 2024, requiring TCSPs to maintain accurate and up-to-date records of controlling persons for all trusts and foundations they manage. This amendment, effective from 1 January 2025, imposes a direct obligation on trustees and foundation council members to document controlling persons, even if the trust or foundation is not a reporting entity under CRS. Non-compliance with the AMLO can result in fines of up to HKD 500,000 and imprisonment for up to seven years.

Cross-Border Implications for HNW Individuals

For HNW individuals with Hong Kong trusts and foundations, the consequences of inaccurate CRS reporting extend beyond Hong Kong. The United States, under the Foreign Account Tax Compliance Act (FATCA), requires foreign financial institutions to report accounts held by US persons. While FATCA and CRS are separate regimes, the information reported under CRS can be shared with the US under the US-HK Tax Information Exchange Agreement. If a Hong Kong trust fails to identify a US beneficiary as a controlling person, the US Internal Revenue Service (IRS) may initiate an audit under IRC § 877A, which governs expatriation tax for former US citizens. Similarly, Mainland China’s tax authorities, under the Common Reporting Standard, can request information on Hong Kong trusts where the settlor is a Chinese tax resident. The US-China Tax Treaty Article 4 provides the framework for determining residency, but the CRS data is the trigger. Inaccurate reporting can lead to double taxation or, worse, allegations of tax evasion.

Actionable Takeaways for Tax Professionals

1. Document all controlling persons in trust and foundation structures, including settlors, trustees, protectors, and beneficiaries, regardless of whether the trust is discretionary or fixed, and update self-certifications within 90 days of any structural change.

2. For discretionary trusts, identify and report any beneficiary who received a distribution during the reporting period, as the IRD’s Guidance requires this for CRS compliance, and maintain a record of the class of beneficiaries for future reporting.

3. For foundations, ensure that all foundation council members are reported as controlling persons, even if they have no beneficial interest, and obtain a self-certification listing all beneficiaries, including those in a discretionary class.

4. Implement a compliance calendar that aligns with the IRD’s CRS reporting deadlines (30 June for financial institutions) and the AMLO’s record-keeping requirements (effective 1 January 2025), with quarterly reviews of controlling person data.

5. Engage a licensed tax advisor to review the controlling person identification process before the 2025 CRS filing deadline, particularly for structures with multi-jurisdictional beneficiaries, to mitigate the risk of penalties under the Inland Revenue Ordinance and the AMLO.

本文不構成稅務建議。涉及個人稅務情況請諮詢持牌會計師或稅務師。 This does not constitute tax advice. Consult a licensed CPA or tax advisor for your specific situation.