Listen to this article
0:00 / 21:31

Key Takeaways

  • Bermuda's Registrar of Companies holds certain records, but the law distinguishes between information that is public and information kept confidential.
  • Beneficial ownership details are disclosed to a register with defined rules on who must report and who is permitted to access it.
  • Nominee directors and shareholders can affect the visibility of those connected to a company, while professional advisers carry confidentiality obligations.
  • Personal data is protected under the Personal Information Protection Act, though authorities retain defined routes to access private company information.

Company privacy in Bermuda rests on a clear division: certain corporate records sit on a public file, while ownership and personal data are shielded by statute and shared only through controlled channels. The framework is administered by the Registrar of Companies under the Companies Act 1981, supported by the Beneficial Ownership Act, the Personal Information Protection Act, and an established record of international information exchange.

This balance matters most to non-resident owners deciding where to incorporate, because it determines what a competitor, journalist, or commercial searcher can learn about your business, and what only authorities can reach. The sections below set out what stays confidential, what becomes public, and the conditions under which private information leaves the jurisdiction.

Every company formed in the territory must register with the Registrar of Companies, which operates under the Companies Act 1981. The Registrar maintains an online portal where registered users submit filings, settle fees, and update entity records.

Some documents are open to public inspection. These include the Memorandum of Association and any alterations, the Certificate of Deposit of Memorandum, the Certificate of Incorporation, and any prospectus filed for a public share offering.

A list of directors must also be filed. The Companies Act was amended to add section 92B, establishing a Register of Directors that every company must lodge with the Registrar.

Financial accounts are a different matter. An exempted company is not required to file accounts with the Registrar, though it must keep prescribed records, including its directors' and shareholders' registers, with its registered agent.

What the Registrar holds and who can see it
Record Public inspection
Memorandum of Association and alterations Yes
Certificate of Incorporation Yes
Register of Directors (s.92B) Yes
Prospectus for public share offer Yes
Financial accounts (exempted company) Not filed
Register of Shareholders Held at registered office, not centrally filed

A control mechanism applies to incorporation applications, and the register held roughly 15,000 companies according to a 2020 government statement. The public can search for company names, reserve a name, and order certified documents and certificates of compliance online.

Company Incorporation in Bermuda

Set up your company in Bermuda with Expanship handling registration end to end.

The line between open and closed records is drawn deliberately. Documents that govern a company's constitution, its financial data, and its correspondence with the Registrar are not disclosable to the public.

Economic substance information sits firmly on the confidential side. The Economic Substance Act 2018 provides that such information is not disclosable, and the Public Access to Information Act 2010 does not apply to it.

A company must maintain a registered office in the jurisdiction and keep its Register of Directors and Officers, together with its Register of Shareholders, available for inspection there. The directors' and officers' register records each person's full name, position, and address; for local companies it also states whether the individual holds Bermudian status.

Shareholder identities do not appear in a third-party company search report. Director details surface only where the company has filed its directors' register with the Registrar.

Regulatory responsibility for the economic substance regime has shifted from the Registrar to the Corporate Income Tax Agency, a change worth noting where your entity has substance reporting obligations.

The Beneficial Ownership Act consolidates what were previously scattered requirements into a single statute governing how beneficial ownership information is collected, kept, and disclosed. Authority to collect, verify, and maintain this data now sits with the Registrar of Companies, taking over a function once run by the Bermuda Monetary Authority.

A beneficial owner is an individual who ultimately owns or controls 25% or more of shares, voting rights, or partnership interests, whether directly or indirectly, or who otherwise exercises ultimate effective control. Every legal person must comply unless its shares are listed on the Bermuda Stock Exchange or an appointed exchange, in which case it is exempt.

Filing runs through a corporate service provider. A legal person must engage a CSP to lodge its beneficial ownership information with the central register at the Registrar.

The register is not public. Its purpose is to make ownership information accessible to law enforcement agencies responding to proper and lawful requests, and access is permitted only by or on behalf of the Registrar.

The government has stated that "a public register is incompatible with Bermuda's privacy and data protection laws and its international obligations." Instead, it plans a register reachable by persons who can demonstrate a legitimate interest, in line with the EU's Sixth Anti-Money Laundering Directive, with obliged entity access targeted for Q2 2025 and legitimate interest access by Q3 2026.

Filing enforcement timeline

The Registrar has stated it will not enforce beneficial ownership filing requirements until 1 June 2026. The Beneficial Ownership Amendment Act 2025 took operative effect on 30 December 2025, aligning register requirements with FATF standards.

Penalties carry weight. Failure to comply with filing obligations attracts fines up to BD$250,000, and unauthorised disclosure of beneficial ownership data can bring a fine up to BD$50,000 or two years' imprisonment.

The jurisdiction's standing here is documented. In its FATF Mutual Evaluation Report approved in January 2020, it earned a Substantial effectiveness rating for preventing misuse of legal persons, a level reached by only nine other jurisdictions out of roughly 100 evaluated.

Ongoing Compliance in Bermuda

Keep your Bermuda entity compliant with filings, returns, and statutory obligations.

Directors and shareholders are treated differently for visibility. Under section 92B of the Companies Act 1981, every registered company files a list of its directors, and that list is searchable through the public Directors Register.

The filed register records each director and officer's full name, position, and address. If you serve as a director of your own company, expect that information to be publicly visible.

Shareholders enjoy more protection. The Register of Shareholders is kept at the registered office for inspection rather than filed centrally, so shareholder names do not appear in a public company search.

The Registrar may permit a company to hold the shareholder register at another convenient location within the territory. A company listed on a stock exchange may also obtain permission to keep branch registers abroad, provided the Registrar receives written notice of the location.

Some share-related events still reach the central file. Companies with share capital must file information on share transfers and on the registration of estate representatives of deceased shareholders.

Nominee arrangements are lawful but regulated. The Corporate Service Providers Act lists the provision of nominee shareholders, and acting as a nominee director, officer, or secretary, as regulated CSP activities.

Other regulated functions include administrative and secretarial services and acting as resident representative under the Companies Act 1981. A CSP offering nominee services must apply know-your-client checks, verifying clients, beneficial owners, directors, and authorised signatories, and must appoint both a compliance officer and a money laundering reporting officer.

A nominee does not hide the real owner. Under the anti-money laundering framework, the true beneficial owner must still be identified and recorded in the central register; appointing a nominee shifts the public name, not the disclosure obligation.

Licensed providers report annually to the BMA. Each must furnish a Certificate of Compliance within four months of its financial year end.

The 2020 FATF review flagged alternate directors and bearer shares as areas needing further legislative change, and these matters are stated to form part of subsequent amendments.

Bermuda Incorporation Pricing

See transparent pricing to incorporate and maintain a company in Bermuda.

PIPA gives personal data a statutory footing. It received Royal Assent on 27 July 2016 and became fully effective on 1 January 2025, functioning as the local counterpart to the UK's data protection law and the EU's GDPR.

The Act applies to all "organisations" that use personal information. Its coming into force aligns the territory with obligations under Article 8 of the European Convention on Human Rights, extended to it as a British Overseas Territory.

Each organisation must appoint a privacy officer to maintain communication with the Privacy Commissioner; businesses under single ownership may share one. Where a security breach is likely to harm an individual, the organisation must promptly notify both the Commissioner and the affected individuals.

Cross-border transfers carry continuing responsibility. An organisation that sends personal information to an overseas third party stays accountable for compliance and must assess the data protection standard the recipient provides.

The penalties are calibrated by who breaches. Individuals face fines up to $25,000 or up to two years' imprisonment, or both; organisations face fines up to $250,000, and the Commissioner can issue orders compelling compliance.

Advisers and service providers operate under a confidentiality framework that runs alongside their reporting duties. The Proceeds of Crime (Anti-Money Laundering and Anti-Terrorist Financing) Regulations 2008, made under the Proceeds of Crime Act 1997, set the compliance baseline for CSPs and other regulated firms.

Record-keeping is mandatory and durable. Regulated entities must retain customer identification, transaction, and due diligence records for at least five years, in enough detail to reconstruct individual transactions and support investigations.

Two officer roles are compulsory: a Compliance Officer and a Reporting Officer, the latter charged with reporting suspicious activity to the Financial Intelligence Agency. Independent professionals such as barristers and accountants answer to the Barristers and Accountants AML/ATF Board as their supervisory authority.

The Bermuda Monetary Authority supervises regulated financial institutions and publishes AML guidance for banking, insurance, trusts, investment business, digital asset business, and CSPs. Breach of that guidance can lead to sanction, fines, licence revocation, or prosecution.

Lawyers add a further layer. Attorney-client privilege under inherited English common law principles protects communications between a lawyer and client, separate from the regulatory regime.

Confidentiality from the public does not mean isolation from authorities. The territory has signed more than 40 bilateral Tax Information Exchange Agreements and is party to the Multilateral Convention on Mutual Administrative Assistance in Tax Matters, giving it exchange relationships with over 106 jurisdictions, including all G20 and EU members.

The domestic gateway for these agreements is the International Cooperation (Tax Information Exchange Agreements) Act 2005. Two automatic reporting regimes also operate.

  • Under the Common Reporting Standard, financial institutions have applied due diligence to new accounts since 1 January 2016, reporting account data to account holders' countries of tax residence.
  • Under a Model 2 FATCA agreement with the United States, applicable financial institutions file directly with the IRS rather than through the local portal used for CRS and country-by-country reporting.

Criminal cooperation has its own channel. A Mutual Legal Assistance Treaty with the United States, in force since 2012, covers economic crime and money laundering investigations, document service, search and seizure, and asset freezing.

Intelligence flows through the Financial Intelligence Agency, which receives all Suspicious Activity Reports and shares developed intelligence with law enforcement at home and abroad. A beneficial ownership register has existed since the end of the Second World War, accessible to any competent authority pursuing legitimate enquiries.

The exchange record is independently rated. A 2019 UK Home Office statutory review found the territory 100% compliant with its quality mandate on beneficial ownership exchange with the UK, and the regime is being prepared for the CFATF 5th-round mutual evaluation due to begin in October 2026.

For a foreign owner, the practical picture is consistent across the rules above: your ownership stays out of public view, but it is fully visible to authorities through lawful channels.

  • Your shareholding is not publicly searchable at the Registrar, and your name as a shareholder does not appear in a central online search.
  • If you also act as director, your name and address are filed publicly under section 92B and appear in the Directors Register.
  • Beneficial ownership details reach only law enforcement and regulators through lawful requests, not the general public or commercial searchers.
  • Economic substance information is not disclosable, and the Public Access to Information Act 2010 does not apply to it.

Reporting still follows the money. If your company holds financial accounts in the jurisdiction, those accounts are reported under CRS to your country of tax residence, and US persons are reported directly to the IRS under FATCA.

The government has stated plainly that it has never been a bank secrecy jurisdiction; privacy protections sit alongside information-sharing duties rather than displacing them. Make sure your CSP files accurate beneficial ownership data on time, since non-compliance can draw fines up to BD$250,000.

The arrangement here favours the owner who wants distance from public exposure without seeking to escape oversight. Your shareholding and beneficial interest stay confidential from commercial searchers, while directors are on the public file and authorities retain lawful access through tax and criminal cooperation channels. A non-resident owner gains genuine privacy from the public combined with predictable, treaty-backed transparency toward regulators. The result rewards accurate, timely filing through a competent service provider rather than concealment.

Expanship supports non-resident owners in managing what stays private and what must be filed, from accurate beneficial ownership submissions through your corporate service provider to PIPA-aligned handling of personal data, and extends to the full set of services a foreign-owned entity needs to operate and stay compliant.

  • Company formation and structuring for non-resident owners
  • Registered agent and registered office services
  • Tax registration and statutory filing support
  • Ongoing compliance and beneficial ownership management
  • Accounting and bookkeeping
  • Introductions to banking providers

To discuss your requirements, contact Expanship Bermuda.

No. The Register of Shareholders is kept at the company's registered office for inspection and is not filed centrally with the Registrar, so shareholder identities do not appear in a public company search report.

Yes. Section 92B of the Companies Act 1981 requires every company to file a list of its directors, and the filed register, which includes full name, position, and address, is searchable through the public Directors Register.

No. The central beneficial ownership register is accessible only to law enforcement and regulators through lawful requests, and the government has stated that full public access is incompatible with its privacy and data protection laws, with legitimate interest access targeted for Q3 2026.

Yes. The Personal Information Protection Act, fully effective on 1 January 2025, applies to all organisations that use personal information, requires a designated privacy officer, and holds you responsible for assessing data protection when you transfer information to an overseas third party.

No. Nominee services are regulated under the Corporate Service Providers Act, and the true beneficial owner must still be identified and recorded in the central register, so a nominee changes the publicly visible name but not the disclosure obligation.

Yes, through lawful channels. The jurisdiction has more than 40 bilateral tax information agreements, exchange relationships with over 106 jurisdictions under the multilateral convention, automatic reporting under CRS and FATCA, and a mutual legal assistance treaty with the United States in force since 2012.