Listen to this article
0:00 / 19:57

Key Takeaways

  • Bermuda financial institutions must identify reportable accounts and exchange data with partner jurisdictions under the Common Reporting Standard.
  • Non-resident account holders and beneficial owners may have their account information reported to their home tax authority through Bermuda's exchange network.
  • Self-certification and due diligence requirements determine how an account is classified, making accurate residency information essential.
  • Missing reporting deadlines or filing channels can trigger penalties, so understanding the timeline and compliance obligations matters.

The Common Reporting Standard operates fully in Bermuda, where it has been live since the territory's first exchanges in September 2017. CRS in Bermuda is administered through the Ministry of Finance and the Corporate Income Tax Agency (CITA), which acts as the Competent Authority that collects account data from financial institutions and exchanges it with partner countries. The framework affects any individual or entity tax-resident outside Bermuda who holds a financial account with a Bermuda institution, because that account information is reported automatically to the account holder's home tax authority.

This article explains how the standard applies, who must report, what gets exchanged, the deadlines that govern filings, and what all of it means for a foreign owner or investor. It is most relevant to non-residents holding accounts through Bermuda banks, funds, insurers, or holding structures, and to advisers assessing exposure before they incorporate. The official starting point for guidance and deadlines is the Bermuda CRS hub.

Bermuda was among the original Early Adopters. In October 2014, it joined 45 jurisdictions in signing the Multilateral Competent Authority Agreement (MCAA), committing to exchange under the CRS framework from 2017.

That commitment carried fixed operational dates. Financial institutions had to apply CRS due diligence to new accounts from 1 January 2016, and the first reporting fell due by 30 August 2017, with exchanges to partner jurisdictions expected by the end of that September.

For a foreign owner, the practical point is settled: this is not a regime still in planning. Bermuda is an active, ongoing CRS participant, in the same group as the Cayman Islands, the British Virgin Islands, and Jersey.

Company Incorporation in Bermuda

Set up your company in Bermuda with Expanship handling registration end to end.

The domestic rules sit in the International Cooperation (Tax Information Exchange Agreements) Act 2005, as amended, together with the CRS Regulations made under it in 2017. The international authority to exchange comes from the MCAA to which Bermuda is a party.

Together these instruments require Reporting Financial Institutions to apply the due diligence rules, then collect, keep, and report account information. The data flows to CITA as Competent Authority, which exchanges it annually with the relevant reportable jurisdictions.

The Reportable Jurisdictions list, which determines whose data is sent where, is published by the Registrar of Companies on behalf of the Minister of Finance. Monitoring of effective implementation and ongoing compliance falls to the same Competent Authority function.

The reporting obligation reaches four classes of business: Custodial Institutions, Depository Institutions, Investment Entities, and Specified Insurance Companies. Each must notify its status by registering on the Bermuda Tax Information Reporting Portal.

A new institution that qualifies as a Foreign Financial Institution has a defined registration window. It must register and submit its CRS notification through the portal by 30 April following the calendar year in which it became a reporting institution.

Outsourcing the work does not remove the duty. Even where reporting is delegated to a third-party provider, the institution itself must have written policies and procedures covering all CRS obligations, and it must keep records of the steps taken under its due diligence.

CRS and FATCA run on separate tracks

Bermuda exchanges US-person data under a Model 2 FATCA agreement, which means affected institutions file directly with the IRS rather than through the Bermuda portal. CRS and FATCA are distinct reporting channels, and a GIIN issued for FATCA does not satisfy CRS classification on its own.

Trustee-Documented Trusts are a recognised sub-category, and the Annual CRS Compliance Certification Form must be filed by every reporting institution and every such trust.

Ongoing Compliance in Bermuda

Keep your Bermuda entity compliant with filings, returns, and statutory obligations.

A reportable person is an individual or entity tax-resident in a jurisdiction on Bermuda's annually published Reportable Jurisdictions list. Where a reportable person holds an account at a Bermuda institution, defined financial details are gathered for exchange.

The standard draws a line between a Participating Jurisdiction, meaning any country that has committed to implement CRS, and a Reportable Jurisdiction, meaning a country actually on the published list for a given period. Reporting is required only for the latter.

The data reported per account is specific:

  • Name, address, taxpayer identification number, and date and place of birth of each reportable person
  • Account balance or value at year-end, or at closure if the account was closed during the year
  • Distributions credited to the account, including dividends, interest, gross proceeds or redemptions, and other amounts

Entity structures need closer reading. A passive Non-Financial Entity becomes a reportable account where one or more of its controlling persons is a reportable person, and where the settlor of a trust is itself an entity, the controlling persons of that settlor must also be identified and reported.

Certain dormant depository accounts are excluded, provided they meet the conditions in the Regulations: a balance under $1,000, treatment as dormant under the institution's normal procedures, no account-holder transaction in the prior three years, and no communication from the holder.

For the 2024 reporting period, exchanged in 2025, Bermuda added Armenia, Georgia, Moldova, and Ukraine to its Reportable Jurisdictions list.

Bermuda adopted the "Wider Approach" set out in Appendix 5 of the OECD's CRS guidance. Under it, institutions capture tax-residence information for all account holders, not only those resident in a Reportable Jurisdiction at the time procedures are performed.

The reason is practical: the Reportable Jurisdictions list grows over time, and the Wider Approach means data is already on file when a new country is added. As a result, you may be asked for a taxpayer identification number for each jurisdiction of residence rather than only for reportable ones.

A valid self-certification for an individual must contain the holder's name, residence address, jurisdiction or jurisdictions of tax residence, TIN for each reportable jurisdiction, and date of birth. Entity certifications carry the same fields without the date of birth.

The TIN and date-of-birth fields appear optional in the filing, but treat them as required in practice. The Ministry expects dates of birth for all individuals and controlling persons and will follow up to compel corrections; TINs must be supplied wherever the residence jurisdiction issues them.

Two further points bear on onboarding. A FATCA GIIN alone cannot establish an entity's CRS classification, and institutions must weigh the OECD's published list of more than 25 high-risk citizenship- and residence-by-investment schemes when an account holder may have obtained residency or citizenship through such a program.

If your circumstances change in a way that affects tax residency, you must tell the institution and provide an updated self-certification within 30 days.

Bermuda Incorporation Pricing

See transparent pricing to incorporate and maintain a company in Bermuda.

Bermuda exchanges only with partners that satisfy confidentiality and data-safeguard requirements. The roster of active exchange relationships is published by the OECD once formalities and legal checks are complete.

The underlying network is wide. Bermuda has signed more than 40 bilateral Tax Information Exchange Agreements and participates in the OECD's Convention on Mutual Administrative Assistance in Tax Matters, which spans over 100 countries. Globally, the CRS system carried more than 2,700 bilateral exchange relationships.

The annual Reportable Jurisdictions list is the document that matters most for any given year. It is published in the Official Gazette and identifies which countries receive calendar-year data in the following year; the first appeared around the end of April 2017, with subsequent lists issued around the end of January.

One absence is significant for many investors: the United States is not a CRS participating jurisdiction and does not appear on Bermuda's list. US persons are handled separately under the FATCA Model 2 arrangement, with reporting going directly to the IRS.

Filing runs through the Bermuda Tax Information Reporting Portal, operated by CITA. Submissions can be made by XML upload or manual entry, and the timetable is fixed each year.

Annual CRS filing obligations and deadlines
Obligation Who files Deadline
CRS Return (reportable and nil) All Reporting Financial Institutions 31 May following the reporting year (31 May 2026 for 2025 data)
Annual CRS Compliance Certification Form All RFIs and Trustee-Documented Trusts 30 September following the reporting year (30 September 2026 for 2025)
New RFI registration and notification New FFIs 30 April following the year the institution became an RFI

Nil returns are mandatory. Any Bermuda institution that maintained no reportable accounts during the year must still file, a change from earlier guidance that once treated nil returns as optional.

The Regulations introduce offences and penalties of up to $10,000, covering breaches of the rules, materially inaccurate self-certifications, tampering with data, and obstructing the Ministry. A reasonable-excuse defence exists, but neither insufficient funds nor reliance on an agent qualifies.

Enforcement is increasingly active. Under a risk-based approach, the Ministry issues notices requiring selected institutions to commission a CRS Independent Compliance Review by an approved reviewer; the Compliance Review Guidelines set out how that process works.

If you are tax-resident in a Reportable Jurisdiction and hold an account at a Bermuda institution, your account details are reported to CITA and exchanged with your home tax authority every year. This is automatic and does not depend on any request from your country.

For entities, the look-through reaches the people behind the structure. A passive holding company or investment vehicle that is a Passive NFE will have the identities and tax residencies of its controlling persons collected and reported, not merely the entity name. Where a trust's settlor is an entity, the controlling persons of that settlor are also reported.

Because Bermuda applies the Wider Approach, your residence data may be gathered even before your country joins the Reportable list. That means a later addition can result in your information being exchanged without any fresh request for documents.

US persons sit outside CRS entirely and are reported under FATCA directly to the IRS. The exchange itself is government-to-government, subject to confidentiality and data-safeguard rules, and is not a public disclosure.

Scrutiny is rising on several fronts. A second round of OECD peer reviews, designed to test whether the standard works in practice, began in 2023 with results due in 2025, and both the OECD and the Global Forum continue to review adherence.

Domestic enforcement has been reinforced to match. Since the Independent Compliance Review process started in 2021, the Ministry has added staff and expanded its risk-assessment framework, and institutions report more frequent CRS inquiries and notices. The prudent response is correct entity classification, clean data, annual review of internal procedures, and periodic CRS health checks.

The framework itself is evolving. The amended standard, often called CRS 2.0, went live on 1 January 2026 alongside the OECD's Crypto-Asset Reporting Framework (CARF), and Bermuda's alignment with both should be monitored as guidance develops.

A separate transparency reform also took effect. Bermuda's Beneficial Ownership Act 2026 tightened ultimate beneficial owner disclosure from late 2025, and while distinct from CRS, it reinforces the same direction of travel; the central register is not public, with access limited to competent authorities, government procurement officers, and AML-obliged entities conducting due diligence.

CRS is a settled, operating feature of holding any Bermuda financial account as a non-resident, and the practical consequence is straightforward: if you are tax-resident in a country on Bermuda's annual list, your account data reaches your home authority each year. Entity and trust structures do not escape this, since the standard looks through to controlling persons and reportable individuals. US persons follow the separate FATCA path. The sensible position for a foreign owner is to keep self-certifications accurate, expect data to be captured under the Wider Approach, and treat classification and record-keeping as ongoing duties rather than one-off tasks.

Expanship supports foreign-owned entities in meeting their CRS obligations in Bermuda, from confirming whether a structure is a reporting institution or a Passive NFE to coordinating portal registration, self-certification, and annual returns, then extends that support across the wider compliance needs of a company operating from the territory.

  • Company incorporation and structuring
  • Registered agent and registered office services
  • Tax registration and annual filing support
  • Ongoing CRS and regulatory compliance management
  • Accounting and bookkeeping
  • Banking introductions

To discuss your situation, contact Expanship Bermuda.

Yes. Bermuda has been an active CRS participant since its first exchanges in September 2017, with account data collected by financial institutions and exchanged annually through CITA as Competent Authority. It is a fully operational regime, not one still in planning.

Your residence data is still collected, because Bermuda applies the Wider Approach to due diligence. If your country is later added to the Reportable Jurisdictions list, your information can then be exchanged without any new documentation request, which is why institutions gather tax-residence details from all account holders.

No. The United States is not a CRS participating jurisdiction and does not appear on Bermuda's Reportable Jurisdictions list. US citizens and residents holding Bermuda accounts are reported separately under the FATCA Model 2 agreement, with filings made directly to the IRS.

The annual CRS Return, including nil filings, is due by 31 May of the year after the reporting period, so 31 May 2026 for 2025 data. The Annual CRS Compliance Certification Form is due by 30 September of that following year, and new reporting institutions must register by 30 April after they qualify.

The standard looks through a Passive NFE to its controlling persons. If one or more of those persons is a reportable person, the entity's account becomes reportable, and the identities and tax residencies of the controlling persons are reported rather than only the company name.

The Regulations provide for penalties of up to $10,000 for breaches such as inaccurate self-certifications, tampering with data, or obstructing the Ministry. A reasonable-excuse defence exists, but insufficient funds and reliance on a service provider are not accepted as reasonable excuses.