Key Takeaways
- TIEAs provide for information exchange on request only and, unlike double tax treaties, offer no relief from double taxation.
- Foreign authorities must follow a defined request process routed through Gibraltar's Income Tax Office, not open-ended fishing for data.
- Confidentiality safeguards limit how exchanged information may be used, and the scope sets clear boundaries on what can and cannot be requested.
- Non-resident owners should weigh TIEAs alongside the broader shift toward automatic exchange when assessing transparency obligations.
TIEAs in Gibraltar: What Information Exchange on Request Really Means
A Tax Information Exchange Agreement, or TIEA, is a bilateral instrument that lets two governments share tax information on request. TIEAs in Gibraltar form the legal channel through which a foreign tax authority can ask the territory for data about a taxpayer it is examining, and through which Gibraltar can ask in return.
For a non-resident owner of a Gibraltar entity, this matters because it determines when your home tax authority can reach records held here. The agreements implement the OECD's Exchange of Information on Request standard, meaning data moves only when a specific, justified request is made, not on a rolling automatic basis.
This article explains how the network is built, which partners it covers, the legal body that handles requests, what can and cannot be asked, and how exchange interacts with the automatic reporting that now runs alongside it. The Government of Gibraltar publishes its Income Tax Office portal as the official reference point. It is most relevant to foreign business owners, investors, and their advisers weighing exposure before they incorporate or while they maintain a Gibraltar firm.
How a TIEA Differs from a Double Tax Treaty: No Relief, Only Exchange
A TIEA does one thing: it facilitates the exchange of tax information to counter offshore evasion and fraud. Unlike a double tax treaty, it does not allocate taxing rights, reduce withholding rates, or provide residency tie-breaker rules.
If you are looking for tax relief, a TIEA gives you none. No credits, no reduced rates, no protection against double taxation flow from it; a separate double tax agreement would be required for those benefits.
The practical consequence is reach without relief. Gibraltar holds only two double tax agreements, so TIEAs and the multilateral convention carry the bulk of its information-exchange relationships with the rest of the world.
A TIEA can also be used where no double tax treaty or FATCA arrangement exists. That makes it a fallback channel for exchanging financial information between jurisdictions that have no other formal link.
Company Incorporation in Gibraltar
Set up your company in Gibraltar with Expanship handling registration end to end.
Gibraltar's TIEA Network: How Many Agreements and With Which Partners
Gibraltar has signed 28 bilateral TIEAs. Partners include Australia, Austria, Belgium, Denmark, the Faroe Islands, Finland, France, Germany, Greece, Greenland, and Guernsey, among others.
Counting every instrument together, the picture is far wider. The territory's exchange network spans both bilateral agreements and the Multilateral Convention on Mutual Administrative Assistance in Tax Matters (MAAC).
| Measure | Figure |
|---|---|
| Bilateral TIEAs signed | 28 |
| Total EOI agreements (all instruments) | 165 |
| Agreements in force | 155 |
| Jurisdictions covered | 138 |
| Jurisdictions covered, in force | 129 |
Figures above reflect the official EOI matrix dated April 2023. The MAAC is the dominant vehicle for broad partner coverage, while standalone bilateral TIEAs predate or supplement it for specific partners.
Individual agreements carry their own timelines. The UK–Gibraltar TIEA was signed in 2009 and entered into force on 15 December 2010, with an amending exchange of letters effective 30 June 2014; the Guernsey agreement, signed on 22 October 2013, took effect from 12 March 2014. HMRC publishes the texts on its Gibraltar tax treaties page.
The Legal Framework Behind Gibraltar's TIEAs and the Role of the Income Tax Office
The assessment and collection of tax rests on the Income Tax Act 2010, which came into effect on 1 January 2011 and has been amended since. Administration of that Act falls to the Income Tax Office, covering income tax, corporation tax, and social insurance contributions.
The Commissioner of Income Tax is the body that matters for exchange purposes. Under each TIEA and under the MAAC, the Commissioner acts as Gibraltar's competent authority: the office to which foreign requests are addressed and from which responses are issued.
Confidentiality binds that office tightly. Disclosure to a foreign tax authority is permitted only where the request is made under a valid TIEA or applicable directive, and the office must comply with GDPR as transposed into local law.
Foreign authorities cannot approach a Gibraltar company, bank, or adviser directly for tax data. A valid request must run government-to-government, through the Commissioner of Income Tax.
Ongoing Compliance in Gibraltar
Keep your Gibraltar entity compliant with filings, returns, and statutory obligations.
Scope of Information Covered: What Can and Cannot Be Requested
The Exchange of Information on Request standard turns on a single test: information must be "foreseeably relevant" to the administration or enforcement of the requesting party's tax laws. A fishing expedition, by design, does not qualify.
Within that test, the reach is wide. Requests commonly cover ownership and beneficial ownership records, company and trust accounting records, banking and financial account details, transfer pricing data, and information held by third parties such as professional advisers.
There are firm limits on what cannot be obtained:
- Information requiring action contrary to Gibraltar's own laws
- Material that is not foreseeably relevant to the partner's tax administration
- Data the requesting partner could not obtain under its own domestic law (the reciprocity condition)
- Trade, business, or professional secrets protected under local law
Purely domestic tax matters, with no cross-border element involving a TIEA partner, sit outside the scope entirely. One caveat for owners assessing risk: Gibraltar's 2020 peer review rated it "Partially Compliant" on the availability of ownership information and banking information, flagging identified gaps in those two sub-elements at the time.
The Request Process: How a Foreign Authority Obtains Information
Requests travel from the competent authority of the requesting state directly to the Commissioner of Income Tax. The model standard sets out what each request must contain.
- Identify the taxpayer under examination.
- State the tax purpose of the request.
- Specify the information sought.
- Confirm that domestic means of obtaining the data have been exhausted first.
That fourth point is a gatekeeper. For most agreements, a partner must show it has tried its own channels before turning to Gibraltar.
No public data confirms internal processing timelines or fees for inbound requests here. The OECD recommends a 90-day response window, and Gibraltar's 2020 review rated the quality and timeliness of its responses as "Largely Compliant", indicating broadly satisfactory performance with some room for improvement. Requests from partners covered only by the MAAC follow the same competent-authority channel under that convention's procedural rules.
Gibraltar Incorporation Pricing
See transparent pricing to incorporate and maintain a company in Gibraltar.
Safeguards and Confidentiality: Limits on the Use of Exchanged Data
Data sent abroad does not become free for any use. Under the model provisions, information received by a requesting state must be treated as confidential and used only for the tax purposes stated in the request; disclosure in judicial proceedings needs a specific provision in the agreement.
Onward sharing is constrained. Information cannot be passed to a third-party state without the consent of Gibraltar as the supplying jurisdiction.
On taxpayer protections, the territory scored well. It received a "Compliant" sub-rating, the highest of the four, for "Rights and Safeguards" in its 2020 review, confirming that local protections are compatible with effective exchange.
One point often misunderstood: the taxpayer subject to a request does not generally have a right to advance notice before information is exchanged, unless domestic law or the specific agreement grants one. The OECD model is silent on mandatory pre-notification and leaves the question to domestic law.
TIEAs and the OECD Transparency Standards: Where Gibraltar Stands
The headline rating is "Largely Compliant", the second-highest of four possible grades, retained in the 2020 Second Round peer review. That places the territory on a par with the United States, Germany, the United Kingdom, and Spain, according to the Government press release.
| Element | Sub-rating |
|---|---|
| Rights and Safeguards | Compliant |
| Extent of EOIR Network | Compliant |
| Availability of Information | Largely Compliant |
| Quality and Timeliness of Responses | Largely Compliant |
| Ownership and banking information | Partially Compliant |
The review followed an on-site visit by a Global Forum team in 2019, the third assessment after a Phase 1 review in 2011 and a Phase 2 review in 2014. Across that history the rating has held steady at "Largely Compliant".
Beyond request-based exchange, the territory has signed up to the wider transparency architecture. It is a Common Reporting Standard participant, signed the Country-by-Country Reports agreement on 7 May 2020, the Crypto-Asset Reporting Framework agreement on 26 November 2024, and the GloBE Information Return agreement on 14 January 2026.
What This Means in Practice for Non-Resident Owners and Advisers
If your country of residence holds a TIEA or MAAC relationship with Gibraltar, your information connected to a local entity or asset can be exchanged with your home tax authority on request. With 129 jurisdictions covered by in-force relationships, that reach is broad.
Assume that beneficial ownership, corporate accounting records, and banking details are all potentially within scope. A public register of beneficial ownership, administered by the Finance Centre, adds a further transparency layer on top of request-based exchange.
Automatic channels already run in parallel. Gibraltar has supplied data to the United States under FATCA since September 2015, to the United Kingdom under its IGA since September 2016, and to EU Member States under CRS since 30 September 2017.
The interplay is the point for advisers. Routine financial account data now flows automatically, so request-based exchange is increasingly used for targeted investigations of specific taxpayers, often after automatic data is matched against domestic records and flags a discrepancy.
The Outlook: TIEAs in an Era of Automatic Exchange
Automatic exchange has shifted the balance. Under the CRS, financial institutions report non-resident account data to their own authority, which exchanges it annually with the account holder's country of residence, reducing the need for case-by-case requests covering routine financial information.
The automatic standards now extend beyond bank accounts. Gibraltar's signing of the crypto-asset framework in November 2024 brought crypto-asset transactions into annual reporting, and the January 2026 GloBE Information Return agreement adds automatic exchange of Pillar Two reports for multinational groups; implementing legislation for the global minimum tax passed on 31 December 2024.
Request-based agreements have not been retired by any of this. They remain significant for partners outside CRS and FATCA, and for targeted investigations where automated data alone is not enough. As of 1 July 2025, 89% of reviewed jurisdictions globally were rated "Compliant" or "Largely Compliant" on the request standard, showing it is still actively enforced rather than superseded.
The direction of travel is consistent. Early CRS adoption, the crypto-asset and GloBE signatures, and Pillar Two implementation together signal continued alignment with current OECD standards, leaving little room for any form of secrecy to return.
Conclusion
For a foreign owner, the practical takeaway is that a Gibraltar entity sits inside a wide, active exchange network rather than behind a wall. Request-based agreements give partner tax authorities a route to ownership, accounting, and banking records when an investigation justifies it, while automatic reporting covers routine financial data year-round. None of these instruments reduces your tax bill; they govern transparency, not relief. Plan on the basis that records connected to your business are reachable by your home authority through one channel or another.
How Expanship Can Help Your Business in Gibraltar
Expanship advises foreign owners on what request-based exchange and automatic reporting mean for a Gibraltar entity, and helps you keep ownership, accounting, and banking records in the order those frameworks assume. That work sits within a broader set of services for non-resident-owned firms.
- Company formation and registration in Gibraltar
- Registered agent and registered office services
- Tax registration and filing with the Income Tax Office
- Ongoing compliance and statutory deadline management
- Accounting and bookkeeping aligned with exchange-readiness
- Introductions to banking providers
To discuss your situation, contact Expanship Gibraltar.
Frequently Asked Questions
Gibraltar has signed 28 bilateral Tax Information Exchange Agreements. Counting all instruments together, including the Multilateral Convention, it holds 165 exchange agreements, of which 155 are in force, covering 129 jurisdictions on an in-force basis as of the April 2023 matrix.
No. A TIEA only facilitates the exchange of tax information; it provides no credits, reduced withholding rates, or residency rules. Those benefits would require a separate double tax agreement, of which Gibraltar holds only two.
Generally not. The taxpayer subject to a request has no automatic right to advance notice unless domestic law or the specific agreement provides one, and the OECD model leaves this question to domestic law.
The Commissioner of Income Tax, through the Income Tax Office, acts as the competent authority under every TIEA and the Multilateral Convention. Foreign requests must be addressed government-to-government to that office, not to a company, bank, or adviser directly.
The requesting state's competent authority sends a formal request that identifies the taxpayer, states the tax purpose, specifies the information sought, and confirms its own domestic means have been exhausted. The information must be foreseeably relevant to that authority's tax administration; broad fishing requests are not permitted.
Yes. While CRS and FATCA now carry routine financial account data automatically, request-based agreements remain in use for partners outside those systems and for targeted investigations of specific taxpayers where automated data is insufficient.
Legal Disclaimer
The information provided in this article is for general informational purposes only and does not constitute legal, tax, or professional advice. While we strive to ensure the accuracy and timeliness of the content, laws and regulations are subject to change, and the application of laws can vary widely based on specific facts and circumstances.
Readers should not act upon this information without seeking professional counsel tailored to their individual situation. Expanship and its authors disclaim any liability for actions taken or not taken based on the content of this article.
For specific advice regarding your business setup, compliance requirements, or any legal matters, please consult with qualified legal and tax professionals in the relevant jurisdiction.
