What are ownership registries and why should they be public?

While in New York, I asked a friend about his business in Florida and he explained to me that he is the owner through his Scandinavian business.

Tracing his ownership structure would be time consuming and the task is made harder by the decision of the Court of Justice of the European Union (CJEU) to annul public access to ownership registries on the grounds that public access contravenes the right to privacy in the EU Charter of Fundamental RIghts.

Implicit is the claim that evidence demonstrating that public ownership registries prevents crime is weak. My friend put it more bluntly when he said:

Public access is like arguing: if you have nothing to hide you have nothing to fear.

What the court considers "strong" evidence is unclear, so let's start with the strongest case for public access to ownership registries, namely the practice of fighting illicit finance. We'll then look at the claim to "privacy" and whom privacy, in reality, protects before assessing why civil society shoul fall under the "legitimate interest" clause in the CJEU's ruling.

Public ownership data in financial crime fighting

The Panama Papers

The Panama Papers is the most public exposure of the world's most powerful people and their financial secrets and the impact that those leaks have had serves as an excellent example of the positive impact that public ownership data has.

More than 11.5 million records exposed how politicians and criminals use the rogue offshore finance industry to launder money and avoid taxes.

The leaks implicated 150 politicians from 50 countries and had serious political fallout. Iceland's Prime Minister, Sigmundur Davio Gunnlaugsson, was forced to resign from his office amid outrage that his family had sheltered money offshore.

In the wake of the revelations that caused snap elections in Iceland, the Guardian used the offshore leaks to shed light on the trail between Vladimir Putin and an offshore network of assets worth $2bn.

Investigative journalists and their hard work not only helped close Mossack Fonseca, the infamous Panamanian law firm and target of the leak, but has also led to the prosecution of the firm's owners, Lauria Paz and Ramon Fonseca who are defendants in a case in Panama where they are being tried for "crimes against public economic order".

How Lauria Pax and Ramon Fronseca operated Mossack Fronseca and how their crimes impacted ordinary people inspired "The laundromat", a film starring Meryl Streep and Gary Oldman.

The Panama Papers show that transparent ownership is vital to fighting corruption and that when ownership structures are made public, those implicit in illicit finance face legal consequences.

Hold on - is the Panama Papers really a strong case for opening ownership registries? After all, the trenche of 11 million documents are a leak of sensitive information from a shadowy organisation and not a register where ordinary people set up their business.

The whistleblower nature of the Panama Papers is a perfectly valid objection, so let's look at two investigations that used ownership registries that was not leaked to the public domain.

The Open Lux Investigation

Transparency International has documented several cases where public access to beneficial ownership registries enabled journalists and activists to uncover corruption and money laundering. One of these cases is the OCCRP's Open Lux Investigation.

In the Open Lux investigation, journalists analysed beneficial owners registered in Luxembourg and found dozens of foreign citizens linked to corruption, embezzlement, and organised crime and, as Transparency International points out:

What sets the Open Lux Investigation apart from the Panama Papers is that, for the first time, journalists did not have to rely on leaks and, instead, relied on publically available data to uncover hidden owners using Luxembourg companies to own assets and open bank accounts.

The case of the Open Lux Investigation is a clear example of how actors other than law enforcement agencies are crucial to combating corruption and it is a role that the Court of Justice of the European Union recognise in their ruling against public access to ownership registries.

Global Witness

In addition to identifying crime, actors are able to improve ownership data when that data is publically available.

Global Witness, working with a group of volunteer data scientists at DataKind UK, analysed the UK's beneficial ownership registries and successfully identified loopholes, information gaps and suspicous activity.

They found that most companies registering their benenficial owners at the Persons of Significant Control registry in the UK, is straightforward, with an average of 1.13 beneficial owners for each UK company.

Hundreds of thousands of these companies file highly suspicious entries that would never have been found were it not for the open data nature of the register.

Global Watch found common methods for avoiding disclosure of a company's real owners such as disclosing an ineligible foreign company as the beneficial owner, filing a statement that the company has no beneficial owners, or creating circular ownership structures where a company control themselves.

Of the companies with a foreign owner, 10,000 declare a foreign company as their beneficial owner and of these 72% are in a secrecy jurisdiction.

Their analysis resulted in a red flagging system to uncover high risk entries and recommendations to the UK government demonstrating the benefit of open ownership registries.

Public ownership data helps civl society, investigative journalists and law enforcement scrutinise data and combine it with other datasets, increasing the likelihood of spotting criminal activity.

Is privacy an absolute right?

Having established that open ownership data, in practice, helps us prevent crime, let's scrutinise the right to privacy.

Anxiety about data protection is understandable, especially in consideration of companies like Facebook and Cambridge Analytica known for their exploitation of personal data.

I understand why my friend sides with the CEUJ and I think he made a good point when he said that open ownership data sounds like "if you have nothing to hide, you have nothing to fear.'

The right to privacy is essential to our autonomy and it is important to respect privacy.

However, publishing information about who owns companies is different in one important respect, namely that as a business owner you are in the public sphere. As OpenOwnership's Head of Policy, Zosia Sztykowski explains:

Publishing information about who owns companies is fundamentally different. This is about chaning the role that companies play in society. We often forget that the legal form that we call a company can't exist without the state, and agreements between states. Therefore, they have the right, and even the responsibibility to ensure that they serve a social good. Open ownership data can do just that. All while also providing desirable incentives for legitimate businesses, including reducing the risk of being exposed to bad actors and supporting the stability of economies globally.

Privacy is a critical right, but it isn't absolute.

Having a substantial ownership stake in a company gives that individual access to a range of benefits, including protection from personal liability.

In exchange, is it not fair to expect business owners to help society ensure that companies are used for thier intended purposes?

Opening a company is easy and benefits society as a whole and one unintened consequence of this is that corporations have become easy tools for criminals.

As Zosia Stykowski explains, 'there is a balance here to be struck between personal freedoms and the responsibility to create a fairer society.'

There is also another important question when we invoke privacy and that is, who exactly are we trying to protect? Closing registries might protect more people with illegitimate intentions than those with legitimate intentions.

If the practice of investigating illicit finance teach us anything, it is that criminals thrive in secrecy. The decision to close access to ownership registries has impacted already scarce ownership data, forcing investigators to rely on leaked data.

The case for "protecting privacy" tries to safeguard against protecting the wrong people by assuming that those with "legitimate interest" have the right to access ownership registries. While well intended, this presumption has had negative consequences due to the lack of an EU-wide definition of "legitimate" intentions or circumstances".

Legitimate Interest

The CJEU ruling presumes that journalists and civil society organisations engaged in the prevention of money laundering have a legitimate interest and should be granted access to beneficial ownership information.

The absence of an EU-wide definition of "legitimate interest" has has effectively squashed the right of individuals and organisations with a legitimate interest to use the registers.

Journalists and civil society are unable to access 13 of 27 beneficial ownership registers in the EU, and after the court ruling, eight countries suspended public access to their registers.

Transparency International's map is a useful resource to trace the impact of the ruling:

Countries like Cyprus, Malta and the Netherlands have denied access, even if journalists and civil society demonstrate their legitimate access. Other countries require legitimate interest must be demonstrated on a case-by-case basis.

Ireland's approach is highly restrictive since you have to demonstrate that the beneficial owner under investigation is connected or convinced of an offence involving money laundering or terrorist financing.

If the goal of providing access to journalists and civil society is to help detect offences, the Irish approach seems to contravene this goal.

In trying to strike a balance between privacy and legitimate intentions, the CJEU has tipped the balance too far, which frustrates journalists and civil society investigations that yield tangible results.

What the evidence tells us to do

Evidence from practice shows that open access is crucial to improving the quality of data in beneficial ownership registries and that public access prevents crime itself.

It is also clear that some members states will interpret the CJEU's ruling conservatively and contravene the spirit of the CJEU ruling, namely to protect both privacy and civil society's legitimate interest.

What is required are EU rules that leave no space for discrimination against civil society and public watchdogs. Those rules should, instead, enable those who work with the combating of illicit finance to access crucial ownership data.