Do we need to identify beneficial owners behind a publicly listed company or government body customer?
Generally No, listed public companies, government bodies and other prescribed low-risk customer types qualify for deemed compliance on beneficial ownership.
In most cases, no - but it's better understood as "deemed compliance" than a flat exemption, and there are a few things you still need to do.
Under section 5-15 of the AML/CTF Rules 2025, a reporting entity is deemed to have met its beneficial ownership identification obligations for certain prescribed customer types where the customer is low risk and not subject to enhanced CDD triggers. The prescribed types most relevant to Tranche 2 firms are:
- Listed public companies on an approved Australian exchange (ASX, Cboe Australia) or on a foreign exchange with disclosure requirements substantially equivalent to Australia's (typically major exchanges such as NYSE, NASDAQ, LSE, TSX, Euronext — but verify before relying on a less prominent foreign listing).
- Majority-owned subsidiaries of qualifying listed companies, where the listing transparency effectively covers the subsidiary.
- Australian Government Entities as defined in the Rules — Commonwealth, State, Territory and local government bodies, including departments, agencies and statutory authorities.
The logic is straightforward: these entities are already subject to disclosure regimes (continuous disclosure for listed companies, public accountability frameworks for government bodies) that achieve the same transparency outcome as beneficial ownership identification, so duplicating that work adds compliance burden without adding risk visibility.
What you still need to do
Deemed compliance covers the beneficial ownership check specifically. You're still required to:
- Verify the entity itself — confirm the legal name, ACN/ABN, and that the entity actually is what the customer claims (a current ASX listing search, an ABN Lookup confirming a government body, or equivalent for foreign listings).
- Identify the customer's senior managing officials and persons authorised to act for the customer in the engagement — typically directors, the CEO, or the specific officers signing documents and instructing the firm. The depth of this is risk-based; for a low-risk listed entity engagement, confirming the named signatory and their authority is generally sufficient.
- Run sanctions and PEP screening on the customer entity and on the identified officials — this is mandatory regardless of entity type. Deemed compliance on beneficial ownership doesn't exempt you from targeted financial sanctions obligations.
- Re-assess if anything raises the risk — the deemed compliance pathway is conditional on the customer being low risk. If something in the engagement triggers enhanced CDD (PEP exposure, unusual transaction structure, high-risk jurisdiction connection, or any indicator that would trigger an SMR), the deemed compliance falls away and you need to apply full ECDD including beneficial ownership identification.
Flow-through in ownership chains
The exemption does flow through ownership chains, but only at the points where a qualifying entity sits in the chain. The practical rule: when you trace beneficial ownership upward, you stop at a qualifying listed company or government body and don't go further. Private companies, trusts, partnerships and unlisted entities in the chain must still be unpacked to identify the natural persons who ultimately own or control them.
So if Acme Pty Ltd is the customer and its sole shareholder is BigCo Limited (ASX-listed), you confirm BigCo's listing status and stop — you don't trace beyond BigCo. But if Acme's shareholder is LargeCo Holdings Pty Ltd (private), and BigCo Holdings is in turn owned by BigCo Limited (ASX-listed), you must identify LargeCo Holdings' shareholders and only stop at the ASX-listed entity. Each private entity in the chain is its own due diligence step.
Related articles
- What are the critical limits on using Deemed Compliance provision?
- Glossary: Key Terms & Definitions
- What's the difference between CDD, KYC and KYB - and when does each apply?
- Who or what is a Politically Exposed Person (PEP)?
- When our customer is an Australian Pty Ltd company, who do we need to KYC?