Skip to content
eurcor

ACCESS & PRIVACY

Access tiers and what each one sees

Eurcor discloses verified ownership data in three tiers. This page explains who qualifies for each tier and, field by field, exactly what is public and what stays protected.

How access works

Eurcor is an open registry, but access to it is layered. That is not because transparency is optional, but because EU law both mandates disclosure and protects personal data. Following the CJEU's rulings in C-37/20 and C-601/20 (Sovim), unrestricted public access to registers is not permitted, so access is granted in three tiers.

The three access tiers

Full private view: authorities, FIU, law enforcement
Competent authorities, financial-intelligence units, and law enforcement have unrestricted access to the full record, delivered without notice to the company (no tipping-off). Basis: AML Directive 2024/1640; Regulation 2024/1624.
Limited private view: legitimate interest
Journalists, civil-society organisations, academics, and regulated entities doing due diligence may see more than the public set once they demonstrate a legitimate interest. Access is conditional and logged. Basis: Directive 2024/1640; CJEU C-601/20 (Sovim).
Limited public view: everyone
Anyone can see the minimum-disclosure set, today through Search and with no account: a person's name, their birth month and year, country or citizenship, and the nature and extent of their ownership or control.

Field by field: what's public, what's protected

The limited-public view shows: name; month and year of birth; country or citizenship; and the nature and extent of control. It never shows: full residential address; exact date of birth; or detailed private control mechanisms. This split follows the GDPR's data-minimisation principle (Art. 5(1)(c)).

GDPR balance and safeguards

Tiering is how Eurcor satisfies data-protection law, not merely a restriction. Above the public minimum, access must rest on a legitimate interest; personal data is minimised and purpose-limited, and higher-tier access is logged (GDPR Regulation 2016/679; Czech Act No. 110/2019 Coll.).

How to request higher-tier access

Authorities and legitimate-interest users request credentials on the Request API access page. Programmatic, tier-scoped access is planned; today the limited-public set is available in Search.

Informational, not legal advice

This page explains how Eurcor applies the access rules; it is not legal advice. For the binding requirements, consult the instruments themselves. See Legal framework.