Cyprus CFC Rules for Founders (2026): When ATAD Taxes Your Offshore Entity Locally

If your Cyprus company owns a subsidiary in a zero- or low-tax jurisdiction — a BVI, a Cayman, a Bahamas, sometimes a UAE free-zone entity — the Cyprus CFC rules may tax that subsidiary's undistributed income in Cyprus, today. This article explains exactly when that happens under the 2026 law, and the structural fixes that keep founders out of the rule.

What the CFC rules do

Controlled Foreign Company rules are anti-deferral rules. They accelerate the taxation of certain foreign-subsidiary profits into the parent company's current tax return, instead of waiting for those profits to be distributed as dividends. The policy purpose is to prevent the shift of mobile income into low-tax entities purely for tax reasons.

The EU Anti-Tax Avoidance Directive (ATAD, Directive 2016/1164) required all EU member states to enact CFC rules. Cyprus transposed ATAD with effect from 1 January 2019. The rules sit in the Cyprus Income Tax Law and operate alongside (not instead of) the long-standing anti-avoidance rule, the Special Defence Contribution on Defensive Measures, and the transfer pricing regime.

Cyprus chose Model B

ATAD allowed member states to adopt one of two approaches:

• Model A (categorical):tax the CFC's entire passive-income categories (interest, royalties, dividends from related parties, and so on) at the parent level.
• Model B (transactional):tax only the undistributed income of the CFC that arises from "non-genuine arrangements" put in place for the essential purpose of obtaining a tax advantage.

Cyprus chose Model B. The consequence is that a Cyprus CFC analysis is not a mechanical test on income categories — it is a substance-based test on the specific arrangements producing the income. A CFC that genuinely earns its income (with people, assets, and risk in the CFC jurisdiction) is left alone. A CFC that books income but has none of the underlying substance is brought into the Cyprus tax base to the extent of the non-genuine component.

When is a foreign entity a CFC?

Both limbs must be satisfied:

1. Control limb. The Cyprus tax-resident company, by itself or together with associated enterprises, holds directly or indirectly more than 50% of the voting rights, more than 50% of the capital, or is entitled to receive more than 50% of the profits of the foreign entity.
2. Low-tax limb. The actual corporate tax paid by the foreign entity on its profits is less than 50% of the tax it would have paid had it been taxed under the Cyprus corporate tax rules.

"Associated enterprises" is defined consistently with the rest of the Income Tax Law: 25% participation, or common 25%+ ownership, in each direction. Indirect ownership through chains is counted.

The low-tax test after the 15% rate

The low-tax test compares the actual foreign corporate tax to a Cyprus counterfactual. Before 2026, with the Cyprus corporate rate at 12.5%, the half-rate threshold was 6.25%. From 1 January 2026, with the Cyprus rate at 15%, the threshold is 7.5%.

For jurisdictions with nominal rates above 7.5% but effective rates below it (for example, through tax holidays), the test looks at actual tax paid, not the headline rate.

The three statutory exemptions

Even if both control and low-tax limbs are met, the CFC rules do not apply if any one of the following is true:

1. Small-CFC exemption.The CFC's accounting profits for the tax year do not exceed €750,000 andits non-trading income does not exceed €75,000. Both limbs must be met — a BVI holding with €50,000 of dividends but €1 million of accounting profits from a trading activity is not small.
2. Low-margin exemption.The CFC's accounting profits for the tax year amount to no more than 10% of its operating costs for that period. Operating costs exclude the cost of goods sold outside the country of residence of the CFC and payments to associated enterprises.
3. EEA substance exemption. For CFCs tax-resident in an EEA member state, a substance-based safe harbour applies where the CFC carries on a substantive economic activity supported by staff, equipment, assets and premises as evidenced by relevant facts and circumstances. The classic ECJ Cadbury Schweppes principle.

Non-genuine arrangements and significant people functions

Where the exemptions do not apply, Model B requires the Cyprus parent to include in its taxable profit only the non-distributed income of the CFC that arises from non-genuine arrangements put in place for the essential purpose of obtaining a tax advantage.

The statute defines "non-genuine" by reference to Significant People Functions (SPFs): an arrangement is non-genuine to the extent that the CFC would not own the relevant assets or bear the relevant risks if the SPFs carried out by the Cyprus company (and which are instrumental in generating the income) were not available to it.

The practical test: can the CFC, on its own people and premises, credibly have generated this income? If the decisions that produced the income were made by Cyprus-based staff who do not sit in the CFC jurisdiction, the SPF is in Cyprus and the non-genuine component is at least partially there.

No CFC at the individual level

A recurring misunderstanding: the Cyprus CFC rules apply only where the parent is a Cyprus tax-resident company. A Cyprus individual (non-dom or not) who directly owns a BVI, Cayman or UAE entity is not subject to Cyprus CFC inclusion. This is a structural difference from the US and UK regimes, which include individual CFC-style inclusions.

That said, an individual with a foreign holding company should still consider:

• Management-and-control. If the individual manages the foreign entity from Cyprus, the foreign entity itself can become Cyprus tax resident. That removes any CFC issue — but exposes all its worldwide profits to the Cyprus 15% rate.
• Deemed dividend distribution. SDC deemed-distribution rules can impute dividends from a Cyprus company to a Cyprus-dom shareholder; non-doms are exempt.
• Information reporting. The Cyprus Tax Department receives automatic exchange of financial account information (CRS) from all major financial centres. Foreign structures are visible.

Worked examples

Example 1 — SaaS founder with a Cyprus parent and a BVI subsidiary

Cyprus Ltd owns 100% of a BVI company. The BVI entity holds IP licences and invoices customers. All development is done by Cyprus-based engineers; product decisions are made in Cyprus; the BVI has no staff or premises. The BVI's 2026 accounting profits are €1.2 million, all active trading, passive income nil.

• Control limb: yes (100%).
• Low-tax limb: yes (BVI 0%).
• Small-CFC exemption: no (€1.2m > €750k).
• Low-margin exemption: depends on operating costs — likely no.
• EEA exemption: no — BVI is not EEA.
• Non-genuine analysis: the SPFs (engineering, product decisions) sit in Cyprus. The BVI's income is entirely non-genuine. The whole €1.2m is included in the Cyprus taxable profit and taxed at 15%.

Effective result: identical to running the trade directly from Cyprus. The offshore layer adds compliance without saving tax.

Example 2 — Holding company owning a trading subsidiary

Cyprus Ltd owns 100% of a Dutch BV that runs an active trading business with its own staff and offices. Dutch corporate tax is 25.8% on the BV.

• Control limb: yes.
• Low-tax limb: no (25.8% > 7.5%).
• Result: not a CFC. No inclusion.

Example 3 — Crypto entity

Cyprus Ltd owns 100% of a Cayman entity that holds crypto assets and occasionally trades. No staff in Cayman. Annual accounting profits €300,000 from trading gains, non-trading income €0. Control limb yes; low-tax limb yes (0%).

• Small-CFC exemption: profits €300k ≤ €750k AND non-trading income €0 ≤ €75k — exemption applies. Not a CFC for this year.

If accounting profits exceed €750,000 in a later year, the exemption falls away and the non-genuine analysis runs. The practical answer is usually to migrate the activity into the Cyprus parent (where capital gains on securities, including many crypto positions where classified as securities-like, are exempt) or to give the Cayman entity real people.

Substance fixes that actually work

1. Move the SPFs to the CFC jurisdiction.If the product, commercial, and risk decisions are made in the CFC's jurisdiction by staff employed there, the non-genuine component collapses. Requires genuine hires, genuine premises, and genuine decisions.
2. Reroute the trade through Cyprus.Many founders discover that the offshore entity added no real benefit and simplify by collapsing it into the Cyprus parent. Cyprus' 15% corporate rate, 0% withholding, IP Box at ~3% effective, and non-dom layer typically produce a better total outcome than a BVI + Cyprus combination with CFC risk.
3. Swap to an EEA subsidiary. The EEA substance exemption provides a stable safe harbour when the activity is genuinely conducted in a cooperative EU/EEA jurisdiction.
4. Keep the offshore entity within the de minimis.Acceptable if the CFC is genuinely small, stable, and passive-heavy; not acceptable as a planning device to shelter larger income (the anti-abuse rules will override).

How it appears on the corporate tax return

Cyprus CFC inclusions are reported on the TD4 corporate tax return. The Cyprus parent must disclose:

• Each foreign entity meeting the control and low-tax limbs.
• Accounting profits and non-trading income of each CFC.
• Whether any exemption applies.
• The non-genuine income amount included in the Cyprus tax base.
• Supporting documentation on the SPF analysis.

Tax losses of a CFC cannot be set off against the Cyprus parent's profits — CFC inclusions work one way only. Foreign tax actually paid by the CFC on the included income is creditable against the resulting Cyprus tax.