Banking Law and Foreign Account Reporting Requirements in Kuwait

Foreign-account reporting in Kuwait is best understood as part of international tax-information exchange, banking regulation, AML/CFT compliance, and banking secrecy rather than as a single standalone “foreign bank account reporting” statute.

As of 2026, the principal framework consists of Decree-Law No. 6 of 2024 on Exchange of Information for Tax Purposes, Kuwait's CRS framework, the FATCA agreement with the United States, the Central Bank of Kuwait (CBK) Law, and Law No. 106 of 2013 on Anti-Money Laundering and Combating the Financing of Terrorism. Kuwait's Ministry of Finance currently operates an electronic portal for FATCA and CRS reporting.

1. Meaning of Foreign Account Reporting

Foreign account reporting means the legal requirement to identify, document and, where applicable, report information concerning financial accounts held by persons who are tax residents or otherwise reportable persons in another jurisdiction.

It serves several purposes:

1. preventing tax evasion;
2. identifying undisclosed offshore assets;
3. facilitating international exchange of tax information;
4. preventing money laundering and terrorist financing;
5. identifying beneficial owners;
6. increasing transparency of cross-border financial transactions.

Kuwait participates in both CRS automatic exchange of financial-account information and FATCA information exchange with the United States. Kuwait began CRS exchanges in 2019 and FATCA exchanges with the United States in 2016.

2. Principal Kuwaiti Legal Framework

Kuwait's FIU identifies Law No. 106 of 2013, its Executive Regulations and related regulatory decisions as the principal AML/CFT framework.

3. Decree-Law No. 6 of 2024

A major development is Decree-Law No. 6 of 2024 concerning Exchange of Information for Tax Purposes.

The law strengthens Kuwait's ability to obtain and exchange tax-related information with foreign jurisdictions. It also gives the Ministry of Finance powers to obtain information from persons and entities located in Kuwait when required for international tax-information exchange.

Important features

The framework covers:

• automatic exchange of financial-account information;
• exchange of information upon request;
• reporting financial institutions;
• customer due diligence;
• self-certification;
• record retention;
• information requests by the competent authority;
• international cooperation;
• administrative penalties;
• confidentiality.

A particularly important provision is that confidentiality or banking secrecy cannot simply be invoked to defeat an information request made under the information-exchange legislation. The 2024 legislation gives the information-exchange framework precedence in the event of conflict.

4. CRS – Common Reporting Standard

The Common Reporting Standard (CRS) is the principal multilateral system for automatic exchange of financial-account information.

Under Kuwait's CRS framework, Kuwaiti financial institutions identify accounts belonging to persons who are tax residents of jurisdictions participating in the information-exchange system.

Kuwait's 2017 implementing rules required Kuwaiti financial institutions to collect information in accordance with CRS in preparation for transmission to the Ministry of Finance.

Information that may be reported

Depending on the account and applicable CRS rules, information can include:

• account holder's name;
• address;
• tax residence;
• tax identification number;
• date/place of birth for individuals where applicable;
• account number;
• financial institution identification;
• account balance or value;
• interest;
• dividends;
• certain other investment income;
• gross proceeds from relevant financial assets.

The objective is not simply to tax the account. The purpose is information exchange so that the jurisdiction where the person is tax resident can apply its own tax laws.

5. FATCA and Kuwait

FATCA is different from CRS because it is principally a U.S.-specific reporting regime.

Kuwait and the United States signed a FATCA Intergovernmental Agreement on 29 April 2015. Kuwait subsequently introduced a domestic compliance framework through Ministerial Order No. 48 of 2015.

Kuwaiti financial institutions may therefore have obligations concerning accounts held by:

• U.S. citizens;
• U.S. tax residents;
• certain U.S.-controlled entities;
• other persons falling within the FATCA definition of a reportable U.S. account.

The FATCA framework requires identification and reporting procedures for relevant accounts. The Kuwait-U.S. agreement specifically contemplates identification of reportable U.S. accounts and transmission of information through the agreed governmental framework.

6. Banking Secrecy versus Reporting Obligations

Kuwaiti banking law recognizes confidentiality of banking information.

For example, CBK Law Article 80 requires authorized CBK officials to maintain secrecy concerning accounts, records and customer information obtained through their official duties, except where disclosure is legally permitted.

However, bank secrecy is not absolute.

There is an important distinction:

Ordinary unauthorized disclosure of customer information may violate banking secrecy, while disclosure specifically authorized or required by legislation such as AML/CFT, FATCA or CRS may be lawful.

This is why international reporting legislation creates a legal exception to ordinary confidentiality.

The OECD's review of Kuwait historically noted the importance of bank secrecy under Kuwaiti law, while also recognizing Kuwait's international exchange-of-information commitments.

7. AML/CFT and Foreign Accounts

Foreign-account reporting also intersects with Law No. 106 of 2013.

Financial institutions must conduct customer due diligence and identify:

• customers;
• beneficial owners;
• source and nature of transactions;
• risk factors;
• suspicious activity.

Kuwaiti AML law prohibits anonymous or fictitious-name accounts and requires identification and verification of customers and beneficial owners.

For electronic transfers, financial institutions must also obtain relevant information concerning the originator and recipient and ensure that the information travels with the payment message through the payment chain.

8. Reporting versus Suspicious Transaction Reporting

These are different legal obligations.

CRS/FATCA reporting

Concerned primarily with:

Who owns the account and where that person is tax resident.

AML suspicious transaction reporting

Concerned primarily with:

Whether a transaction or activity gives rise to suspicion of money laundering or terrorist financing.

Therefore, a perfectly legitimate foreign account may be reportable under CRS without being suspicious.

Conversely, a suspicious transaction may require an AML report even when the customer is not a CRS-reportable person.

9. Self-Certification

A financial institution may require an account holder to provide a tax-residence self-certification.

For example, a bank may ask:

• Where are you tax resident?
• What is your tax identification number?
• Are you a U.S. person?
• Do you have tax residence in another CRS jurisdiction?
• Who controls a particular entity?

The purpose is to allow the bank to determine whether the account is reportable.

The CRS system therefore places substantial importance on accurate customer information.

10. Due Diligence by Kuwaiti Financial Institutions

Financial institutions generally need systems capable of:

1. identifying account holders;
2. identifying tax residence;
3. identifying controlling persons;
4. obtaining self-certifications;
5. reviewing indicia suggesting foreign tax residence;
6. maintaining supporting documentation;
7. classifying accounts;
8. reporting reportable accounts;
9. correcting inaccurate information;
10. retaining records.

Kuwait's Ministry of Finance states that financial institutions are responsible for the accuracy and completeness of information submitted under FATCA and CRS.

11. Reporting Deadlines

Kuwait's reporting system has undergone changes under the 2024 legislation.

The Ministry of Finance announced in 2026 that its electronic automatic-information-exchange portal was prepared to receive FATCA and CRS reports for the relevant 2024/2025 reporting periods. The announcement also specified reporting deadlines and required electronic submission in XML 2.0 format.

Therefore, financial institutions must distinguish between:

• the account holder's obligation to provide accurate information, and
• the financial institution's statutory reporting obligation to the competent authority.

12. Record-Keeping

The 2024 framework significantly emphasizes documentation.

Reporting financial institutions must maintain records relating to due diligence and reporting for a prescribed period; professional guidance on the 2024 legislation identifies a minimum six-year record-retention period.

This is important because a bank must be able to demonstrate:

• how an account was classified;
• what information was obtained;
• why an account was considered reportable or non-reportable;
• what self-certification was relied upon;
• what information was actually reported.

13. Requests for Information

The 2024 law also permits the Kuwaiti competent authority to obtain information from persons and entities in Kuwait when required for international tax-information exchange.

According to professional commentary on the legislation, requested information generally has to be supplied within 21 days.

This means that a person or business cannot necessarily rely on ordinary confidentiality obligations to refuse a lawful information request.

14. Penalties and Compliance

Non-compliance can expose:

• financial institutions;
• companies;
• individuals;
• responsible officers

to regulatory or financial consequences depending upon the particular violation.

The 2024 law introduced administrative and financial penalties for non-compliant reporting institutions and consequences for persons who fail to provide information required for information exchange.

The exact consequence depends upon:

• the nature of the violation;
• whether information was deliberately withheld;
• whether reporting was inaccurate;
• whether a request was ignored;
• whether the violation concerns CRS/FATCA or another legal obligation.

15. Relationship with the Central Bank of Kuwait

The CBK has broad inspection powers.

Under Article 78 of the CBK Law, the Central Bank may inspect supervised banks and financial institutions and obtain access to:

• accounts;
• books;
• records;
• instruments;
• documents;
• information required for inspection.

Failure by relevant bank officials to provide required information can itself result in sanctions.

This creates an important regulatory chain:

Bank → CBK/MOF/FIU → competent foreign authority

where disclosure is legally authorized.

16. Six Important Case Laws

There is an important research qualification here: reported Kuwaiti appellate decisions specifically interpreting the modern CRS/FATCA foreign-account reporting regime are limited in publicly accessible English-language databases. Consequently, the following cases are useful as comparative jurisprudence concerning foreign-account reporting, banking information, tax-information exchange, privacy and AML reporting. They should not be described as Kuwaiti precedents.

Case 1 — Crawford v. United States Department of Treasury, 868 F.3d 438 (6th Cir. 2017)

This is one of the most directly relevant FATCA cases.

The plaintiffs challenged FATCA, its intergovernmental agreements and FBAR requirements, arguing among other things that the reporting regime affected their rights and banking relationships.

The Sixth Circuit affirmed dismissal principally on standing grounds. The court examined FATCA's individual reporting requirements, foreign financial institution reporting and FBAR obligations.

Principle

FATCA creates substantial international financial-reporting obligations, but a person challenging those obligations must demonstrate an appropriate legal injury.

Relevance to Kuwait

The case illustrates the legal significance of FATCA reporting obligations for individuals and foreign financial institutions operating within an intergovernmental reporting framework.

Case 2 — M.N. and Others v. San Marino, Application No. 28005/12, ECtHR

This case concerned the obtaining and retention of banking documents during an investigation involving suspected money laundering and related financial offences.

The European Court of Human Rights recognized that information contained in banking documents constitutes personal data and may fall within the protection of private life.

However, the Court's analysis focused on whether the interference had adequate legal safeguards.

Principle

Banking information is not outside the scope of privacy protection merely because it is held by a bank.

Relevance to Kuwait

This is particularly relevant when balancing:

bank confidentiality + customer privacy + AML/international reporting obligations.

Case 3 — Bernh Larsen Holding AS and Others v. Norway, Application No. 24117/08

The Norwegian tax authorities required access to electronically stored business information during a tax audit.

The applicants argued that obtaining extensive electronic information interfered with privacy and confidentiality.

The ECtHR ultimately found no violation of Article 8, emphasizing the legal safeguards and the legitimate objective of effective tax administration.

Principle

Tax authorities may have substantial information-gathering powers where the legal framework contains adequate safeguards and the measure is proportionate to the legitimate tax objective.

Relevance

The principle is relevant to Kuwait's expanded ability under the 2024 information-exchange framework to obtain information necessary for international tax cooperation.

Case 4 — Michaud v. France, Application No. 12323/11, ECtHR

This case concerned AML reporting obligations imposed on lawyers.

The applicant argued that mandatory reporting of suspicious activities interfered with professional confidentiality.

The ECtHR accepted that combating money laundering is an important legitimate objective and upheld the French framework because important safeguards existed, including the mechanism through which reports were transmitted through the professional body.

Principle

AML reporting can be compatible with privacy and confidentiality rights when accompanied by appropriate safeguards.

Relevance to Kuwait

Kuwait's AML legislation similarly imposes reporting and information obligations while restricting unauthorized disclosure of information to customers concerning suspicious-transaction reporting.

Case 5 — Amann v. Switzerland, Application No. 27798/95, ECtHR

The case concerned the collection and storage of personal information by a public authority.

The Court held that the storage of information relating to an individual's private life itself constitutes an interference with privacy, regardless of whether the information is subsequently used.

The Court also recognized that professional and business information may fall within the concept of private life.

Principle

Government collection and storage of personal information require a sufficiently clear legal basis.

Relevance

This is relevant to automated tax-information exchange because CRS/FATCA involves the collection, storage and transmission of detailed financial information.

Case 6 — Canada (Attorney General) v. Federation of Law Societies of Canada, [2015] 1 SCR 401

The Canadian Supreme Court considered AML requirements imposed on lawyers and the interaction between those requirements and solicitor-client privilege.

The case demonstrates that AML legislation cannot necessarily disregard fundamental confidentiality protections and that the design of reporting mechanisms matters. Comparative legal analysis identifies the Canadian decision as taking a particularly strong approach to solicitor-client privilege.

Principle

Anti-money-laundering objectives must be implemented consistently with applicable legal protections, particularly where privileged information is involved.

Relevance

It helps explain why information-reporting regimes need procedural safeguards rather than treating every category of confidential information as freely disclosable.

17. Comparative Case-Law Table

18. Practical Example

Suppose an individual is tax resident in Country A but maintains a bank account with a Kuwaiti bank.

The Kuwaiti bank may:

1. obtain the customer's tax-residence information;
2. obtain a CRS self-certification;
3. determine whether the account is reportable;
4. identify the account holder and, where relevant, controlling persons;
5. collect prescribed financial information;
6. report the information to Kuwait's competent authority;
7. Kuwait may automatically exchange the information with Country A under the applicable international arrangement.

The bank is therefore not necessarily violating banking secrecy by making the report. The disclosure is based on a statutory/international reporting framework.

19. Foreign Account Reporting and Banking Secrecy: Legal Balance

The Kuwaiti system can be summarized as a balance between four interests:

1. Customer confidentiality

Banks ordinarily have duties of confidentiality.

2. Banking supervision

The CBK can obtain information necessary for supervision.

3. AML/CFT

Banks must identify customers, beneficial owners and suspicious activity.

4. International tax transparency

CRS and FATCA require information about specified reportable accounts to be transmitted through the competent-authority framework.

Thus:

Bank secrecy ≠ absolute secrecy.

Rather:

Bank secrecy + statutory exception = lawful disclosure where the law requires or permits it.

20. Important Distinction: Kuwaiti Resident vs Tax Resident

A person living in Kuwait should not automatically assume that the person is outside CRS reporting merely because Kuwait has no broad personal income-tax regime comparable to many other countries.

CRS focuses on tax residence in participating jurisdictions, not simply whether Kuwait imposes personal income tax.

Consequently, an expatriate may potentially have reporting implications in relation to another jurisdiction where that person is tax resident.

Financial institutions commonly use tax-residence information to determine whether an account is reportable.

21. Current Kuwait Position

The modern position can be summarized as follows:

CRS: Kuwait participates in automatic exchange of financial-account information.

FATCA: Kuwait has a bilateral FATCA arrangement with the United States.

AML: Law No. 106 of 2013 requires financial institutions to conduct customer due diligence and report suspicious activity.

Bank secrecy: Confidentiality remains an important principle but is subject to statutory exceptions.

2024 reform: Decree-Law No. 6 of 2024 substantially strengthened Kuwait's tax-information-exchange framework.

2026 administration: Kuwait's Ministry of Finance operates an electronic FATCA/CRS reporting portal and has issued current reporting instructions, including XML 2.0 filing requirements.

22. Conclusion

Kuwait's foreign-account reporting regime is a multi-layered banking-law framework rather than a single obligation imposed directly on every individual holding an overseas account.

Its major pillars are:

CBK banking supervision → AML/CFT due diligence → CRS → FATCA → Decree-Law No. 6 of 2024 → international exchange of tax information.

The central legal development is the movement from traditional banking confidentiality toward controlled and legally regulated financial transparency. The 2024 legislation strengthens the Ministry of Finance's ability to obtain information and cooperate internationally, while the CRS and FATCA frameworks impose structured reporting responsibilities on financial institutions.

At the same time, comparative case law demonstrates that information reporting is not completely unrestricted: legality, proportionality, confidentiality, privacy and procedural safeguards remain important principles when financial information is collected or disclosed.

Exam point: Kuwait's foreign-account reporting law should therefore be understood as the intersection of banking secrecy, tax-information exchange, CRS/FATCA, AML/CFT, customer due diligence, beneficial ownership and international administrative cooperation.