Who Needs an LEI in Cyprus? A Company Checklist

Who needs an LEI in Cyprus depends on what the legal entity does, not simply on whether it is registered as a company. An LEI is needed before certain reportable securities trades, is used in derivatives and securities-financing reports, and may be requested from ICT suppliers under DORA. Other rules refer to an LEI only where one is available and do not require a company to obtain one.

What this means in Cyprus

A Cyprus limited company that wants to invest surplus cash in bonds through its bank should check its LEI before placing the trade. The bank needs the identifier for a reportable transaction. A trading company hedging currency risk with FX forwards faces a different question: the derivative must be reported under EMIR, and the reporting rules use an LEI to identify a counterparty that is a legal entity.

A software company may instead hear about LEIs from a bank client preparing its DORA register of information. The applicable register rules permit a valid and active LEI or an EUID for an ICT provider established in the Union, where available both. An LEI alone is used for a legal-person provider established outside the Union. For more on that supplier question, see the Cyprus DORA and LEI guide for ICT suppliers.

CySEC Circular C751, dated 19 January 2026, says regulated entities submit their register of information through the CySEC XBRL Portal in XBRL-CSV, the only accepted format. Submission is annual, no later than 28 February, using 31 December of the preceding year as the reference date. This is a reporting requirement for regulated entities, not a general LEI requirement for every Cyprus company.

Cyprus companies are registered with the Department of Registrar of Companies and Intellectual Property. An LEI issuer validates a company’s reference data against that register using its company registration number. LEIFast’s published Cyprus LEI prices are 49 € for 1 year, 135 € for 3 years and 195 € for 5 years; the GLEIF fee is included and tax is added where required. LEIFast is a Registration Agent of WM Datenservice, a GLEIF-accredited issuer, rather than an LEI issuer itself.

Key points: when is an LEI mandatory?

• Check before a company buys or sells reportable financial instruments through a bank or broker: the investment firm must obtain its LEI first.
• Check derivative and securities-financing reporting requirements even if the company does not invest in securities.
• If a financial-entity client requests an LEI for its DORA supplier register, establish which identifier the register rules permit for that provider.
• Do not treat a reference to an LEI ‘where available’ as a universal duty to obtain one.

Who needs an LEI for trading and reporting?

Regulation (EU) No 600/2014 (MiFIR), Article 26(6), requires investment firms to identify clients that are legal persons by LEI in transaction reports. Commission Delegated Regulation (EU) 2017/590 (RTS 22), Article 13(2), prevents a firm from providing a service that triggers transaction reporting for an LEI-eligible client before obtaining the client’s LEI. The firm also checks that the code complies with ISO 17442, appears in the Global LEI database and pertains to the client.

Situation	Rule	Who needs the identifier?
A company buys or sells reportable shares, bonds, ETFs or other financial instruments	MiFIR and RTS 22	The bank or broker obtains the company’s LEI before providing the reportable service.
A company enters into an FX forward or interest rate swap	EMIR	The derivative report identifies a counterparty that is a legal entity by LEI.
Counterparties enter into repos, securities or commodities lending, buy-sell backs or margin lending	SFTR	The reporting format includes LEIs.
A financial entity records an ICT supplier that is a legal person	DORA register rules	The financial entity identifies the supplier by the permitted identifier; for a provider established outside the Union, only an LEI may be used.

Regulation (EU) No 648/2012 (EMIR), Article 9(1), requires counterparties and CCPs to ensure a derivative contract, modification or termination is reported to a trade repository no later than the following working day. Reporting may be delegated. Under Commission Implementing Regulation (EU) 2022/1860, Article 3, reports identify a counterparty that is a legal entity by an ISO 17442 LEI. When reporting, counterparty 1 and the entity responsible for reporting must ensure their LEI reference data has been renewed under the accredited LOU’s terms.

Regulation (EU) 2015/2365 (SFTR), Article 4, requires counterparties to report securities-financing transactions by the next working day and provides for LEIs in the reporting format. For ICT suppliers, Commission Implementing Regulation (EU) 2024/2956, Article 3(5), sets the identifier rules for the DORA register of information. DORA, Regulation (EU) 2022/2554, has applied since 17 January 2025.

When is an LEI only used if available?

Some requirements call for an existing LEI without obliging a company to obtain one. Regulation (EU) 2023/1113, Article 4, provides for the current LEI of a payer or payee in a funds-transfer message where it exists, or an available equivalent official identifier in its absence. That provision is not a general instruction to register for an LEI.

Under Regulation (EU) 2024/886, Article 5c(1)(b), a payer’s bank may offer verification of a legal-person payee using the IBAN alongside an identifier such as an LEI, EUID or fiscal number. This is optional rather than a duty to hold an LEI. The Cyprus guide to verification of payee and LEIs explains that distinction.

Regulation (EU) 2024/1624 (AMLR), Article 22(1), will apply from 10 July 2027. It provides for obliged entities, including banks, to collect a legal-entity customer’s LEI where available. It does not require the customer to obtain one.

Who may not need one?

A Cyprus company does not need an LEI merely because it is registered. If none of the activities or counterparty requests above applies, the cited rules do not establish a general obligation to obtain one. Where a transaction or supplier relationship has particular reporting requirements, check the position with the bank, broker, regulator or adviser rather than assuming an LEI is unnecessary.

How to check and obtain an LEI

According to GLEIF – The Legal Entity Identifier (LEI), an LEI is a unique 20-character alphanumeric code based on ISO 17442. Each code represents one entity and links to reference data drawn from authoritative local sources. That data is freely accessible.

1. Search the company in the free GLEIF LEI Search. Check whether it already has a record and whether its status is ISSUED or LAPSED.
2. If an LEI exists, use the record to establish what action is needed before the relevant transaction or report. If you wish to change providers, see the LEIFast LEI transfer page. If there is no record, prepare the company’s registration details for an application.
3. Choose an issuer accredited for the company’s jurisdiction. GLEIF – Get an LEI: find LEI issuing organizations says legal entities are not restricted to an issuer in their own country.

For a new Cyprus company application, use the LEIFast order form to apply for an LEI. Check the company registration details and any existing GLEIF record before submitting the order.