Transfer Pricing · Compliance · 2026
Cyprus adopted formal transfer pricing rules in 2022 and has progressively tightened enforcement. Groups with Cyprus holding or IP structures carry documentation obligations that are real, specific, and time-bound.
Transfer pricing in Cyprus is no longer a theoretical risk. The documentation requirements are real, the thresholds are specific, and the Tax Department has the tools and the treaty framework to enforce them.
Cyprus transfer pricing rules were introduced by Administrative Order 5352/2022, applying from the 2022 tax year onwards. They require all controlled transactions (dealings between related parties under common ownership or control) to be priced at arm's length. The framework follows OECD principles and covers most transaction types between related parties.
A related party is any entity or individual with a direct or indirect holding of 25% or more, or a common management or control relationship. The threshold is low by international standards. Minority-stake structures can be in scope if the holding exceeds 25% at any level in the chain, counting direct and indirect stakes together.
In-scope controlled transactions include:
The rules apply to Cyprus-resident companies and to permanent establishments of non-resident entities taxed on Cyprus-source income. A Cyprus PE must price its internal dealings with the head office on the same arm's length basis as any other controlled transaction.
SME exemption from documentation requirements: Small and medium enterprises with total assets below €750,000 and annual turnover below €1.5 million are exempt from the obligation to prepare formal transfer pricing documentation (Local File and Master File). However, the exemption covers only the documentation obligation, not the arm's length standard itself. SMEs must still price their controlled transactions at arm's length. They are simply not required to maintain the full documentation file, though keeping contemporaneous pricing records is sensible, since the burden of proof sits with the taxpayer.
Cyprus has adopted the OECD Transfer Pricing Guidelines (2022 edition) as the primary interpretive authority for the arm's length standard. A controlled transaction must be priced as it would be between independent parties under comparable circumstances, looking at the functions performed, the assets used, and the risks assumed by each party. The comparability analysis is central to every assessment.
Cyprus recognises five methods, drawn from the OECD Guidelines. Which one applies depends on the nature of the transaction and what comparable data is available:
The Cyprus Tax Department accepts benchmarking analyses from commercial databases: Bureau van Dijk's Orbis, Moody's FAME, or equivalent. The study identifies comparable independent companies performing similar functions and derives an arm's length range, typically the interquartile range, within which the tested party's results should sit.
Low-value-adding services: Cyprus has adopted the OECD simplified approach for low-value-adding intra-group services. Where services are supportive in nature, not core business activities, and performed by one group member for others, a 5% cost-plus markup is accepted as arm's length without a full benchmarking study. For management fee arrangements and shared service charges, this removes the need for extensive comparable analysis.
A Cyprus entity must prepare a Local File where the aggregate value of controlled transactions in a given category exceeds the statutory threshold in the tax year. From 2026, thresholds are category-specific: €10,000,000 for financing transactions, €5,000,000 for goods, and €2,500,000 for services, IP licensing, and all other controlled transaction types. Each category is assessed independently. A company can exceed the threshold for one category and remain below it for another.
The Local File is prepared at entity level and must demonstrate that the specific controlled transactions entered into by the Cyprus entity comply with the arm's length standard. It must cover:
Timing matters. The Local File must be ready by the date the corporate tax return is filed. The Tax Department can request it at any time, and back-dated preparation does not substitute for documentation that should have been prepared when the transactions occurred.
Penalties are fixed by statute: up to €20,000 per tax year for failure to maintain adequate documentation, and €100 per day for late submission when documentation is requested. Beyond the headline figures, an entity without contemporaneous documentation has no meaningful defence in an audit or adjustment proceeding.
The thresholds apply category by category: A Cyprus company with €4M of intercompany financing and €2M of management fee charges is below the threshold for both categories. But a company with €3M of intra-group royalty payments must prepare a Local File covering those IP transactions, since €3M exceeds the €2.5M services/IP threshold — even if its financing and goods transactions are comfortably below their respective thresholds of €10M and €5M. Groups with multiple transaction types need to map each category separately.
The three-tier framework (Country-by-Country Report, Master File, Local File) applies based on group size. Cyprus participates in the OECD's automatic exchange regime and has implemented the CbCR requirements. Which tier a group falls into depends on revenue and asset thresholds; knowing where you sit is the starting point for any group with a Cyprus presence.
Country-by-Country Reporting is required for groups with consolidated annual revenue of €750 million or more. The CbCR is filed by the Ultimate Parent Entity in its home jurisdiction (Cyprus, if Cyprus is the UPE's home) and exchanged automatically with every tax authority where the group has a presence. For each jurisdiction it covers: aggregate revenue, profit before tax, income tax paid and accrued, employee headcount, and stated capital. It is a risk screening tool, not a basis for direct assessment, and tax authorities use it to flag groups where reported profits look misaligned with economic activity.
Cyprus entities in groups above €750 million must also prepare a Master File, a group-level overview. It covers the group's business and organisational structure, how the value chain generates profit, who owns and exploits the IP, the intercompany financing arrangements, and the overall TP policy. In practice, examiners read it alongside the Local File: the Master File places the Cyprus entity in its group context.
For Cyprus specifically: a Master File is required where consolidated group revenue exceeds €750 million, or where the Cyprus group's assets exceed €10 million and revenues exceed €5 million. It must be available within 12 months of the end of the group's financial year.
Filed by the Ultimate Parent Entity. Covers revenue, profit, tax paid and accrued, and employee headcount for every jurisdiction in which the group operates. Exchanged automatically between tax authorities.
Group-level overview: organisational structure, value chain analysis, IP ownership and exploitation, financing arrangements, and the group's overarching TP policy. Provides the context for entity-level Local Files.
Entity-specific documentation covering the Cyprus company's controlled transactions. Includes functional analysis, method selection, benchmarking, and financial data. Prepared contemporaneously by the filing date.
Third-party comparables for each transaction category covered by the Local File. Typically drawn from Bureau van Dijk or equivalent databases. Updated at least every three years or when market conditions change materially.
Cyprus's IP Box regime provides an 80% deduction on qualifying IP income, bringing the effective corporate tax rate to 3%. The regime is compelling, and it is also where transfer pricing scrutiny runs highest. A Cyprus IP Box structure involves royalty flows between related parties, IP ownership by a Cyprus entity, and often an IP development or acquisition history that must withstand arm's length analysis. Each carries TP risk.
The foundation of the IP Box TP analysis is the DEMPE framework (Development, Enhancement, Maintenance, Protection, and Exploitation of the intellectual property). The OECD's revised guidance on intangibles (Chapter VI of the OECD Guidelines) holds that economic ownership of IP, and therefore the right to IP returns, should follow where the DEMPE functions are performed, not merely where legal title is held. A Cyprus entity that holds legal ownership of IP but outsources all development, enhancement, and maintenance functions to affiliates in other jurisdictions will face serious challenge: the IP income may be re-characterised as a routine return for the Cyprus entity, with the residual economic return attributed elsewhere.
The TP questions any Cyprus IP structure needs to answer in writing, before the tax return is filed:
The DEMPE risk in practice: The OECD's revised intangibles chapter requires alignment between legal ownership and the performance of DEMPE functions. A Cyprus entity that holds IP legally but performs no meaningful development or enhancement in Cyprus, with all R&D contracted to affiliates or third parties, faces serious re-characterisation risk. The income attributable to the R&D performers can be re-allocated to the jurisdictions where those functions occur, leaving only a routine return in Cyprus. Legal title without DEMPE substance is not enough. Tax authorities in source jurisdictions are increasingly aware of this.
Any group that has structured IP ownership in Cyprus without a full TP review of royalty rates, DEMPE functions, and transfer history should address it in this year's compliance review. The exposure does not stop at Cyprus: incorrect TP on IP flows can trigger corresponding adjustments in the subsidiaries' jurisdictions too.
An Advance Pricing Agreement is a binding agreement, concluded before transactions occur, that locks in the transfer pricing methodology between the taxpayer and the Cyprus Tax Department. In the bilateral version, the tax authority of the counterparty jurisdiction is a party to it as well. Once concluded, it provides certainty that the agreed methodology will be accepted for the agreed period, typically three to five years.
The process begins with a prefiling conference, at which the taxpayer outlines the proposed transaction and methodology. The formal application follows, covering the functional analysis, proposed methodology, benchmarking, and financial projections. For bilateral APAs, the Tax Department engages the Competent Authority of the counterparty jurisdiction. Negotiations typically run 12 to 18 months from formal submission.
Bilateral APAs are available across Cyprus's 65+ treaty network. For Cyprus entities with significant cross-border royalty flows or substantial intercompany financing, a bilateral APA with the primary counterparty jurisdiction provides the strongest available protection against TP adjustment. It eliminates double taxation risk from divergent positions by the two jurisdictions, and settles the pricing uncertainty for the duration of the agreement.
If a foreign tax authority makes a TP adjustment that creates double taxation, relief is available through the Mutual Agreement Procedure under the applicable bilateral treaty. MAP lets the two Competent Authorities resolve the dispute bilaterally and eliminate the double charge. Cyprus participates in the OECD's BEPS Action 14 minimum standard on MAP, and MAP cases are handled by the Tax Department's international division.
For Cyprus entities in IP structures with significant intra-group royalty flows, particularly those using the IP Box regime, a bilateral APA between Cyprus and the jurisdiction of the principal operating subsidiary provides the strongest available TP certainty. It converts the primary TP risk into a resolved position for a defined period: the methodology is agreed, the exposure is closed, and both jurisdictions are bound. Euromanagement prepares APA applications, conducts the functional and economic analysis, and supports the negotiation with both the Cyprus Tax Department and the counterparty Competent Authority.
| Jurisdiction | Local File Threshold | Master File Required | CbCR Threshold | APA Available | Penalties (Non-Doc) |
|---|---|---|---|---|---|
| Cyprus | €750k per category | Groups >€750m revenue | €750m consolidated | Yes | Up to €20k / year |
| UK | £1m aggregate | All large businesses | £750m | Yes | Unlimited |
| Germany | €500k aggregate | All groups | €750m | Yes | Up to €1m+ |
| Netherlands | €8m aggregate | Groups >€50m revenue | €750m | Yes | Unlimited |
| Ireland | Case-by-case | Large groups | €750m | Yes | Up to €25k / return |
Transfer pricing compliance in Cyprus is a function of documentation discipline, not a complex legal argument. The rules are clear, the thresholds are specific, and the penalty exposure is real. Groups that build documentation into their annual cycle as a standard compliance step, not a crisis response, and are in the best position.
Transfer Pricing Advisory
Euromanagement prepares Local Files, Master Files, benchmarking studies, and APA applications for Cyprus entities across all industry sectors.
Request a Consultation