CbCR in Practice: A Strategic Guide to Country-by-Country Reporting for Multinational Enterprises

Where did the profits go? A new lens on multinational tax transparency

Where did the profits go? A simple question, and yet, for many tax authorities, one that’s nearly impossible to answer when it comes to multinational enterprises. As revenues zigzag through subsidiaries, holding companies, and tax havens, governments are often left in the dark.

This is exactly what Country-by-Country Reporting (CbCR) was created to address. It’s a global shift toward transparency, accountability, and fairness in international taxation. By requiring multinationals to disclose key financial data, including revenues, profits, taxes paid, and number of employees, in every jurisdiction where they operate, CbCR offers a powerful new lens for understanding where value is created and how it is taxed (or not).

At T1 Advisory, we help companies turn that lens inward, not only to ensure compliance, but to extract insight, identify risks, and ensure compliance.

The global business under the microscope

In the past, multinational enterprises (MNEs) could operate in dozens of jurisdictions, shifting income, expenses, and even intellectual property across borders, often without ever having to explain the full picture to any one tax authority. But with CbCR, this era of opacity is fading.

Imagine shining a fiscal microscope onto the sprawling anatomy of a global company: from manufacturing hubs in Vietnam to R&D centers in Ireland, and from shell entities in the Cayman Islands to profit centers in Luxembourg. CbCR enables governments to zoom in on these structures and trace how profits correlate, or do not, with actual economic activity.

This scrutiny is not about demonizing MNEs. It’s about identifying misalignments, for instance, when a jurisdiction with 3 employees and no physical office reports hundreds of millions in profits. Such red flags signal potential base erosion and profit shifting (BEPS) strategies, which CbCR is designed to expose.

Today, over 100 countries, including members of the OECD/G20 Inclusive Framework, have committed to CbCR standards. This harmonized effort represents one of the most ambitious global tax transparency movements in history.

What is Country-by-Country Reporting?

CbCR is a tool for regulators, but its design reveals much more than numbers. 

It’s a standardized reporting framework developed by the OECD under Action 13 of the BEPS Project, designed to give tax authorities consistent and comparable insight into the geographical structure of large multinational groups.

What makes CbCR important at a technical level is not its purpose (which we’ve already covered), but its mechanism, how it’s built, who files it, where it’s submitted, and how it’s exchanged.

Who must file a CbC report?

CbCR is required only from large-scale MNEs groups that meet specific threshold criteria, namely:

• Annual consolidated revenue over €750 million in the previous fiscal year,
• Presence in two or more tax jurisdictions.

These criteria limit the reporting obligation to the largest groups, those with the greatest potential for international tax risk and complexity.

Where is the report filed, and who sees it?

Filing follows a top-down logic:

• The ultimate parent entity of the MNE group submits the report to its local tax authority (the “reporting jurisdiction”),
  
• That tax authority then shares the report automatically with other jurisdictions where the group operates, via mechanisms like the OECD Multilateral Competent Authority Agreement (MCAA) or bilateral treaties,
• A designated subsidiary of the MNE group that files the CbC report on behalf of the entire group, in its own country. 

Although most CbCR filings remain confidential, the system’s effectiveness relies on this structured international exchange of data. Countries don’t need to ask, the information flows by default.

How is the report structured?

CbCR relies on a three-part OECD template. While the report’s content has been explored in previous sections, here’s what makes its structure technically significant:

• It requires jurisdiction-by-jurisdiction segmentation rather than consolidated data,
• It mandates a breakdown of both financial and operational information,
• It explicitly links business activity with financial outcomes (such as profits and taxes paid).

The use of machine-readable formats (typically XML) and standardized schemas makes it possible for tax authorities to automate risk assessments and cross-match data across borders.

What makes CbCR structurally unique?

Beyond its philosophy, what distinguishes CbCR technically from all prior tax reporting mechanisms is:

• Granularity. Reporting occurs at the country level, not the entity or group level.
• Comparability. Standardized metrics enable direct comparison between jurisdictions.
• Exchangeability. Legal frameworks support automatic exchange across tax administrations.
• Early-warning function. Structurally, it’s built to serve as a risk detection system, not just a reporting obligation.

What CbCR is not

To avoid confusion, it’s equally important to know what CbCR doesn’t do:

• It does not replace transfer pricing documentation (Master File/ Local File);
• It is not a public disclosure tool (except in specific jurisdictions like the EU);
• It does not allocate tax liability or directly trigger tax adjustments, it informs the risk-assessment phase, which may lead to audits or policy action.

Why it matters: The purpose and philosophy behind CbCR

CbCR is not just about numbers. It’s about philosophy, and reclaiming tax fairness in a borderless economy.

Before CbCR, tax authorities operated like detectives with half a case file. Each country saw only its local fragment of a multinational’s operations. This fragmentation enabled profit shifting, the practice of relocating profits to low- or no-tax jurisdictions, often with no corresponding economic activity.

The result? Developing countries, where real production or sales often occur, lost billions in potential revenue. According to the OECD, $100–240 billion in global tax revenue is lost annually due to BEPS, equivalent to 4–10% of global corporate income tax revenue.

CbCR is designed to change this by:

• • Enabling risk assessment. Tax authorities can spot anomalies that warrant further scrutiny.
  • Enhancing intergovernmental cooperation. Through information exchange, tax bodies gain a global perspective.
  • Leveling the playing field. Small and medium businesses that cannot shift profits across borders gain fairness.
  • Empowering policymaking. Governments can reform transfer pricing and treaty structures based on real data.

In essence, CbCR shifts the narrative: from “how much tax did a company pay?” to “where did it actually create value?”.

What’s in the report? Breaking down the CbCR template

CbCR is built on a three-part standardized template developed by the OECD, designed to provide tax authorities with both quantitative data and qualitative context. Together, these elements form a cohesive and risk-sensitive profile of a multinational group’s global tax footprint.

Table 1: Allocation of income, taxes, and business activities by jurisdiction

This is the core of the report, a numerical breakdown that allows authorities to cross-reference economic activity with profit reporting and tax payments in each country.

Key indicators include:

• Revenues, split between unrelated and related parties,
• Profit (or loss) before income tax,
• Income tax paid (cash basis),
• Income tax accrued (for the current year),
• Stated capital,
• Accumulated earnings,
• Number of employees,
• Tangible assets other than cash or cash equivalents.

These data points are not analyzed in isolation. When taken together, they help tax authorities spot inconsistencies, for example, high profits in low-tax jurisdictions with minimal workforce or physical assets.

This table is critical for risk assessment and audit targeting, and in our work at T1 Advisory, it often becomes the starting point for broader tax risk diagnostics and realignment of global structures.

Table 2: List of constituent entities and their activities

While Table 1 presents financial data, Table 2 maps the organizational structure.

It provides a full list of all legal entities (including permanent establishments) within the MNE group, detailing:

• Country of incorporation and tax residence,
• Nature of business activity (e.g. manufacturing, R&D, holding company, IP management),
• Dormant status, if applicable.

This table gives context to the numbers: it allows tax authorities to assess whether profits are reported in locations where real operational substance exists. It also reveals functional duplications, entity layering, and potential conduit structures.

Table 3: Additional information or explanations

This is the qualitative narrative section of the report. Here, companies can clarify:

• Jurisdiction-specific anomalies,
• Temporary effects (e.g. M&A activity, tax holidays),
• Internal restructuring,
• Deviations due to exchange rates or reporting lags.

Using Table 3 effectively is crucial. It prevents misinterpretation and supports the group’s transfer pricing position by successfully addressing red flags identified in Tables 1 and 2.

Together, these three tables offer a multidimensional view that goes far beyond what traditional consolidated financial statements can provide. They enable authorities to:

• Understand where profits are earned vs. where taxes are paid,
• Evaluate whether group structures align with value creation,
• Detect aggressive tax planning or profit shifting risk.

The CbCR template is not just a compliance form, it’s a structured transparency framework that sets a new global standard for how multinationals explain themselves to the tax world.

Implementation: How MNEs prepare for CbCR

Implementing CbCR isn’t simply about populating a spreadsheet, it’s a cross-functional, multi-jurisdictional compliance project that touches finance, tax, legal, and IT departments.

Key steps include:

• Entity mapping. MNEs must first map their entire global structure, including all subsidiaries, permanent establishments, and joint ventures. For many legacy firms, this step alone can expose outdated records or forgotten entities.
• Data gathering and validation. Data must come from reliable, auditable systems, often from enterprise resource planning systems, local ledgers, and manual inputs. Consistency is critical. Definitions like “number of employees” or “revenues from unrelated parties” must be uniformly applied across geographies.
• Governance and controls. Leading companies implement internal controls, workflows, and sign-off procedures, often mirroring SOX-style financial controls. Inconsistent or inaccurate filings can trigger audits or penalties.
• Technology enablement. Many MNEs deploy CbCR-specific software solutions to automate data consolidation, perform validations, and generate XML schema reports in the OECD-prescribed format.
• Documentation and audit readiness. Companies must be prepared to defend and explain their reports. That means maintaining documentation on methodologies, data sources, and any adjustments or assumptions.

Common pitfalls and compliance risks

While the promise of Country-by-Country Reporting is clear, the path to compliance is anything but simple. MNEs often discover that what looks like a reporting exercise is, in fact, a diagnostic mirror, one that may reflect inconsistencies, legacy structures, and strategic vulnerabilities.

Here are the most critical pitfalls:

Inconsistent data across jurisdictions

A common trap is when different subsidiaries report financial or operational data using different accounting standards, definitions, or timelines. For instance, headcount may be based on full-time equivalents in one country and total employees in another. Tax authorities notice these mismatches, and may interpret them as red flags.

Misclassification of business activities

In Table 2, each entity must be assigned a business function. A holding company might also perform treasury operations. A shared service center might carry out partial R&D. Misclassifying these roles can distort risk profiles and trigger unnecessary scrutiny or audits.

Overlooking Permanent Establishments (PEs)

PEs, such as branch offices or unincorporated business activities, are often poorly tracked, especially in older enterprise resource planning systems. Failing to include them, or reporting them with incomplete data, is a frequent compliance issue.

Unexplained outliers

If your Luxembourg entity has 2 employees and generates 70% of your profit, your CbCR must explain why, clearly and credibly. Table 3 exists for a reason. Failing to proactively disclose tax holidays, IP migrations, or group restructuring leads to assumptions, often the wrong ones, by tax authorities.

Underestimating internal review needs

CbCR is usually prepared annually, but by the time anomalies are discovered, it’s too late to course-correct. That’s why leading MNEs embed quarterly “dry runs” into their tax governance processes, surfacing issues before they hit the final report.

Neglecting the local compliance angle

Remember: even if the Master File and CbC report are centrally filed, Local File requirements still apply in many jurisdictions. Some countries require a CbCR notification. Others demand translations, local sign-offs, or additional documentation, all under tight deadlines and varying legal standards.

CbCR around the world: How global tax transparency plays out in practice

While CbCR is based on OECD standards, its real-world implementation differs significantly across jurisdictions. From thresholds to exchange mechanisms, countries tailor the framework to their legal systems and policy priorities. The table below offers a concise overview of how CbCR is applied around the world.

Future outlook: Is public CbCR the new normal?

We are on the way to a transformation: from confidential regulator-only reporting to public tax transparency.

The EU’s move to adopt public CbCR marks a dramatic evolution. Under the new directive:

• MNEs must disclose country-by-country data for EU countries and a short list of tax havens.
• Reports will be published on company websites and in machine-readable formats.
• The scope includes non-EU headquartered companies operating in the EU.

Critics argue this may fuel reputational risk and oversimplify complex tax arrangements. Public CbCR is not about punishing efficient tax planning, they say, it’s about holding companies accountable for aligning profits with real value creation.

Several civil society organizations, including the Tax Justice Network and Transparency International, are calling for global standards in public CbCR. Even some investors and Environmental, Social, and Governance (ESG) analysts now use voluntary disclosures to evaluate corporate governance and tax behavior.

Whether through regulation or market pressure, the shift toward greater transparency seems irreversible.

Beyond compliance, a strategic lens

CbCR is not just a compliance tool. It’s a mirror, a map, and a megaphone, reflecting the truth about how a multinational’s global footprint aligns with its tax strategy.

Forward-looking companies increasingly treat CbCR not as a bureaucratic burden, but as a strategic instrument, one that reveals inefficiencies, strengthens governance, and supports reputational trust. Used proactively, CbCR helps multinational enterprises to:

• Identify tax and operational inefficiencies,
• Strengthen internal controls and data integrity,
• Demonstrate responsible corporate behavior to investors and regulators,
• Prepare for a future where tax transparency is expected, not feared.

For governments, it’s a long-overdue mechanism to close information gaps and reclaim fiscal sovereignty.

For the public, it’s a window into the hidden architecture of global commerce.

And for the corporate world, it’s a turning point, from “what we can legally get away with” to “how do we sustainably justify where we pay tax?”

At T1 Advisory, we work with companies to approach CbCR not as a checkbox exercise, but as a tool for risk mitigation, reputational resilience, and data-driven insight. 

Get in touch with our team at T1 Advisory to explore how we can support your compliance and strategy!