Published December 1, 2025Updated April 4, 202624 min read
Pillar Two CbCR: How Country-by-Country Data Powers Global Minimum Tax Compliance (2026)Pillar Two CbCR: How Country-by-Country Data Powers Global Minimum Tax Compliance (2026)
Pillar Two and CbCR share the €750m scope, and CbCR data is the backbone of Pillar Two transitional safe harbour testing.
Borys UlanenkoCEO of ArmsLength AI
24min read
Contents↓
Contents
TL;DR key takeaways
CbCR and Pillar Two are different regimes, but they share the €750m scope perimeter by design.
The Transitional CbCR Safe Harbour can deem top-up tax to zero if a jurisdiction meets de minimis (€10m/€1m), Simplified ETR (15%/16%/17%), or routine profits tests.
Treat CbCR as a Pillar Two dataset: align entity/jurisdiction mapping, reconcile to consolidated FS, and control tax expense inputs.
Build one 'CbCR + Pillar Two data hub' to support CbCR XML, GIR outputs, and audit-ready reconciliations.
EU Public CbCR requires large groups to publish income-tax KPIs by jurisdiction. Most calendar-year groups first report FY2025 and publish by 31 Dec 2026.
Pillar Two (GloBE) and Country-by-Country Reporting (CbCR) are separate regimes, but they’re operationally connected because Pillar Two reuses Action 13’s €750m “large MNE” scope and—during the transition period—allows groups to use CbCR + financial statement income tax expense to avoid full GloBE calculations in “low-risk” jurisdictions via the Transitional CbCR Safe Harbour.
Two practical guardrails matter in real-world operating models:
Safe harbour is not “set and forget.” If you choose not to apply the Transitional CbCR Safe Harbour for a jurisdiction in a year you’re subject to GloBE, you generally cannot apply it later for that jurisdiction (“once out, always out”), subject to limited exceptions (OECD Safe Harbours (2022) ¶35–36).
Safe harbour does not eliminate group-wide obligations. Even where top-up tax is deemed €0 for a jurisdiction, the group is still generally expected to prepare/file a GIR, including safe-harbour-related information where applicable (OECD Safe Harbours (2022) ¶34; see also ¶12).
In practice, this means your CbCR dataset is no longer only a transfer pricing transparency deliverable; it becomes a core input into global minimum tax compliance controls and audit trails. Misalignment between CbCR, consolidated financial statements, and Pillar Two data can translate directly into safe harbour failures, rework, and controversy risk.
Key Takeaways
→CbCR (BEPS Action 13) is primarily a risk-assessment transparency tool; Pillar Two determines actual top-up tax liability—don’t conflate their purposes.
→The €750m revenue perimeter is intentional and shared: Action 13 sets it (¶52–53), and Pillar Two adopts it (Model Rules Art. 1.1).
→Transitional CbCR Safe Harbour is jurisdiction-by-jurisdiction and can deem top-up tax to zero via de minimis, Simplified ETR, or routine profits tests—but it comes with key guardrails like 'once out, always out' and ongoing GIR obligations.
→The winning operating model is one integrated 'pillar two cbcr' data hub: shared master data, reconciliations, controls, and schema-ready outputs.
Pillar Two CbCR: why the two regimes are linked (and why practitioners should care)
CbCR and Pillar Two were built for different jobs:
CbCR (BEPS Action 13): provide tax authorities with standardized, high-level information to support risk assessment and target audit resources. The OECD explicitly designed CbCR with “appropriate use” constraints to reduce the risk of misuse as a standalone transfer pricing allocation tool. (See OECD BEPS Action 13 Final Report (2015).)
Pillar Two (GloBE Rules / global minimum tax): compute a jurisdictional effective tax rate (ETR) and, where ETR is below 15%, impose top-up tax through mechanisms such as the Income Inclusion Rule (IIR), Qualified Domestic Minimum Top-up Tax (QDMTT), and Undertaxed Profits Rule (UTPR).
Yet “pillar two cbcr” has become a real workflow in large tax departments for one simple reason: Pillar Two intentionally piggybacks on CbCR’s scope and data availability to reduce transition burden.
The two most important connections
1) Shared scope: the €750m “large MNE” perimeter
Action 13 sets a consolidated revenue threshold of €750m, noting it excludes a large majority of groups while still covering most global corporate revenue and the highest BEPS risk profiles (OECD BEPS Action 13 Final Report (2015) ¶52–53).
Pillar Two adopts the same perimeter, but operationalizes it as a “2 out of 4 prior years” test (OECD GloBE Model Rules (2021) Art. 1.1).
2) Shared transitional simplification: the Transitional CbCR Safe Harbour
The OECD’s Safe Harbours and Penalty Relief package (20 Dec 2022) created a Transitional CbCR Safe Harbour that allows in-scope groups to use:
Revenue and Profit (Loss) before Income Tax from a Qualified CbC Report, and
Income tax expense from Qualified Financial Statements (after eliminating taxes that are not Covered Taxes and UTPs (uncertain tax positions) reported in the QFS, per the OECD’s “Simplified Covered Taxes” definition),
to determine whether a jurisdiction’s Pillar Two top-up tax can be deemed to be zero for that year (OECD Safe Harbours (2022) Chapter 1, Transitional CbCR Safe Harbour rule text; see also ¶3).
Note
If you already file CbCR, you likely have the only dataset that is (a) global, (b) standardized, and (c) consistently available across all jurisdictions. Pillar Two leverages that reality—especially for early years when GloBE data models are still being industrialized.
Pillar Two CbCR vs “BEPS Action 13 Pillar Two”: clarifying terminology (and avoiding category errors)
Search queries like “BEPS Action 13 Pillar Two” reflect a common confusion: Action 13 and Pillar Two sit under the OECD BEPS umbrella, but they are not the same regime and they do not use the same calculations.
Purpose and output: a quick comparison
Dimension
CbCR (BEPS Action 13)
Pillar Two (GloBE / global minimum tax)
Policy objective
Tax transparency for risk assessment
Ensure minimum 15% tax on profits in each jurisdiction
Primary output
Annual CbC Report (tables + narrative)
Top-up tax computation + GloBE Information Return (GIR)
Core calculation
None required (reporting data)
Jurisdictional ETR, top-up %, Substance-based Income Exclusion (SBIE), allocation of top-up tax
Data granularity
High-level jurisdiction totals
Detailed adjustments to financial accounts and taxes, entity-level attributes
Audit posture
“Appropriate use” constraints; consistency checks
Liability determination; formal penalties and documentation expectations
Key risk
Inconsistent story vs TP files / Master file / Local files
Treat CbCR as a “tax authority-facing data product” and Pillar Two as a “tax liability engine.” Your governance needs to cover both, but your calculations, controls, and documentation are different.
Scope and thresholds: the €750m rule (and its variants) in a pillar two cbcr program
What is the €750m threshold—and why does it apply to both?
CbCR: The OECD chose €750m to capture the largest groups while excluding most MNEs from the compliance burden (OECD BEPS Action 13 Final Report (2015) ¶52–53).
Pillar Two: The Model Rules adopt the same perimeter but apply it if consolidated revenue is ≥ €750m in at least 2 of the 4 preceding fiscal years (OECD GloBE Model Rules (2021) Art. 1.1). That “2/4” design matters for groups near the threshold or experiencing acquisitions/disposals.
Thresholds and perimeter rules by regime (practical table)
Regime
Threshold
Lookback
Measure
Practical implication
CbCR (OECD Action 13)
€750m
Typically prior year (local law varies)
Consolidated group revenue
Drives annual CbCR obligation and exchange
Pillar Two (GloBE Model Rules)
€750m
2 of 4 preceding FYs
Consolidated group revenue
A “near-threshold” group can become in-scope due to temporary spikes
EU Public CbCR (Directive 2021/2101)
€750m
2 consecutive financial years
Consolidated revenue
Public disclosure layer; often same dataset, different presentation and sign-offs
US CbCR (IRS)
$850m
Annual test
Consolidated revenue
US-headed groups may have CbCR even if Pillar Two not enacted in the US
Warning
Don’t assume “below €750m this year” means “out of Pillar Two.” The Pillar Two test is multi-year (2/4), and some groups will be pulled in due to acquisitions or consolidation changes even if current-year revenue dips.
“Same threshold” doesn’t mean “same entities”
Even with the same revenue perimeter, CbCR and Pillar Two can diverge on:
Entity population (e.g., permanent establishments, transparent entities, excluded entities),
Jurisdiction assignment rules,
Treatment of intragroup eliminations and consolidation adjustments.
This is why a “pillar two cbcr” program needs explicit, documented mapping rules (see the data hub section below).
How CbCR data feeds Pillar Two: the Transitional CbCR Safe Harbour (step-by-step)
The Transitional CbCR Safe Harbour is the centerpiece of the practical Pillar Two–CbCR connection. It exists to reduce compliance cost during early years by letting groups “screen out” low-risk jurisdictions.
Transition period: the planning window you actually have
The Transition Period is defined as fiscal years beginning on or before 31 Dec 2026, but not including any fiscal year ending after 30 Jun 2028 (OECD Safe Harbours (2022), Transitional CbCR Safe Harbour definitions).
That means:
Calendar-year groups generally have transitional relief for FY 2024, 2025, 2026 (depending on local adoption timing).
Non-calendar-year groups may have different end dates; the “ending after 30 Jun 2028” cap can shorten availability.
Two compliance constraints are easy to miss when you’re building a “safe harbour-first” workflow:
“Once out, always out.” If you do not apply the Transitional CbCR Safe Harbour for a jurisdiction in a year you’re subject to GloBE, you generally cannot apply it in a later year for that jurisdiction (OECD Safe Harbours (2022) ¶35), with limited exceptions (e.g., you had no Constituent Entities there in the earlier year; see ¶36).
Safe harbour is not a filing exemption. Even where a jurisdiction qualifies and top-up tax is deemed zero, you’re still subject to group-wide GloBE requirements (including preparing/filing the GIR) and you must include safe-harbour-related information where applicable (OECD Safe Harbours (2022) ¶34; see also ¶12).
Note
Domestic-law dependency note: the Transitional CbCR Safe Harbour is an OECD design feature that jurisdictions may implement with local variations (and the broader GloBE framework is always mediated by domestic law). Treat availability, elections, and filing mechanics as jurisdiction-specific “must confirm” items.
The three tests (and their data sources)
A jurisdiction’s top-up tax is deemed zero for a year if any of the following is met (OECD Safe Harbours (2022), Transitional CbCR Safe Harbour rule text):
De minimis test (CbCR-based)
Simplified ETR test (CbCR + financial statements)
Routine profits test (CbCR + SBIE computed under GloBE rules)
Here’s the tests in a working table.
Test
Data inputs
Threshold
What it tells you
De minimis
CbCR Total Revenue; CbCR Profit (Loss) before tax
Revenue < €10m AND PBT < €1m
The jurisdiction is too small to justify full computation
The jurisdiction’s tax profile is high enough to presume no top-up
Routine profits
CbCR PBT; SBIE amount (GloBE rules)
PBT ≤ SBIE
Profits are no more than routine return on substance
The Simplified ETR formula (what you’ll implement in systems)
text
Simplified ETR = Simplified Covered Taxes / Profit (Loss) before Income Tax
Where:
- Profit (Loss) before Income Tax comes from the Qualified CbC Report (jurisdictional total).
- Simplified Covered Taxes is the jurisdiction’s income tax expense reported on the MNE Group’s
Qualified Financial Statements, after eliminating any taxes that are not Covered Taxes and UTPs
(uncertain tax positions) reported in the Qualified Financial Statements.
Note
This is why “cash tax paid” lines in CbCR are usually not sufficient for Pillar Two screening. The Simplified ETR test is built on financial statement income tax expense (with specific eliminations), not CbCR cash tax paid/accrued lines. (OECD Safe Harbours (2022), Transitional CbCR Safe Harbour definitions; see also discussion in Chapter 1 “Covered Taxes” section.)
Loss jurisdictions (one practical nuance): when a jurisdiction has negative Profit (Loss) before Income Tax in the CbCR, the Simplified ETR can become non-intuitive (because you’re dividing by a loss). In practice, loss jurisdictions often get screened via de minimis (where the absolute footprint is small) or routine profits (where PBT is ≤ SBIE) rather than the ETR gateway. Either way, you still need clean entity/jurisdiction mapping and a defensible tax expense bridge.
What is a “Qualified CbC Report” (and why it matters)?
Safe harbour eligibility depends on whether you have a Qualified CbC Report. The OECD definition is direct: a Qualified CbC Report is a CbCR “prepared and filed using Qualified Financial Statements” (OECD Safe Harbours (2022), Chapter 1 “Source of Information” definitions).
“Qualified Financial Statements” are also defined (OECD Safe Harbours (2022), Chapter 1 “Source of Information” definitions), and include:
the accounts used to prepare the UPE’s consolidated financial statements (mirroring the GloBE approach), or
separate financial statements of each Constituent Entity prepared under an Acceptable (or certain Authorised) Financial Accounting Standard where reliable, or
for Non-Material Constituent Entities excluded from line-by-line consolidation solely due to size/materiality, the accounts used for preparing the CbCR.
Practically, this pushes you toward:
Consistent use of consolidated reporting packages,
Documented accounting standards and consolidation basis,
Controls over late consolidation entries and tax provisioning.
Warning
A frequent failure mode is assuming “we filed CbCR” equals “we have a Qualified CbC Report for safe harbour.” If your CbCR is built on local statutory accounts in some jurisdictions, or you blend multiple accounting bases without a documented policy, you may not meet the safe harbour’s qualifying conditions.
Note
Transitional CbCR Safe Harbour: eligibility checklist (quick, practical)
To rely on the safe harbour in a jurisdiction, confirm you can evidence:
You have a Qualified CbC Report prepared and filed using Qualified Financial Statements (OECD Safe Harbours (2022), Chapter 1 “Source of Information” definitions).
You can compute Simplified Covered Taxes using QFS income tax expense, excluding non-Covered Taxes and UTPs (uncertain tax positions) (OECD Safe Harbours (2022), Transitional CbCR Safe Harbour definitions).
You understand and operationalize “once out, always out” (OECD Safe Harbours (2022) ¶35–36).
You can meet GIR filing requirements, including safe-harbour-specific GIR disclosures where relevant (OECD Safe Harbours (2022) ¶34; see also ¶12).
You’ve confirmed the safe harbour’s availability/elections under the relevant domestic implementation in the jurisdictions that matter most.
Pillar Two CbCR implementation timeline: what to align across filings, systems, and governance
Most groups manage three parallel but linked tracks:
Action 13 CbCR filing and exchange (annual, existing cadence)
Pillar Two computations (jurisdiction-by-jurisdiction; safe harbour screening first, then full computations where needed)
Pillar Two reporting (GIR + notifications, with exchange mechanisms)
Timeline table (global reference points)
Milestone
Regime
Date / period
Source
OECD recommends CbCR implementation for FYs beginning on/after
Action 13
1 Jan 2016 (recommended baseline; local effective dates vary)
OECD Action 13 Final Report (2015) (implementation language)
First broad CbCR exchanges begin
Action 13
June 2018
OECD CbCR program page
GloBE Model Rules released
Pillar Two
20 Dec 2021
OECD Model Rules (2021)
Safe Harbours & Penalty Relief released
Pillar Two
20 Dec 2022
OECD Safe Harbours (2022)
EU transposition deadline
Pillar Two (EU)
31 Dec 2023
Directive (EU) 2022/2523 (Art. 56)
EU IIR/DMTT generally applies for FYs beginning from
Pillar Two (EU)
31 Dec 2023 (calendar-year groups: typically FY 2024)
OECD expects first GIRs/notifications due (many groups)
Pillar Two reporting
30 Jun 2026
OECD GIR requirements page (compilation updated as at 22 July 2025)
End of Transitional CbCR Safe Harbour window (outer limit)
Pillar Two
No FY ending after 30 Jun 2028
OECD Safe Harbours (2022)
Tip
Build your integrated calendar around “close + provision + CbCR + Pillar Two.” The bottleneck is rarely filing mechanics; it’s getting stable jurisdictional profit and tax expense numbers with reconciliations and approvals.
Designing a “CbCR + Pillar Two data hub”: the operating model that makes pillar two cbcr scalable
A “CbCR hub” isn’t a legal requirement; it’s a systems-and-controls pattern that makes both regimes auditable and repeatable.
What the hub must standardize (minimum viable design)
1) Master data: entities, jurisdictions, and ownership
You need a single, governed dataset for:
Constituent entities and ownership chains (Pillar Two is sensitive to ownership and consolidation)
Permanent establishments and location rules
Jurisdiction mapping:
CbCR “tax jurisdiction” reporting
Pillar Two “tested jurisdiction” aggregation
Deliverables (practical):
Entity master file with stable IDs
Jurisdiction mapping table with versioning (because reorganizations happen mid-year)
2) Chart of accounts (CoA) mapping: revenue, PBT, and tax expense
CbCR needs revenue and profit before tax in a standardized format; Pillar Two needs financial accounts plus adjustments and covered tax characterization.
Change logs (what changed since prior-year CbCR and why)
Safe harbour consistency choices (especially where “once out, always out” makes sequencing decisions irreversible)
CbCR XML vs Pillar Two GIR: why schema-readiness belongs in the hub
CbCR filings typically use standardized XML schemas and exchange frameworks (see OECD CbCR program resources). Pillar Two reporting is now on the same trajectory: the GIR is a standardized information return, and OECD materials have been updated through 2025 (see OECD GIR requirements page and related OECD GIR materials).
Don’t wait for filing year one to build schema validation. Treat XML/GIR validation rules like payroll tax validation—run them at each close cycle on draft data.
Coordinating Pillar Two with CbCR compliance: a practical workflow
A scalable workflow separates responsibilities but keeps one source of truth.
Recommended sequencing (year-end cycle)
Close and consolidate (Finance owns)
CbCR draft build (Tax + Finance)
Safe harbour screening (Tax, using CbCR + tax expense) — and decide early, because skipping safe harbour can trigger “once out, always out” for that jurisdiction
Full GloBE computations where safe harbour fails (Tax + specialists)
Reconciliations and governance sign-offs (Tax leadership + Controller)
CbCR filing (Tax)
GIR/notifications (Tax, subject to local adoption; include safe-harbour-specific GIR disclosures where relevant)
Suggested RACI (high level)
Activity
Tax
Finance/Controllership
IT/Data
TP/Documentation
Entity/jurisdiction mapping governance
A
C
R
C
CbCR compilation
A/R
R
C
C
Simplified Covered Taxes computation
A/R
R
C
C
Safe harbour testing
A/R
C
C
C
Full GloBE calculation
A/R
C
C
C
Reconciliations & audit trail
A
A/R
R
C
Filing outputs (CbCR XML, GIR)
A
C
R
C
(A = Accountable, R = Responsible, C = Consulted)
Warning
If “Tax owns everything,” you’ll miss critical controls embedded in close (tax provisioning, consolidation journals, uncertain tax positions). If “Finance owns everything,” you’ll miss Pillar Two technical judgments (covered taxes characterization, exclusions, elections). The hub is the handshake.
Practical Examples: applying pillar two cbcr safe harbour tests with real numbers
Example 1 — Safe harbour via Simplified ETR test (FY 2024; transition rate 15%)
Facts (Jurisdiction A):
CbCR Profit (Loss) before Income Tax: €100.0m
CbCR Total Revenue: €900.0m
Financial statement income tax expense, adjusted to Simplified Covered Taxes: €18.0m
Step 1: Compute Simplified ETR
text
Simplified ETR = €18.0m / €100.0m = 18%
Step 2: Compare to the transition rate (FY beginning 2024 = 15%)
18% ≥ 15% ⇒ Jurisdiction A qualifies for the Transitional CbCR Safe Harbour
Result: Top-up tax deemed €0 for Jurisdiction A for FY 2024 (OECD Safe Harbours (2022), Transitional CbCR Safe Harbour rule text)
What to document (minimum):
Evidence your CbCR is a Qualified CbC Report
Bridge from book income tax expense → Simplified Covered Taxes (eliminations, UTPs (uncertain tax positions))
GIR support: safe harbour does not eliminate GIR filing; include safe-harbour-related GIR disclosures where applicable (OECD Safe Harbours (2022) ¶34; see also ¶12)
Example 2 — Safe harbour fails; full Pillar Two exposure remains (FY 2025; transition rate 16%)
Facts (Jurisdiction B):
CbCR Profit before tax: €200.0m
Simplified Covered Taxes: €24.0m
SBIE amount (computed under GloBE rules): €30.0m (assumed)
Test 1: De minimis
Not met (jurisdiction is clearly above €10m revenue).
Test 2: Simplified ETR
text
Simplified ETR = €24.0m / €200.0m = 12%
12% < 16% ⇒ Fail
Test 3: Routine profits (PBT ≤ SBIE?)
€200.0m ≤ €30.0m ⇒ Fail
Result: No safe harbour. Proceed to full GloBE computation.
Illustrative top-up tax math (simplified, for intuition only)
Assume:
GloBE income ≈ €200.0m
Covered taxes ≈ €24.0m
Jurisdictional ETR ≈ 12%
Minimum rate = 15%
Top-up percentage ≈ 3%
Excess profits after SBIE ≈ €200.0m − €30.0m = €170.0m
text
Top-up tax ≈ 3% × €170.0m = €5.1m
This is exactly where CbCR stops being “just a transparency report”—the same jurisdictional totals now drive whether you do (or avoid) a full Pillar Two calculation.
Example 3 — De minimis test qualifies (small footprint jurisdiction)
Facts (Jurisdiction C, FY 2026):
CbCR Total Revenue: €8.5m
CbCR Profit before tax: €0.6m
De minimis test (OECD Safe Harbours (2022)) requires:
Revenue < €10m, and
PBT < €1m
Both conditions are met:
€8.5m < €10m and €0.6m < €1m ⇒ Qualifies
Result: Top-up tax deemed €0 for Jurisdiction C for FY 2026.
Tip
De minimis is often the fastest “win” in a pillar two cbcr program. But it depends on correct entity/jurisdiction mapping—small PEs and holding entities can swing totals above the thresholds if misassigned.
Common pitfalls in pillar two cbcr programs (and how to mitigate them)
Common Pitfalls to Avoid
01Treating CbCR profit before tax as interchangeable with the GloBE starting point (they can differ due to consolidation, eliminations, and adjustments).
02Assuming any filed CbCR is automatically a 'Qualified CbC Report' for safe harbour—especially when mixed accounting standards or local-stat builds exist.
03Using CbCR 'income tax paid/accrued' lines as the taxes input for Simplified ETR, instead of financial statement income tax expense adjusted to Simplified Covered Taxes (excluding non-Covered Taxes and UTPs (uncertain tax positions)).
04Forgetting 'once out, always out'—skipping safe harbour in a jurisdiction you could have qualified for can permanently eliminate access in later years for that jurisdiction.
05Assuming safe harbour eliminates reporting: even where top-up tax is deemed zero, you generally still need a GIR and safe-harbour-specific disclosures where applicable.
06Late-breaking consolidation entries that change jurisdictional PBT after safe harbour testing—creating version-control chaos and audit exposure.
07No documented jurisdiction mapping logic (CbCR jurisdiction vs Pillar Two tested jurisdiction vs PE allocation), leading to inconsistent results year over year.
08Building filing outputs (CbCR XML / GIR extracts) as a one-off exercise rather than an automated, validated pipeline.
Mitigation checklist (what “good” looks like)
Versioned mapping tables for entity → jurisdiction and PE logic
A standardized tax expense bridge documented and owned jointly by Tax and Finance (including explicit treatment of UTPs (uncertain tax positions) vs UTPR)
Automated exception reports:
Large year-over-year movements in PBT and tax expense
Negative tax expense or unusual deferred tax patterns
Jurisdictions that flip between safe harbour pass/fail
Jurisdictional considerations: EU, UK, and US realities that affect pillar two cbcr planning
EU: Minimum Tax Directive + EU Public CbCR (two different obligations)
In the EU, many in-scope groups will face both:
Pillar Two implementation via Directive (EU) 2022/2523 (measures apply for fiscal years beginning from 31 Dec 2023 — for calendar-year groups, that’s typically FY 2024; UTPR-related measures generally apply for fiscal years beginning from 31 Dec 2024), and
EU Public CbCR via Directive (EU) 2021/2101 (public reporting starting FYs beginning on/after 22 Jun 2024, and the €750m threshold applies where consolidated revenue exceeds €750m for each of the last two consecutive financial years).
Important EU nuance (deferral option): under Article 50 of the Minimum Tax Directive, certain Member States (where no more than 12 in-scope UPEs are located) may elect to delay application of the IIR and UTPR for six consecutive fiscal years beginning from 31 Dec 2023. This can affect local sequencing, but it does not eliminate group exposure elsewhere (see Directive (EU) 2022/2523, Art. 50; and EU Commission Notice on the Art. 50 election).
These regimes often reuse overlapping data, but they have different audiences and governance:
Public CbCR: public disclosure, reputational considerations, board-level review.
Warning
Public CbCR can expose inconsistencies that were previously “quiet” (e.g., high profit in low-tax jurisdictions). If your Pillar Two safe harbour narrative depends on certain profit/tax patterns, align communications early.
UK: IIR-equivalent and UTPR timing
The UK implemented a multinational top-up tax regime effective for accounting periods beginning on/after 31 Dec 2023, and UTPR effective for periods beginning on/after 31 Dec 2024 (UK guidance and legislation updates). For groups with significant UK presence, UK compliance calendars can drive the internal sequencing for the entire pillar two cbcr program.
US-headed groups: CbCR is mature; Pillar Two still bites abroad
As of late 2025, the US has not enacted the OECD Model Rules as such, but:
US-headed groups often already file CbCR under US rules (threshold $850m; tested by reference to the immediately preceding reporting period, per IRS Form 8975 instructions and related IRS guidance), and
They still face Pillar Two computations in adopting jurisdictions (EU, UK, others).
Practical implication: CbCR may be the only globally consistent dataset available across the group, increasing the value (and scrutiny) of your CbCR build process.
Don’t ignore QDMTT and UTPR interactions
Even though this is a pillar two cbcr hub page, most real implementations are shaped by:
Whether a jurisdiction has a QDMTT (which can collect top-up domestically), and
Whether exposure shifts via UTPR allocations.
For deeper dives, see:
/resources/qdmtt-guide
/resources/utpr-guide
Decision framework: when a pillar two cbcr safe harbour-first approach works (and when it doesn’t)
Decision Criteria
01You have a Qualified CbC Report built on Qualified Financial Statements, with stable jurisdiction mapping and a clear income tax expense bridge (including UTPs (uncertain tax positions) eliminations for Simplified Covered Taxes).
02You can produce timely Profit (Loss) before tax and adjusted tax expense by jurisdiction as part of close (not months later).
03Your low-risk jurisdictions are likely to meet de minimis or Simplified ETR transition rates (15%/16%/17%).
04You can compute SBIE reliably for routine profits testing where needed.
05You can commit to consistent safe harbour application choices, because opting out can trigger the 'once out, always out' constraint for a jurisdiction.
06You have audit trail requirements mapped to both financial statement auditors and tax authority expectations (and you’re prepared for the GIR to still be required even when a jurisdiction is deemed zero).
Practical takeaway
A safe harbour-first approach is not “less work.” It’s different work:
More emphasis on data qualification, governance, and reconciliations early
Less time on full GloBE adjustments in jurisdictions that screen out cleanly
Related topics (hub links + glossary)
For deeper guidance on each Pillar Two and CbCR workstream, continue with:
Core guides (cluster articles)
/resources/pillar-two-guide — Pillar Two fundamentals, mechanisms, and compliance roadmap
/resources/cbcr-preparation-guide — how to prepare CbCR data, controls, and common errors
/resources/form-8975-guide — US Form 8975 filing mechanics and practical considerations
/resources/qdmtt-guide — QDMTT design, qualified status, and operational impacts
/resources/utpr-guide — UTPR exposure, allocation logic, and readiness steps
Supporting hubs
/resources/transfer-pricing-documentation-guide — documentation governance that often overlaps with Pillar Two data and narratives
/resources/benchmarking-study-guide — benchmarking foundations (useful context for broader BEPS/TP workstreams)
Glossary terms
/glossary/pillar-two — definition and key Pillar Two concepts
/glossary/country-by-country-report — CbCR definitions, tables, and reporting logic
They share the €750m scope perimeter, and Pillar Two’s Transitional CbCR Safe Harbour uses CbCR revenue and profit before tax plus financial statement income tax expense (via “Simplified Covered Taxes”) to screen out low-risk jurisdictions (OECD Safe Harbours (2022), Transitional CbCR Safe Harbour rule text).
2) Is CbCR mandatory for Pillar Two?
Not exactly. CbCR is mandated under Action 13 rules (as implemented locally). But for many in-scope groups, CbCR is a practical prerequisite for efficiently applying the Transitional CbCR Safe Harbour and supporting Pillar Two data governance.
Also note: applying the safe harbour in a jurisdiction doesn’t usually remove group-wide GloBE requirements (including the GIR), and skipping the safe harbour for a jurisdiction in an in-scope year can trigger “once out, always out” for that jurisdiction (OECD Safe Harbours (2022) ¶34–35).
3) Why is the Pillar Two threshold €750m?
Because Pillar Two deliberately aligns with Action 13’s “large MNE” perimeter to focus on the biggest groups and reduce administrative burden (Action 13 Final Report (2015) ¶52–53; GloBE Model Rules (2021) Art. 1.1).
4) What CbCR data is used for the Transitional CbCR Safe Harbour?
Primarily:
Total Revenue and Profit (Loss) before Income Tax from the Qualified CbC Report, and
Income tax expense from Qualified Financial Statements, adjusted to Simplified Covered Taxes (OECD Safe Harbours (2022), Transitional CbCR Safe Harbour definitions and “Source of Information” definitions).
5) What are the transition rates for the Simplified ETR test?
The Simplified ETR must be at least:
15% for fiscal years beginning in 2023–2024
16% for fiscal years beginning in 2025
17% for fiscal years beginning in 2026
(OECD Safe Harbours (2022), definition of “Transition Rate”)
6) How long does the Transitional CbCR Safe Harbour last?
For fiscal years beginning on or before 31 Dec 2026, but it does not apply to any fiscal year ending after 30 Jun 2028 (OECD Safe Harbours (2022), definition of “Transition Period”).
Also note the sequencing constraint: if you do not apply the safe harbour for a jurisdiction in an in-scope year, you generally can’t apply it later for that jurisdiction (“once out, always out”), subject to limited exceptions (OECD Safe Harbours (2022) ¶35–36).
7) Can I use CbCR “income tax paid” to compute the Simplified ETR?
Generally no. The Simplified ETR test uses income tax expense from Qualified Financial Statements (with eliminations to arrive at Simplified Covered Taxes), not CbCR cash tax paid/accrued lines (OECD Safe Harbours (2022), Transitional CbCR Safe Harbour definitions and “Covered Taxes” discussion).
8) If a jurisdiction qualifies for the safe harbour, do we still need documentation?
Yes. You still need to evidence:
that the CbCR is Qualified, and
how you derived Simplified Covered Taxes (including treatment of UTPs (uncertain tax positions)) and applied the tests, with a defensible audit trail.
Also, qualifying on a jurisdictional basis does not discharge the group from group-wide requirements (including preparing/filing the GIR and including safe-harbour-related information where applicable) (OECD Safe Harbours (2022) ¶34; see also ¶12).
9) When are Pillar Two information returns (GIR) due?
The OECD notes that the first GIRs/notifications are expected to be due on 30 Jun 2026 for many groups, depending on local adoption, fiscal year-ends, and filing frameworks (OECD GIR requirements page).
10) How do EU Pillar Two and EU Public CbCR interact?
They are separate directives with different purposes—minimum tax computation vs public disclosure—but they share the €750m perimeter and often reuse overlapping jurisdictional profit and tax data.
Two nuances to keep in mind:
EU Public CbCR applies where consolidated revenue exceeds €750m for each of the last two consecutive financial years and begins for FYs starting on/after 22 Jun 2024 (Directive (EU) 2021/2101).
EU Pillar Two timing is generally FYs beginning from 31 Dec 2023 (calendar-year groups: typically FY 2024), but some Member States may elect a delay under Art. 50 in limited circumstances (Directive (EU) 2022/2523).
11) What is a “pillar two cbcr hub” in practice?
It’s a centralized data, controls, and reconciliation layer that supports:
Pillar Two computations and GIR reporting—using consistent entity/jurisdiction mapping and income tax expense traceability.
12) Where should we start if we already file CbCR?
Start by upgrading CbCR from a “filing-only” process to a “decision-grade dataset”:
lock down entity/jurisdiction mapping rules,
build an income tax expense bridge to Simplified Covered Taxes (including UTPs (uncertain tax positions)), and
run safe harbour screening on the last filed CbCR to identify which jurisdictions likely fail and require full GloBE work—then decide early where you will apply the safe harbour to avoid accidental “once out” outcomes.
Borys UlanenkoCEO of ArmsLength AI
