Corporate Compliance in Uruguay: DGI, BPS, BCU and AML Obligations
Corporate compliance in Uruguay covers all the legal, tax, social security and regulatory obligations that every company must meet to operate within the legal framework. For companies operating in Uruguay — whether locally or foreign-owned — compliance is not a luxury or an option: it is the condition for keeping the RUT active, working with the banking system, bidding in state tenders, avoiding fines and protecting directors and managers from personal liability.
In this guide we explain the main compliance obligations for Uruguayan companies, how to organise them, which bodies supervise them and how to structure an efficient compliance programme.
What Is Corporate Compliance in Uruguay?
Corporate compliance refers to the policies, procedures and internal controls an organisation implements to ensure that its operations comply with the applicable legal, regulatory and ethical rules. In Uruguay it is built around four main areas:
- Tax compliance (DGI): meeting tax payment and filing obligations with the Tax Office.
- Social security compliance (BPS): meeting social security contribution obligations with the Social Security Bank.
- Regulatory compliance (BCU and sector bodies): complying with the rules of the Central Bank of Uruguay and of the sector bodies that regulate the company’s specific activity.
- Corporate compliance: meeting the company’s formal obligations as a legal entity: corporate books, beneficial ownership declaration, financial statements, etc.
Business Regulation in Uruguay: BCU, DGI and BPS
The three central bodies for corporate compliance in Uruguay are:
DGI (Tax Office):
DGI collects and audits national taxes. A Uruguayan company’s main obligations to DGI include:
- Registering and keeping the RUT active.
- Filing VAT returns (monthly, or annually for smaller taxpayers with monthly advance payments).
- Filing the annual IRAE return.
- Paying IRAE advance payments on time during the financial year.
- Withholding and paying IRPF on employees’ salaries.
- Withholding and paying IRNR when paying income to non-residents.
- Submitting financial statements, with an audit or review report depending on the company’s size.
- Electronic invoicing: issuing valid CFEs for every transaction.
- Complying with transfer pricing rules for transactions with related parties abroad.
BPS (Social Security Bank):
BPS administers Uruguayan social security. Obligations to BPS include:
- Registering as an employer from the first employment contract.
- Monthly payroll declarations and calculation of employer and employee contributions.
- Paying social security contributions on time.
- Handling unemployment insurance filings with BPS when applicable.
- Keeping workers’ employment history up to date.
BCU (Central Bank of Uruguay):
The BCU regulates the financial system and keeps the beneficial ownership registry. Obligations to the BCU include:
- Beneficial ownership declaration: identifying the individuals who control the company, updated whenever there are changes.
- For regulated companies (banks, insurers, securities brokers, etc.): submitting financial statements and activity reports and complying with prudential rules.
- Complying with the AML/CFT framework for companies whose activities are subject to BCU anti-money laundering supervision.
Annual Obligations of a Company in Uruguay
The annual obligations of a company in Uruguay — whether an SA, SRL or SAS — revolve around a calendar of deadlines that every company must manage in advance:
- Year-end close: most companies close their financial year on 31 December, although the articles may set other dates.
- Preparing financial statements: with a certified public accountant, within the deadlines set by the rules according to the company’s type and size.
- Audit of financial statements: mandatory for companies above certain revenue thresholds and for BCU-regulated entities; voluntary for others that want to prove their finances to banks or investors.
- Approval of financial statements: shareholders or partners must formally approve the year’s financial statements at the ordinary meeting, recorded in the minutes book.
- Filing the IRAE return with DGI within the deadline that depends on the year-end month.
- Updating the beneficial ownership declaration with the BCU if there were changes during the year.
- Registering (rubricating) new corporate or accounting books with the Commercial Registry (DGR) when the previous ones are full, where applicable.
- Renewing insurance the company is required to hold (workplace accidents with BSE, liability, fire, etc.).
Compliance for SAs and SRLs in Uruguay: Specific Requirements
The compliance requirements for SAs and SRLs in Uruguay are structurally similar but have relevant differences:
SA (corporation):
- Keeping the minutes book of shareholders’ meetings, the board minutes book, the shareholder register and the registered shares book.
- A mandatory annual ordinary meeting to approve the financial statements and renew officers (where applicable).
- Filing financial statements with the AIN when the company exceeds the established thresholds.
- An up-to-date beneficial ownership declaration with the BCU.
- Compliance with the sector collective agreement applicable to its workers.
- Mandatory external audit for certain categories of SA (BCU-regulated, above revenue thresholds, open SAs).
SRL (limited liability company):
- Keeping the minutes book and the partner register.
- Partners’ meetings to approve the financial statements (without the formality of an SA meeting, but still recorded in the minutes book).
- Beneficial ownership declaration with the BCU.
- Smaller SRLs may have simpler financial reporting requirements, but must still keep formal accounts.
Compliance in Uruguay: Anti-Money Laundering
Anti-money laundering (AML) and counter-terrorist financing (CFT) is one of the pillars of corporate compliance in Uruguay. It is governed by Law No. 19,574 and supervised by SENACLAFT (the National Secretariat for Combating Money Laundering and Terrorist Financing) and, for financial entities, by the BCU.
The companies subject to the strictest AML/CFT obligations are those the law treats as “obliged entities”, including:
- Financial institutions (banks, securities brokers, insurers, etc.).
- Notaries in certain transactions.
- Accountants and tax advisers in certain transactions.
- Real estate companies in property sales and purchases.
- Casinos and gaming companies.
- Free zone operators.
- Businesses that regularly carry out international money transfers.
For obliged entities, AML/CFT compliance requires:
- Implementing a prevention system with a policies and procedures manual approved by management.
- Appointing a compliance officer accountable to the authorities.
- Applying customer due diligence (KYC): identifying and verifying clients, understanding their activity and the source of funds.
- Monitoring transactions and detecting unusual or suspicious transactions.
- Reporting suspicious transactions to the BCU’s Financial Analysis Unit, as applicable.
- Keeping records for the minimum period set by law.
- Training staff regularly on AML/CFT.
Compliance in Uruguay for Foreign-Owned Companies or Non-Resident Owners
The compliance obligations for foreign-owned companies or companies with non-resident partners in Uruguay are essentially the same as for locally owned companies, with some additional aspects:
- Beneficial ownership declaration: for companies with non-resident shareholders or foreign holding structures, the BCU declaration requires documenting the whole ownership chain up to the individual beneficial owners, with apostilled or legalised documents for the intermediate entities.
- Transfer pricing: Uruguayan companies that transact with related parties abroad must comply with DGI transfer pricing rules, documenting that those transactions are at market value.
- Automatic exchange of information: Uruguay participates in the OECD’s Common Reporting Standard (CRS) and has a FATCA agreement with the US. Uruguayan banks automatically report account information to foreign tax authorities.
- Local contact: the law does not require resident shareholders or directors, but in practice a company with no one in Uruguay needs a local professional or attorney-in-fact to receive notifications and handle procedures with public bodies and banks.
How to Structure a Corporate Compliance Programme in Uruguay
For companies that want to go beyond reactive compliance and build a solid corporate compliance programme in Uruguay, the essential elements are:
- Risk assessment: identify the areas of greatest risk of non-compliance for the specific company, according to its activity, size, structure and relationships with third parties.
- Documented policies and procedures: a compliance manual setting out internal processes for each regulatory obligation, with assigned responsibilities.
- Compliance officer: appoint an internal compliance officer or hire an external adviser to oversee compliance and act as the contact point with regulators.
- Calendar of obligations: a system for tracking tax, social security, corporate and regulatory deadlines, with alerts far enough in advance to manage each one.
- Ongoing training: directors, managers and key staff must keep up to date with regulatory changes relevant to the company.
- Periodic internal audit: review of compliance with policies and procedures as often as the company’s size and risk justify.
- Incident management protocols: clear procedures for when a breach is detected, including notifying regulators when the rules require it.
Consequences of Non-Compliance in Uruguay
The consequences of failing to meet regulatory obligations in Uruguay can be significant:
- DGI fines: surcharges on late taxes, fines for late or incorrect returns and penalties for formal breaches.
- BPS fines: surcharges on unpaid contributions, fines and interest that build up quickly.
- BCU sanctions: fines and, for regulated companies, possible suspension of authorisations; the beneficial ownership rules also carry their own penalties.
- Banking restrictions: Uruguayan banks may restrict or close the accounts of companies that do not meet their compliance obligations, especially the beneficial ownership declaration.
- Personal liability of directors: in Uruguay, directors and managers can be held jointly liable for the company’s tax and social security debts in certain circumstances.
- Exclusion from public tenders: RUPE (the State Suppliers Registry) requires being up to date with DGI and BPS to contract with the State.
- Reputational damage: non-compliance can affect the company’s reputation with banks, business partners, investors and clients.
Corporate Compliance Advice in Uruguay
Specialised corporate compliance advice in Uruguay is especially valuable for companies that:
- Are newly incorporated and need to organise their obligations from day one.
- Are foreign-owned or have non-resident partners, with additional transparency and transfer pricing obligations.
- Operate in regulated sectors (financial, health, construction, transport) with sector-specific obligations on top of the general regime.
- Have grown quickly and whose compliance structure has not kept pace with the business.
- Have accumulated breaches and need to regularise their situation with DGI, BPS or other bodies.
Conclusion
Corporate compliance in Uruguay is much more than paying taxes on time. It is a comprehensive system covering tax obligations with DGI, social security with BPS, transparency with the BCU, corporate obligations and — for certain companies — anti-money laundering obligations under SENACLAFT supervision. Managing it proactively and in an organised way protects the company from penalties, preserves access to the banking system and protects its directors from personal liability.
In a regulatory environment that has become progressively more demanding on corporate transparency and tax compliance, specialised advice is not a dispensable cost: it is an investment that protects a company’s most valuable asset — its ability to operate normally.
You may also find these guides useful: