CbCR Reporting 2026: Profit, People and Assets Must Tell One Story

A multinational group may have a technically strong transfer pricing policy, polished intercompany agreements and a local file of hundreds of pages. But a tax authority may see a much simpler picture before it reads any of them.

One country reports a large share of the group’s profit. Another employs most of the people. A third owns the plants and warehouses. The holding or IP company has a small team but earns the highest margin. Related-party revenue dominates the group’s activity in an investment hub, while operating companies in larger markets earn modest returns.

None of this automatically means the transfer pricing is wrong. It does, however, raise an obvious question:

Why is the profit there?

The OECD’s Corporate Tax Statistics 2026, released on 21 July 2026, shows how powerful Country-by-Country Reporting (CbCR) has become as a tax-risk tool. The latest anonymised data set covers FY 2023 figures for more than 9,400 multinational groups based in 60 jurisdictions.

The report still finds gaps between where group profits are booked and where staff and tangible assets sit, above all in investment hubs. These are group figures, not findings on any one company. Yet they show the lens a tax administration can apply to a group’s own confidential CbC report before it decides where to ask questions.

The point is not that profit must follow headcount mechanically. It is that profit, people, assets, risks and decisions must form one coherent business story.

What Country-by-Country Reporting Actually Shows

CbCR began under Action 13 of the OECD/G20 Base Erosion and Profit Shifting project. It covers large groups, as a rule those with group revenue of at least EUR 750 million, or the same in local currency under the rules that apply.

The parent, or another company allowed to file, prepares a yearly report with set data for each tax jurisdiction where the group operates.

That covers revenue from outside and inside the group, profit or loss before tax, tax paid and tax accrued, stated capital, retained earnings, staff numbers and tangible assets other than cash. The report also names the constituent entities at work in each country and their main lines of business.

It is not meant to replace the master file, the local file or a full transfer pricing study.

The master file sets out the global business and the transfer pricing framework. The local file looks at the key deals of the local taxpayer. The CbC report gives the tax authority a high-level dashboard.

And a dashboard is useful because unusual patterns become visible quickly.

A country with high profit but very few staff may draw attention. So may steady losses in a large market, large related-party revenue in a company with little substance, or a large return booked by a company whose only work is holding shares.

CbCR does not say whether these results meet the arm’s length test. It tells the tax authority where to start.

What the OECD’s 2026 Data Tells Us

The new report holds several findings that matter for group tax governance.

Large groups made up 44.5% of all company tax revenue on average in 2023 across the 60 jurisdictions that filed the data. That was up from a 42.8% share in 2017.

That figure helps explain the focus. Large groups are not a small or side part of the company tax base. In many countries they are the base.

The OECD also found a gap that persists between where profit sits and where real work happens.

In investment hubs, groups booked about 25% of foreign profit, against around 6% of staff and 15% of tangible assets. High- and middle-income countries, by contrast, held larger shares of staff and tangible assets than of booked profit.

Revenue per employee also stayed far higher in investment hubs. The median was about USD 1.811 million per employee, against USD 477,000 in high-income countries, USD 211,000 in middle-income ones and USD 153,000 in low-income ones.

Related-party revenue was more than 30% of all revenue in investment hubs. The median shares were about 20% in high-income countries, 14% in middle-income ones and 7% in low-income ones.

The main line of business booked in investment hubs was holding shares or other equity. That is a sharp contrast with the greater weight of sales, plants and services in the other country groups.

These figures do not prove that every hub structure shifts profit. They do show why a company with large profit, little real work and large intragroup deals will draw a close look.

A Mismatch Is a Risk Indicator, Not a Tax Adjustment

This distinction matters.

CbCR was built for high-level transfer pricing and BEPS risk review. A tax authority should not use the report on its own to change a transfer price.

Staff numbers and tangible assets are key signs of work, but they are not the only sources of profit. A company with a lot of plant may earn well with few staff. A strong intangible may bring in large returns with few fixed assets. And a finance company may run a large loan book with a small, skilled team.

There are, then, sound business reasons for such gaps.

The OECD itself lists a few limits. The figures may be skewed by how companies file, by gaps in the country split, by inflation and by market shocks. Profit may also be distorted in some countries by intragroup dividends.

The data must, then, be read with care.

But “the data has limits” is no defence where a group cannot explain its own numbers.

A tax authority that reads one CbC report will not ask whether each employee should earn the same profit. It will ask why the company that takes the return holds the key roles, controls the risks and has the skill to earn it.

That question leads straight back to the arm’s-length principle.

Legal Ownership Alone Cannot Carry the Profit Story

Take a group that holds its global intellectual property through a company in a low-tax or hub country.

The IP company receives large royalties from operating companies around the world. Its CbCR profile shows large profit, few staff and few tangible assets.

That may hold up, but only if the wider facts back it.

Who picks the technology to be built? Who signs off the research budget? And who weighs and runs the risk of the build? Where do decisions on legal protection and any infringement strategy sit? Who decides on upgrades, upkeep and market use? Does the IP owner have the right people to run these things, or are the key decisions made elsewhere?

Under the OECD framework, the return from an intangible turns on the work that develops, improves, keeps, protects and exploits it, often called the DEMPE functions. Legal title counts, but it does not by itself hand a company all leftover profit.

A licence that says the hub “owns all IP risk” will help little if the people who run that risk sit in India, the United States, Germany or another market where the group sells.

CbCR makes the gap plain. The local file and the functional analysis must then explain it.

Finance and Holding Companies Need More Than a Registered Address

The same point holds for treasury and holding set-ups.

A hub may house the group’s finance company, its regional holding company or a company set up to buy others. Such companies can do real work. They may raise funds outside, run cash, weigh credit risk, plan the group’s investments and keep a shareholder check on them.

But the return must fit what the company really does.

Say a finance company earns a wide interest spread on loans to group companies. It has two employees, while the funding decisions, the checks on borrowers, covenant monitoring and refinancing strategy sit with the parent’s treasury team elsewhere.

The finance company may own the loans in law, but the transfer pricing work must fix who controls the key money risks and puts up the funds.

The same holds for holding companies. Taking dividends or gains does not by itself point to aggressive tax planning. But to charge a fee for management, earn a strategic return or claim entrepreneurial status, a company must show real decisions and real skill.

A list of board dates is not, on its own, substance. The board must grasp, weigh and decide the matters put to it.

Principals and Regional Hubs Must Match the Operating Reality

Many groups use a principal structure.

A central company owns stock or intangibles, sets the sales plan, takes the market risk and hires limited-risk distributors or contract manufacturers in other countries. The principal takes the leftover return, while the units in each market take a set routine margin.

That can sit well within the arm’s-length principle.

The problem starts when the deals the principal has signed do not fit what it does.

If local teams settle the key terms with customers, set prices, run stock risk, steer the sales plan or fix big supply-chain problems, their work may be worth more than a routine label suggests.

Picture a regional principal with 20 employees that books a large profit, while its Indian distributor has 500 and runs sales, marketing, customer credit and after-sales support. The headcount gap alone does not settle the case. But it invites a close look at where the business decisions and risks really sit.

The CbC report supplies the aerial view. The transfer pricing study must explain the business at ground level.

Routine Captives Are Not Outside the CbCR Discussion

Indian captive service providers, R&D centres and contract manufacturers may think CbCR is a matter for low-tax holding or IP companies.

That is too narrow.

A captive company billed as a limited-risk service provider would, as a rule, be due a steady routine return, in line with its real work and the market. If the CbCR keeps showing losses or very thin profit at that company while the parent abroad books large returns, the pattern may draw questions.

There may be sound reasons: one-off staff costs, spare capacity, a big project that failed, currency swings or a sudden market shock.

The point is whether those events were shared out as the intercompany agreement and arm’s-length conduct require.

Would a free-standing limited-risk provider take the whole loss? Did the parent abroad control the decisions that caused the cost? Was a year-end true-up due? Were one-off costs kept apart from the routine cost base?

A year-end transfer pricing report cannot mend a model that was never put into the books.

Why the Master File, Local File and CbCR Must Reconcile

The big risk is often not a bold policy. It is a clash between sources.

The CbCR may name one company as the one doing R&D. The master file may name another as the one in charge of product development. The local file may call the Indian company a plain software service provider, while staff records show that its top people sign off the product design and the global road map.

The numbers can clash too.

CbCR revenue may not tie back to group accounts. The local-file margin may come from management accounts that do not bridge to the statutory books. Staff counts may be filed in one way by HR and another by tax. Tangible assets may be classed in ways that do not match.

Each gap may have a fair reason. Put together, they can look like weak control.

A group should, then, run a CbCR risk review before it files, not just fill in a form. The review should test whether the master file, local files, intercompany agreements, accounts, tax returns and CbCR give one joined-up view of the business.

A joined-up view does not mean the same words twice. It means the papers do not clash with the real business.

What Tax Authorities Can See Before an Audit Begins

CbCR changes the order of a transfer pricing review.

In the past, a tax authority might start with the return, ask for the transfer pricing report and then build questions from the papers.

Today it can use CbCR to spot risks before it asks for the local file.

A tax authority can compare profit per employee across the group. It can pick out countries with large related-party revenue. Tax due can be checked against booked profit. The report also shows where companies are classed as holding companies, finance companies, R&D centres or service providers.

That makes the first reply to an audit matter more and more. The company may need to explain a global pattern, not just defend one deal.

A Practical CbCR Readiness Review

Groups should start with a simple map of each country’s revenue, profit, tax, staff, assets and main lines of work.

The aim is not to force each ratio to line up. It is to find where a fair tax authority would ask for an account.

Each large gap should then tie to the group’s functional analysis. A high-profit IP company should link to DEMPE functions and risk control. A finance hub should show treasury skill and real decisions. A thin-margin distributor should have a fact-based limited-risk profile. A captive service provider’s profit should tie to the agreed cost base and true-up.

Groups should also test the data itself. Staff counts, company labels, permanent establishments, stateless income, intragroup dividends and related-party revenue all need care.

Last, write the reasons before you file. “We will work it out if the tax authority asks” is no longer a sound policy for the file.

Conclusion: CbCR Does Not Require Perfect Symmetry, but It Requires Credibility

The OECD’s 2026 figures do not prove that investment hubs are bad by nature, or that every concentration of profit is BEPS.

They do show that tax authorities now hold a strong body of data they can use to weigh group structures. The data set is wider, more detailed and better able to show where profit looks cut off from staff, assets and the normal run of business.

For companies, the right reply is not to push profit mechanically towards the biggest headcount or asset base. That would be as crude as ignoring substance.

The right reply is to make sure profit follows value created, under the arm’s-length principle. The people who make the key decisions, the assets that let the business run, the intangibles that earn, the funds that take the risk and the companies that control that risk must all fit one joined-up model.

A CbC report is not a verdict.

But when profit, people and assets tell three different stories, it is often the paper that tells the tax authority where to start reading.