This article examines how investors can structure due diligence on an Iraqi bank so that findings on ownership, related-party exposure and compliance history are connected rather than reviewed in isolation. In many banks, these three areas are closely linked. Shareholders may also be significant borrowers. Loans to companies connected with shareholders may have been granted on favourable terms. Regulatory findings may concern the very exposures that diligence teams are reviewing separately.
A diligence process that reviews ownership in the corporate workstream, lending in the credit workstream and compliance in the regulatory workstream may miss the pattern that links them. That pattern is often what determines the real risk: a loan book whose quality depends on the continued goodwill of shareholders, a capital position overstated by under-provisioned connected loans or a regulatory relationship strained by repeated findings on the same issues.
The Banking Law No. 94 of 2004 regulates ownership, large exposures, lending to related parties and the obligations of bank directors and managers. The Central Bank of Iraq Law No. 56 of 2004 provides the Central Bank’s supervisory powers. The Anti-Money Laundering and Counter-Terrorism Financing Law No. 39 of 2015 governs customer due diligence and reporting. The Companies Law No. 21 of 1997, as amended, governs the bank’s corporate structure. Listed banks are also subject to the Interim Law on Securities Markets (Coalition Provisional Authority Order No. 74 of 2004) and Iraq Securities Commission rules.
Mapping ownership beyond the register
The shareholder register is the starting point, not the end. The diligence team should identify:
- Direct and indirect shareholders. Including corporate shareholders and their ultimate beneficial owners.
- Groups of connected shareholders. Family members, business partners or companies under common control who may act together.
- Shareholder agreements and arrangements. Voting agreements, nominee arrangements or understandings that affect control.
- Pledges over shares. Shares pledged to lenders, which may change hands on enforcement.
This map provides the basis for identifying related parties in the loan book and for assessing whether past ownership changes received required approvals. Corporate advice in Iraq can help verify ownership records and trace beneficial ownership.
Identifying related-party exposure
With the ownership map in hand, the credit team can identify exposures to shareholders, directors, senior managers and companies connected with them. The analysis should consider:
- Volume and concentration. The total exposure to related parties as a proportion of capital and of the loan book.
- Terms. Whether interest rates, security, maturity and covenants are comparable to those for unrelated borrowers.
- Approval process. Whether related-party loans were approved in accordance with the Banking Law, Central Bank instructions and the bank’s own policies, including abstention by interested directors.
- Performance. Whether related-party loans are performing, restructured or classified as non-performing, and whether provisions are adequate.
Related-party exposure is a frequent focus of regulatory supervision. Loans that exceed regulatory limits or were not properly approved may need to be reduced, provisioned or reported, affecting capital.
Reviewing compliance history
The compliance review should cover Central Bank inspection reports, correspondence, findings and the bank’s responses, sanctions and penalties imposed, and the status of remediation. It should also review the bank’s anti-money laundering framework, correspondent banking relationships and any restrictions imposed by the Central Bank or by international correspondents.
The review should look for recurring themes. Repeated findings on related-party lending, credit classification or customer due diligence suggest weaknesses in governance rather than isolated errors. Remediation that has been promised but not completed may result in further regulatory action after the acquisition. Access to regulatory materials may require the regulator’s consent, and the diligence plan should allow for this.
Connecting the findings
The value of diligence lies in connecting these workstreams. Examples include:
- Ownership and credit. A shareholder whose stake is pledged to the bank itself, or to a lender that also borrows from the bank, may create circular exposures.
- Credit and compliance. Related-party loans that the Central Bank has criticised may need reclassification, affecting capital and the purchase price.
- Ownership and compliance. Past changes in shareholding that were not approved may expose the bank to sanctions or restrictions on the voting rights of those shareholders.
A joint review meeting across workstreams, with an integrated risk register, helps ensure that connected issues are identified and assessed together.
Assessing the effect on capital and value
Findings should be translated into their effect on the bank’s financial position. Additional provisions for under-provisioned loans reduce capital. Exposures exceeding limits may need to be reduced, potentially at a loss. Regulatory penalties may be imposed. Remediation may require investment in systems and staff. The diligence report should estimate these effects and indicate whether additional capital may be needed after acquisition. Tax advisory services in Iraq can assess the tax treatment of provisions and write-offs.
Translating findings into transaction protection
Findings should lead to specific protection in the transaction documents. Price adjustments may reflect identified provisioning shortfalls. Specific indemnities may cover penalties for pre-completion breaches. Conditions precedent may require the reduction of certain related-party exposures or the resolution of regulatory findings before completion. Warranties should address ownership, related-party lending and compliance specifically. Where the sellers are themselves related-party borrowers, the buyer should consider how indemnities will be enforced against them.
Considering the regulator’s perspective
The Central Bank will assess the buyer’s plan for addressing issues identified in diligence when it considers approval. A buyer that can demonstrate understanding of the bank’s weaknesses and a credible plan to remedy them is likely to be viewed more favourably. The diligence report can form the basis of that plan. Commercial and regulatory advice in Iraq can help translate findings into a remediation programme suitable for presentation to the regulator.
Planning access to information and regulatory confidentiality
Banking diligence raises particular confidentiality issues. Customer information is subject to banking secrecy, and regulatory correspondence may be confidential. The seller cannot simply open its files to a prospective buyer. The diligence plan should therefore address how information will be shared:
- Anonymised or aggregated data. Loan portfolio information can be provided with customer identities removed or aggregated, except where identity is necessary, such as for related-party analysis.
- Clean team arrangements. Sensitive information may be reviewed only by a limited team of advisers who report conclusions to the buyer without passing on underlying data.
- Regulatory consent. Inspection reports and correspondence may require the Central Bank’s consent before disclosure.
- Confirmatory diligence. Some information may be reviewed only after signing, with conditions allowing the buyer to withdraw or adjust the price if findings differ materially.
A well-planned information protocol allows the buyer to obtain the information it needs while protecting the seller and the bank from breaches of confidentiality obligations. It also gives the regulator comfort that the transaction process respects banking secrecy.
Illustrative example. An investor reviewing an Iraqi bank finds that a group of shareholders holding a combined twenty-five per cent stake are connected to companies that account for a large share of the bank’s corporate loans. Several of these loans have been restructured twice, and a recent Central Bank inspection report criticised the bank’s related-party approval process. Connecting these findings, the investor concludes that provisions are likely understated and that the regulator will expect exposure to be reduced. It negotiates a lower price, a condition requiring repayment of part of the exposure before completion and an indemnity from the connected shareholders supported by security.
Conclusion & how Etihad Law Firm can help
Effective banking due diligence in Iraq connects ownership, related-party exposure and compliance history, because risks in these areas are frequently linked. An integrated review gives investors a clearer picture of the bank’s true position and the basis for appropriate transaction protection and a credible regulatory plan.
Etihad Law Firm conducts legal due diligence on Iraqi banks for investors and acquirers, working alongside financial and compliance advisers. We help clients identify connected risks and reflect them in transaction terms and regulatory engagement.