On 1 October 2026, the Anti-Money Laundering Authority (AMLA) issued the following:

  • Final Report – Draft Regulatory Technical Standards (RTS) on Customer Due Diligence, Anti-Money Laundering Regulation (AMLR) 28(1).
  • Article 28(1) AMLR mandates the AMLA to develop draft RTS specifying, among others, the requirements and information to be collected for standard customer due diligence (CDD), simplified due diligence and enhanced due diligence purposes.
  • The mandate also requires the AMLA to specify risk factors that supervisors must consider when determining the extent to which certain electronic money instruments may be exempted from some CDD measures and which reliable and independent sources of information obliged entities may use to verify the identity of natural or legal persons for the purposes of Article 22(6) and (7) AMLR.
  • The mandate further covers the attributes which electronic identification means, and relevant qualified trust services referred to in Article 22(6), point (b), AMLR must feature to fulfil the requirements of Article 20(1), points (a) and (b), AMLR in the case of standard, simplified and enhanced due diligence.
  • AMLA further enhanced the Final Report by considering the responses provided by respondents collected through the public consultation conducted between 9 February and 8 May 2026.
  • Final Report – Draft RTS on criteria for identifying business relationships, occasional and linked transactions and lower thresholds, AMLR 19(9).
  • Article 19(9) of the AMLR requires AMLA to develop draft RTS specifying: (i) criteria for identifying business relationships, occasional transactions and linked transactions; and (ii) high-risk obliged entities, sectors or transactions to which a lower threshold for CDD measures should apply.
  • AMLA publicly consulted on a version of the draft RTS between 9 February 2026 and 8 May 2026. Feedback obtained was reflected in this draft RTS as appropriate.
  • Final Report – Draft RTS on group-wide minimum requirements and additional measures for subsidiaries and branches in third countries, AMLR 16(4) and 17(3).
  • Article 16(4) AMLR requires the AMLA to develop draft RTS specifying: (i) the minimum requirements of group-wide policies, procedures and controls, including minimum standards for information sharing within the group; (ii) the criteria for identifying the parent undertaking in the cases covered by Article 2(1), point (42)(b) of AMLR; and (iii) the conditions under which the provisions of Article 16 AMLR apply to entities that are part of structures which share common ownership, management or compliance control, including networks or partnerships, as well as the criteria for identifying the parent undertaking in the EU in those cases.
  • Article 17(3) AMLR mandates the AMLA to develop RTS specifying the: (i) type of additional measures to be taken by obliged entities where the law of a third country prevents compliance with the AMLR; (ii) minimum actions that must be implemented in such circumstances; and (iii) additional supervisory actions that may be applied by supervisors where the measures taken are insufficient.
  • AMLA further enhanced the Final Report by considering the responses provided by respondents collected through a public consultation conducted between 16 April and 15 June 2026. 
  • Factsheet on group-wide minimum requirements.
  • The factsheet accompanies the draft RTS on group-wide minimum requirements (see above).
  • It has five parts: (i) scope; (ii) identification of the parent undertaking in the EU in cases where two or more obliged entities in the EU belong to a head office in a third country and they are not in a parent/subsidiary relationship; (iii) policies, procedures and controls; (iv) information sharing; and (v) structures other than groups.
  • The factsheet accompanies the draft RTS on group-wide minimum requirements.
  • It has four parts: (i) scope; (ii) minimum actions (steps groups must take when third-country laws prevent or restrict compliance with the AMLR or group-wide anti-money laundering policies and controls); (iii) additional measures (risk-mitigating measures that may be applied where legal impediments cannot be overcome through customer consent or other means); and supervisory actions.

Next steps

The draft RTS will be submitted to the European Commission for adoption before being published in the Official Journal of the European Union.