AMLR register · Guideline · AMLA

Guidelines on the extent of internal policies, procedures and controls (incl. the compliance function)

EBA guideline in force, AMLA successor pendingStatus reviewed October 6, 2026

Articles: Art. 9(4) AMLR
Legal basis: AMLR art. 9(4)
Expected: June 30, 2027
Applies to: every type of obliged entity

Today's EBA guideline or EBA-drafted standard on this topic is final and applies (Art. 54(5) AMLAR). AMLA will replace it with its own text under the AML package; no consultation paper exists yet. The expected date follows AMLA's programming document or the statutory deadline.

What it covers

The elements obliged entities take into account, given the nature, risks, complexity and size of their business, when deciding the extent of their internal policies, procedures and controls, in particular the staff allocated to the compliance function, and the situations in which the compliance manager and compliance officer roles may be simplified. Statutory deadline 10 July 2026; AMLA schedules the consultation for Q1 2027 and the final guidelines for Q2 2027 and set up a task force in July 2026. Until then the EBA Guidelines on the role and responsibilities of the AML/CFT compliance officer (EBA/GL/2022/05) remain in force.

What it means in practice

Recalibrate AML governance: appointment of a compliance manager at management-body level, mandate of the compliance officer, reporting lines and 3LoD; size the compliance function against the guideline once consulted.

Versions and what changed

Consultation papernot yet available
Final draftnot yet available
Submitted to the Commissionnot yet available
Published in the Official Journalnot yet available

Sources

Framework blocks it lands on

GovernancePolicies & proceduresCompliance functionRisk Management and Controls3 Lines of Defense Model

This instrument on the dashboard, with the other instruments and the framework: Open on the dashboard

Other instruments

Every RTS, Guideline and ITS under the AMLR