Guidelines on outsourcing of AML/CFT tasks
- Articles
- Art. 18(8) AMLR
- Legal basis
- AMLR art. 18(8)
- Expected
- July 10, 2027
- Applies to
- every type of obliged entity
A mandate in the AML package that AMLA has scheduled in its Single Programming Document 2026-2028 or announced in a press release. No consultation paper exists yet and no EBA text covers the topic.
What it covers
Which AML/CFT tasks may be outsourced and which may not (e.g. the business-wide risk assessment, the compliance functions and the decision to report), and the requirements for contracts, oversight and exit. Statutory deadline 10 July 2027; one of the 14 mandates AMLA plans to deliver in 2027. No consultation paper yet, and no EBA AML guideline exists on this topic.
What it means in practice
Inventory of outsourced AML processes (KYC utility, screening providers) and a check against the "non-outsourceable" list in Art. 18.
Versions and what changed
- Consultation papernot yet available
- Final draftnot yet available
- Submitted to the Commissionnot yet available
- Published in the Official Journalnot yet available
Sources
- AMLA - Chair's opening statement to the European Parliament: 40 mandates, 6 submitted, 11 more in 2026 (15 Jul 2026)
- AMLR - Regulation (EU) 2024/1624 (EUR-Lex)
- AMLA - Authority for Anti-Money Laundering
Framework blocks it lands on
This instrument on the dashboard, with the other instruments and the framework: Open on the dashboard