The first tranche of RTS is with the Commission: what happens next
AMLA submitted its first technical standards under the AMLR to the European Commission by the 10 July 2026 deadline. How adoption, scrutiny and publication work, and what obliged entities can already do.
Dit artikel is nog niet in deze taal beschikbaar; het Engelse origineel wordt getoond. De vertaling volgt automatisch.
The AMLR gave AMLA until 10 July 2026 to deliver the first tranche of Regulatory Technical Standards to the European Commission. The four RTS that the EBA consulted on in spring 2025, on customer due diligence, on the risk-assessment methodology for supervisors, on the selection of obliged entities for direct supervision and on pecuniary sanctions, are now submitted. The AMLR Monitor dashboard shows them as "consultation closed, being finalised" until the Commission adopts them.
From draft to delegated regulation
Submission is not adoption. Under the AMLA Regulation the Commission has three months to decide whether to adopt a draft RTS as a delegated regulation, and may extend that period by a month. It can adopt the draft as it is, adopt it with amendments after informing AMLA, or send it back with reasons. In practice the Commission rarely rewrites a technical standard from scratch, but it does check consistency with the Level-1 text and with other EU law, which is where changes tend to appear.
Once adopted, the delegated regulation goes to the European Parliament and the Council, which have a scrutiny period in which they may object. Only after that period ends without objection is the act published in the Official Journal and given a date of application. For the CDD standards that date is expected to line up with 10 July 2027.
What can still change
The text that obliged entities read in the final drafts is the text AMLA stands behind, and it already reflects the consultation responses. Changes at Commission level typically concern legal drafting, cross-references and the boundaries between what an RTS may specify and what the regulation itself decides. The substance of the CDD data set, the sources for verification and the triggers for simplified and enhanced measures should not move much.
What to do while you wait
- Work from the final drafts. Treat the submitted texts as the design basis for onboarding data models, verification sources and periodic-review frequencies. Note where you rely on a provision that could still be redrafted.
- Map the dependencies. The CDD RTS drives the customer data model; the risk-assessment RTS shapes how supervisors will judge you; the selection RTS decides whether AMLA becomes your supervisor in 2028. Assign an owner to each.
- Prepare a change log. When the delegated regulations are published, compare them with the final drafts and record the differences. That log becomes evidence for your supervisor of a controlled implementation.
What to expect this autumn
Adoption decisions on the first tranche and the next consultations, including the ITS on the suspicious transaction report template and the Guidelines on the business-wide risk assessment. Both are tracked on the dashboard with their consultation windows.