Source: OJ L, 2024/1620, 19.6.2024

Current language: EN

Annex II List of directly applicable requirements referred to in Article 22(3)


  1. Requirements related to customer due diligence referred to in Article 22(3), points (a) and (b), of this Regulation shall be those in Articles 19, 20, 21, 22, 23, 25, 26, 33, 34, 36, 39, 42, 44, 46 and 47 of Regulation (EU) 2024/1624.

  2. Requirements related to group-wide policies, procedures and controls referred to in Article 22(3), point (a), of this Regulation shall be those in Articles 16 and 17 of Regulation (EU) 2024/1624.

  3. Requirements related to reporting obligations referred to in Article 22(3), points (a) and (b), of this Regulation shall be those in Articles 69, 70 and 71 of Regulation (EU) 2024/1624 and Articles 9, 13 and 18 of Regulation (EU) 2023/1113.

  4. Requirements related to internal policies, procedures and controls referred to in Article 22(3), point (b), of this Regulation shall be those in Articles 9, 10, 11, 18, 48 and 49 of Regulation (EU) 2024/1624 and Article 23 of Regulation (EU) 2023/1113.

  5. Other requirements referred to in Article 22(3), points (c) and (d), of this Regulation shall be those in Articles 73, 77, 78 and 79 of Regulation (EU) 2024/1624 and Articles 7, 8, 10, 11, 12, 14, 16, 17, 19, 21, 24 and 26 of Regulation (EU) 2023/1113.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod