Article 7 Assessment and classification of the inherent and residual risk at the entity level


This is a draft act

This text has been parsed from the AMLA final report draft as published on 21 July 2026. While we run a suite of validations, the automated parsing can result in errors. Also, before it is finally adopted by the Commission, its wording, numbering and references may change, and entire articles might be removed or added.

Earlier drafts: AMLA consultation paper draft (16 December 2025)

    1. The Authority shall perform the periodic assessment referred to in Article 12(1) of Regulation (EU) 2024/1620 based on the methodology set out in Delegated Regulation (EU) XXXX/XXX [RTS under art. 12(7) AMLAR].

    1. By 31 July of year X, the Authority shall inform financial supervisors of the outcome of the assessment of the inherent risk and the quality of AML/CFT controls of eligible obliged entities.

    1. By 30 September of year X, financial supervisors may propose adjustments to the assessment of the quality of AML/CFT controls in accordance with Article 3(4) of Delegated Regulation (EU) XXXX/XXX [RTS under art. 12(7) AMLAR]. The Authority shall take due consideration of those proposals. Refusal by the Authority to adopt a proposed adjustment shall be duly justified, recorded and communicated to the relevant financial supervisors.

    1. The proposal for adjustment to the assessment of the quality of AML/CFT controls referred to in paragraph 3 shall be accompanied by the necessary justification and the underlying documentation.

    1. The Authority shall share the final outcome of the periodic assessments of all eligible obliged entities with the relevant financial supervisors without undue delay.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod