Article 12 Understanding the ownership and control structure of the customer in the case of complex corporate structures


This is a draft act

This text has been parsed from the AMLA consultation paper draft as published on 9 February 2026. While we run a suite of validations, the automated parsing can result in errors. Also, before it is finally adopted by the Commission, its wording, numbering and references may change, and entire articles might be removed or added.

    1. To understand the ownership and control structure of the customer in accordance with Article 20(1), point (b), of Regulation (EU) 2024/1624, obliged entities shall treat an ownership and control structure as a complex corporate structure where there are three or more layers between the customer and the beneficial ownermeans any natural person who ultimately owns or controls a legal entity or an express trust or similar legal arrangement; and, in addition, more than one of the following conditions is met:

      1. there is a legal arrangementmeans an express trust or an arrangement which has a similar structure or function to an express trust, including fiducie and certain types of Treuhand and fideicomiso; or a similar legal entity such as a foundation in any of the layers;

      2. the customer and any legal entities present at any of these layers are registered in jurisdictions outside the EU;

      3. there are nominee shareholders or nominee directors involved in the structure;

      4. the structure obfuscates or diminishes transparency of ownership with no legitimate economic rationale or justification.

    1. In the case of complex corporate structures as referred to in paragraph 1, obliged entities shall, where necessary to complement the measures undertaken pursuant to Article 11, obtain additional information, such as an organigram.

    1. Obliged entities shall take risk-sensitive measures to satisfy themselves that the information obtained is accurate.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod