Article 32 Electronic identification means and relevant qualified trust services


This is a draft act

This text has been parsed from the AMLA consultation paper draft as published on 9 February 2026. While we run a suite of validations, the automated parsing can result in errors. Also, before it is finally adopted by the Commission, its wording, numbering and references may change, and entire articles might be removed or added.

    1. Annex I defines the corresponding list of attributes that electronic identification means and qualified trust services are required to feature in accordance with Article 22(6), point (b), of Regulation (EU) 2024/1624, in order to fulfil the requirements of Article 20(1), points (a) and (b), and Article 22(1) of that Regulation, for the purposes of applying standard and enhanced due diligence measures. Where simplified due diligence is to be applied, the electronic identification means and relevant qualified trust services shall have the corresponding attributes laid down in Annex I that allow compliance with Section 5 of this Regulation.

    1. Obliged entities may consider featuring additional attributes to assist the unambiguous identification and verification of the customer or beneficial ownermeans any natural person who ultimately owns or controls a legal entity or an express trust or similar legal arrangement; if justified by the ML/TF risk associated with the customer or beneficial ownermeans any natural person who ultimately owns or controls a legal entity or an express trust or similar legal arrangement;.

    1. Where an electronic identification means or qualified trust service does not possess all attributes that allow the identification and verification of the customer or beneficial ownermeans any natural person who ultimately owns or controls a legal entity or an express trust or similar legal arrangement;, as required in Article 22(1) of Regulation (EU) 2024/1624 or Section 5 of this Regulation, the obliged entity shall take steps to obtain and verify the missing attributes through other means in line with Article 22(6) of Regulation (EU) 2024/1624.

    1. Obliged entities may consider putting in place enhanced measures to complement the mitigation of ML/TF risks, including the use of higher assurance levels or complementing electronic identification means with qualified trust services.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod