Article 17 Identification of politically exposed persons


This is a draft act

This text has been parsed from the AMLA final report draft as published on 30 September 2026. While we run a suite of validations, the automated parsing can result in errors. Also, before it is finally adopted by the Commission, its wording, numbering and references may change, and entire articles might be removed or added.

Earlier drafts: AMLA consultation paper draft (9 February 2026)

    1. To identify a PEP, a family member, or person known to be a close associate of a PEP, pursuant to Article 20(1), point (g), of Regulation (EU) 2024/1624, obliged entities shall determine:

      1. with the exception of the situations referred to in Article 44 of Regulation (EU) 2024/1624, before establishing a business relationship or carrying out an occasional transaction, if the customer, the beneficial owner of the customer and, where relevant, the person on whose behalf or for the benefit of whom a transaction or activity is being carried out, is a PEP, a family member, or person known to be a close associate; and

      2. whether existing customers, the beneficial owner of the customer and, where relevant, the person on whose behalf or for the benefit of whom a transaction or activity is being carried out are or have become PEPs, family members or persons known to be close associates of a PEP.

    1. The determination specified in paragraph 1, point (b), shall take place:

      1. with a frequency established on the basis of a risk-sensitive approach;

      2. without delay in case of new information or changes in the information collected for the purposes of performing customer due diligence measures that may have an impact on the identification as a PEP, a family member or person known to be a close associate;

      3. without delay in case of updates to the list of prominent public functions published pursuant to Article 43(5) of Regulation (EU) 2024/1624.

    1. To comply with paragraphs 1 and 2, obliged entities shall put in place tools and measures that may consist of automated screening tools, manual checks or a combination thereof. These tools and measures shall be effective and proportionate to the nature of the obliged entity's business, including its risks and complexity, and the size of the obliged entity.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod