RTS on group-wide minimum requirements and additional measures for third-country subsidiaries and branches

COMMISSION DELEGATED REGULATION (EU) .../...

of XXX

supplementing Regulation (EU) 2024/1624 of the European Parliament and of the Council with regard to regulatory technical standards on group-wide requirements, on additional measures and additional supervisory actions related to obliged entities’ branches or subsidiaries in third countries

(Text with EEA relevance)
This is a draft act

This text has been parsed from the AMLA consultation paper draft as published on 16 April 2026. While we run a suite of validations, the automated parsing can result in errors. Also, before it is finally adopted by the Commission, its wording, numbering and references may change, and entire articles might be removed or added.

THE EUROPEAN COMMISSION,

Having regard to the Treaty on the Functioning of the European Union,

Having regard to Regulation (EU) 2024/1624 of the European Parliament and of the Council of 31 May 2024 on the prevention of the use of the financial system for the purposes of money laundering or terrorist financing, and in particular Articles 16(4) and 17(3) thereof,

Whereas:

Open full page
Recital 1

Regulation (EU) 2024/1624 aims for harmonisation of the measures to be put in place to prevent money launderingmeans the conduct set out in Article 3, paragraphs 1 and 5, of Directive (EU) 2018/1673 including aiding and abetting, inciting and attempting to commit that conduct, whether the activities which generated the property to be laundered were carried out on the territory of a Member State or on that of a third country; knowledge, intent or purpose required as an element of that conduct may be inferred from objective factual circumstances;, its predicate offences, terrorist financingmeans the conduct set out in Article 11 of Directive (EU) 2017/541 including aiding and abetting, inciting and attempting to commit that conduct, whether carried out on the territory of a Member State or on that of a third country; knowledge, intent or purpose required as an element of that conduct may be inferred from objective factual circumstances; and the non- implementation and evasion of targeted financial sanctionsmeans both asset freezing and prohibitions to make funds or other assets available, directly or indirectly, for the benefit of designated persons and entities pursuant to Council Decisions adopted on the basis of Article 29 TEU and Council Regulations adopted on the basis of Article 215 TFEU; at Union level, including when such measures are designed and implemented in a groupmeans a group of undertakings which consists of a parent undertaking, its subsidiaries, as well as undertakings linked to each other by a relationship within the meaning of Article 22 of Directive 2013/34/EU; or in a structuremeans any form of organisation, agreement or similar that:includes at least two obliged entities;is not a group with a parent undertaking within the meaning of Article 2(1), point (42) of Regulation (EU) 2024/1624; andhas the objective of establishing a common framework of business, professional or commercial relationships connecting two or more obliged entities. mentioned in Regulation (EU) 2024/1624. Consistent implementation of group-wide anti-money laundering, countering the financing of terrorism and of group-wide requirements to target the non-implementation or evasion of targeted financial sanctionsmeans both asset freezing and prohibitions to make funds or other assets available, directly or indirectly, for the benefit of designated persons and entities pursuant to Council Decisions adopted on the basis of Article 29 TEU and Council Regulations adopted on the basis of Article 215 TFEU; is key to the robust and effective management of risks, especially in a cross-border context.

Recital 2

Minimum requirements for group-wide policies, procedures and controls should be developed, implemented and applied at groupmeans a group of undertakings which consists of a parent undertaking, its subsidiaries, as well as undertakings linked to each other by a relationship within the meaning of Article 22 of Directive 2013/34/EU; level in an adequate and consistent manner, while avoiding any risks of compromising anti-money laundering, countering the financing of terrorism requirements as well as preventing the non-implementation or evasion of targeted financial sanctionsmeans both asset freezing and prohibitions to make funds or other assets available, directly or indirectly, for the benefit of designated persons and entities pursuant to Council Decisions adopted on the basis of Article 29 TEU and Council Regulations adopted on the basis of Article 215 TFEU;. Minimum requirements are also applicable to structuresmeans any form of organisation, agreement or similar that:includes at least two obliged entities;is not a group with a parent undertaking within the meaning of Article 2(1), point (42) of Regulation (EU) 2024/1624; andhas the objective of establishing a common framework of business, professional or commercial relationships connecting two or more obliged entities. other than groupsmeans a group of undertakings which consists of a parent undertaking, its subsidiaries, as well as undertakings linked to each other by a relationship within the meaning of Article 22 of Directive 2013/34/EU; when such structuresmeans any form of organisation, agreement or similar that:includes at least two obliged entities;is not a group with a parent undertaking within the meaning of Article 2(1), point (42) of Regulation (EU) 2024/1624; andhas the objective of establishing a common framework of business, professional or commercial relationships connecting two or more obliged entities. fulfil the conditions set out in this Regulation. Group-wide policies, procedures and controls should be designed to ensure consistency in the implementation of the group-wide requirements mentioned in Regulation (EU) 2024/1624 such as to enhance governance arrangements, the standing and role of the compliance manager and compliance officer at groupmeans a group of undertakings which consists of a parent undertaking, its subsidiaries, as well as undertakings linked to each other by a relationship within the meaning of Article 22 of Directive 2013/34/EU; level, the relations between the parent undertakingmeans:for groups whose head office is located in the Union, an obliged entity that is a parent undertaking as defined in Article 2, point (9), of Directive 2013/34/EU that is not itself a subsidiary of another undertaking in the Union, provided that at least one subsidiary undertaking is an obliged entity;for groups whose head office is located outside of the Union, where at least two subsidiary undertakings are obliged entities established in the Union, an undertaking within that group established in the Union that:is an obliged entity;is an undertaking that is not a subsidiary of another undertaking that is an obliged entity established in the Union;has a sufficient prominence within the group and a sufficient understanding of the operations of the group that are subject to the requirements of this Regulation; andis given the responsibility of implementing group-wide requirements under Chapter II, Section 2 of this Regulation; and the subsidiaries in the Union and in third countriesmeans any jurisdiction, independent state or autonomous territory that is not part of the Union and that has its own AML/CFT legislation or enforcement regime; as well as the business-wide risk assessments at groupmeans a group of undertakings which consists of a parent undertaking, its subsidiaries, as well as undertakings linked to each other by a relationship within the meaning of Article 22 of Directive 2013/34/EU; level.

Recital 3

Group-wide policies, procedures and controls should not result in a derogation for the parent undertakingmeans:for groups whose head office is located in the Union, an obliged entity that is a parent undertaking as defined in Article 2, point (9), of Directive 2013/34/EU that is not itself a subsidiary of another undertaking in the Union, provided that at least one subsidiary undertaking is an obliged entity;for groups whose head office is located outside of the Union, where at least two subsidiary undertakings are obliged entities established in the Union, an undertaking within that group established in the Union that:is an obliged entity;is an undertaking that is not a subsidiary of another undertaking that is an obliged entity established in the Union;has a sufficient prominence within the group and a sufficient understanding of the operations of the group that are subject to the requirements of this Regulation; andis given the responsibility of implementing group-wide requirements under Chapter II, Section 2 of this Regulation; in the Union from carrying out the entity level policies, procedures and controls, including its entity-level risk assessment.

HAS ADOPTED THIS REGULATION:

  1. Section 1General provisions
  2. Section 2Minimum group-wide requirements
  3. Section 3Information sharing
  4. Section 4Additional measures for branches or subsidiaries in third countries of obliged entities and parent undertakings in the union
  5. Section 5Criteria for identifying the parent undertaking in the union in cases of two or more obliged entities whose head office is located outside of the union
  6. Section 6Conditions for the application of group-wide requirements to structures sharing common ownership, management or compliance control
  7. Section 7Final provisions

This Regulation shall be binding in its entirety and directly applicable in all Member States.

Done at Brussels,

For the Commission

The President

[For the Commission

On behalf of the President

[Position]

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod