From directive to regulation
Regulation (EU) 2024/1624 establishes requirements that apply directly to obliged entities. Most provisions apply from 10 July 2027. The objective is to reduce differences in application and make AML/CFT controls more consistent across the Union.
Areas to test
A readiness programme should begin with how the framework actually operates.
- business-wide and customer risk assessments;
- identification and verification of customers and beneficial owners;
- enhanced measures and management of high-risk relationships;
- ongoing monitoring, information updates and escalation;
- governance, accountability, training and traceability of decisions.
Why start early
A useful gap analysis is not an isolated regulatory table. It should connect every requirement to a process, owner, data source, control and evidence. This separates documentary changes from those requiring technology, operational capacity or governance decisions.
A common language, proportionate application
More uniform requirements still need proportionate application. The relevant question is whether the control matches the actual customer risk and leaves evidence explaining that choice.
Practical scenario
Select a high-risk customer review already due in your current process. Map the applicable requirement, responsible person, evidence and any unresolved dependency on a future technical standard. Improvements to evidence and ownership can begin now; a draft-specific technology change needs a separate decision and update trigger. This is a proposed readiness exercise, not a new universal obligation.
Sources and references
Informational content. It does not replace an assessment of a specific case.
Regulation (EU) 2024/1624European Commission — EU AML/CFT framework