AMLA Closes Customer Due Diligence Rulebook Consultation
AMLA's consultation on the harmonised customer due diligence standards for the EU's single AML rulebook has closed. Final drafts go to the Commission by July, with the AMLR applying from July 2027.
What Changed
On May 8, 2026, the Authority for Anti-Money Laundering and Countering the Financing of Terrorism (AMLA) closed its public consultation on three draft Regulatory Technical Standards (RTS), the most consequential of which specifies customer due diligence under Article 28(1) of the Anti-Money Laundering Regulation (AMLR). The consultation, launched February 9, set out the exact information obliged entities must collect for standard, simplified and enhanced due diligence, including attributes for electronic identification and risk factors that trigger enhanced measures. AMLA will now finalise the standards for submission to the European Commission by July 10, 2026, ahead of the AMLR becoming directly applicable across all 27 member states from July 2027.
Who It Affects
Banks, payment and e-money institutions, crypto-asset service providers, investment firms, and a widening set of non-financial obliged entities including real estate agents, high-value dealers and certain professional service providers. Because the AMLR replaces divergent national transpositions with a single directly-applicable rulebook, the CDD standard set here becomes the uniform floor every EU obliged entity is measured against, ending the patchwork of member-state interpretations.
What to Do
Read the draft RTS against your current onboarding and identification flows now, rather than waiting for the July 2027 application date. Map where your electronic identification attributes fall short of the prescribed data set, and where simplified due diligence assumptions may no longer hold. Firms operating in multiple member states should begin consolidating divergent national procedures toward the single standard. Prioritise verification methods that produce a consistent, audit-ready record capable of satisfying supervisors under one harmonised regime.
What is deepidv?
Not everyone loves compliance — but we do. deepidv is the AI-native verification engine and agentic compliance suite built from scratch. No third-party APIs, no legacy stack. We verify users across 211+ countries in under 150 milliseconds.
Learn More