AMLA's New Rulebook: Why 'Principles-Based' Changes Everything

Alejandro Martínez · 2026-10-15

On October 1, 2026, the Anti-Money Laundering Authority (AMLA) finalized three regulatory technical standards under the Anti-Money Laundering Regulation (Regulation (EU) 2024/1624). These standards cover customer due diligence, the line between a business relationship and an occasional transaction, and group-wide arrangements. They apply to both financial and non-financial obliged entities, and AMLA has stressed that they are principles-based and add no obligations beyond the AMLR itself. But here's the thing: that 'principles-based' label isn't just a feel-good phrase. It shifts the burden of justification onto each firm. Supervisory expectations, not a tick-box rule, become the real test. ### What the Three Standards Actually Cover Let's break down what these standards address: - **Customer due diligence (CDD):** How firms verify who their customers are and assess risk. - **Business relationship vs. occasional transaction:** Where to draw the line between an ongoing relationship and a one-off deal. - **Group-wide arrangements:** How policies and procedures apply across different entities within a group. All three apply to both financial institutions and non-financial obliged entities like lawyers, accountants, and real estate agents. So no one gets a free pass. ### The 'Principles-Based' Catch AMLA says these standards add no new obligations beyond the AMLR. That sounds reassuring, but don't be fooled. Principles-based means you can't just follow a checklist and call it a day. You have to think, document your reasoning, and be ready to defend it to supervisors. In practice, that means your compliance team needs to understand the 'why' behind the rules, not just the 'what.' Supervisors will look at your risk assessment, your policies, and your actual decisions. If something goes wrong, 'we followed the manual' won't cut it. > "Principles-based regulation puts the onus on firms to demonstrate that their approach is proportionate and effective. It's about outcomes, not process." That quote sums up the shift. It's not about ticking boxes; it's about showing you've thought critically about your risks and taken appropriate steps. ### What This Means for Your Firm If you're in compliance, you're probably already reviewing your CDD processes and group policies. But here's a practical tip: start documenting your rationale now. When a supervisor asks why you treated a customer as low-risk, you need a clear, evidence-based answer. Also, consider how you distinguish between business relationships and occasional transactions. The new standard gives more clarity, but it also expects you to apply judgment. For example, a one-off transaction that's part of a pattern might actually be a business relationship in disguise. You need to spot that. ### The Bottom Line AMLA's finalization of these standards is a milestone, but it's not the end of the story. The principles-based approach means the real work starts now: embedding that mindset into your daily operations. It's about building a culture of compliance, not just a paper trail. So, take a deep breath, review your processes, and remember: the goal isn't to satisfy a rulebook—it's to genuinely manage risk. That's what supervisors will be looking for.