7 things you need to know to comply with MLR17

aat comment

The new Money Laundering, Terrorist Financing and Transfer of Funds Regulations came out in June 2017, so may no longer seem new, but the guidance has only just been approved by HMRC.

The new guidance is a step forward. It is easier to understand, more concise (although still long) and more practical, with illustrative examples. The key differences in MLR17, as it has already become known, fall under seven headings:

  1. Whole firm risk assessments
  2. Internal controls
  3. Policies, controls and procedures
  4. Client due diligence
  5. Simplified due diligence
  6. Enhanced due diligence
  7. Politically expose persons

Let’s look at them in turn.

Whole firm risk assessments

The first change is that practices must start by completing a whole firm risk assessment, an overall review of where risk might come from. This will vary from practice to practice. Factors might include the type of clients, the geography and the nature of services provided. The key thing to remember is that it will differ for different types and sizes of practice.

Internal controls

Firms must now appoint a Money Laundering Compliance Principal (MLCP) and that person must be a member of the senior management team. Larger firms must also appoint a nominated officer who is responsible for deciding whether a suspicious activity should be reported to the NCA. Only sole practitioners with no employees are exempt from this requirement. The MLCP’s scope now extends to staff screening. They need to consider the skills, knowledge and integrity of relevant employees. The focus might for example extend to recruitment, appraisals and training. Finally, there is a requirement for an independent audit function that will carry out independent reviews. There is still some debate about what “independent” means here. It probably isn’t external for larger firms but for smaller ones it may need to be. This independent monitoring must be reported to senior management.

Policies, controls and procedures

Documented policies, controls and procedures must be approved by senior management. There has always been encouragement to do this but now it is mandatory. A requirement to run staff training is also not new, but the greater need to monitor it is. Perhaps only applicable to larger practices, there is also now a requirement for group-wide policies to cover overseas subsidiaries and branches.

Client Due Diligence

Client due diligence is not new but the new regulations give it an increased emphasis and come with some new rules. It is now required for one-off transactions such as company formation services, or single-piece tax advice, as well as of a person purporting to act on behalf of a client.

Simplified Due Diligence

Client due diligence is now embedded into the risk-based approach. The good news is that if a list of low-risk factors is satisfied, you can now complete “simplified client due diligence”. That does mean that you can say “I’ve known this client for 20 years and been to their house – they must be low risk.” It is more likely that this is a person that operates already in a regulated sector.

Enhanced Due Diligence

Of course, the flip side of this is that where there is higher risk, you must complete “enhanced due diligence”. So, if your prospective client has activities in a high-risk country, or presents a high risk of terrorist financing, or they are a politically exposed person, you will need to go through a more rigorous process.

Politically exposed persons

The new regulations require you to ascertain whether the person is a politically exposed person (PEP), the spouse of a PEP, a close family member or a close associate. If they are, that doesn’t mean you can’t act for them, but you must jump through some additional hoops – you’ll need senior management approval for the relationship, to take adequate measures to establish the source of funds and wealth, and to perform enhanced monitoring of the relationship.

Accountingcpd partner with AAT to publish The AAT Technical Updates Pathway 2018 – 20 weeks of expert-led digital learning to keep members up to date. AML is covered in week 15 of this pathway.

Alan Nelson is the Founder and Managing Director of Nelson Croom, and Publisher of accountingcpd.net.

Brought to you by
Brought yo you by

Related articles