AML officer roles compared: eight EU national regimes
AML officer roles for payment and e-money institutions look alike across the EU until you have to notify one. Germany wants a Geldwäschebeauftragter working in Germany, Spain a representative before the Sepblac plus a collective control body, Italy three separate appointments, Ireland a pre-approved PCF-52. Each has its own appointing body, authority, channel and clock. From 10 July 2027, Article 11 of the AMLR lays one EU structure over all eight. This hub compares the eight regimes, links to the full guide on each, and maps every national role onto the AMLR pair.
1. The EU layer: Article 11 AMLR
Regulation (EU) 2024/1624 (AMLR) applies from 10 July 2027 under Article 90 (two later-dated categories of obliged entity, not payment firms, start in 2029). Article 11 replaces the national designs with two roles:
- Compliance manager (Art. 11(1)). One member of the management body in its management function, responsible for compliance with the AMLR, the Funds Transfer Regulation (EU) 2023/1113 and supervisory acts. This person makes sure policies and controls fit the risk exposure, are implemented and are resourced, and receives information on material weaknesses.
- Compliance officer (Art. 11(2)). Appointed by the management body, with sufficiently high hierarchical standing, responsible for day-to-day AML/CFT policies and controls, including targeted financial sanctions, and the contact point for competent authorities. Under Article 69(6) this officer transmits suspicious-activity reports to the FIU of the member state where the reporting entity is established.
Four details matter for passporting groups. Where senior managers face fit-and-proper checks under Article 6 of Directive (EU) 2024/1640, the compliance officer is verified too. A group entity may share another group entity’s compliance officer only where its size and low risk justify it. Removal needs prior notice to the management body, and the supervisor is told whether it relates to the officer’s AMLR tasks. Article 11(7) lets one person hold both roles where nature, risks, complexity and size justify it.
One neighbouring rule bites hard: Article 18(3)(e) bars outsourcing suspicious-activity reporting to the FIU, except to another obliged entity of the same group established in the same member state. Our guides to the compliance manager and officer split and the tasks you can never outsource cover the EU text in full.
2. Eight national regimes side by side
| Country | Statutory basis | Role name(s) | Who notifies whom, how | FIU-facing role | Fit and proper | Guide |
|---|---|---|---|---|---|---|
| Germany | § 7 GwG; § 4(3) GwG; BaFin AuA ch. 3.2 | Geldwäschebeauftragter and deputy; board member under § 4(3) | Firm to BaFin, in advance (AuA: two weeks); MVP-Portal form since 13 June 2025 | Officer, contact point for the FIU (Zentralstelle) | No pre-approval; BaFin may require revocation | DE |
| Spain | Art. 26 ter Ley 10/2010; art. 35 RD 304/2014 | Representante ante el Sepblac; órgano de control interno (OCI) | Firm to Sepblac through its portal forms; declaración responsable since 28 Oct 2026 | Representative decides on reporting, unless the manual routes it to the OCI | Responsible declaration with evidence file kept for Sepblac | ES |
| Italy | Arts. 35–36 D.Lgs. 231/2007; Banca d’Italia Disposizioni 26 Mar 2019 | Responsabile antiriciclaggio; responsabile/delegato SOS; esponente responsabile | AML head and esponente to Banca d’Italia within 20 days (Or.So. where applicable); SOS referente to UIF on Infostat-UIF, change within 30 days | SOS responsible or delegate | Board checks requirements and minutes them | IT |
| Belgium | Art. 9 Law of 18 Sep 2017; NBB Regulation art. 7 | Senior manager (§1); AMLCO (§2) | NBB fit and proper “new appointment” form, well before the start; exit form on departure | AMLCO, reporting to CTIF-CFI as a rule | Yes: NBB assessment as head of an independent control function | BE |
| France | Arts. R. 561-23, R. 561-24, L. 561-32 CMF; arrêté 6 Jan 2021 | Déclarant; correspondant; responsable LCB-FT | TRACFIN through ERMES designation form, and the ACPR separately; changes without delay | Déclarant (files and signs); correspondant (answers requests) | No pre-approval; the responsable faces a personal ban of up to five years | FR |
| Ireland | Central Bank Reform Act 2010; S.I. 437/2011 Sch. 2 (as replaced by S.I. 20/2026); s. 54 CJA 2010 | PCF-52 Head of AML/CTF Compliance; MLRO (CF-2) | Individual Questionnaire through the Central Bank Portal; approval before taking up the role | MLRO; reports go to FIU Ireland (goAML) and Revenue (ROS) | Yes: pre-approval controlled function | IE |
| Netherlands | Art. 2d Wwft; art. 21 Bpr | Wwft policymaker; compliance function | No separate Wwft notice; a new policymaker needs prior DNB screening via My DNB | Compliance function supplies art. 16 data to FIU-Nederland | Policymakers only (arts. 3:8–3:9 Wft) | NL |
| Luxembourg | Art. 4(1) Law of 12 Nov 2004; arts. 40–45 CSSF Reg. 12-02 | Responsable du respect (RR); responsable du contrôle (RC) | Names to the CSSF, with information before any change (art. 40(2)) | RC, registered in goAML for the CRF | Internal checks under art. 45; managers also assessed by the CSSF | LU |
3. Two tiers everywhere, and how they map to Article 11
Almost every regime already splits accountability from operation, so the 2027 mapping is easier than the names suggest, if not one-to-one.
| Country | Closest to compliance manager | Closest to compliance officer | Gap to close by July 2027 |
|---|---|---|---|
| Germany | Board member under § 4(3) GwG | Geldwäschebeauftragter | The AMLR text has no deputy; the national follow-up decides the deputy and location rules |
| Spain | Representative (holds an administration or management post) | Representative, with the OCI as collective body | Decide who is the management-body member and who runs the function |
| Italy | Esponente responsabile | AML head plus SOS delegate | Two Italian roles converge on one EU officer |
| Belgium | Senior manager, art. 9 §1 | AMLCO, art. 9 §2 | Closest fit; combination already needs a yearly justification |
| France | Responsable LCB-FT (senior position, not necessarily on the board) | Déclarant and correspondant | Confirm the manager sits on the management body |
| Ireland | PCF-52, if the holder is an executive director | PCF-52 or MLRO | Board seat for the manager role is not required today |
| Netherlands | Wwft policymaker, art. 2d(1) | Compliance function, art. 2d(2) | A named officer, supervisory verification and removal notice are new |
| Luxembourg | RR | RC | Two appointments today; merger possible under Art. 11(7) |
The biggest changes fall in Ireland, where a PCF-52 holder below board level cannot be compliance manager, and the Netherlands, where removing the compliance officer becomes notifiable.
4. Who notifies whom: channels and clocks
The filings differ in timing as much as in channel. Three patterns run through the eight regimes:
- Before the start. Germany (notice in advance, two weeks under the AuA), Luxembourg (information before any change), Belgium (form well before the appointment takes effect) and Ireland (no performance until approval) all expect the supervisor to know first.
- After the resolution, on a fixed clock. Italy counts 20 days from the board resolution for the AML head, 20 days from acceptance for the esponente and 30 days for a change of SOS referente.
- Without delay. France requires changes of déclarant or correspondant to reach TRACFIN and the ACPR without delay. Spain routes appointments, removals and data updates through Sepblac’s portal forms.
The traps are in the mechanics. In Germany a replacement is a release followed by an appointment, and a filing counts only when the MVP log shows it accepted. In France ERMES covers TRACFIN only, so the ACPR notice is a second step. In Italy the Banca d’Italia and the UIF are separate addressees.
5. The FIU-facing role and where it must sit
Each regime names who talks to its FIU, and several tie that person to the territory:
- Germany: the officer works in Germany and is the contact point for the FIU; a deputy abroad must work from Germany when standing in.
- France: the déclarant and correspondant work in France, and R. 561-38-2 excludes the reporting duty from outsourcing.
- Spain: the representative is resident in Spain and holds a management post; a firm operating only under the free provision of services appoints one without the residence condition.
- Italy: SOS delegation outside the firm or group is barred, and a branch may delegate only to its own staff.
- Belgium, Luxembourg, Ireland, the Netherlands: the AMLCO, RC, MLRO or compliance function is the reporting route to CTIF-CFI, the CRF, FIU Ireland and FIU-Nederland respectively. Belgium and Luxembourg also require knowledge of the national AML framework.
From July 2027 Article 69(6) AMLR sends reports to the FIU of the member state where the entity is established, through the Article 11(2) officer. See AMLR Article 69.
6. Fit and proper: three levels of scrutiny
Only two of the eight regimes assess the operational AML officer before appointment. Ireland’s PCF-52 needs Central Bank approval; the Central Bank commits to assess within 90 days, and a Temporary Officer can cover a sudden vacancy for up to six months, longer only in exceptional cases. Belgium puts the AMLCO through the National Bank’s fit and proper process as head of an independent control function.
Elsewhere the supervisor intervenes afterwards or not at all: BaFin can require revocation, Spain relies on a responsible declaration backed by an evidence file Sepblac can inspect, and Luxembourg requires internal checks of standing and experience. The Netherlands screens only the Wwft policymaker. Italy and France leave the check to the firm. Article 11(2) AMLR will extend verification to compliance officers wherever senior managers are already checked.
7. Branches, agents and freedom of services
A branch is an obliged entity in every one of these countries, so the host-country roles apply to it in full. Ireland differs on approval only: an EEA branch needs no PCF-52, though it remains a designated person under the CJA 2010.
Agent and distributor networks trigger the central contact point regimes built on Delegated Regulation (EU) 2018/1108. France requires a représentant permanent resident in France once any D. 561-3-1 trigger is met, such as ten agents or distributors or EUR 3 million of activity. Belgium requires the AMLCO to be established in Belgium for EEA firms operating through persons established there. Spain requires a representative resident in Spain for firms with agents or non-branch establishments. Ireland and the Netherlands let the supervisor require a contact point. Our overview of the AML representative across the EU covers the pattern.
8. Worked scenarios
A Luxembourg EMI enters three markets
Facts: a CSSF-supervised e-money institution opens a German branch, signs twelve French distributors and starts distributing in Belgium through local distributors.
Rule: § 7(1) and (5) GwG catch the branch and put the officer in Germany. D. 561-3-1 CMF requires a représentant permanent resident in France. Article 9 §4 of the Belgian law puts the AMLCO in Belgium.
What the practitioner does: hires a German officer and deputy and files the MVP notice two weeks ahead; appoints the French representative before the tenth distributor goes live and registers on ERMES and with the ACPR; files the NBB appointment form for a Belgium-based AMLCO. The Luxembourg RR and RC keep group oversight.
Outcome: three local officers, each notified first.
One person for several roles
Facts: a group wants its Luxembourg RC to act also as French déclarant and Italian SOS delegate for its branches.
Rule: the French roles must be exercised in France; an Italian branch may delegate SOS only to branch staff. Article 11(2) AMLR allows a shared group compliance officer only where size and low risk justify it, and Article 18(3)(e) confines outsourced reporting to a group entity in the same member state.
What the practitioner does: keeps the RC as group methodology lead with an advisory line, and names a France-based déclarant and a branch employee as Italian delegate.
Outcome: one group standard, local decision-makers.
The officer resigns
Facts: the person holding the German officer role and the Irish PCF-52 in a group gives one month’s notice.
Rule: Germany needs notice in advance, release before appointment; Ireland bars a successor until approval, with a Temporary Officer as bridge.
What the practitioner does: files the German release, then the successor’s appointment at least two weeks before the start; notifies an Irish Temporary Officer and files the IQ with a police certificate. From July 2027, the management body hears first, then the supervisor.
Outcome: no day without a named officer in either country.
9. FAQ
Does the AMLR abolish the national AML officer roles?
It applies directly from 10 July 2027 and sets the compliance manager and compliance officer. Notification routes, deputies and location rules depend on national follow-up legislation.
Which countries pre-approve the AML officer?
Ireland (PCF-52, Central Bank approval) and Belgium (NBB fit and proper assessment of the AMLCO). Germany and Spain allow the supervisor to object or check afterwards.
Can a group MLRO abroad be the local officer?
Not in Germany or France, where the role is exercised in the country, nor as SOS delegate for an Italian branch. Belgium requires a Belgium-established AMLCO for agent and distributor networks.
Can one person hold both the manager and officer roles?
Belgium allows it under Article 9 §3 where size justifies it; Luxembourg requires two appointments today. Article 11(7) AMLR allows it where nature, risks, complexity and size justify it.
Does an EEA branch need the host-country roles?
Yes, in all eight countries the branch is an obliged entity; only Ireland’s PCF approval does not extend to EEA branches.
10. What to do, today
- Group MLRO: build one register of every AML role per country, with person, filing, date and acknowledgement.
- Country compliance leads: check residence and location rules against where each named person actually works.
- Company secretary: add every AML role to the leaver process, with each country’s clock.
- Board: name the Article 11 compliance manager per entity before mid-2027 and decide whether to combine roles.
- Expansion team: test agent and distributor triggers before each new market goes live.
Related: The AML representative across the EU · AMLR compliance manager and officer · The EU AML package timeline
