PCF-52 Head of AML: Ireland’s pre-approved AML role
PCF-52, the Head of Anti-Money Laundering and Counter Terrorist Financing Compliance, is the Central Bank of Ireland’s pre-approval controlled function for the person who runs a firm’s AML/CFT compliance. For an Irish payment or e-money institution it is not optional in practice: the Central Bank’s own fitness and probity guidance for the sector lists it among the roles every PI and EMI is expected to fill. Nobody may perform it until the Central Bank has approved them. This piece covers the legal basis, scope, the approval process, the CJA 2010 duties behind the role, SEAR, passported firms and the AMLR from July 2027.
1. The legal basis
The fitness and probity (F&P) regime sits in Part 3 of the Central Bank Reform Act 2010. Sections 20 and 22 let the Central Bank prescribe controlled functions and the subset needing its prior approval; section 21 bars a firm from letting anyone perform a controlled function it has not certified.
The list of pre-approval controlled functions (PCFs) is Schedule 2 of the Central Bank Reform Act 2010 (Sections 20 and 22) Regulations 2011 (S.I. No. 437 of 2011). PCF-52 entered that list through S.I. No. 169 of 2022, notified in Iris Oifigiúil on 8 April 2022, after a Central Bank notice of intention in September 2021 and a feedback statement on 5 April 2022. It replaced PCF-15, Head of Compliance with responsibility for AML/CTF legislation. The Central Bank’s reason: firms increasingly appointed people to run AML compliance as a role in its own right. Firms had until 3 June 2022 to re-designate each PCF-15 holder as PCF-12, PCF-52 or both.
The current text is S.I. No. 20 of 2026, in operation since 10 February 2026, which replaced Schedule 2 in full. PCF-52 sits in Part 1, paragraph 4(h): the roles that apply to each regulated financial service provider established in the State.
2. Who is caught: payment and e-money institutions
Because PCF-52 is in Part 1, it is not a sector-specific role. It applies to every regulated financial service provider established in Ireland, and Irish-authorised PIs and EMIs are regulated financial service providers. The PI/EMI-specific roles in Part 2, paragraph 7 (PCF-40 and PCF-56) come on top of Part 1.
The Central Bank’s April 2023 Guidance on Fitness and Probity for a Payment Institution, Electronic Money Institution or Account Information Service Provider goes further. It sets out a minimum set of PCF roles that applies regardless of proportionality, and for PIs and EMIs that set includes PCF-52. Account information service providers fill PCF-12 Head of Compliance instead.
The general November 2025 Guidance on the Standards of Fitness and Probity is softer: it expects a senior manager with primary responsibility for AML/CFT where that is proportionate, and asks a firm that decides not to appoint one to record its reasons in detail. For a PI or EMI the sector guidance is the one to plan around.
3. PCF-52, PCF-12 and the MLRO
The Central Bank’s guidance separates the roles as follows.
| Role | Status | Approval | What it covers |
|---|---|---|---|
| PCF-52 Head of AML/CTF Compliance | Pre-approval controlled function; treated as both CF-1 and CF-2 | Central Bank approval before taking up the role | Implementing, managing and overseeing AML/CFT compliance at senior level |
| PCF-12 Head of Compliance | Pre-approval controlled function | Central Bank approval | Regulatory compliance generally |
| MLRO | Controlled function (CF-2), not a PCF | Firm’s own F&P due diligence and certification | Receiving internal reports and reporting suspicions |
| Compliance manager (AMLR, from July 2027) | EU-law role on the management body | Set by the AMLR, not the PCF list | Ensuring AMLR compliance at board level |
One person may hold PCF-12 and PCF-52 together, but a new appointee must be approved for each role separately. The Central Bank can declare in writing that a function is a PCF.
The MLRO is not a PCF. The 2025 guidance places the functions an MLRO usually performs under CF-2, ensuring, controlling or monitoring compliance. A separate MLRO is certified by the firm under section 21, with no Central Bank approval.
4. The approval process and timeline
The candidate completes an online Individual Questionnaire (IQ), the firm endorses it, and the firm submits it through the Central Bank of Ireland Portal. The Portal’s F&P module went live for industry in April 2023. The firm must complete its own F&P due diligence first; Central Bank approval does not replace its duty to certify.
PIs and EMIs face extra evidence requirements that come from the EBA’s PSD2 authorisation guidelines:
- Criminal record. Objective evidence of no criminal convictions, investigations or proceedings. Irish residents go through Garda vetting run by the Central Bank as part of the application. Non-residents provide a police certificate from their country of residence or another objectively reliable source. The Central Bank generally treats this evidence as valid for six months from issue.
- Identity document. Passport or driving licence details are mandatory for PCF applicants at a PI or EMI.
An incomplete IQ is rejected. On timing, the Central Bank’s June 2026 Authorisations and Gatekeeping Report says that since 2025 it has committed to assess every PCF application within 90 days, with no stop-the-clock and no exceptions. It met that standard for 97% of assessments in 2025, and approvals took 50 calendar days on average. Where the IQ is part of a firm authorisation, final approval can come later than 90 days. It held 26 F&P interviews in 2025.
If the post falls vacant suddenly, a Temporary Officer can be notified to cover it. Consecutive or cumulative temporary appointments to one PCF beyond six months are allowed only in exceptional circumstances, and a temporary notification cannot replace an IQ in an authorisation application.
5. The CJA 2010 duties behind the role
PCF-52 is a fitness and probity label. The work it covers comes from the Criminal Justice (Money Laundering and Terrorist Financing) Act 2010.
- Section 54(1)-(4): the firm must adopt internal policies, controls and procedures covering risk assessment, customer due diligence, monitoring, scrutiny of unusual transactions, reporting of suspicious transactions, record keeping and compliance management, and senior management must approve them.
- Section 54(7): if the Central Bank directs it in writing, the firm must appoint an individual at management level as compliance officer.
- Section 54(8): if directed, it must appoint a member of senior management with primary responsibility for AML measures. The 2025 F&P guidance ties PCF-52 to this provision and says the Central Bank may use the power where a firm has made no appointment. A firm with significant inherent ML/TF risk should consider whether that person belongs on the board.
- Section 42: suspicions go to both the Garda Síochána, through FIU Ireland’s goAML system, and the Revenue Commissioners, through ROS.
The PCF-52 holder owns the framework, resources and board reporting; the MLRO owns individual reporting decisions.
6. SEAR and the Conduct Standards
The Senior Executive Accountability Regime does not apply to payment or e-money institutions. The 2025 guidance limits it to credit institutions (other than credit unions), most insurance undertakings, investment firms that underwrite on a firm commitment basis, deal on own account or hold client assets, and incoming third-country branches of those firms. A PI or EMI therefore files no Statement of Responsibilities with a PCF-52 IQ, and its PCF-52 holder has no SEAR duty of responsibility.
Other parts of the Individual Accountability Framework do apply. The Common Conduct Standards bind everyone in a controlled function. The Additional Conduct Standards bind every PCF holder, including PCF-52, and the firm’s annual F&P certification covers that holder too.
7. Passported firms and EEA branches
Part 1 of the PCF list applies to firms established in the State, and Ireland’s 2026 list contains only one PCF for incoming branches: PCF-41, the manager of an Irish branch of a firm from outside the EEA. An EEA PI or EMI operating in Ireland through a branch or under the freedom to provide services does not seek Central Bank approval for its AML head. Its management is assessed by its home authority.
Section 25(6) of the CJA 2010 makes a credit or financial institution acting in Ireland through an Irish branch a designated person, wherever its head office is. Section 109F lets the Central Bank require an EEA e-money issuer or payment service provider operating in Ireland through establishments other than a branch, such as agents or distributors, to appoint a central contact point to secure AML/CFT compliance and support supervision. The branch still needs someone accountable for Irish AML compliance and reporting, but that person is not a PCF.
8. AMLR Article 11 from July 2027
Regulation (EU) 2024/1624 (the AMLR) applies from 10 July 2027. Article 11 requires two roles: a compliance manager, who is a member of the management body in its management function and is responsible for AMLR compliance, and a compliance officer, appointed by the management body, who runs AML policies and controls day to day and reports suspicious transactions to the FIU. Where size, risk and complexity justify it, one person may hold both.
For an Irish PI or EMI the mapping is not one-to-one. PCF-52 was designed as a senior manager with primary AML responsibility, closest to the compliance manager, but the 2025 guidance makes board membership a question to consider, not a requirement. The AMLR compliance manager must sit on the management body. If the current PCF-52 holder is not an executive director, the firm has to choose between putting them on the board and naming an executive director (PCF-1) as compliance manager, with PCF-52 continuing as the head of the AML function.
9. Worked examples
Facts: An Irish e-money institution’s Head of Compliance, approved as PCF-12 in 2021, has run AML since the firm was authorised. A new compliance analyst asks whether the firm has a PCF-52.
What the rule says: PCF-15 holders were re-designated in 2022. Where the firm decided the role met PCF-52, it had to notify the Central Bank and confirm its section 21 assessment. A new appointee needs approval for each PCF they hold.
What the practitioner does: Checks the Portal designations. If only PCF-12 appears, raises it with the Central Bank’s payments supervision team and documents the correction.
Outcome: The register matches reality before an inspection does it for you.
Facts: A payment institution’s PCF-52 holder resigns with one month’s notice. The chosen successor is a German resident.
What the rule says: The successor cannot perform PCF-52 until approved. The IQ needs a police certificate or equivalent evidence, generally valid for six months, and the Central Bank aims to decide within 90 days. A Temporary Officer can cover the gap, normally for no more than six months.
What the practitioner does: Orders the successor’s police certificate as soon as the offer is accepted, completes due diligence, and files the IQ. Notifies an approved senior colleague as Temporary Officer.
Outcome: The firm never lacks an accountable AML head, and suspicious-transaction reporting does not stop.
Facts: An Irish EMI’s PCF-52 holder is the Head of Financial Crime, not a director. The board is planning for July 2027.
What the rule says: AMLR Article 11 requires a compliance manager on the management body in its management function. The current PCF-52 approval does not make anyone a board member.
What the practitioner does: Presents the board with two options: appoint the PCF-52 holder as an executive director, which needs a PCF-1 IQ, or give an existing executive director the compliance manager role and keep PCF-52 as head of the AML function.
Outcome: A decision made in 2026, with time to get any new approval before 10 July 2027.
10. FAQ
What is PCF-52?
The Head of Anti-Money Laundering and Counter Terrorist Financing Compliance, a pre-approval controlled function under the Central Bank Reform Act 2010, listed in Part 1 of Schedule 2 to S.I. No. 437 of 2011, now in the form substituted by S.I. No. 20 of 2026.
Does it apply to payment and e-money institutions?
Yes. Part 1 covers every regulated financial service provider established in the State, and the Central Bank’s PI/EMI F&P guidance lists PCF-52 among the minimum roles. AISPs fill PCF-12 instead.
Can the Head of Compliance also be PCF-52?
Yes, but a new appointee must be approved for each role, and the firm should show it has addressed any conflict of interest.
Is the MLRO a PCF?
No. The Central Bank treats the MLRO’s functions as CF-2. The firm certifies the MLRO itself unless that person also holds PCF-52.
How long does approval take?
The Central Bank commits to assess PCF applications within 90 days. Approvals in 2025 took 50 days on average. Applications linked to a firm authorisation can take longer.
Does an EEA firm passporting into Ireland need a PCF-52?
No. The PCF list applies to firms established in the State, plus PCF-41 for non-EEA branches. The Irish branch is still a designated person under the CJA 2010.
11. What to do, today
- Company secretary: check every PCF designation on the Portal against who actually does each job, especially PCF-12 and PCF-52.
- Head of AML (PCF-52): confirm that the section 54 policies are approved by senior management and that the board receives regular AML MI from you.
- MLRO: make sure the goAML and ROS registrations, users and certificates are current and do not depend on a single person.
- HR: build police certificate and IQ preparation into the hiring plan for any PCF-52 successor, and name a Temporary Officer in advance.
- Board: decide before mid-2027 who will be the AMLR Article 11 compliance manager and whether that requires a new approval.
Related: PCF-56 Head of Safeguarding · Suspicious transaction reports in Ireland · Germany’s Geldwäschebeauftragter
