EU AML Framework: PEP Obligations Across Jurisdictions

The EU AML Regulation (AMLR) introduces expanded and harmonized definitions of politically exposed persons (PEPs), alongside more prescriptive due diligence expectations. At the same time, institutions remain subject to FATF Recommendation 12 and U.S. BSA requirements, which apply different models for identifying and managing PEP risk.

For institutions operating across jurisdictions, the issue is no longer limited to identifying who qualifies as a PEP. It is how those classifications are applied, documented, and assessed under multiple regulatory standards simultaneously.

Why It Matters

The interaction of these frameworks creates exposure that is operational, legal, and reputational. Decisions that appear aligned under one standard may not meet expectations under another, particularly where documentation and due diligence do not clearly reflect how conclusions were reached. FATF Recommendation 12 requires, at minimum, senior management approval, measures to establish source of wealth, and enhanced ongoing monitoring for PEP relationships.

Key Risks and Issues

• Divergent PEP definitions across regulatory regimes
• Inconsistent application of enhanced due diligence thresholds
• Misalignment between classification and supporting documentation
• Cross-border exposure to sanctions and correspondent banking scrutiny
• Timing gaps between directly applicable AMLR obligations and the technical standards that will specify how they are applied

Legal and Structural Priorities

• Align PEP classification criteria across applicable regulatory standards
• Reassess PEP policies against AMLR and FATF Recommendation 12 requirements
• Map regulatory definitions to system logic and data models
• Structure due diligence processes to reflect jurisdiction-specific expectations
• Standardize documentation to support consistent interpretation across jurisdictions
• Strengthen governance over cross-border relationship assessments
• Monitor AMLR technical standards and related delegated acts

Assessing Current Frameworks

Institutions should assess whether current frameworks support consistent application across jurisdictions and over time. This includes evaluating how decisions are documented and whether those records can be understood under different regulatory perspectives.

Common vulnerabilities include:

• Screening logic not aligned with AMLR-defined PEP categories
• Data structures not capturing required classification thresholds or attributes
• Documentation that does not clearly link classification to due diligence outcomes
• Inconsistent escalation or review processes across jurisdictions

Where screening logic was built around earlier, broader PEP categories, it may not capture the specific thresholds introduced by the AMLR. The result is not necessarily a wrong decision. It is a decision that cannot be clearly traced back to the applicable standard. That gap becomes more consequential where the same relationship is subject to examination under multiple frameworks at the same time.

Closing Statement

Institutions that can apply PEP obligations consistently across jurisdictions, and clearly demonstrate how those decisions were reached, will be better positioned to withstand regulatory scrutiny as expectations continue to converge.