Source: AMLA final report draft
- Anti-money laundering
AMLAR supplemental acts
- ITS on cooperation for the purposes of direct supervision
Article 7 Assessment and classification of the inherent and residual risk at the entity level
This is a draft act
This text has been parsed from the AMLA final report draft as published on 21 July 2026. While we run a suite of validations, the automated parsing can result in errors. Also, before it is finally adopted by the Commission, its wording, numbering and references may change, and entire articles might be removed or added.
Earlier drafts: AMLA consultation paper draft (16 December 2025)
Summary What does Article 7 of the ITS on cooperation for the purposes of direct supervision say?
This article governs the periodic assessment process carried out by the Authority, covering both the assessment itself and the feedback loop with financial supervisors that follows.
Building directly on the data collection process established in Articles 4, 5, and 6, this is where that collected information is put to use: the Authority applies the prescribed methodology to assess the inherent risk and quality of AML/CFT controls of eligible obliged entities, shares the results with financial supervisors, and provides a window for those supervisors to propose adjustments before a final outcome is determined.
Important points:
- The Authority is required to complete and communicate its assessment outcomes to financial supervisors by 31 July of year X, with a final deadline of 30 September of year X for financial supervisors to propose adjustments.
- Financial supervisors may challenge the Authority's assessment of AML/CFT control quality, but any refusal by the Authority to adopt a proposed adjustment must be justified, recorded, and communicated back to the relevant supervisors.
- The Authority is required to share the final outcome of all periodic assessments with the relevant financial supervisors without undue delay.
Springlex's summary of the article is a reading aid, not a substitute for the legal text.
The Authority shall perform the periodic assessment referred to in Article 12(1) of Regulation (EU) 2024/1620 based on the methodology set out in Delegated Regulation (EU) XXXX/XXX [RTS under art. 12(7) AMLAR].
By 31 July of year X, the Authority shall inform financial supervisors of the outcome of the assessment of the inherent risk and the quality of AML/CFT controls of eligible obliged entities.
By 30 September of year X, financial supervisors may propose adjustments to the assessment of the quality of AML/CFT controls in accordance with Article 3(4) of Delegated Regulation (EU) XXXX/XXX [RTS under art. 12(7) AMLAR]. The Authority shall take due consideration of those proposals. Refusal by the Authority to adopt a proposed adjustment shall be duly justified, recorded and communicated to the relevant financial supervisors.
The proposal for adjustment to the assessment of the quality of AML/CFT controls referred to in paragraph 3 shall be accompanied by the necessary justification and the underlying documentation.
The Authority shall share the final outcome of the periodic assessments of all eligible obliged entities with the relevant financial supervisors without undue delay.
Springlex and this text is meant purely as a documentation tool and has no legal effect. No liability is assumed for its content. The authentic version of this act is the one published in the Official Journal of the European Union.
Definition
crypto-asset services
Definition
supervisor
Definition
financial mixed activity holding company
Definition
crypto-asset service provider
Definition
credit institution
- a credit institution as defined in Article 4(1), point (1), of Regulation (EU) No 575/2013;
- a branch of a credit institution, as defined in Article 4(1), point (17), of Regulation (EU) No 575/2013, when located in the Union, whether its head office is located in a Member State or in a third country;
Definition
parent undertaking
- for groups whose head office is located in the Union, an obliged entity that is a parent undertaking as defined in Article 2, point (9), of Directive 2013/34/EU that is not itself a subsidiary of another undertaking in the Union, provided that at least one subsidiary undertaking is an obliged entity;
- for groups whose head office is located outside of the Union, where at least two subsidiary undertakings are obliged entities established in the Union, an undertaking within that group established in the Union that:
- is an obliged entity;
- is an undertaking that is not a subsidiary of another undertaking that is an obliged entity established in the Union;
- has a sufficient prominence within the group and a sufficient understanding of the operations of the group that are subject to the requirements of this Regulation; and
- is given the responsibility of implementing group-wide requirements under Chapter II, Section 2 of this Regulation;
Definition
crypto-asset
Definition
property
Definition
eligible obliged entities
Definition
group
Definition
financial institution
- an undertaking other than a credit institution or an investment firm, which carries out one or more of the activities listed in points (2) to (12), (14) and (15) of Annex I to Directive 2013/36/EU of the European Parliament and of the Council(32), including the activities of currency exchange offices (bureaux de change), but excluding the activities referred to in point (8) of Annex I to Directive (EU) 2015/2366, or an undertaking the principal activity of which is to acquire holdings, including a financial holding company, a mixed financial holding company and a financial mixed activity holding company;
- an insurance undertaking as defined in Article 13, point (1), of Directive 2009/138/EC of the European Parliament and of the Council(33), insofar as it carries out life or other investment-related assurance activities covered by that Directive, including insurance holding companies and mixed-activity insurance holding companies as defined, respectively, in Article 212(1), points (f) and (g), of Directive 2009/138/EC;
- an insurance intermediary as defined in Article 2(1), point (3), of Directive (EU) 2016/97 where it acts with respect to life insurance and other investment-related insurance services, with the exception of an insurance intermediary that does not collect premiums or amounts intended for the customer and which acts under the responsibility of one or more insurance undertakings or intermediaries for the products which concern them respectively;
- an investment firm as defined in Article 4(1), point (1), of Directive 2014/65/EU of the European Parliament and of the Council(34);
- a collective investment undertaking, in particular:
- an undertaking for collective investment in transferable securities (UCITS) as defined in Article 1(2) of Directive 2009/65/EC and its management company as defined in Article 2(1), point (b), of that Directive or an investment company authorised in accordance with that Directive and which has not designated a management company, that makes available for purchase units of UCITS in the Union;
- an alternative investment fund as defined in Article 4(1), point (a), of Directive 2011/61/EU and its alternative investment fund manager as defined in Article 4(1), point (b), of that Directive that fall within the scope set out in Article 2 of that Directive;
- a central securities depository as defined in Article 2(1), point (1), of Regulation (EU) No 909/2014 of the European Parliament and of the Council(35);
- a creditor as defined in Article 4, point (2), of Directive 2014/17/EU of the European Parliament and of the Council(36) and in Article 3, point (b), of Directive 2008/48/EC of the European Parliament and of the Council(37);
- a credit intermediary as defined in Article 4, point (5), of Directive 2014/17/EU and in Article 3, point (f), of Directive 2008/48/EC, when holding the funds as defined in Article 4, point (25), of Directive (EU) 2015/2366 in connection with the credit agreement, with the exception of the credit intermediary carrying out activities under the responsibility of one or more creditors or credit intermediaries;
- a crypto-asset service provider;
- a branch of a financial institution referred to in points (a) to (i), when located in the Union, whether its head office is located in a Member State or in a third country;
Definition
third country
Definition
funds
Definition
year X