Art. 16 Supervisory actions | RTS on group-wide minimum requirements and additional measures for third-country subsidiaries and branches | AML

1. Where the supervisormeans the body entrusted with responsibilities aimed at ensuring compliance by obliged entities with the requirements of this Regulation, including AMLA when performing the tasks entrusted to it in Article 5(2) of Regulation (EU) 2024/1620; of the home Member State determines, in accordance with paragraph 3 of this Article, that the additional measures implemented by the parent undertakingmeans:for groups whose head office is located in the Union, an obliged entity that is a parent undertaking as defined in Article 2, point (9), of Directive 2013/34/EU that is not itself a subsidiary of another undertaking in the Union, provided that at least one subsidiary undertaking is an obliged entity;for groups whose head office is located outside of the Union, where at least two subsidiary undertakings are obliged entities established in the Union, an undertaking within that group established in the Union that:is an obliged entity;is an undertaking that is not a subsidiary of another undertaking that is an obliged entity established in the Union;has a sufficient prominence within the group and a sufficient understanding of the operations of the group that are subject to the requirements of this Regulation; andis given the responsibility of implementing group-wide requirements under Chapter II, Section 2 of this Regulation; in the Union or the obliged entity pursuant to this Regulation are insufficient to ensure that their branches or subsidiaries in the third countrymeans any jurisdiction, independent state or autonomous territory that is not part of the Union and that has its own AML/CFT legislation or enforcement regime; effectively manage the risk of money launderingmeans the conduct set out in Article 3, paragraphs 1 and 5, of Directive (EU) 2018/1673 including aiding and abetting, inciting and attempting to commit that conduct, whether the activities which generated the property to be laundered were carried out on the territory of a Member State or on that of a third country; knowledge, intent or purpose required as an element of that conduct may be inferred from objective factual circumstances; or terrorist financingmeans the conduct set out in Article 11 of Directive (EU) 2017/541 including aiding and abetting, inciting and attempting to commit that conduct, whether carried out on the territory of a Member State or on that of a third country; knowledge, intent or purpose required as an element of that conduct may be inferred from objective factual circumstances;, the supervisormeans the body entrusted with responsibilities aimed at ensuring compliance by obliged entities with the requirements of this Regulation, including AMLA when performing the tasks entrusted to it in Article 5(2) of Regulation (EU) 2024/1620; of the home Member State shall, using the powers available under Union or national law, exercise one or more of the following additional supervisory actions:
  1. require the parent undertakingmeans:for groups whose head office is located in the Union, an obliged entity that is a parent undertaking as defined in Article 2, point (9), of Directive 2013/34/EU that is not itself a subsidiary of another undertaking in the Union, provided that at least one subsidiary undertaking is an obliged entity;for groups whose head office is located outside of the Union, where at least two subsidiary undertakings are obliged entities established in the Union, an undertaking within that group established in the Union that:is an obliged entity;is an undertaking that is not a subsidiary of another undertaking that is an obliged entity established in the Union;has a sufficient prominence within the group and a sufficient understanding of the operations of the group that are subject to the requirements of this Regulation; andis given the responsibility of implementing group-wide requirements under Chapter II, Section 2 of this Regulation; in the Union or the obliged entity to submit and implement, within a specified timeframe, a risk mitigation plan approved by the relevant management bodymeans an obliged entity’s body or bodies, which are appointed in accordance with national law, which are empowered to set the obliged entity’s strategy, objectives and overall direction, and which oversee and monitor management decision-making, and include the persons who effectively direct the business of the obliged entity; where no such body exists, the person who effectively directs the business of the obliged entity;, aimed at addressing the identified risks, weaknesses or shortcomings;
  2. require the parent undertakingmeans:for groups whose head office is located in the Union, an obliged entity that is a parent undertaking as defined in Article 2, point (9), of Directive 2013/34/EU that is not itself a subsidiary of another undertaking in the Union, provided that at least one subsidiary undertaking is an obliged entity;for groups whose head office is located outside of the Union, where at least two subsidiary undertakings are obliged entities established in the Union, an undertaking within that group established in the Union that:is an obliged entity;is an undertaking that is not a subsidiary of another undertaking that is an obliged entity established in the Union;has a sufficient prominence within the group and a sufficient understanding of the operations of the group that are subject to the requirements of this Regulation; andis given the responsibility of implementing group-wide requirements under Chapter II, Section 2 of this Regulation; in the Union or the obliged entity to implement, within a specified timeframe, corrective measures available to the supervisorsmeans the body entrusted with responsibilities aimed at ensuring compliance by obliged entities with the requirements of this Regulation, including AMLA when performing the tasks entrusted to it in Article 5(2) of Regulation (EU) 2024/1620; under Union law or national law to address identified weaknesses or to mitigate risks.
2. The supervisormeans the body entrusted with responsibilities aimed at ensuring compliance by obliged entities with the requirements of this Regulation, including AMLA when performing the tasks entrusted to it in Article 5(2) of Regulation (EU) 2024/1620; of the home Member State shall monitor the implementation of the actions referred to in the first subparagraph, points (a) and (b), where applicable, to satisfy itself that the risks of money launderingmeans the conduct set out in Article 3, paragraphs 1 and 5, of Directive (EU) 2018/1673 including aiding and abetting, inciting and attempting to commit that conduct, whether the activities which generated the property to be laundered were carried out on the territory of a Member State or on that of a third country; knowledge, intent or purpose required as an element of that conduct may be inferred from objective factual circumstances; or terrorist financingmeans the conduct set out in Article 11 of Directive (EU) 2017/541 including aiding and abetting, inciting and attempting to commit that conduct, whether carried out on the territory of a Member State or on that of a third country; knowledge, intent or purpose required as an element of that conduct may be inferred from objective factual circumstances; are effectively managed.
1. Where the supervisormeans the body entrusted with responsibilities aimed at ensuring compliance by obliged entities with the requirements of this Regulation, including AMLA when performing the tasks entrusted to it in Article 5(2) of Regulation (EU) 2024/1620; of the home Member State determines that the parent undertakingmeans:for groups whose head office is located in the Union, an obliged entity that is a parent undertaking as defined in Article 2, point (9), of Directive 2013/34/EU that is not itself a subsidiary of another undertaking in the Union, provided that at least one subsidiary undertaking is an obliged entity;for groups whose head office is located outside of the Union, where at least two subsidiary undertakings are obliged entities established in the Union, an undertaking within that group established in the Union that:is an obliged entity;is an undertaking that is not a subsidiary of another undertaking that is an obliged entity established in the Union;has a sufficient prominence within the group and a sufficient understanding of the operations of the group that are subject to the requirements of this Regulation; andis given the responsibility of implementing group-wide requirements under Chapter II, Section 2 of this Regulation; in the Union or the obliged entity cannot effectively manage the risk of money launderingmeans the conduct set out in Article 3, paragraphs 1 and 5, of Directive (EU) 2018/1673 including aiding and abetting, inciting and attempting to commit that conduct, whether the activities which generated the property to be laundered were carried out on the territory of a Member State or on that of a third country; knowledge, intent or purpose required as an element of that conduct may be inferred from objective factual circumstances; or terrorist financingmeans the conduct set out in Article 11 of Directive (EU) 2017/541 including aiding and abetting, inciting and attempting to commit that conduct, whether carried out on the territory of a Member State or on that of a third country; knowledge, intent or purpose required as an element of that conduct may be inferred from objective factual circumstances; connected with the operations of the branches or subsidiaries established in the third countrymeans any jurisdiction, independent state or autonomous territory that is not part of the Union and that has its own AML/CFT legislation or enforcement regime; or that the parent undertakingmeans:for groups whose head office is located in the Union, an obliged entity that is a parent undertaking as defined in Article 2, point (9), of Directive 2013/34/EU that is not itself a subsidiary of another undertaking in the Union, provided that at least one subsidiary undertaking is an obliged entity;for groups whose head office is located outside of the Union, where at least two subsidiary undertakings are obliged entities established in the Union, an undertaking within that group established in the Union that:is an obliged entity;is an undertaking that is not a subsidiary of another undertaking that is an obliged entity established in the Union;has a sufficient prominence within the group and a sufficient understanding of the operations of the group that are subject to the requirements of this Regulation; andis given the responsibility of implementing group-wide requirements under Chapter II, Section 2 of this Regulation; in the Union or an obliged entity has failed to comply with supervisory actions taken pursuant to paragraph 1 within the specified timeframe, it shall, using the powers available under Union or national law, exercise one or more of the following additional supervisory actions:
  1. require the parent undertakingmeans:for groups whose head office is located in the Union, an obliged entity that is a parent undertaking as defined in Article 2, point (9), of Directive 2013/34/EU that is not itself a subsidiary of another undertaking in the Union, provided that at least one subsidiary undertaking is an obliged entity;for groups whose head office is located outside of the Union, where at least two subsidiary undertakings are obliged entities established in the Union, an undertaking within that group established in the Union that:is an obliged entity;is an undertaking that is not a subsidiary of another undertaking that is an obliged entity established in the Union;has a sufficient prominence within the group and a sufficient understanding of the operations of the group that are subject to the requirements of this Regulation; andis given the responsibility of implementing group-wide requirements under Chapter II, Section 2 of this Regulation; in the Union or the obliged entity to ensure that the branches or subsidiaries in the third countrymeans any jurisdiction, independent state or autonomous territory that is not part of the Union and that has its own AML/CFT legislation or enforcement regime; do not enter into new business relationshipsmeans a business, professional or commercial relationship connected with the professional activities of an obliged entity, which is set up between an obliged entity and a customer, including in the absence of a written contract and which is expected to have, at the time when the contact is established, or which subsequently acquires, an element of repetition or duration; or, where relevant, do not carry out occasional transactions;
  2. require the parent undertakingmeans:for groups whose head office is located in the Union, an obliged entity that is a parent undertaking as defined in Article 2, point (9), of Directive 2013/34/EU that is not itself a subsidiary of another undertaking in the Union, provided that at least one subsidiary undertaking is an obliged entity;for groups whose head office is located outside of the Union, where at least two subsidiary undertakings are obliged entities established in the Union, an undertaking within that group established in the Union that:is an obliged entity;is an undertaking that is not a subsidiary of another undertaking that is an obliged entity established in the Union;has a sufficient prominence within the group and a sufficient understanding of the operations of the group that are subject to the requirements of this Regulation; andis given the responsibility of implementing group-wide requirements under Chapter II, Section 2 of this Regulation; in the Union or the obliged entity to ensure that the branches or subsidiaries in the third countrymeans any jurisdiction, independent state or autonomous territory that is not part of the Union and that has its own AML/CFT legislation or enforcement regime; limit, reduce or terminate existing business relationshipsmeans a business, professional or commercial relationship connected with the professional activities of an obliged entity, which is set up between an obliged entity and a customer, including in the absence of a written contract and which is expected to have, at the time when the contact is established, or which subsequently acquires, an element of repetition or duration; or do not undertake specific transactions or defined categories of transactions;
  3. require the parent undertakingmeans:for groups whose head office is located in the Union, an obliged entity that is a parent undertaking as defined in Article 2, point (9), of Directive 2013/34/EU that is not itself a subsidiary of another undertaking in the Union, provided that at least one subsidiary undertaking is an obliged entity;for groups whose head office is located outside of the Union, where at least two subsidiary undertakings are obliged entities established in the Union, an undertaking within that group established in the Union that:is an obliged entity;is an undertaking that is not a subsidiary of another undertaking that is an obliged entity established in the Union;has a sufficient prominence within the group and a sufficient understanding of the operations of the group that are subject to the requirements of this Regulation; andis given the responsibility of implementing group-wide requirements under Chapter II, Section 2 of this Regulation; in the Union or the obliged entity to close down some or all operations carried out in the third countrymeans any jurisdiction, independent state or autonomous territory that is not part of the Union and that has its own AML/CFT legislation or enforcement regime;.
1. When determining additional supervisory actions under this Article, supervisorsmeans the body entrusted with responsibilities aimed at ensuring compliance by obliged entities with the requirements of this Regulation, including AMLA when performing the tasks entrusted to it in Article 5(2) of Regulation (EU) 2024/1620; shall take into account, where relevant:
  1. the nature and gravity of the identified risks, weaknesses or shortcomings;
  2. the extent to which relevant third-country legal or regulatory impediments affect the effective implementation or supervision of group-wide AML/CFT policies, procedures and controls; and
  3. existing governance arrangements, risk management frameworks and control functionsmeans a function that is independent from the commercial functions it controls and that is responsible to provide an objective assessment of the obliged entity’s risks, review or report on those, including, but not limited to, the risk management function, the compliance function and the internal audit function; systems.