RTS on pecuniary sanctions and administrative measures

COMMISSION DELEGATED REGULATION (EU) .../...

of XXX

supplementing Directive (EU) 2024/1640 of the European Parliament and of the Council with regards to regulatory technical standards specifying indicators to classify the level of gravity of breaches, criteria to be taken into account when setting the level of pecuniary sanctions or applying administrative measures, and the methodology for the imposition of periodic penalty payments for the purposes of Article 53(10)

(Text with EEA relevance)
This is a draft act

This text has been parsed from the AMLA consultation paper draft as published on 9 February 2026. While we run a suite of validations, the automated parsing can result in errors. Also, before it is finally adopted by the Commission, its wording, numbering and references may change, and entire articles might be removed or added.

THE EUROPEAN COMMISSION,

Having regard to the Treaty on the Functioning of the European Union,

Having regard to Directive (EU) 2024/1640 of the European Parliament and of the Council of 31 May 2024 on the mechanisms to be put in place by Member States for the prevention of the use of the financial system for the purposes of money laundering or terrorist financing, amending Directive (EU) 2019/1937, and amending and repealing Directive (EU) 2015/849, and in particular Article 53(10), first subparagraph points (a), (b) and (c) thereof,

Whereas:

Open full page
Recital 1

Supervisorsmeans the body entrusted with responsibilities aimed at ensuring compliance by obliged entities with the requirements of this Regulation, including AMLA when performing the tasks entrusted to it in Article 5(2) of Regulation (EU) 2024/1620; should have a common understanding of the breaches that warrant the imposition of pecuniary sanctions or administrative measures to ensure a consistent approach to enforcement across Member States. To achieve this, this Regulation sets out a list of indicators that supervisorsmeans the body entrusted with responsibilities aimed at ensuring compliance by obliged entities with the requirements of this Regulation, including AMLA when performing the tasks entrusted to it in Article 5(2) of Regulation (EU) 2024/1620; should take into account when assessing the level of gravity of breaches. It also classifies the level of gravity of breaches into four categories of increased severity.

Recital 2

When determining the level of gravity of breaches by classifying them into the four categories, and when setting the level of pecuniary sanctions and applying administrative measures, supervisorsmeans the body entrusted with responsibilities aimed at ensuring compliance by obliged entities with the requirements of this Regulation, including AMLA when performing the tasks entrusted to it in Article 5(2) of Regulation (EU) 2024/1620; should take into account in their overall assessment all applicable indicators and criteria. Supervisorsmeans the body entrusted with responsibilities aimed at ensuring compliance by obliged entities with the requirements of this Regulation, including AMLA when performing the tasks entrusted to it in Article 5(2) of Regulation (EU) 2024/1620; should use their supervisory judgement to analyse whether and to what extent these indicators and criteria are met.

Recital 3

The list of indicators and criteria specified by this Regulation is non-exhaustive. This is to enable supervisorsmeans the body entrusted with responsibilities aimed at ensuring compliance by obliged entities with the requirements of this Regulation, including AMLA when performing the tasks entrusted to it in Article 5(2) of Regulation (EU) 2024/1620; to take into account the specific context in which the breach has occurred. Where supervisorsmeans the body entrusted with responsibilities aimed at ensuring compliance by obliged entities with the requirements of this Regulation, including AMLA when performing the tasks entrusted to it in Article 5(2) of Regulation (EU) 2024/1620; consider additional specific indicators or criteria, they should justify their use. Supervisorsmeans the body entrusted with responsibilities aimed at ensuring compliance by obliged entities with the requirements of this Regulation, including AMLA when performing the tasks entrusted to it in Article 5(2) of Regulation (EU) 2024/1620; should ensure that supervisory judgement is applied in a coherent and consistent way, with comparable outcomes. They should also ensure their approach supports the convergence of practices and the consistency and comparability of enforcement outcomes across Member States.

HAS ADOPTED THIS REGULATION:

  1. Section 1Indicators for the classification of the gravity of breaches
  2. Section 2Criteria to be taken into account when setting the level of pecuniary sanctions and applying the administrative measures listed under this Regulation
  3. Section 3Methodology for the imposition of periodic penalty payments pursuant to Article 57 of directive (EU) 2024/1640

This Regulation shall be binding in its entirety and directly applicable in all Member States.

Done at Brussels,

For the Commission

The President

[...]

On behalf of the President

[...]

[Position]

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod