AI Summary of Article 28 Regulatory technical standards on the information necessary for the performance of customer due diligence
By 10 July 2026 AMLA shall develop and submit to the Commission draft regulatory technical standards (RTS) specifying: requirements for obliged entities under Article 20 and the information to be collected for standard, simplified and enhanced due diligence under Articles 22, 25, 33(1) and 34(4), including minimum measures in lower‑risk situations; types of simplified due diligence for lower risk, including measures for specific categories of obliged entities, products or services having regard to the Union risk assessment under Article 7 of Directive (EU) 2024/1640; risk factors for electronic money instruments relevant to Article 19(7); reliable independent sources to verify identification under Article 22(6)–(7); and attributes of electronic identification means and relevant qualified trust services referred to in Article 22(6)(b) to fulfil Article 20(1)(a)–(b) for standard, simplified and enhanced CDD.
The RTS in respect of obliged entities and simplified measures shall be based on: inherent risk of the service; risks associated with customer categories; nature, amount and recurrence of transactions; and channels used for the business relationship or occasional transaction. AMLA shall review the RTS regularly and submit updates to reflect innovation and technological developments. Power is delegated to the Commission to adopt those RTS under Articles 49–52 of Regulation (EU) 2024/1620.
Article 28 Regulatory technical standards on the information necessary for the performance of customer due diligence
1. By 10 July 2026, AMLA shall develop draft regulatory technical standards and submit them to the Commission for adoption. Those draft regulatory technical standards shall specify:
(a) the requirements that apply to obliged entities pursuant to Article 20 and the information to be collected for the purpose of performing standard, simplified and enhanced due diligence pursuant to Articles 22 and 25 and Articles 33(1) and 34(4), including minimum requirements in situations of lower risk;
(b) the type of simplified due diligence measures which obliged entities may apply in situations of lower risk pursuant to Article 33(1) of this Regulation, including measures applicable to specific categories of obliged entities and products or services, having regard to the results of the risk assessment at Union level conducted by the Commission pursuant to Article 7 of Directive (EU) 2024/1640;
(c) the risk factors associated with features of electronic money instruments that should be taken into account by supervisors when determining the extent of the exemption under Article 19(7);