The warnings followed findings that required independent audits of AML/CFT programmes and risk assessments had not been completed. The action signals continued regulatory focus on ensuring reporting entities maintain effective compliance frameworks and regularly test whether their AML/CFT controls are operating as intended.
Independent audits are a key part of the AML/CFT regime, helping firms assess whether their programmes are working in practice, identify gaps and strengthen controls. The DIA has emphasised that strong AML/CFT systems help protect businesses, their reputations and the wider community from the harm caused by financial crime.
Today’s action signals a clear expectation that reporting entities must comply with their legal obligations.
Law firms that are reporting entities should review their AML/CFT obligations and ensure any required independent audits are completed within the required timeframes.