The EU AML Single Rulebook and Irish Construction Professionals: What Changes in July 2027

The Regulation

What the AMLR Is — and Why It Matters Differently

The existing AML framework in Ireland is built on directives — the Fourth Anti-Money Laundering Directive (2015/849) and the Fifth AMLD (2018/843) — which required national transposition into the CJ(MLTF)A 2010. Transposition created variation: member states interpreted and implemented the directives differently, creating compliance gaps and arbitrage opportunities.

Regulation EU 2024/1624 replaces the directive approach for the substantive AML obligations. A regulation has direct effect in all member states — it is the same law in Dublin, Berlin, and Warsaw without adaptation. Irish designated persons will be subject to requirements defined at EU level, not modified by national legislative choices.

The new Anti-Money Laundering Authority (AMLA), established under Regulation EU 2024/1620 and based in Frankfurt, will supervise the highest-risk obliged entities directly and coordinate national supervisors across the EU. For Irish construction professionals, AMLA's immediate relevance is that it sets the supervisory standards that the Irish supervisory authority — currently the Department of Justice for certain categories — must apply.

Verification Standards

Multi-Source Verification: Nationality and Place of Birth Now Explicit

Under the CJ(MLTF)A 2010 as currently in force, the identification obligation requires establishing a client's identity — name, date of birth, and address — and verifying it from a reliable and independent source. The specific data points to be collected are not exhaustively enumerated in the current Irish legislation.

Regulation EU 2024/1624 is more prescriptive. The AMLR explicitly requires that for individual clients, the following data points are obtained as part of the identification process: nationality and place of birth are added as mandatory fields alongside name, date of birth, and residence address.

Verification must use at least two independent sources. The AMLR formalises a multi-source verification approach that, under current Irish law, is best practice but not always expressly mandated. From July 2027, single-source verification for an individual client is non-compliant on its face.

Independent Audit

Independent Audit Function: Mandatory for All Firms Regardless of Size

This is the change that will have the most immediate operational impact on smaller construction practices.

Under the current CJ(MLTF)A 2010 framework, the requirement to have an independent audit function for AML compliance is effectively calibrated to the size and nature of the firm. A two-partner QS practice with a small number of property transaction clients has, in practice, operated without a formal independent review of its AML framework.

Regulation EU 2024/1624 removes that discretion. The AMLR requires all obliged entities — including all designated persons in the construction and property sector — to have their AML policies, controls, and procedures subject to independent audit. The audit must assess whether the framework is effective, up to date, and consistently applied. 'Independent' means independent of the persons responsible for implementing the AML framework — it cannot be self-assessed.

For small practices without an internal compliance function, this will typically mean commissioning an external AML review from a qualified third party. Building the written AML framework — policies, procedures, risk assessment methodology, staff training records — is the prerequisite for that audit. A practice that has not documented its framework cannot have it independently reviewed.

Staff Integrity

Staff Integrity Assessments Under the AMLR

Regulation EU 2024/1624 introduces explicit requirements on the integrity and competence of staff involved in AML compliance. Obliged entities must take measures to ensure that their employees and agents who have AML responsibilities meet standards of integrity and have the knowledge and skills necessary to carry out their functions effectively.

For construction practices, this translates into two practical requirements. First, staff involved in CDD or compliance functions must have documented training on AML obligations — generic induction training is insufficient if the role involves designated-person compliance work. Second, practices must have a process for assessing the integrity of staff in those roles — which, at minimum, means retaining records of appointment checks and ensuring that the AML compliance role is not held by an individual with a relevant criminal history.

This obligation is incoming, not yet current law. However, the infrastructure to meet it — training records, staff induction documentation, role descriptions for compliance functions — takes time to build and should not be left to the weeks before the July 2027 application date.