ECSH81100 - Regulation18(4) concession

Ìýof The Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 (MLR 2017)ÌýÌýrequires a relevant business to maintain an up-to-date written record of the steps it has taken to comply with regulations 18(1) to (3) MLR 2017 which relate to the requirement forÌýa relevant business to complete a risk assessment.Ìý

It also allows a supervisory authority to waive the requirement to keep such a written record, and to give notice to the business of that decision in writing. This is referred to as â€�the regulation 18(4) concessionâ€�.ÌýÌý

Regulation 18(5) MLR 2017 states that the supervisory authority may not grant a regulation 18(4) concession unless it considers that the risks of money laundering and terrorist financingÌýapplicable to the sector in which the business operatesÌýare clear and understoodÌýby them.ÌýÌýÌýÌýÌýÌýÌý

When can the concession be granted?Ìý

The regulation 18(4) concession should only be granted to businessesÌýwho can satisfy allÌýthese requirements:â€�Ìý

  • Can demonstrateÌýa thorough and detailed understanding of the money laundering/terrorist financing (MLTF)Ìýrisk to which they are exposed.â€�Ìý

  • Are smallÌýâ€� both in size and number of relevant transactions.Ìý

  • Are sole traders.Ìý

  • Are not working in/with,Ìýor are exposed to, any higher risk context or customers.â€�Ìý

  • Are not complex businesses in nature or structure.â€�Ìý

  • Do not handle any cash.â€�Ìý

  • Are businesses of a type whose circumstances and dealings rarely change or vary.â€�Ìý

  • Can demonstrateÌýa good standard of MLRÌý2017Ìýcompliance in all other obligations. â€�Ìý

  • Have not been found to be in breach of MLRÌý2017Ìý(unless in very exceptional circumstances details below).Ìý

  • DoesÌýnot have any unspentÌýconvictionsÌýfor relevant offences under Schedule 3ÌýMLR 2017 (where a Beneficial Owner, officerÌýor manager (BOOM)Ìýof the business has an unspent conviction for a relevant offences under Schedule 3ÌýMLR 2017 the BOOM cannot be approved,ÌýandÌýany approval granted is automatically invalidated).Ìý

  • Are not new businesses, which have not undertaken a risk assessment and cannot demonstrateÌýa clear and detailed understanding of risk.â€�Ìý

NoÌýconcessionsÌýhave been granted to date;Ìýtherefore,Ìýall existingÌýsupervisedÌýbusinesses should already have a written risk assessment in place in order toÌýbe compliant with the MLR 2017.ÌýÌý

We should notÌýgrant the Regulation 18(4) concession to any business already registered with us which does not have an existing written risk assessment, since this would mean they have been in breach of regulation 18(4) MLR 2017 from at least the date of their registration or 1st January 2018 (when our unofficial “grace periodâ€� ended)Ìýor the date they began undertaking relevant activityÌýifÌýthey started trading after this date. To do otherwise risks granting the regulation 18(4) concession to businesses which are simply trying to avoid having to do one. However, this should not prevent a newly registered, low-risk, and compliant businesses from seeking a concession under regulation 18(4) MLR 2017.Ìý

Larger, more complex businesses, those exposed to higher risk, those who are not sole tradersÌýand those with low levels or standards of anti-money laundering (AML)Ìýcompliance, or a known history of non-compliance in any HMRC regime (in other words not just under the MLRÌý2017), shouldÌýnot be allowed to benefit from the regulation 18(4) concession.Ìý

In addition:Ìý

  • This should be a concession only used in limited circumstances where businesses meet allÌýthe relevant criteria and should only be granted with care.â€�Ìý

  • It should only be granted in response to a formal request by a businessÌý(it must not be granted by HMRCÌýon its own initiative).Ìý

  • A businessÌýwho is or has been carrying out relevant activity butÌýdoes not have the required written risk assessmentÌýshould be considered as being in breach of MLRÌý2017Ìýunless they can produce written confirmation from HMRC that the concession was granted â€� and that this can be confirmed by HMRC’s own records.Ìý

  • HMRCÌýshould, in writing, withdraw a previously given concession if the businessesâ€�Ìýcircumstances change in such a way that any of the criteria listed above no longer apply.â€�Ìý

With regards to the qualifying criteria, where a business has previously been warned or sanctioned for not having a written record of their risk assessment,Ìýthey should not usually be granted a concession under regulation 18(4) MLR 2017.â€�Ìý

To what does the concession apply?Ìý

The risk assessment referred to in regulation 18(1) MLR 2017, and to which the concession in regulation 18(4) MLR 2017 applies, requires a relevantÌýbusiness to take into accountÌýall the elements listed in regulation 18(2)(a) and (b) MLR 2017, and any further factors which the business has considered over and above the regulation 18(2) MLR 2017 list.â€�Ìý

The factors set out in regulation 18(2) MLR 2017 that must be taken into accountÌýare as follows:Ìý

  • Information made available by HMRC as supervisory authority under regulations 17(9) and 47 MLR 2017.Ìý

  • Risk factors including factors relating to:Ìý

    • Customers of the business.Ìý

    • Countries or geographical areas in which the business operates.Ìý

    • Products or services offered by the business.Ìý

    • Transactions carried out by the business.Ìý

    • Delivery channels used by the business.Ìý

If HMRCÌýis concernedÌýthatÌýthe MLTF risk will be increased by the business not maintainingÌýan up-to-date written record of any of these factors, then the regulation 18(4) concession should not be granted.Ìý

Operational considerationsÌý

When writing to inform a business of our decision to grant the concession, we should make clear that they should regularly review whether all the requirements listed aboveÌýcontinue to be met.â€� Our letter should explain that ifÌýone or more of the requirements is no longer met, the business must immediatelyÌýre-assess and document its risks, then update policies, controls,Ìýand proceduresÌýas necessary.â€� They should also write to inform HMRC that the concession is no longer applicable.Ìý

When writing to inform a business that we will not be grantingÌýthe concession, we should make our reasons for that decision clear.ÌýÌý

HMRCÌýneeds to record which businessesÌýhave been granted and refused the regulation 18(4) concession.ÌýChecks need to be undertakenÌýat suitable intervals on businessesÌýwhich have been granted the concessionÌýto ensure that the regulation 18(4)ÌýMLR 2017 criteria still apply.â€� We might also wish to consider ‘nudgeâ€� interventions such as occasional emails reminding the business of the importance of reviewing whether the regulation 18(4) MLR 2017 criteria still apply.Ìý

HMRCÌýshould not,ÌýandÌýcannot,Ìýimpose any form of sanction on a business for failing to keepÌýa written record of risk assessment when the concession has been given.â€�Ìý

The decision whether or notÌýto grant a concession is not appealable â€� regulation 18(4) decisions are not included in the list of appealable decisions within ÌýMLR 2017 - seeÌýECSH90000.Ìý

Who should make the decision about whether the concession applies or should be removed?Ìý

Whether a businessÌýshould be granted the regulationÌý18(4) concession is an operational decision.ÌýResponsibility for the decision should sit with the Grade 7 Compliance Leads, although Risking should also be consulted on the decision.â€�Ìý

Similarly, removal of the concession where it has previously been granted is an operational decision, and consideration towards this course of action could be made when the business is unable to demonstrateÌýa sufficient understanding of risk and their own risk assessment. Removal of the concession should be confirmed in writing, and the business from that point will need to revert to maintainingÌýa written record of its risk assessment. A reasonable deadline should be provided for the business to comply withÌýregulationÌý18(4) MLR 2017 requirements.ÌýIt is an operationalÌýdecision as to whether the officer would want to review the risk assessment.â€�Ìý

Further information on Regulation 18Ìýis available in ECSH63380.Ìý

ÌýÌý