AMLA explained: what an EU supervisor in Frankfurt means for a firm in Cork

You may have seen the headlines: the EU has a new anti-money laundering authority, based in Frankfurt, and it is already up and running. If you run an accountancy practice, a solicitor's firm, an estate agency or a trust or company service provider in Cork — or anywhere else in Ireland — a reasonable first question is: does this mean an EU regulator is going to inspect my firm?

The short answer is almost certainly no. The longer answer is that AMLA will still change your compliance life, just indirectly — through the standards it writes and the pressure it puts on the supervisor you already know. With the new EU rulebook, Regulation (EU) 2024/1624 (the AMLR), applying from 10 July 2027, it is worth understanding exactly how Frankfurt reaches your front door.

What AMLA actually is

AMLA is the Anti-Money Laundering Authority, a new EU body created by Regulation (EU) 2024/1620. It is based in Frankfurt and has been operational since 1 July 2025.

It is one of three instruments in the EU's AML package, and it helps to keep them straight:

The AMLR sets the rules your firm must follow. AMLD6 organises the national bodies that supervise you. AMLA sits on top, making sure the rules are applied the same way in Dublin as in Dresden.

Will AMLA supervise your firm directly?

No. AMLA's direct supervision is reserved for a small group — up to around 40 high-risk, cross-border financial institutions — and even that only begins from 2028. A small or mid-sized Irish practice is nowhere near that category.

Your day-to-day supervisor stays the one you have now:

• Estate agents, letting agents, auctioneers and property management firms: the PSRA (Property Services Regulatory Authority)
• Solicitors: the Law Society of Ireland
• Accountants, auditors and tax advisers who belong to a professional body: the designated accountancy bodies — Chartered Accountants Ireland, ACCA, CPA Ireland and others
• TCSPs, high-value goods dealers and unaffiliated accountants or tax advisers: the AMLCU (Anti-Money Laundering Compliance Unit) in the Department of Justice
• Banks, funds, payment firms, insurers and CASPs: the Central Bank of Ireland

That structure survives the 2027 changeover. AMLD6 keeps supervision national; it does not replace your supervisor with a Frankfurt office.

So why should a firm in Cork care?

Three reasons, and they are practical rather than theoretical.

1. AMLA writes the fine print of the rules you will follow

The AMLR is deliberately drafted as a single rulebook, but much of the operational detail is delegated to AMLA through regulatory technical standards, implementing technical standards and guidelines. AMLA carries roughly 23 of these mandates, most of them due around 10 July 2026 — which means they are landing now, in the run-up to the 2027 application date.

One concrete example from the AMLR itself: enhanced due diligence applies to high-net-worth relationships involving assets of €5 million or more handled for a client whose total wealth is €50 million or more — and AMLA guidance on how to apply the €50 million test is due by 10 July 2027. When your supervisor asks how you assessed a wealthy client, the benchmark it uses will trace back to Frankfurt.

If you want to track what is being published, the primary source is amla.europa.eu — and the AMLR text itself is on EUR-Lex.

2. AMLA drives your national supervisor towards tougher, more consistent enforcement

A large part of AMLA's job is supervisory convergence: making sure national authorities across all 27 member states apply the rulebook to a common standard. In practice, that means the PSRA, the Law Society, the accountancy bodies, the AMLCU and the Central Bank of Ireland will increasingly work to EU-level expectations on how they inspect, what they look for, and how they respond to weak controls.

Ireland is already moving in that direction. An administrative financial sanctions regime for the AMLCU has been in force since 30 June 2026 (S.I. No. 307 of 2026), and Ireland has published an AML/CFT Action Plan for 2026–2027. Enforcement got teeth before the AMLR even applies.

3. The rulebook you will be inspected against is EU-wide, not Irish

From 10 July 2027, the substantive rules — customer due diligence thresholds, the harmonised 25% beneficial-ownership test, prescribed compliance roles, record retention — come from the directly applicable AMLR rather than from the Criminal Justice (Money Laundering and Terrorist Financing) Act 2010 as you know it today. Irish law will even change what you are called: "designated persons" under the CJA 2010 become "obliged entities" under the AMLR.

An AML programme written for the CJA 2010 world will be out of date on that day, however diligently it was maintained.

What stays Irish

It is worth being clear about what does not change, because AMLA anxiety can be overdone:

• Your supervisor remains the Irish authority for your sector, as set out above.
• Suspicious Transaction Reports remain a national process: in Ireland that means dual reporting, to FIU Ireland via the goAML portal and to the Revenue Commissioners via ROS.
• The RBO (Register of Beneficial Ownership) and Ireland's other beneficial-ownership registers remain the registers you consult, with AMLD6 connecting registers across the EU over time.
• Until 10 July 2027, the CJA 2010 remains the rulebook you are supervised against. Nothing about AMLA suspends your current obligations.

What to do now

You do not need to read 23 technical standards. You do need a firm-level plan:

1. Confirm who supervises you — and will keep supervising you — so your file speaks their language.
2. Diarise the dates: AMLA standards landing through 2026, the AMLR applying on 10 July 2027.
3. Gap-check your current programme against the AMLR's headline changes — CDD thresholds, the 25% beneficial-ownership rule, the compliance manager and compliance officer roles, five-year retention then deletion.
4. Assign ownership: someone in your firm should be reading AMLA publications relevant to your sector, or relying on a provider who does.
5. Refresh your business-wide risk assessment with the 2027 rulebook in mind, rather than patching the old one again.
6. Keep filing STRs and meeting your CJA 2010 obligations in the meantime — the changeover is a replacement, not a pause.

For a fuller picture of how the three instruments fit together and what changes for your sector, see our AMLR explainer.

How CompliDesk helps

CompliDesk Ireland is being built AMLR-native — policies, risk assessment and workflows mapped to Regulation (EU) 2024/1624 from the start, with AMLA standards tracked as they land. If you want a head start, download the AMLR readiness checklist and see where your current programme stands.