Targeted financial sanctions: the compliance officer's new duty from July 2027

Most Irish designated persons think of sanctions as a banking problem. Banks screen payments; solicitors, accountants and estate agents assume anything sanctioned would be caught upstream. The AMLR ends that assumption in a very specific way: from 10 July 2027, Regulation (EU) 2024/1624 makes your compliance officer personally responsible for implementing targeted financial sanctions within the firm.

That is a named person, in your firm, owning a duty many small firms have never formally assigned to anyone. Here is what the role involves and how to get ready without turning your practice into a bank.

What are targeted financial sanctions?

Targeted financial sanctions are restrictive measures aimed at listed individuals, entities and bodies - most visibly asset freezes and prohibitions on making funds or economic resources available to designated parties. For an Irish firm, the lists that matter start with the EU consolidated financial sanctions list and United Nations designations, which apply regardless of the size or sector of your business.

The key point for professionals: sanctions obligations already bind every person and business in the State. They are not created by the AMLR. What the AMLR adds from July 2027 is an organisational requirement - that implementation inside each obliged entity is owned by the compliance officer, as part of the prescribed compliance structure of a board-level compliance manager plus a compliance officer of sufficiently high standing.

What does "responsible for implementation" actually mean?

The AMLR sets the destination; some of the operational detail will be filled in by AMLA guidance and technical standards, the first drafts of which were submitted to the European Commission around 10 July 2026 and are awaiting adoption - so watch amla.europa.eu before finalising your framework. But the core of the role is already clear from the nature of sanctions obligations themselves. Your compliance officer will need to be able to show:

• Screening happens. Clients - and for corporate clients, their beneficial owners - are checked against the relevant sanctions lists at onboarding, and the relationship is re-screened as lists change.
• Matches are handled. There is a documented route for resolving potential matches: confirming or discounting them, and knowing what to do on a true match, including freezing and not proceeding, and reporting to the relevant authorities.
• Records exist. Screening dates, list versions or sources, match resolutions and decisions are all evidenced.
• Staff know the basics. The people who onboard clients understand that a sanctions concern goes straight to the compliance officer, immediately.

In a small firm, none of this needs to be elaborate. It needs to be assigned, written down and actually done.

Why can't we leave this to the banks?

Because your exposure is different from theirs, not smaller. A hypothetical: a solicitor is instructed on a property purchase where the funds come from a company whose 30 per cent shareholder turns out to be a designated person. The bank may screen the payment - but the professional relationship, the beneficial-ownership analysis and the decision to act sit with the firm. Beneficial-ownership screening is precisely where non-bank firms add a layer banks cannot see: you are the one obtaining the RBO extract, mapping ownership against the AMLR's 25 per cent threshold, and identifying the humans behind the structure. Those same individuals are the ones to screen.

Sanctions lists also change quickly. A client who screened clean at onboarding in 2025 may not be clean today, which is why re-screening on list updates - or at defined intervals for lower-risk books - belongs in your procedures rather than being left to chance.

How should a small Irish firm set this up?

A proportionate framework has four parts:

1. Name the owner now. Do not wait for July 2027. Identify your compliance officer, record that targeted financial sanctions sit in their remit, and have your compliance manager - the senior owner of the programme - approve it.
2. Choose your screening method. Manual checking of lists is possible for a tiny client base but fragile; most firms will use a screening tool that covers the EU consolidated list and UN designations, with an audit trail. Whatever you choose, write down what is screened, when, and against which lists.
3. Write the match procedure. One page is enough: how a potential match is investigated, who decides, what happens on a true match - stop, freeze, do not tip off the client, report - and where it is all recorded.
4. Train for it. Fold sanctions awareness into your AML training so front-line staff recognise that this is a stop-everything issue, not a note for the monthly file review.

If your firm is supervised by the Central Bank of Ireland you will already recognise this structure; guidance on its expectations is published at centralbank.ie. For PSRA-, Law Society-, accountancy-body- and AMLCU-supervised firms, building it now means the July 2027 change is an update to a working system, not a scramble.

What to do now

• Decide who your compliance officer is - and record that sanctions implementation will sit with them from 10 July 2027.
• Screen your existing client book, including beneficial owners, and date the exercise.
• Put re-screening on a schedule tied to list updates or periodic reviews.
• Write a one-page match-handling procedure covering investigation, freezing, reporting and no tipping off.
• Add a sanctions module to your next AML training session and log it.
• Diarise a review of the framework once AMLA's technical standards are adopted.

Where CompliDesk fits

CompliDesk Ireland screens clients and their beneficial owners against EU and UN sanctions data at onboarding and on an ongoing basis, with every check dated and evidenced for your compliance officer. For how sanctions fit into the wider July 2027 rulebook, see the AMLR explainer.