CIMA Introduces New AML and Sanctions Rules for Financial Service Providers
On 20 July 2026, the Cayman Islands Monetary Authority (CIMA) gazetted two new rules: the Rule on Effective Compliance Programme for the Prevention and Detection of Money Laundering, Terrorist Financing and Proliferation Financing for Financial Services Providers (the "AML Rule") and the Rule on Compliance with Financial Sanctions and Targeted Financial Sanctions (the "Sanctions Rule"). These rules will come into force on 18 September 2026, providing financial service providers (FSPs) with a 60-day period to ensure compliance.
Key Provisions of the AML Rule
The AML Rule consolidates existing obligations from CIMA's Guidance Notes into a directly enforceable instrument. It introduces several new or expanded requirements, notably:
- Independent Audit: FSPs must conduct independent audits of their compliance programs to assess effectiveness and adherence to AML/CFT/CPF obligations.
- Outsourcing Notification: FSPs are required to notify CIMA when outsourcing compliance functions, ensuring that such arrangements do not compromise compliance standards.
- Compliance Training: Mandatory ongoing training programs for staff to stay updated on AML/CFT/CPF regulations and practices.
Scope and Application
The AML Rule applies to all FSPs regulated by CIMA under the Regulatory Acts, including branches, subsidiaries, affiliates, and members of a CIMA-regulated financial group. Each FSP is required to implement a compliance program commensurate with its size, complexity, structure, nature of business, and risk profile.
Effective Date and Compliance Timeline
Both the AML Rule and the Sanctions Rule will take effect on 18 September 2026. FSPs are advised to review and, if necessary, amend their compliance programs, governance structures, and training arrangements to meet the new requirements by this date.
Implications for Financial Service Providers
These developments signify a shift towards more stringent regulatory oversight in the Cayman Islands. FSPs must proactively assess their current compliance frameworks and make necessary adjustments to align with the new rules. Non-compliance could result in fines or regulatory action, emphasizing the importance of timely and thorough preparation.
For detailed guidance on the new rules and their implications, FSPs should consult the official publications by CIMA and seek legal advice to ensure full compliance.