What is the AML regulatory framework in Norway, and which laws apply?
A Finanstilsynet inspection can test a bank's sanctions screening with one question: when the list of sanctioned persons last changed, was the whole customer base checked again? Section 7-3(3)(b) of the Regulations makes that check a legal duty for banks, mortgage companies and finance companies.
The Norwegian AML Act is hvitvaskingsloven (LOV-2018-06-01-23), often called the Money Laundering Act. It covers money laundering (ML) and terrorist financing (TF), took effect on 15 October 2018 and was last amended from 1 August 2026; the Ministry of Finance's Regulations (hvitvaskingsforskriften) from 6 February 2026.
Only the Norwegian text in Norsk Lovtidend is authentic. Finanstilsynet's English translation, consolidated to 1 July 2025, is unofficial, leaves out both 2026 amending acts and still prints an older PEP definition in s. 2 f. This page cites the Norwegian text, read on Lovdata as in force on 5 November 2026. Like AML regulations elsewhere, Norway's rules follow the FATF Recommendations and, through the EEA Agreement, the EU anti money laundering directives (AMLD).
| Law | In force and latest change (November 2026) | What it does for AML and CFT |
|---|---|---|
| Hvitvaskingsloven, LOV-2018-06-01-23 | In force 15 October 2018 (the 2009 Act repealed); last amended by LOV-2026-02-06-2 from 1 August 2026; LOV-2026-06-19-40 adopted, not in force | Duties of obliged entities (ss. 4 to 41), supervision and fines (ss. 43 to 51), the TFR as law (s. 52) |
| Hvitvaskingsforskriften, FOR-2018-09-14-1324 | In force 15 October 2018; last amended by FOR-2026-01-29-110 from 6 February 2026 | Identity documents, transfer lines, high risk countries, reporting channel, monitoring systems |
| Penal Code (straffeloven) ss. 337 to 341 | s. 337 last amended 4 December 2020 | Laundering offenses and prison terms |
| Register of beneficial owners act, LOV-2019-03-01-2 | In force 1 November 2021 (ss. 1 to 7, 15) and 1 October 2024 (ss. 8 to 14) | Beneficial owner register at Brønnøysundregistrene |
| Sanksjonsloven, LOV-2021-04-16-18 | In force 16 April 2021; last amended by LOV-2024-12-20-80 | Basis for sanctions regulations; sanctions crimes (s. 4) |
| Kryptoeiendelsloven, LOV-2025-05-27-20 | In force 1 July 2025 | MiCA as Norwegian law |
Which EU AML rules apply in Norway as an EEA state?
As an EEA state, Norway is bound by an EU act only after an EEA Joint Committee decision adds it to Annex IX of the EEA Agreement and Norway writes it into its own law. The Act's EEA references name Directive (EU) 2015/849 and Regulation (EU) 2023/1113, the travel rule for transfers of funds and crypto assets, law under s. 52 since 1 July 2025, the day MiCA took effect through kryptoeiendelsloven.
The 2024 package is not Norwegian law. None of the Joint Committee decisions in EUR-Lex, adopted up to 5 June 2026, incorporates AMLR, Directive (EU) 2024/1640 or the AMLA Regulation. On 23 January 2026 the Ministry of Finance sent a working group's report on implementing the package to public consultation, with a deadline of 30 April 2026. 6AMLD, the criminal law Directive (EU) 2018/1673, rests on Article 83(1) TFEU in Title V, and the EFTA States' declaration to Decision 63/2020 recalls that Title V acts fall outside the Agreement.
| EU act | EEA Joint Committee decision | Status in Norway (November 2026) |
|---|---|---|
| Directive (EU) 2015/849 (AMLD4) | 249/2018, 5 December 2018 | Implemented by hvitvaskingsloven from 15 October 2018 |
| Directive (EU) 2018/843 (AMLD5) | 63/2020, 30 April 2020 | Added to Annex IX point 23b with AMLD4 |
| Regulation (EU) 2023/1113 (TFR) | 42/2025, 20 February 2025 | Law under s. 52 from 1 July 2025 |
| Regulation (EU) 2023/1114 (MiCA) | 41/2025, 20 February 2025 | Law under kryptoeiendelsloven from 1 July 2025 |
| Delegated Regulation (EU) 2016/1675 (high risk third countries), latest amendments 2026/46 and 2026/83 | 249/2018; latest 34/2026 (Russia) and 35/2026 (Bolivia, British Virgin Islands), 6 February 2026 | Regulations s. 4-10, as amended from 6 February 2026 |
| AMLR (EU) 2024/1624, Directive (EU) 2024/1640 (the package's AMLD6), AMLA Regulation (EU) 2024/1620 | None in EUR-Lex (decisions adopted to 5 June 2026) | Not Norwegian law; AMLR applies in the EU from 10 July 2027 |
| Directive (EU) 2018/1673 (6AMLD, criminal law) | Outside the Agreement (Title V TFEU) | Penal Code ss. 337 to 341 apply |
Does Norway apply EU sanctions?
Not automatically. A regulation under sanksjonsloven must implement them: s. 1 covers binding UN Security Council decisions, s. 2 measures adopted in intergovernmental organizations such as the EU, or with broad international support, that aim to keep peace and security or respect for democracy, the rule of law, human rights or international law. The King issues these regulations and the Ministry of Foreign Affairs is the ministry responsible; the Russia regulation was last amended from 21 October 2026. A breach carries fines or up to three years in prison, or both, and negligence fines or up to six months, or both (s. 4). The FIU received over 350 sanctions related reports in 2025, more than 60 percent on Russia and Belarus.
Who is Norway's anti money laundering regulatory authority?
Section 43 splits supervision by type of obliged entity, and a separate unit takes the reports. Finanstilsynet carries most of the load. Its history page gives 1986 for the merger of the Banking Inspectorate and the Insurance Council that formed Kredittilsynet, and 21 December 2009 for the new name.
| Body | Who or what it covers | Basis (in force, November 2026) |
|---|---|---|
| Finanstilsynet (the Financial Supervisory Authority of Norway, FSA) | Financial firms in s. 4(1)(a) to (c) and (e) to (o); auditors, accountants, estate agents, limited license payment providers and lawyers for property and business sales; trust and company service providers, which it also authorizes | s. 43(2)(a); s. 42 |
| Supervisory Council for Legal Practice (Advokattilsynet) | Lawyers for the work in s. 4(2)(c) nos. 2 to 5 | s. 43(2)(b) |
| Norwegian Gambling Authority (Lotteritilsynet) | Gambling providers | s. 43(2)(c) |
| Supervisor the Ministry names by regulation | Art dealers and art storage firms | s. 43(2)(d) |
| Tax office | The NOK 40,000 cash limit for dealers in goods | s. 5(2) |
| Økokrim's Financial Intelligence Unit (FIU) | Receives reports; can forbid a transaction in special cases | ss. 26, 27(1) |
| Brønnøysundregistrene | Keeps the register of beneficial owners | Register act s. 8(1) (keeper appointed by the King) |
| Ministry of Foreign Affairs | Ministry responsible for the sanctions regulations; receives delisting requests | Sanksjonsloven s. 6; Lovdata's ministry field for each regulation |
Which entities must comply with the Money Laundering Act?
Section 4 lists 17 kinds of financial firm and 9 professions. It binds firms established in Norway, branches of foreign firms included (s. 3).
- Financial firms (s. 4(1)). Banks, mortgage and finance companies, Norges Bank, electronic money, foreign exchange and payment institutions, investment firms, fund managers, insurers and insurance intermediaries (not reinsurance brokers), central securities depositories, custody or depositary firms (depotvirksomhet), AIF managers, financial intermediaries, crypto asset service providers (p; MiCA providers, advice excepted, s. 2 m) and crowdfunding service providers (q).
- Professions (s. 4(2)). Auditors, state authorized accountants, lawyers for listed transactions, estate agents, trust and company service providers, limited license payment providers, gambling providers, and art dealers and art storage at NOK 80,000 or more.
- Dealers in goods (s. 4(3)). The s. 5 cash limit only.
Providers of crowdfunding services joined last: LOV-2026-02-06-2 added letter (q) from 1 August 2026.
What are the AML compliance requirements in Norway?
The duties are risk based. Section 6 makes risk assessment the basis for applying the Act, and s. 9(3) requires a firm to show that the scope of its measures fits the risk. Where risk is high, s. 17 requires enhanced due diligence; for a customer or transaction tied to a country on the EU high risk list, Regulations s. 4-10(3) sets eight minimum measures, from more information on the customer to management approval.
complead, formerly Sanction Scanner, is an AI native platform for AML, KYC and fraud; this page's table marks in its last column where it supports each duty. Sanction Scanner, the screening product, is part of complead. Where a duty sits outside any software, the column says so.
| Obligation | Legal basis (in force, November 2026) | What a program must do | How complead does it |
|---|---|---|---|
| Risk assessment | s. 7 | Identify and assess the firm's ML and TF risk by business, products, services, customer types and geography; assess again before new products, services or technology; document it, keep it current and make it available to the supervisor. | Each detection rule can be limited to one product, segment or jurisdiction; each change is versioned and can be rolled back in one click, with a note of who made it, when and why. |
| Procedures and a responsible manager | s. 8 | Current, documented procedures adopted at the top level; one person in management with special responsibility for following them up (s. 8(5)); group procedures in branches and majority owned subsidiaries. | Outside the platform: a governance duty of the firm. |
| When customer due diligence applies | ss. 10, 11 | A new customer relationship; occasional transactions at the s. 10(1)(b) lines; suspicion; transfers where the TFR requires it. Measures come before the relationship or transaction, with the s. 11(2) exceptions. | Customer risk assessment and KYC rolls the onboarding checks into one risk score per customer and logs each search behind it. |
| Natural persons | s. 12; Regulations s. 4-3 | Name, national identity number, D-number or another unique identity code (without a Norwegian number, also birth date, place, sex and citizenship), address; verify with valid ID in person, or with extra documents or measures remotely; an eID on the published self declaration list counts; check for PEPs (s. 12(4)); purpose and intended nature (s. 12(5)). | The name on the verified ID goes through screening at onboarding; the log keeps the search even when nothing matches. |
| Legal entities | s. 13 | Name, legal form, organization number, address, managing director and board; verify in a public register or a certificate no older than three months; understand and document the ownership and control structure. | The entity is confirmed against official registers and vetted sources. |
| Beneficial owners | s. 14; register act s. 9 | Natural persons, alone or with close family, owning or controlling more than 25 percent, able to appoint or remove more than half the board, or controlling by agreement or otherwise; indirect control counts; foundations and foreign trusts follow s. 14(3) and (4); no search for companies listed on an EEA regulated market or under equal disclosure rules, or their majority owned subsidiaries. If all reasonable measures find no owner or leave doubt and there is no suspicion, the board and managing director may be recorded instead (s. 13(3)). Registered entities file their owners in the register within 14 days of registration or a change, even with none to report, in dissolution, dormant or listed (register act s. 9(3), (4); Brønnøysundregistrene). | KYB and UBO verification follows owners up the chain, without a fixed depth cap, until it reaches the natural persons who own or control the customer; a layer it cannot resolve stays marked unresolved. |
| Enhanced due diligence | s. 17; Regulations ss. 4-9, 4-10 | Extra measures at high risk (indicators in s. 4-9); for EU listed high risk countries at least measures (a) to (h) of s. 4-10(3), including enhanced transaction monitoring and management approval. | Detection rules scoped per jurisdiction set their own conditions, thresholds and score effects. |
| Politically exposed persons | ss. 2 f, 18, 24(3) | Systems to find PEPs, close family members and known close associates, Norwegian office holders included (s. 2 f names eight categories, from heads of state to senior managers of international organizations, and excludes middle and lower ranking posts; the Regulations hold no list of Norwegian posts as of November 2026); senior management approval before opening or continuing; adequate measures on source of wealth and funds; enhanced ongoing monitoring; at least one year after office. | The PEP database is built source by source; a match enters the customer's one risk score and the reviewer decides. |
| Ongoing monitoring | s. 24; Regulations ss. 4-13, 4-14 | Check transactions against what the firm knows of the customer, its business, risk profile, source of funds and purpose; repeat due diligence regularly and whenever earlier data may be wrong or incomplete. If due diligence cannot be done, end the relationship and consider examining and reporting (s. 24(4); not for lawyers ascertaining a client's legal position or in proceedings, s. 24(5)), or end it in part by limiting or blocking the products and services those measures concern, while ongoing monitoring continues (Regulations s. 4-13(1)). | Ongoing monitoring is started and stopped per name through API triggers. |
| Electronic monitoring and sanctions | s. 38; Regulations s. 7-3 | Banks, mortgage and finance companies, unless Finanstilsynet exempts them (s. 38(2)), run electronic monitoring over every system for customer transactions, with rules that match the risk assessment; screen transactions for persons under sanctions in Norwegian law; check the customer base at onboarding or an s. 10 transaction and at every change to the list. | Names are checked against 3,500+ sanctions, PEP and watchlists from 220+ jurisdictions, refreshed every 15 minutes. Client screening also covers the lists in Norway's own sanctions regulations, issued under the Sanctions Act (sanksjonsloven); each rescreen is logged. |
| Examine, report, hold, no tipping off | ss. 25 to 28; Regulations s. 5-1 | Examine unusual activity; report remaining suspicion to Økokrim (a personal duty too; lawyers do not pass on what they learn when ascertaining a client's legal position or in proceedings, s. 26(3)); do not execute a suspicious transaction before Økokrim is informed; tell neither the customer nor third parties, with the s. 28(2) to (7) exceptions. | An alert shows the rule behind it and the signals that matched; case management includes reporting support for the filing. |
| Transfers of funds and crypto assets | s. 52; ss. 10(1)(d), 17 a; Regulations s. 4-1a | Regulation (EU) 2023/1113 applies as Norwegian law; crypto asset service providers assess each transfer to or from a self hosted address and apply at least one enhanced measure. | Payment screening checks sender and receiver of each transfer through the API during processing. |
| Records | s. 30 | Keep data and documents from ss. 9 to 26 for five years after the relationship ends or the transaction; then erase personal data unless a regulation allows longer, never beyond ten years in total; answer authority queries on relationships held in the last five years. | Each screening search is kept with its user, query, timestamp and result, no match included. |
| Internal control, training, whistleblowing | ss. 35 to 37 | Internal control; where size and risk call for it, a compliance officer, employee suitability checks and independent control; regular training; protection for staff who report and an anonymous whistleblowing channel where risk calls for it. | Outside the platform: staffing and policy duties of the firm. |
Which thresholds apply in 2026?
Picture a foreign exchange firm (illustrative) whose walk in customer changes NOK 60,000 on Monday and NOK 45,000 on Thursday in what looks like one deal. Neither amount reaches NOK 100,000, but s. 10(2) adds up operations that appear linked, so Thursday's exchange takes the total to NOK 105,000 and customer due diligence comes before it (s. 11(1)). The same adding up applies to the NOK 16,000 and 80,000 lines, not to the NOK 8,000 line for transfers.
| Line | Amount | Basis (in force, November 2026) |
|---|---|---|
| Occasional transaction, no established relationship | NOK 100,000 or more, linked operations added | s. 10(1)(b) no. 1, (2) |
| Transfer of funds; crypto asset transaction | NOK 8,000 or more | s. 10(1)(b) no. 2; Regulations s. 4-1a |
| Gambling providers | NOK 16,000 or more, linked operations added | s. 10(1)(b) no. 3 |
| Art dealers and art storage | NOK 80,000 or more, linked operations added | s. 10(1)(b) no. 4; s. 4(2)(h), (i) |
| Cash paid to a dealer in goods | Not allowed at NOK 40,000 or more, also when split into several payments | s. 5(1) |
| Beneficial owner | More than 25% of ownership or votes, or the right to appoint or remove more than half the board | s. 14(1) |
| Register extract for a legal entity | No older than three months | s. 13(2) |
| Low risk electronic money exemption | After a low risk assessment: not reloadable, or at most EUR 150 a month usable only in Norway; at most EUR 150 stored; goods and services only; not funded with anonymous electronic money; the issuer monitors. Lost on cash redemption or withdrawal, or a remote payment, above EUR 50 | Regulations s. 4-2 |
| PEP measures after office | At least one year | s. 18(4) |
| Records | Five years; personal data then erased unless a regulation allows longer, ten years at most in total | s. 30(1), (2), (4) |
How do you report suspicious activity to Økokrim?
Section 26(1) sends every report to Økokrim, not to Finanstilsynet. The manager named under s. 8(5) sends it (Regulations s. 5-1(1)), and the duty also binds board members, managers and staff personally (s. 26(2)). Regulations s. 5-1(2) still names Altinn, with an Økokrim form as the fallback, but the FIU launched a new web form and API on 14 April 2026 and ended reporting through Altinn II on 31 May 2026, before Altinn II closed on 19 June.
The FIU's own 2025 case shows the s. 27 hold at work. A bank could not rule out that a payment from a construction company was proceeds of crime, and the account holder appeared unaware of its purpose, so the bank asked the FIU to suspend it. The FIU's further inquiries strengthened the suspicion, and it filed a criminal report for aggravated money laundering. In 2025 it suspended 22 transactions in Norway on 110 requests, and only 723 of at least 30,000 obliged entities filed any of the 33,313 suspicious activity reports, its annual report for 2025 shows.
| Stage (in force, November 2026) | Input | Output | Who decides |
|---|---|---|---|
| Examine (s. 25) | Activity that departs from what the firm knows of the customer; a transaction with no apparent lawful purpose, unusually large or complex, unusual for the customer, tied to a country with weak AML measures, or otherwise unusual | Further examination, documented | Staff under the s. 8 procedures |
| Report (s. 26) | Suspicion that remains after the examination | Report to Økokrim through the new form or API; more information on Økokrim's request; lawyers' exception in s. 26(3) | The manager named under s. 8(5); each board member, manager and employee personally |
| Hold (s. 27) | A suspicious transaction | Not executed before Økokrim is informed; if it cannot be stopped, or stopping it could hamper an investigation, Økokrim is told at once afterwards | The firm; Økokrim may forbid the transaction in special cases |
| Keep silent (s. 28) | An examination, report or investigation | No disclosure to the customer or third parties; the supervisor and prosecutors may be told; exceptions for financial groups in the EEA and for auditors, accountants and lawyers (s. 28(3) to (7)) | Everyone acting for the firm |
| Record (s. 30) | Documents from ss. 9 to 26 | Kept five years, then personal data erased | The firm |
What are the penalties for AML breaches in Norway?
| Breach | Ceiling | Basis (in force, November 2026) |
|---|---|---|
| Administrative fine, financial firms in s. 4(1)(a) to (c), (e), (g) to (k), (n), (p) | NOK 44 million; instead up to double the benefit where it can be calculated; up to 10% of turnover in the last approved annual accounts (consolidated in a group) if higher | s. 49(5) |
| Administrative fine, s. 4(1)(d), (f), (l), (m), (o), the s. 4(2) professions and s. 4(5) | NOK 9 million; instead up to double the benefit where it can be calculated | s. 49(4) |
| Board members and the managing director, when the firm is fined | NOK 44 million or NOK 9 million by the firm's letter, or up to double the benefit; the turnover cap applies to the firm only; intent or gross negligence | s. 49(2), (4), (5) |
| Anyone acting for the firm who breaches s. 26 or 28 | As for board members; intent or gross negligence; no fine on the firm needed | s. 49(3), (4), (5) |
| Criminal breach of ss. 9, 12, 13, 17, 18, 24, 25, 26, 28, 30 or 42 | Fines; board members, the managing director and individuals only for intent or gross negligence; up to 1 year in prison in particularly aggravating circumstances | s. 51 |
| Unfit manager | Ban on management functions | s. 48 |
| Money laundering | Fines or up to 2 years; aggravated up to 6 years; up to 15 years for proceeds of aggravated robbery, aggravated human trafficking or particularly aggravated drug offenses; negligent: fines or up to 2 years | Penal Code ss. 337, 338, 340 |
| Sanctions breach | Fines or up to 3 years, or both; negligent: fines or up to 6 months, or both | Sanksjonsloven s. 4 |
| Beneficial owner register | Orders, then coercive fines; intentional failure: fines or up to 1 year | Register act ss. 14, 15 |
| Time bar for administrative fines | Five years after the breach ends | s. 49(7) |
A supervisor may fine an obliged entity that breaches ss. 6 to 8, chapter 4, ss. 25 to 28, 30, 35, 36, 39, 42 or 52, or the regulations under them (s. 49(1)); an obliged person who is not a firm must have acted with intent or gross negligence. The police and the courts handle crimes under s. 51 and the Penal Code. Neither s. 49(4) nor s. 49(5) names letter (q), the crowdfunding service providers obliged from 1 August 2026.
Which firms has Finanstilsynet fined?
After an ordinary AML inspection of DNB in February 2020, Finanstilsynet's preliminary report named a fine of NOK 400 million, which DNB put at about 0.7 percent of its annual turnover on 7 December 2020. The final report of 3 May 2021 confirmed the fine. The criticism was inadequate compliance with the Act, not complicity in laundering, and DNB acknowledged due diligence shortcomings at six companies in the Samherji case. The table draws on the banks' own Oslo Børs notices, so it covers listed banks only.
| Date | Entity | Outcome | Finding (issuer notices, read 5 November 2026) |
|---|---|---|---|
| 3 May 2021 | DNB Bank ASA | NOK 400 million, final report (preliminary report 7 December 2020) | Inadequate compliance with the Act; inspection February 2020 |
| 27 November 2023 | Askim & Spydeberg Sparebank | NOK 9.5 million, accepted | Deficient compliance and routines in several areas; AML not given enough priority; inspection June 2022 |
| 26 March 2025 | SpareBank 1 Østlandet | NOK 30 million, confirmed (notified 7 June 2024) | Inadequate compliance with AML rules; inspection September 2022; about 0.6% of 2023 turnover by the bank's figure; appeal to the Financial Supervisory Authority's Appeals Board pending (annual report 2025, 5 March 2026) |
What is Norway's present FATF status?
Norway has been an FATF member since 1991. Its country page rests on the mutual evaluation of 18 December 2014, which found that Norway "needs to establish overarching policies and strategies, and address significant weaknesses in a number of key areas." The follow up assessment of 5 December 2019 raised IO.1, IO.6 and IO.11 from Moderate to Substantial, which left Norway Substantial on 5 of 11 effectiveness outcomes and moved it to regular follow up.
After technical compliance follow up reports, the latest on 20 February 2023, Norway is Partially compliant on 3 of the 40 FATF Recommendations: R.13 (correspondent banking), R.24 (beneficial ownership of legal persons) and R.33 (statistics). Økokrim's FIU expects the next evaluation in 2027, the first since 2014.
The FATF's gray list of 19 June 2026 does not name Norway. FinCEN's note on the 30 October 2026 plenary lists four removals from that list and no change to the call for action list.
Which AML solutions for Norway meet the screening and monitoring rules?
For a bank, s. 38 and Regulations s. 7-3 describe the AML system the law expects: monitoring over every system for customer transactions, rules that match the s. 7 risk assessment, sanctions screening of transactions and a customer base check at each list change. Other obliged entities carry the duty only if a regulation says so (s. 38(3)).
Client screening and ongoing monitoring covers the screening half. Its log of every search, holding the searcher, the name searched, the time and the outcome, empty results too, is the trail Finanstilsynet's inspectors can read after a s. 7-3(3)(b) rescreen.
Transaction monitoring covers s. 7-3(1) and (2). Teams write detection rules without code, limit each to a product, segment or jurisdiction and backtest it on a 30, 60 or 90 day window of their own history first. Routine cases are closed by agents, which attach the evidence, a narrative and the work log. The person named under s. 8(5) takes the rest and files any report with Økokrim. The case shows who made each call.
What changed in AML rules in Norway in 2025 and 2026?
- 1 July 2025. The TFR and MiCA become Norwegian law; crypto asset service providers become obliged entities under s. 4(1)(p), replacing the virtual currency exchange and custody providers the Regulations covered until then (kryptoeiendelsloven s. 19(2)).
- 6 February 2026. Regulations s. 4-10 adds Russia, Bolivia and the British Virgin Islands to the high risk list and drops six countries.
- 14 April 2026. Økokrim launches its new reporting form; reports through Altinn II end on 31 May.
- 24 June 2026. Økokrim's NRA 2026 for money laundering raises the risk for finance companies, electronic money institutions, Norwegian crypto providers, insurers and estate agents, among others.
- 1 August 2026. Crowdfunding service providers become obliged entities.
Next, LOV-2026-06-19-40, adopted on 19 June 2026, will tie s. 49(1) fines to intent or negligence and limit management bans to five years from a date the King sets. AMLR applies in the EU from 10 July 2027 and in Norway only after EEA incorporation.
The practical decision for your team is to map each control to a section of hvitvaskingsloven or the Regulations in force today and to keep AMLR on a watch list until a Joint Committee decision and a Norwegian act bring it in.
What the 2026 PDF adds. Everything needed to comply is on this page; the download beside it packs the working files: a section map of the fourteen obligations, a decision log for reports with the s. 27 hold and the fields of Økokrim's new form, a rescreen log for each change to a sanctions list (Regulations s. 7-3(3)(b)), a beneficial owner worksheet at the 25 percent line with the 14 day register update, and an EEA watch list for AMLR, Directive (EU) 2024/1640 and AMLA.
