Section 19(3)

The policies, controls and procedures referred to in paragraph (1) must include— risk management practices; internal controls (see regulations 21 to 24); customer due diligence (see regulations 27 to 38); reliance and record keeping (see regulations 39 to 40); the monitoring and management of compliance with, and the internal communication of, such policies, controls and procedures.

← 2 · All articles · 4 →

Source: legislation.gov.uk · retrieved 2026-09-04