+Guidelines on the use of remote customer onboarding solutions (EBA/GL/2022/15)
---+1. Compliance and reporting obligations
------+Status of these guidelines
---------+1. This document contains guidelines issued pursuant to Article 16 of Regulation (EU) No 1093/2010 …
---------+2. Guidelines set the EBA view of appropriate supervisory practices within the European System of …
------+Reporting requirements
---------+3. According to Article 16(3) of Regulation (EU) No 1093/2010, competent authorities must notify …
---------+4. Notifications will be published on the EBA website, in line with Article 16(3).
---+2. Subject matter, scope and definitions
------+Subject matter and scope of application
---------+5. These guidelines set out the steps credit and financial institutions should take when adopting …
---------+6. Competent authorities should have regard to these guidelines when assessing whether the steps …
------+Addressees
---------+7. These guidelines are addressed to competent authorities as defined in Article 4(2) of Regulation …
------+Definitions
---------+8. Unless otherwise specified, terms used and defined in Directive (EU) 2015/849 have the same …
---+3. Implementation
------+Date of application
---+4. Guidelines on the use of Remote Customer Onboarding Solutions under Article 13(1) of Directive (EU) 2015/849
------+4.1 Internal policies and procedures
---------+9. Credit and financial institutions should put in place and maintain policies and procedures to …
---------+10. The policies and procedures, when implemented, should enable credit and financial institutions …
---------+11. In addition to the provisions set out in the Section 4.2.4 of the EBA Compliance Officer …
---------+12. The management body of the credit and financial institution should approve remote customer …
---------+13. When considering whether to adopt a new remote customer onboarding solution, credit and …
---------+14. Credit and financial institutions should set out the scope, steps and record keeping …
---------+15. Credit and financial institutions should consider the criteria in paragraph 14 (a) (d) and (e) …
---------+16. Credit and financial institutions should be able to demonstrate to their competent authority …
---------+17. Credit and financial institutions should start using a remote customer onboarding solution only …
---------+18. Credit and financial institutions should monitor the remote customer onboarding solution on an …
---------+19. Credit and financial institutions should set out in their procedures and processes remedial …
---------+20. Credit and financial institutions should consider the most effective way to monitor the ongoing …
---------+21. This section also applies where fully automated remote customer onboarding solutions are used …
---------+22. Credit and financial institutions should be able to demonstrate to their competent authority …
------+4.2 Acquisition of information
---------+23. In addition to the points set out in paragraph 9, credit and financial institutions should set …
---------+24. Credit and financial institutions should ensure that: a) the information obtained through the …
---------+25. Credit or financial institutions should consider the criteria in paragraph 24 to be met where …
---------+26. The documents and information collected during the remote identification process, which are …
---------+27. Credit and financial institutions should determine in their policies, as set out in Section …
---------+28. Credit and financial institutions should put in place and maintain appropriate mechanisms to …
---------+29. Where credit and financial institutions remotely onboard customers that are legal entities …
---------+30. Credit and financial institutions should ensure that the remote customer onboarding solution …
---------+31. For the natural person acting on behalf of a legal person, credit and financial institutions …
---------+32. When credit and financial institutions assess and, as appropriate, obtain information on the …
------+4.3 Document authenticity & integrity
---------+33. Where credit and financial institutions accept reproductions of an original document and do not …
---------+34. Where credit and financial institutions use features to automatically read information from …
---------+35. In situations where the device the customers use to prove their identity allows the collection …
---------+36. Where available, during the verification process, credit and financial institutions should …
---------+37. Credit and financial institutions should set out in their policies and procedures how they will …
------+4.4 Matching customer identity as part of the verification process
---------+38. Remote customer onboarding solutions implemented by a credit and financial institutions should …
---------+39. Where the remote customer onboarding solution involves the use of biometric data to verify the …
---------+40. In situations where the evidence provided is of insufficient quality resulting in ambiguity or …
---------+41. Where credit and financial institutions use unattended remote onboarding solutions, in which …
---------+42. Where credit and financial institutions use attended remote customer onboarding solutions in …
---------+43. Where possible, credit and financial institutions should use remote customer onboarding …
---------+44. In addition to the above, and where commensurate with the ML/TF risk associated with the …
---------+45. Credit and financial institutions should consider the criteria in paragraphs 38 to 43 to be met …
------+4.5 Reliance on third parties and outsourcing
---------+46. In addition to the points set out in paragraph 9, credit and financial institutions should …
---------+47. In addition to the EBA Risk Factors Guidelines , in particular to guidelines 2.20 to 2.21 and …
---------+48. Where credit and financial institutions outsource all or parts of the remote customer …
---------+49. Where the outsourced service provider stores customer data, including, but not limited to …
------+4.6 ICT and security risk management
---------+50. Credit and financial institutions should identify and manage their ICT and security risks …
---------+51. In addition to complying with requirements set out in the EBA Guidelines on ICT and security …
---------+52. Credit and financial institutions should provide a secure access point for starting the remote …
---------+53. Where a multi-purpose device is used to perform the remote customer onboarding process, a …
------+4.7 Compliance with these guidelines where credit and financial institutions use trust services and national identification processes as referred to in Article 13(1) (a) of Directive (EU) 2015/849
---------+54. Credit and financial institutions may use relevant trust services and electronic identification …
 English - European Union - Financial Industry -

Guidelines on the use of remote customer onboarding solutions (EBA/GL/2022/15)

Guidelines on the use of remote customer onboarding solutions (EBA/GL/2022/15)

https://www.eba.europa.eu/legacy/regulation-and-policy/regulatory-activities/anti-money-laundering-and-countering-financing-4 – PDF

1. Overview

,
1. Compliance and reporting obligations

1. Compliance and reporting obligations
2. Subject matter, scope and definitions

2. Subject matter, scope and definitions
3. Implementation

3. Implementation
4. Guidelines on the use of Remote Customer Onboarding Solutions under Article 13(1) of Directive (EU) 2015/849

4. Guidelines on the use of Remote Customer Onboarding Solutions under Article 13(1) of Directive (EU) 2015/849

1.1 References

1.2 Identified Requirements

1.3 Related Standards

2. Identified Requirements

Requirements

3. Related Standards

Standards
  • EBA - Published by the European Banking Authority at https://www.eba.europa.eu/