AMLA consults on central AML database; Norway input due 3 November

The EU's new anti-money-laundering authority AMLA has opened a consultation on the technical rules for its central AML/CFT databaseFinanstilsynet, and Finanstilsynet asks Norwegian actors to flag anything of particular importance for Norwegian interestsFinanstilsynet. The consultation deadline is 3 November 2026Finanstilsynet; the hearing note and further information are available on AMLA's website.

The database mandate comes from the EU's 2024 anti-money-laundering packageFinanstilsynet, adopted in May 2024, which includes the regulation establishing AMLA (Regulation (EU) 2024/1620, the AMLA Regulation)Finanstilsynet. Articles 5–11 of that regulation empower AMLA to set up a central database for anti-money-laundering and counter-terrorist-financing informationFinanstilsynet. AMLA has now consulted on draft supplementary rules — regulatory technical standards (RTS) — with detailed provisions for such a databaseFinanstilsynet. Finanstilsynet expects the rules to be incorporated into the EEA AgreementFinanstilsynet and implemented in Norwegian lawFinanstilsynet.

Under Article 11 of the AMLA Regulation, the database is AMLA's own to establish and keep up to date, and its contents go well beyond statistics. Supervisory authorities must transmit, for individual obliged entities, the administrative measures applied and pecuniary sanctions imposed for AML/CFT breaches with the grounds and the supervisory outcomes behind them; advice on money-laundering risks given in authorisation, withdrawal and fit-and-proper procedures; risk-profile assessments of credit and financial institutions meeting the Article 12(1) criteria; thematic-review outcomes; and supervisory-activity and resourcing data. Information from AMLA's own direct supervision feeds in too. Non-AML/CFT authorities — including prudential supervisors such as the ECB — contribute material including reasonable grounds to suspect money laundering in connection with an obliged entity. Suspicious transaction reports filed under Article 69 of Regulation (EU) 2024/1624 are expressly excluded. Access is on a need-to-know and confidential basis for supervisors, the ESAs and competent non-AML/CFT authorities; AMLA may also share its own analyses with supervisors and, where relevant, with obliged entities. Personal data may be kept identifiable for up to ten years.

What the consultation settles is the plumbing: Article 11(6) tasks AMLA with drafting the RTSEuropa specifying the procedures, formats and timelines for transmission; the scope and level of detail, distinguishing non-financial-sector entities; which disclosures need the originating supervisor's prior consent; the materiality threshold triggering the duty to report a breach; and the conditions and types for additional information requests. Those draft standards were due to the Commission by 27 December 2025.

For Norwegian obliged entities and their advisers, the database changes no duties directly — the addressees are the supervisors that feed it. The draft RTS is available on AMLA's website, and Norwegian actors with concerns of particular importance for Norwegian interests are asked to inform Finanstilsynet before 3 November 2026Finanstilsynet.

Legal basis: Regulation (EU) 2024/1620 (the AMLA Regulation), Articles 5–11, in particular Article 11.