CIMA has finalized its new AML, CFT, CPF and Financial Sanctions Rules. Is your compliance framework ready?
The Cayman Islands Monetary Authority has published two new Rules that came into force on 2 July 2026, replacing the previous AML/CFT Rules and Guidance Notes with a more structured, risk based framework.
While many of the requirements build on existing obligations, the new Rules place greater emphasis on governance, accountability and demonstrating that your compliance programme is effective in practice.
Rule on Effective Compliance Programme for the Prevention and Detection of Money Laundering, Terrorist Financing and Proliferation Financing for Financial Services Providers
The rule establishes CIMA’s expectations for how firms design, implement and oversee their AML, CFT and CPF compliance programmes. It places greater responsibility on boards and senior management while bringing together the core operational requirements, including:
- Risk Management – Firms must maintain a comprehensive, risk based framework supported by an up to date business wide risk assessment.
- Customer Due Diligence (CDD) – Clear expectations for customer identification, verification, beneficial ownership, ongoing monitoring and enhanced due diligence for higher risk relationships.
- Reliance and Introduced Business – Clarifies when firms can rely on third parties to perform CDD, while confirming that ultimate responsibility always remains with the relying firm.
Read Full Guidance Notes | https://lnkd.in/e-J89zKC
Rule on Compliance with Financial Sanctions and Targeted Financial Sanctions
This rule strengthens requirements around sanctions screening, identifying designated persons, freezing assets where required and meeting reporting obligations, ensuring firms have effective processes to comply with evolving sanctions regimes.
Read Full Guidance Notes | https://lnkd.in/eg_Z_YP4
Together, these Rules shift the focus from simply having policies in place to demonstrating that governance, controls and compliance programmes are effective, proportionate and embedded in day to day operations.
The message from CIMA is clear: compliance is no longer just about having policies and procedures. Firms must be able to demonstrate that their governance, controls and risk management framework are operating effectively.
Regulatory change is inevitable. Being prepared is a choice. If you’d like to understand how these new Rules impact your business or review your existing compliance framework, get in touch with the Vale team.
