Navigating the EU’s new Anti-Money Laundering Framework: What the Single Rulebook means for Finnish institutions ahead of July 2027?
Across the EU, the new Anti-Money Laundering (AML) Package represents one of the most significant regulatory transformation programmes currently affecting financial institutions across Europe. This transformation is driven by three interlocking components: harmonised EU-wide rules, member state transposition requirements, and a new central supervisory authority. Together, they are reshaping operating models, governance structures, and data requirements across EMEA.
Across the EU, the new Anti-Money Laundering (AML) Package represents one of the most significant regulatory transformation programmes currently affecting financial institutions across Europe. This transformation is driven by three interlocking components: harmonised EU-wide rules, member state transposition requirements, and a new central supervisory authority. Together, they are reshaping operating models, governance structures, and data requirements across EMEA.
- The Anti-Money Laundering Regulation (AMLR) is a directly applicable EU regulation that, for the first time, harmonises detailed AML obligations, such as customer due diligence and beneficial ownership rules, uniformly across all Member States, significantly reducing the national discretion allowed under previous directives.
- The Sixth Anti-Money Laundering Directive (AMLD6) complements this by setting requirements for national institutional structures, for example supervisory powers, Financial Intelligence Units, beneficial ownership registers, and cross-border cooperation mechanisms, which each Member State, including Finland, must still transpose into domestic law.
- The Anti-Money Laundering Authority (AMLA) is a new EU-level supervisory body that will directly oversee a subset of high-risk financial institutions and coordinate bloc-wide supervision alongside national authorities such as Finland’s Financial Supervisory Authority (FIN-FSA). AMLA will drive convergence by developing Guidelines, Regulatory Technical Standards (RTS) and Implementing Technical Standards (ITS) to support the EU’s single AML/CTF rulebook.
Even organisations that will not fall under AMLA’s direct supervision should expect increased supervisory convergence as national authorities align their expectations with AMLA guidance and technical standards.
While the EU-level rules are settled, Finland’s national implementing legislation is still progressing through Parliament, meaning some practical details are not yet finalizsed.
Why this topic matters for Finnish organisations
For organisations operating in Finland, this is a transformation affecting onboarding workflows, data retention, risk-scoring methodologies, sanctions screening, and ongoing monitoring obligations with a firm go-live date and meaningful enforcement consequences behind it. Because the EU regulation becomes the primary source of truth, obliged entities can no longer rely solely on familiar national interpretations.
Key regulatory milestones
10 July 2027 (the principal go-live date): The AMLR becomes directly applicable, and Finland’s new national AML Act (replacing the current legislation) enters into force. From this date, customer due diligence measures, onboarding processes and ongoing monitoring activities must comply with the new framework.
Beyond 2027: Existing customer relationships are not subject to a one-time “reset” on the go-live date. Instead, a harmonised maximum review cycle applies on a rolling basis, triggered by each customer’s prior review date.
Note: while EU rules are set, Finland’s national legislation covering institutional roles, supervisory powers, and certain national policy choices is still progressing through Parliament with practical, local details expected in the coming months.
Key areas of change for the Finnish market
The first key change is a shift in source of regulatory obligations. Detailed guidance on customer due diligence and risk assessment largely moves from national laws into the directly applicable EU regulation.
The second key change is a move towards a single rule book. Finland has historically applied broader national standards in areas like sanction screening and data retentions. In the future most of the regulation is taken straight from the EU rulebook. Based on current legislative proposals, Finland still appears likely to retain certain national requirements that go beyond the EU minimum standard.
The third key change is enhanced governance and accountability. The new framework places greater weight on documented decision-making, clearer internal responsibility, and cross–jurisdictions group consistency.
Why organisations should act now
With July 10 2027 deadline approaching, waiting for complete regulatory certainty may significantly reduce the time available for effective implementation and testing. Organisations should immediately audit which of their current AML processes remain anchored in soon-to-be changed national rules. Organisations that begin structural preparation now will be far better positioned to manage both regulatory risk and the operational cost of adapting to this new standard.
Fewer than 30% of organisations have completed both a detailed regulatory analysis and a formal impact assessment of the AML Package, according to PwC’s EMEA AML Survey 2026. Only one-third of organisations expect to be fully compliant by July 2027. Early regulatory readiness exercises across the market have already highlighted material data and process challenges. *
Our approach
Navigating this transition requires translating regulatory text into daily operational reality. Our team brings hands-on experience across AML and financial crime compliance, onboarding, screening, and ongoing monitoring. We understand both the regulatory substance and the operational constraints organisations face when adapting existing systems and processes to a new standard.
We propose a structured two-step approach.
The first step focuses on a gap assessment. This assessment maps current policies, procedures and KYC/KYB practices against the new requirements, helping organisations identify priority gaps and remediation actions.
The second step focuses on implementation support. We support the execution of agreed remediation actions, assist with supervisory interactions where relevant, and help organisations adapt implementation plans as further regulatory guidance emerges.
Our team combines deep regulatory knowledge with hands-on experience supporting financial institutions through large-scale compliance transformations, including AML/KYC operating model changes, remediation programmes, and regulatory readiness assessments.
*”Mind the gap” PwC EMEA AML Survey 2026
