FC-3 FC-3 Money Laundering Reporting Officer
FC-3.1 FC-3.1 Appointment of MLRO
FC-3.1.1
Insurance firms (exceptcaptive insurance firms managed by aninsurance manager ),insurance brokers andinsurance managers (that manage acaptive insurance firm ) must appoint a Money Laundering Reporting Officer ('MLRO'). In the case ofinsurance managers that managecaptive insurance firms , theinsurance manager must appoint a MLRO for each of thecaptive insurance firms under its management.Amended: January 2007
Amended: October 2007FC-3.1.2
Insurance managers may nominate the same individual to act as MLRO for more than onecaptive insurance firm , providing this person can meet in full the responsibilities of MLRO for eachcaptive insurance firm in question.Amended: January 2007FC-3.1.3
The position of MLRO is a
controlled function and the MLRO is anapproved person .FC-3.1.4
For details of the CBB's requirements regarding
controlled functions andapproved persons , see Section AU-1.2. Amongst other things,approved persons require CBB approval before being appointed, which is granted only if they are assessed as 'fit and proper' for the function in question. A completed Form 3 must accompany any request for CBB approval.Amended: January 2007FC-3.1.5
The position of MLRO must not be combined with functions that create potential conflicts of interest, such as an internal auditor or business line head. The position of MLRO may not be outsourced.
FC-3.1.6
Subject to Paragraph FC-3.1.5, however, the position of MLRO may otherwise be combined with other functions in the
insurance licensee , such as that of Compliance Officer, in cases where the volume and geographical spread of the business is limited and, therefore, the demands of the function are not likely to require a full time resource. Paragraph FC-3.1.9 requires that the MLRO is aDirector oremployee of the licensee, so the function may not be outsourced to a third party employee.Amended: January 2007
Amended: October 2007FC-3.1.6A
For purposes of Paragraphs FC-3.1.5 and FC-3.1.6 above,
insurance licensees must clearly state in the Application for Approved Person Status — Form 3 — when combining the MLRO or DMLRO position with any other position within theinsurance licensee .Added: October 2017FC-3.1.7
Insurance licensees must appoint at least one deputy MLRO (or more depending on the scale and complexity of the licensee's operations). The deputy MLRO(s) must be resident in Bahrain unless otherwise agreed with the CBB.Amended: January 2007FC-3.1.7A
The deputy MLRO should be able to support the MLRO discharge his responsibilities and to deputise for him in his absence. In the case of
insurance licensees undertaking significant overseas business, the CBB would normally expect to see one or more deputy MLRO(s) residing in the jurisdiction(s) where the bulk of the customer business is processed. In such cases, the CBB would normally agree to an application for an exemption from the residency requirement in Rule FC-3.1.7.Amended: January 2007FC-3.1.8
Insurance licensees should note that although the MLRO may delegate some of his functions, either to other employees of the licensee or even (in the case of larger groups) to individuals performing similar functions for other group entities, that the responsibility for compliance with the requirements of this Module remains with the licensee and the designated MLRO.Amended: January 2007FC-3.1.9
So that he can carry out his
controlled function effectively,insurance licensees must ensure that their MLRO:(a) Is a member of senior management of the licensee;(b) Has a sufficient level of seniority within theinsurance licensee , has the authority to act without interference from business line management and has direct access to the Board and senior management (where necessary);(c) Has sufficient resources, including sufficient time and (if necessary) support staff, and has designated a replacement to carry out the function should the MLRO be unable to perform his duties;(d) Has unrestricted access to all transactional information relating to any financial services provided by theinsurance licensee to acustomer , or any transactions conducted by theinsurance licensee on behalf of thatcustomer ;(e) Is provided with timely information needed to identify, analyse and effectively monitorcustomer accounts;(f) Has access to allcustomer due diligence information obtained by theinsurance licensee ; and(g) Is resident in Bahrain.Amended: October 2011
Amended: January 2007
Amended: October 2007FC-3.1.10
In addition,
insurance licensees must ensure that their MLRO is able to:(a) Monitor the day-to-day operation of their policies and procedures relevant to this Module; and(b) Respond promptly to any reasonable request for information made by the Financial Intelligence Directorate or the CBB.Amended: October 2019
Amended: April 2010
Amended: October 2007
Amended: January 2007FC-3.1.11
If the position of MLRO falls vacant, the
insurance licensee must appoint a permanent replacement (after obtaining CBB approval), within 120 calendar days of the vacancy occurring. Pending the appointment of a permanent replacement, the licensee must make immediate interim arrangements (including the appointment of an acting MLRO) to ensure continuity in the MLRO function's performance. These interim arrangements must be approved by the CBB.Amended: January 2007FC-3.2 FC-3.2 Responsibilities of the MLRO
FC-3.2.1
The MLRO is responsible for:
(a) Establishing and maintaining theinsurance licensee's AML/CFT policies and procedures;(b) Ensuring that the licensee complies with the AML Law and any other applicableAML/CFT legislation and this Module;(c) Ensuring day-to-day compliance with the licensee's own internalAML/CFT policies and procedures;(d) Acting as theinsurance licensee's main point of contact in respect of handling internal suspicious transactions reports from the licensee's staff (refer to Section FC-4.1) and as the main contact for the Financial Intelligence Directorate, the CBB and other concerned bodies regardingAML/CFT ;(e) Making external suspicious transactions reports to the Financial Intelligence Directorate and the Compliance Directorate (refer to Section FC-4.2);(f) Taking reasonable steps to establish and maintain adequate arrangements for staff awareness and training onAML/CFT matters (whether internal or external), as per Chapter FC-5;(g) Producing annual reports on the effectiveness of the licensee'sAML/CFT controls, for consideration by senior management, as per Paragraph FC-3.3.3;(h) On-going monitoring of what may, in his opinion, constitute high-riskcustomer accounts; and(i) Ensuring that theinsurance licensee maintains all necessary CDD, transactions, STR and staff training records for the required periods (refer to Section FC-6.1).Amended: October 2019
Amended: October 2015
Amended: April 2010
Amended: January 2007FC-3.3 FC-3.3 Compliance Monitoring
Annual Compliance Review
FC-3.3.1
Insurance licensees must take appropriate steps to identify and assess their money laundering and terrorist financing risks (for customers, countries or geographic areas; and products, services, transactions or delivery channels). They must document those assessments in order to be able to demonstrate their basis, keep these assessments up to date, and have appropriate mechanisms to provide risk assessment information to the CBB. The nature and extent of any assessment of money laundering and terrorist financing risks must be appropriate to the nature and size of the business.Added: October 2015FC-3.3.1A
Insurance licensees should always understand their money laundering and terrorist financing risks, but the CBB may determine that individual documented risk assessments are not required, if the specific risks inherent to the sector are clearly identified and understood.Added: October 2015FC-3.3.1B
An
insurance licensee must review the effectiveness of itsAML/CFT procedures, systems and controls at least once each calendar year. The review must cover the licensee and itsbranches andsubsidiaries both inside and outside the Kingdom of Bahrain. Aninsurance licensee must monitor the implementation of those controls and enhance them if necessary. The scope of the review must include:(a) A report, containing the number of internal reports made in accordance with Section FC-4.1, a breakdown of all the results of those internal reports and their outcomes for each segment of the licensee's business, and an analysis of whether controls or training need to be enhanced;(b) A report, indicating the number of external reports made in accordance with Section FC-4.2 and, where aninsurance licensee has made an internal report but not made an external report, noting why no external report was made;(c) A sample test of compliance with this Module's customer due diligence requirements; and(d) A report as to the quality of the licensee's anti-money laundering procedures, systems and controls, and compliance with the AML Law and this Module.Amended: January 2022
Amended: October 2015
Amended: January 2007
Amended: October 2007FC-3.3.2
The reports listed under Paragraph FC-3.3.1B (a) and (b) must be made by the MLRO. The sample testing and report required under Paragraph FC-3.3.1B (c) and (d) must be made by the licensee’s external
auditor or a consultancy firm approved by the CBB.Amended: January 2022
Amended: January 2019
Amended: October 2011
Amended: January 2007
Amended: October 2007FC-3.3.2A
In order for a consultancy firm to be approved by the CBB for the purposes of Paragraph FC-3.3.2, such firm should provide the CBB's Compliance Directorate with:
(a) A sample AML/CFT report prepared for a financial institution;(b) A list of other AML/CFT related work undertaken by the firm;(c) A list of other audit/review assignments undertaken, specifying the nature of the work done, date and name of the licensee; and(d) An outline of any assignment conducted for or in cooperation with an international audit firm.Added: October 2011FC-3.3.2B
The firm should indicate which personnel (by name) will work on the report (including, where appropriate, which individual will be the team leader) and demonstrate that all such persons have appropriate qualifications in one of the following areas:
(a) Audit;(b) Accounting;(c) Law; or(d) Banking/Finance.Added: October 2011FC-3.3.2C
At least two persons working on the report (one of whom would normally expected to be the team leader) should have:
(a) A minimum of 5 years professional experience dealing with AML/CFT issues; and(b) Formal AML/CFT training.Added: October 2011FC-3.3.2D
Submission of a curriculum vitae for all personnel to be engaged on the report is encouraged for the purposes of evidencing the above requirements.
Added: October 2011FC-3.3.2E
Upon receipt of the above required information, the CBB Compliance Directorate will assess the firm and communicate to it whether it meets the criteria required to be approved by the CBB for this purpose. The CBB may also request any other information it considers necessary in order to conduct the assessment.
Added: October 2011FC-3.3.3
The items listed under Paragraph FC-3.3.1B must be submitted to the licensee's Board, for it to review and commission any required remedial measures, and copied to the licensee's senior management.
Amended: January 2019FC-3.3.4
The purpose of the annual compliance review is to assist a licensee's Board and senior management to assess, amongst other things, whether internal and external reports are being made (as required under Chapter FC-4), and whether the overall number of such reports (which may otherwise appear satisfactory) does not conceal inadequate reporting in a particular segment of the licensee's business (or, where relevant, in particular
branches orsubsidiaries ). Licensees should use their judgement as to how the reports listed under Paragraph FC-3.3.1B (a) and (b) should be broken down in order to achieve this aim (e.g. by branches, departments and product lines).Amended: January 2019
Amended: January 2007FC-3.3.5
Insurance licensees must instruct their appointed firm to produce the report referred to in Paragraph FC-3.3.1B (c) and (d). The report must be submitted to the CBB by the 30th of June of the following year. The findings of this review must be received and acted upon by the licensee.Amended: January 2022
Amended: January 2020
Amended: January 2019
Amended: January 2012
Amended: October 2007
Amended: January 2007FC-3.3.5A
[This Paragraph was deleted in January 2019].
Deleted: January 2019
Added: January 2007FC-3.3.6
[This Paragraph was deleted in January 2022].
Deleted: January 2022
Amended: January 2012
Amended: October 2007FC-3.3.7
[This Paragraph was deleted in January 2022].
Deleted: January 2022
Amended: January 2020
Added: January 2007
Amended: April 2008
Amended: January 2019