Cayman Islands AML and Financial Sanctions Rules Take Effect
Two new binding rules issued by the Cayman Islands Monetary Authority (CIMA) take effect on 18 September 2026, establishing minimum requirements for regulated financial services providers’ AML/CFT/CPF compliance programmes and for compliance with financial and targeted financial sanctions.
The first measure, the Rule on Effective Compliance Programme for the Prevention and Detection of Money Laundering, Terrorist Financing and Proliferation Financing for Financial Services Providers, supplements the Cayman Islands Anti-Money Laundering Regulations. CIMA states that the regulations remain the primary legal basis for AML/CFT/CPF compliance and prevail if there is any inconsistency.
The rule applies to financial services providers regulated and supervised by CIMA under the Regulatory Acts, including branches, subsidiaries, affiliates and other members of a CIMA-regulated financial group. Each provider must maintain a compliance programme proportionate to its size, complexity, structure, business and risk profile.
CIMA’s implementation guidance places particular emphasis on governance and accountability. Governing bodies are expected to oversee the design, implementation and continuing effectiveness of the compliance programme; understand the firm’s exposure to money laundering, terrorist financing, proliferation financing and targeted-financial-sanctions risks; ensure adequate qualified resources; and oversee remediation of weaknesses identified through monitoring, independent testing, audit or regulatory inspection. Firms are expected to evidence that oversight through governance records such as minutes, reports, documented decisions and remediation tracking.
The framework also addresses the role of the Anti-Money Laundering Compliance Officer. CIMA says an AMLCO is expected to ensure that the requirements of the rule and the AML Regulations are adopted by the provider. An AMLCO may be personally liable where a compliance failure amounts to a breach of the AML Regulations attributable to the officer’s conduct, although the financial services provider remains ultimately responsible for compliance.
Risk assessments may be conducted at group level where appropriate, but CIMA requires firms to ensure that risks specific to their Cayman Islands operations are adequately identified and addressed. The rule also formalises expectations around independent AML audit arrangements and the effectiveness of compliance programmes.
The second measure, the Rule on Compliance with Financial Sanctions and Targeted Financial Sanctions, introduces binding requirements alongside the AML compliance framework. CIMA lists both measures across its regulatory frameworks for sectors including banking, securities, investment funds, insurance, money services businesses, virtual asset service providers, corporate services and trusts, with an effective date of 18 September 2026.
CIMA says the two rules are intended to support an effective, proportionate and risk-based framework for identifying, assessing, managing and mitigating money laundering, terrorist financing, proliferation financing and sanctions-related risks. The authority has also linked the measures to its objective of strengthening financial-crime controls ahead of the Cayman Islands’ FATF fifth-round assessment.
Sources
Cayman Islands Monetary Authority — AML/CFT FAQs on the new compliance and sanctions rules
