1. Introduction
The Solicitors Regulation Authority has been extremely vocal about their role as an AML supervisor, frequently stressing the importance for firms to take their obligations seriously. In the regulator’s last released findings – Anti Money Laundering annual report 2021-22 – which reviews the work it carried out over that period, several areas of concern were raised.
In the forward to the report, SRA Chair Anna Bradley said
“To those firms not doing enough to prevent money laundering, you need to take your obligations seriously and play your part. As we increase our inspection and desk-based review supervision now is the time to put your house in order.”
Also, early on in 2022, the Legal Sector Affinity Group (LSAG) redrafted its anti-money laundering guidance in a bid to help law firms comply with the latest AML regulations.
2. Regulation 21 Independent Audit
One of the main areas of concern remains the correct handling and implementation of a regulation 21 independent audit. It is a regulatory requirement for most firms to carry out an ‘Independent Audit of AML Policies, Controls and Procedures’ and is essential to comply with Regulation 21 of the Anti-Money Laundering Regulations. Failure to undertake this audit results in failure to comply with the Regulations, and it remains your responsibility to the SRA to ensure this is done effectively. The SRA has previously highlighted independent audits as an area where firms struggle and have issued further guidance on this.
3. What were the key findings regarding independent audits?
Of the 143 firms inspected during the reporting period, 74 firms (51%) had not undertaken an independent audit. Of these, the SRA deemed that 34 firms (45%) should have had one. The regulator stresses that even if firms have relatively few fee earners, they may still be required to follow these obligations, especially if it deems work is in higher risk areas such as cross-border transactions and high-value property purchases. Additionally, it emphasises that firms are responsible for ensuring that audits are compliant. Furthermore, it highlights that being part of an external accreditation scheme does not necessarily mean they have met their requirements within these obligations.
The regulator says:
“We continued to see firms relying on external accreditation schemes which do not assess AML adequacy at all. On more than one occasion we were handed a copy of an audit which, when examined, did not address AML compliance.
“This is another area where firms must improve. To reiterate our previous guidance – most firms need to carry out an independent audit. If firms consider they do not need to carry out an audit they will need to justify this to us.”
How do you ensure an Independent Audit?
The problem for many firms is how to satisfy the ‘independence’ requirement of Regulation 21 (1) (c) of the MLR 2017. You are allowed to carry out an audit internally, but it should not be carried out by the MLRO or the MLCO, or anyone else responsible for maintaining the AML function within the firm. Typically, in-house employees with sufficient expertise who would be capable of undertaking an audit of this type are those who have day-to-day responsibility for designing, implementing and monitoring the application of the firm’s anti-money laundering policies and procedures. Therefore, it could be difficult to comply with the ‘independent’ requirement under Regulation 21 or the MLR 2017.
We recognise this issue and so designed a service to provide firms with a truly independent audit and report which meets regulatory requirements and is specifically designed to comply with the requirement of the MLR 2017. It is recommended that a law firm performs such a review every two years, although large firms may consider that annually is more appropriate.
4. Independent AML Audit Service
The Strategic Partner works with firms of all sizes, from the smaller high street or niche firms through to the large multi-office and multinational firms.
Our service provides firms with a completely independent audit and ensures the review is completed and reported on in accordance with the regulatory requirements.
Our Independent AML Audit includes:-
- Discovery meeting to scope out and agree to the approach and focus of the review.
- Policies have been written to document how the firm complies with the MLRO 2017.
- A review and analysis of the firm’s High Risk and Suspicious Activity Register
- Interviews with staff to consider the practical application of a firm’s AML PCPs and to establish understanding and knowledge.
- Optional file reviews to consider the application of a firm’s AML PCP requirements at case/matter level
- A formal report detailing the information obtained in the review, the current approach adopted by the firm and identifying any gaps with a series of recommendations and solutions
- Presentation of the findings to the partners
- A Directors/Partners Report to evidence the requirement of Regulation 21 of the MLR 2017:-
- PCP Analysis
- Application
- Analysis of trends
- Recommendations
The regulation 21 independent audit extension will further include a review of the approach adopted by the firm for compliance with AML regulations.
5. Our Expertise
Our goal is to work with the firm to help them build a robust risk management profile that is independently assessed and receives recognition and credibility from the firm’s Professional Indemnity Insurer.
To further bolster a firm’s approach to overall risk control, regulation and compliance, The Strategic Partner has developed two services that can be utilised as part of a fully outsourced solution. Full details of each service can be viewed by clicking the links below, but a summary of each service is as follows:-
- Risk, Regulation and Risk Compliance Services, including AML – Our Risk, Regulation and Compliance Service has been designed to provide law firms of all sizes with a compliant environment, using bespoke, documented and implemented procedures that evidence how a firm tackles and manages risk, compliance and regulation. Our experience and focus provide law firms with the required and necessary support and expertise.
- Risk Compliance & AML Guidance and Administration Service – Our Risk, Compliance & AML Guidance and Administration Service provides law firms with a cost-effective solution to outsource the management of the firm’s registers and to provide day-to-day compliance guidance to the staff. It provides law firms and their staff with direct access to a dedicated Compliance Manager, who will provide case-level guidance and accept receipt of notifications, through which they will also manage and update the various compliance registers.