--- title: "Article 28 — Regulatory technical standards on the information necessary for the performance of customer due diligence" type: regulation legal_status: in_force source: "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1624" source_retrieved: 2026-09-29 shortTitle: "Article 28 — Regulatory technical standards on the information necessary for the performance of customer due diligence" instrument_type: level1_regulation authority: Commission binding: true binding_character: binding mica_level2: false legal_basis: "Regulation (EU) 2024/1624" instrument: amlr celex: "32024R1624" regulation: AMLR regulation-full: "Regulation (EU) 2024/1624" article: 28 status: in_force object_id: eu.amlr.legal_text.article.28 text_version: "Regulation (EU) 2024/1624, OJ L, 2024/1624, 19.6.2024" source_url: "https://eur-lex.europa.eu/eli/reg/2024/1624/oj/eng" check_status: matched verified: true last_checked: 2026-10-26 --- *In force · applies from 10 Jul 2027 · Regulation (EU) 2024/1624, OJ L, 2024/1624, 19.6.2024 · Checked against EUR-Lex on 26 Oct 2026 · [Official source](https://eur-lex.europa.eu/eli/reg/2024/1624/oj/eng)* 1. By 10 July 2026, AMLA shall develop draft regulatory technical standards and submit them to the Commission for adoption. Those draft regulatory technical standards shall specify: **(a)** the requirements that apply to obliged entities pursuant to [Article 20](20.md) and the information to be collected for the purpose of performing standard, simplified and enhanced due diligence pursuant to [Articles 22](22.md) and [25](25.md) and [Articles 33(1)](33.md) and [34(4)](34.md), including minimum requirements in situations of lower risk; **(b)** the type of simplified due diligence measures which obliged entities may apply in situations of lower risk pursuant to [Article 33(1)](33.md) of this Regulation, including measures applicable to specific categories of obliged entities and products or services, having regard to the results of the risk assessment at Union level conducted by the Commission pursuant to [Article 7](https://www.headlesslaw.com/amld6/articles/7) of Directive (EU) 2024/1640; **(c)** the risk factors associated with features of electronic money instruments that should be taken into account by supervisors when determining the extent of the exemption under [Article 19(7)](19.md); **(d)** the reliable and independent sources of information that may be used to verify the identification data of natural or legal persons for the purposes of [Article 22(6)](22.md) and (7); **(e)** the list of attributes which electronic identification means and relevant qualified trust services referred to in [Article 22(6)](22.md), point (b), must feature in order to fulfil the requirements of [Article 20(1)](20.md), points (a) and (b), in the case of standard, simplified and enhanced due diligence. 2. The requirements and measures referred to in paragraph 1, points (a) and (b), shall be based on the following criteria: **(a)** the inherent risk involved in the service provided; **(b)** the risks associated with categories of customers; **(c)** the nature, amount and recurrence of the transaction; **(d)** the channels used for conducting the business relationship or the occasional transaction. 3. AMLA shall review regularly the regulatory technical standards and, if necessary, prepare and submit to the Commission the draft for updating those standards in order, inter alia, to take account of innovation and technological developments. 4. Power is delegated to the Commission to supplement this Regulation by adopting the regulatory technical standards referred to in paragraphs 1 and 3 of this Article in accordance with [Articles 49](https://www.headlesslaw.com/amla/articles/49) to 52 of Regulation (EU) 2024/1620. ## Related Level 2 and Level 3 ### Process documents - [AMLA — Report — Draft RTS under Article 28(1) \[final draft submitted\]](../process/amla-final-report-draft-rts-article-28-1.md) *** [Chapter III — Customer due diligence](../chapters/iii.md) · [← Article 27](27.md) · [Article 29 →](29.md)