Bermuda strengthens regulatory regime for AML/ATF regulated financial institutions

Published: 15 Oct 2018
Type: Insight

Registration deadline – 7 December 2018

The Bermuda Government and the financial services regulator, the Bermuda Monetary Authority (BMA), are committed to ensuring Bermuda’s anti-money laundering and anti-terrorist financing (AML/ATF) requirements are aligned with the highest international standards. Legislative amendments have recently been implemented to further strengthen Bermuda’s regulatory regime.

What has changed?

An “AML/ATF Regulated Financial Institution” which is not otherwise licensed, registered or authorised by the BMA under any of the regulatory acts is required to register[1] with the BMA as a Non-Licensed Person (NLP).

The Proceeds of Crime (Miscellaneous) (No.2) Act 2018 came into effect on 7 September 2018 (Act).   This Act has expanded the definition of an “AML/ATF Regulated Financial Institution” to include businesses carrying out certain specified “financial activities”. The full list of financial activities can be found in schedule 3 to the Proceeds of Crime Act 1997and now includes lending, financial leasing and financial guarantees.

The Act includes certain exceptions to what constitutes “financial activities” including:

(i) providing any of the specified financial activities intra-group (i.e. by a holding company to a subsidiary company, a subsidiary company to its holding company or by a subsidiary of that holding company to another subsidiary of that holding company); and

(ii) if the financial activities constitute ancillary business to an insurer’s insurance business as permitted under section 19 of the Insurance Act 1978.

Requirement for Registration

An NLP must have registered with the BMA before 7 December 2018 or risk being subject to enforcement action[2].  The registration form can be found here.

What information has to be submitted with the NLP registration form?

(i) the name of the compliance officer (CO) and reporting officer appointed (RO) for the purposes of the Proceeds of Crime (Anti-Money Laundering and Anti-Terrorist Financing) Regulations 2008;

(ii) fit and proper details (which includes a copy of their resume) for the CO, RO and any person who effectively directs or controls the business, including a director, controller or senior executive; and

(iii) a copy of the AML/ATF policies and procedures of the business.

Appleby has an experienced, multi-disciplinary regulatory team which includes expert compliance professionals, as well as a team of lawyers across our Corporate, Private Client & Trusts and Dispute Resolution practice groups.  With expert advisors across a range of disciplines we can help you navigate regulated environments throughout the lifecycle of your business. Please contact a member of the team below if you have any questions.


[1] Section 9 of the Proceeds of Crime (Anti-Money Laundering and Anti-Terrorist Financing Supervision and Enforcement) Act 2008

[2] BMA FAQ NLP Registration, 11 Sept 2018

locations

Bermuda

services

Corporate

types

Insight

Share
More publications
050-Insolvency-Restructuring-Grid-Image
13 Jul 2026

Bermuda: Restructuring & Insolvency

This country-specific Q&A provides an overview of Restructuring & Insolvency laws and regulations applicable in Bermuda.

Appleby-Website-Regulatory-Practice
10 Jul 2026

It’s healthy to sometimes disagree with regulators

At some point, almost every regulated business will disagree with its regulator.

Appleby-Website-Privacy-and-Data-Protection
8 Jul 2026

Bermuda Privacy Commissioner Signals Shift to Stronger PIPA Enforcement

The Office of the Privacy Commissioner (PrivCom) has issued its first annual report since Bermuda's Personal Information Protection Act 2016 (PIPA) came fully into force, with the reports content signaling a transition from education and implementation to a stronger focus on enforcement.

Bermuda-1024x576-1
1 Jul 2026

A Forest for the Future

A first since the blight, the airport cedar forest is growing tall and standing strong.

Appleby-Website-Regulatory-Practice
1 Jul 2026

Complied out of business

Firms are complying themselves out of business because compliance no longer matches the evolving sophistication of the Bermuda Monetary Authority (BMA).

Appleby-Website-Insurance-and-Reinsurance
1 Jul 2026

The long game: how Bermuda became the world’s life reinsurance capital

Ask a life insurer in New York, London or Tokyo where the liabilities behind their book ultimately sit and there is an increasingly good chance the answer is a 21-square-mile island in the North Atlantic.

Appleby-Website-Insurance-and-Reinsurance
1 Jul 2026

Record H1’26 Cat Bond Issuance Driven by Rising Sponsor Comfort and Diversified Risk

With H1 2026 officially breaking the record for the most catastrophe bond deals to come to market and settle in the first six months of the year, a key trend driving this momentum is how comfortable sponsors have become with the mechanics of the overall cat bond space. This familiarity has ultimately encouraged a wave of new sponsors to enter the market, according to Brad Adderley, Managing Partner at law firm Appleby.

Appleby-Website-Employment-and-Immigration
12 Jun 2026

The Cost of Getting Employee Departures Wrong: Five Common Pitfalls for Bermuda Employers

Employee departures are an inevitable part of running a business, but the way they are managed can have significant legal, financial and operational consequences. In Bermuda, employers who approach terminations without adequate preparation may expose themselves to unnecessary disputes, regulatory issues, and reputational harm. Whether an employee is being dismissed for performance reasons, made redundant or departing as part of a negotiated exit, by recognizing the following common mistakes and taking a proactive approach, organizations can manage departures more effectively and reduce risk.

Appleby-Website-Privacy-and-Data-Protection
8 Jun 2026

It’s time to bridge Pipa compliance gap

A review of 200 publicly available privacy notices of companies in Bermuda has revealed that just one in nine are fully compliant with the Personal Information Protection Act 2016.

Appleby-Website-Privacy-and-Data-Protection
26 May 2026

Transparency is a legal requirement under Pipa

Major companies across the European Union have faced substantial fines between 2019 and 2024, estimated at a total of €930 million (about $1.08 billion), not only for cyberattacks or data breaches, but also for issues such as noncompliant privacy notices. A common theme in many cases has been a lack of transparency.