PEP Screening: EU Obligations for Businesses

EU Regulation Deep-Dives 12 Jul 2026 7 min read

Quick answer

PEP screening is a mandatory due diligence process for EU businesses to identify and manage risks linked to Politically Exposed Persons (PEPs). It applies primarily to entities subject to anti-money laundering (AML) obligations and requires ongoing risk assessment, enhanced scrutiny, and record-keeping to ensure compliance with EU AML rules.

Key takeaways

A Politically Exposed Person (PEP) is an individual entrusted with prominent public functions, including their family members and close associates.
EU businesses subject to AML regulations must conduct PEP screening as part of enhanced customer due diligence.
PEP screening involves identifying PEPs, assessing associated risks, and applying enhanced monitoring measures.
Ongoing monitoring and regular updates are essential to manage changing PEP risk profiles.
Detailed records of PEP screening and due diligence must be maintained for regulatory review.
Failure to comply with PEP screening obligations may lead to regulatory sanctions, reputational damage, and legal consequences.

Who is a Politically Exposed Person (PEP)?

In the EU context, a Politically Exposed Person (PEP) is defined as an individual who holds or has held a prominent public function. This includes senior politicians, government officials, judicial or military officials, senior executives of state-owned enterprises, and important political party officials. The definition extends to family members and close associates of such persons, recognizing the potential for indirect influence or benefit from the PEP’s position.

The concept of a PEP is central to EU anti-money laundering efforts because these individuals may be more susceptible to corruption or abuse of power due to their influential roles. The European Union’s AML framework, including Directive (EU) 2015/849 (the Fourth AML Directive) and its subsequent amendments, provides the legal basis for identifying PEPs and applying enhanced due diligence measures .

It is important to note that the exact scope of who qualifies as a PEP can vary depending on national transpositions of EU law, but generally, it covers domestic PEPs (those holding public functions within the EU Member State) and foreign PEPs (those holding similar positions in non-EU countries). This distinction is significant for risk assessment and due diligence purposes.

Why PEP Screening Matters for EU Businesses

PEP screening is crucial for EU businesses, especially those operating within the financial sector, real estate, legal services, and other regulated industries, because it helps mitigate the risks associated with money laundering and terrorist financing. The elevated risk stems from the potential misuse of public office for private gain, which can expose businesses to legal liabilities and reputational harm if they inadvertently facilitate illicit activities.

By conducting thorough PEP screening, businesses can detect high-risk clients early, enabling them to apply enhanced scrutiny measures such as verifying the source of funds and monitoring transactions more closely. This proactive approach aligns with the EU’s commitment to maintaining the integrity of the internal market and protecting it from financial crime.

Moreover, PEP screening supports compliance with the EU’s AML regulatory framework, which mandates that obliged entities implement risk-based approaches tailored to the level of risk posed by their customers. Failure to perform adequate PEP screening can result in regulatory investigations, fines, and restrictions on business operations .

Your Obligation to Conduct PEP Screening

Under EU law, businesses subject to AML obligations must incorporate PEP screening into their customer due diligence (CDD) processes. This obligation applies primarily to entities referred to as “obliged entities” under Directive (EU) 2015/849, which includes credit institutions, financial institutions, auditors, external accountants, tax advisors, notaries, real estate agents, and other professionals involved in financial transactions.

The obligation requires these entities to identify whether a customer or beneficial owner is a PEP before establishing a business relationship or conducting an occasional transaction above the threshold set by the relevant Member State. The identification process must be risk-based, meaning that the intensity of the screening corresponds to the potential risk posed by the PEP.

Enhanced due diligence (EDD) measures must be applied when a PEP is identified. These measures include obtaining senior management approval before commencing or continuing the business relationship, taking reasonable measures to establish the source of wealth and source of funds, and conducting enhanced ongoing monitoring of the relationship.

The thresholds for occasional transactions triggering PEP screening may vary by Member State, but generally, transactions exceeding EUR 15,000 require identification and due diligence measures .

Identifying and Managing PEP Risks

Effective PEP screening begins with the accurate identification of PEPs. Businesses should implement procedures to verify the identity of customers and beneficial owners using reliable, independent sources. This can include public databases, commercial PEP lists, and information provided by the customer.

Once a PEP is identified, the business must assess the level of risk associated with the relationship. Factors influencing this risk assessment include the PEP’s position, the country of origin (considering corruption perception indices or other risk indicators), the nature of the business relationship, and the types of products or services involved.

Managing PEP risks involves applying enhanced due diligence measures tailored to the identified risks. This may entail more frequent transaction monitoring, stricter scrutiny of unusual transactions, and requiring additional documentation to verify the legitimacy of funds.

It is also essential to consider the PEP’s family members and close associates, as they may present similar risks. Businesses should extend their screening and due diligence to these individuals to prevent indirect exposure to illicit activities.

Ongoing Monitoring and Due Diligence

PEP screening is not a one-time exercise but requires ongoing monitoring throughout the business relationship. Changes in a customer’s status, such as newly acquired political exposure or changes in the PEP’s position, must trigger a reassessment of the risk profile.

Ongoing monitoring includes reviewing transactions for suspicious activity, updating customer information periodically, and reapplying enhanced due diligence measures as necessary. This continuous process helps ensure that the business remains compliant with its AML obligations and can respond promptly to emerging risks.

The frequency and depth of ongoing monitoring should be commensurate with the risk level. For high-risk PEP relationships, this may mean more frequent reviews and closer scrutiny of transactions compared to lower-risk clients.

Record-Keeping Requirements for PEP Screening

EU businesses conducting PEP screening must maintain comprehensive records of all due diligence measures taken. This includes documentation of the identification process, risk assessments, approvals by senior management, and ongoing monitoring activities.

Records must be retained for a minimum period as prescribed by the relevant national legislation, typically five years from the end of the business relationship or the date of an occasional transaction. These records must be readily available for inspection by the relevant national competent authorities.

Proper record-keeping supports transparency and accountability, enabling businesses to demonstrate compliance with their AML obligations during audits or investigations.

Consequences of Non-Compliance with PEP Screening

Failure to comply with PEP screening obligations can have serious consequences for EU businesses. Regulatory authorities may impose administrative sanctions, including fines and restrictions on business activities. In some cases, non-compliance can lead to criminal liability for the business or its management.

Beyond legal penalties, non-compliance can severely damage a company’s reputation, undermining trust with customers, partners, and regulators. It may also expose the business to increased scrutiny and operational risks.

Therefore, it is imperative for EU businesses to implement robust PEP screening procedures, ensure staff are adequately trained, and maintain up-to-date systems to identify and manage PEP-related risks effectively.

FAQ

What is a PEP screening?
PEP screening is the process of identifying whether a customer or beneficial owner is a Politically Exposed Person and applying enhanced due diligence measures to manage the associated risks .

Why is PEP a higher risk for AML?
PEPs are considered higher risk because their prominent public functions may expose them to corruption or misuse of power, increasing the likelihood of involvement in money laundering or terrorist financing .

How long does a person remain a PEP?
A person remains a PEP for a period defined by national legislation, often for at least 12 months after leaving the prominent public function. However, ongoing monitoring may continue beyond this period depending on risk assessment .

Is PEP screening mandatory?
Yes, PEP screening is mandatory for obliged entities under the EU AML framework when establishing business relationships or conducting occasional transactions above specified thresholds .

What are the requirements for PEP screening?
Requirements include identifying PEPs, applying enhanced due diligence measures such as verifying the source of funds, obtaining senior management approval, conducting ongoing monitoring, and maintaining comprehensive records .

What is the difference between a domestic PEP and a foreign PEP?
A domestic PEP holds or has held a prominent public function within the EU Member State where the business operates, while a foreign PEP holds or has held such a function outside the EU. Both categories require enhanced due diligence but may be subject to different risk assessments .

Sources

Directive (EU) 2015/849 of the European Parliament and of the Council on the prevention of the use of the financial system for the purposes of money laundering or terrorist financing (4th AML Directive) and its amendments.