PEP Screening: Proportionate Controls for Small Law Practices

The Regulatory Scope of PEP Identification

Small law firms face the same statutory anti-money laundering obligations as large institutional practices. European Union directives and national supervisory authorities require legal professionals to establish whether a prospective client or beneficial owner is a Politically Exposed Person (PEP). This requirement extends to family members and known close associates of such individuals.

A proportionate approach does not mean lowering compliance standards. Instead, it requires establishing clear, repeatable processes tailored to the firm's specific risk profile and matter volume. A practice that regularly advises on domestic property transfers or cross-border corporate structuring requires robust procedures that do not overwhelm administrative staff.

Firms must define what constitutes a PEP within their internal compliance manuals. This definition covers individuals entrusted with prominent public functions domestically, within other EU Member States, in third countries, or within international bodies. Identification must occur prior to establishing a business relationship or executing an occasional transaction.

Initial Screening and Source of Wealth Verifications

Initial verification begins during client onboarding. Sole practitioners and small partnerships must integrate PEP and sanctions checks into standard client intake rather than treating them as separate administrative exercises. Relying solely on client self-declaration forms is rarely sufficient for regulatory scrutiny.

Proportionate verification combines structured self-certification questionnaires with electronic screening against reputable databases or official gazettes. For small practices, automated screening tools reduce manual search time and generate verifiable search certificates. When automated databases are unavailable, practitioners must document manual open-source searches across official governmental and commercial registries.

When screening identifies an individual as a PEP, enhanced due diligence becomes mandatory. The firm must establish both the source of funds involved in the transaction and the broader source of wealth. Source of wealth inquiries require an understanding of how the client accumulated their total net assets, supported by independent documentation such as company accounts, tax returns, or public registers of interests.

Internal Escalation and Approval Workflows

Small practices must establish a clear internal escalation route when a potential PEP match arises. In a firm with limited fee earners, the workflow must be unambiguous to prevent conflicts of interest and ensure independent review.

• Initial Assessment: The fee earner or compliance administrator verifies whether the match is a true positive or a false positive caused by name similarities.
• Risk Categorisation: If confirmed, the matter is classified under enhanced due diligence, documenting the individual's specific public function, seniority, and jurisdiction.
• Senior Management Approval: A designated partner or the Money Laundering Compliance Officer (MLCO) must review the file and formally approve the onboarding decision before work commences.
• Scope Limitation: The approval record must define the permissible scope of legal services and any specific conditions attached to the retainer.

In sole practitioner firms, the practitioner acts as the compliance officer. In such instances, the practitioner must record a written justification detailing why the risk of the engagement remains acceptable and how the firm intends to manage it.

Managing Family Members and Close Associates

Statutory requirements extend enhanced checks to individuals who do not hold public office themselves but maintain direct relationships with PEPs. Regulators expect firms to detect these connections through proportionate inquiry rather than extensive investigative work.

Family members typically encompass spouses, registered partners, children and their spouses, and parents. Close associates include individuals who share beneficial ownership of legal entities or maintain close business relations with a PEP. Identifying these connections requires specific questions within initial onboarding questionnaires, cross-referenced with public corporate registries.

Small practices should avoid disproportionate assumptions. The identification of a family member requires enhanced due diligence, but the depth of inquiries must reflect the client's role in the specific transaction. Documenting the rationale for the extent of inquiry is critical for defending the file during supervisory audits.

Ongoing Monitoring and Periodic Review Triggers

PEP risk is dynamic. An individual may assume public office during a multi-year retainer, or a long-standing client may become a close associate of a newly appointed official. Client due diligence is not a one-off administrative exercise.

For small practices, a sustainable monitoring framework relies on both calendar-based reviews and event-driven triggers. High-risk matters involving PEPs should undergo formal file reviews at least annually. Low- or medium-risk matters where a PEP connection is peripheral can be scheduled for review every eighteen to twenty-four months.

• Receipt of funds from an unverified bank account or a jurisdiction different from the client's residence.
• Unexplained changes to beneficial ownership or complex corporate layering mid-transaction.
• Significant expansions in the financial scale of the transaction beyond the initial instruction.
• Public reports or news indicators concerning the client's political standing or legal status.
• Relocation of the client's primary business activities to higher-risk jurisdictions.

When a PEP leaves public office, regulations generally require firms to apply enhanced due diligence for at least twelve months. Following this period, the practice must conduct a formal risk assessment to determine whether the individual continues to pose a heightened risk before downgrading the matter to standard due diligence.

Maintaining Proportionate Audit Records

Regulatory inspections focus on evidentiary records. A small firm that conducts thorough verbal inquiries but fails to document its findings cannot demonstrate compliance. Every decision relating to PEP identification, escalation, and ongoing management must reside within the matter file.

The compliance file must contain the date-stamped screening result, the documentation supporting source of wealth, the written senior management approval, and the schedule for periodic review. If an alert is dismissed as a false positive, the file must state the factual basis for that conclusion, such as date of birth or nationality discrepancies.

Audit records must be retained for the statutory retention period following the termination of the business relationship or completion of the transaction. Storing compliance records alongside the relevant matter documentation ensures that the rationale remains accessible if queried by professional bodies or enforcement authorities.

Systematic Compliance within the Matter File

Implementing structured workflows allows small practices to satisfy AML obligations without unnecessary administrative burden. By embedding PEP screening records, senior approvals, and review dates directly within the digital matter file in DikigorosAI, practitioners maintain a defensible audit trail across all active instructions.