Document ID: chunk:federal_register_of_legislation:C2024A00110:clause:2_28:p1
Version: federal_register_of_legislation:C2024A00110
Segment Type: clause
Provision Reference: sch 2 cl 28 (pt 1/2)
Character Range: 69187–71993

28  Undertaking initial customer due diligence
 (1) A reporting entity must not commence to provide a designated service to a customer if the reporting entity has not established on reasonable grounds each of the matters in subsection (2) in relation to the customer.
Note 1: See also section 31 (simplified customer due diligence).
Note 2: See also section 32 (enhanced customer due diligence).
Note 3: See section 36 for rules that apply to pre‑commencement customers.
 (2) The matters are as follows:
 (a) the identity of the customer;
 (b) the identity of any person on whose behalf the customer is receiving the designated service;
 (c) the identity of any person acting on behalf of the customer and their authority to act;
 (d) if the customer is not an individual—the identity of any beneficial owners of the customer;
 (e) whether the customer, any beneficial owner of the customer, any person on whose behalf the customer is receiving the designated service, or any person acting on behalf of the customer is:
 (i)  a politically exposed person; or
 (ii) a person designated for targeted financial sanctions;
 (f) the nature and purpose of the business relationship or occasional transaction;
 (g) any other matter relating to the customer that is specified in the AML/CTF Rules.
 (3) Without limiting subsection (1), a reporting entity must do the following for the purposes of establishing on reasonable grounds the matters in subsection (2):
 (a) if the customer is an individual—take reasonable steps to establish that the customer is the person the customer claims to be;
 (b) identify the ML/TF risk of the customer, based on KYC information about the customer that is reasonably available to the reporting entity before commencing to provide the designated service;
 (c) collect KYC information about the customer that is appropriate to the ML/TF risk of the customer;
 (d) verify, using reliable and independent data, such of the KYC information referred to in paragraph (c) as is appropriate to the ML/TF risk of the customer.
 (4) If a reporting entity provides its designated services at or through a permanent establishment of the reporting entity in Australia, a reporting entity must take into account the following matters when identifying the ML/TF risk of the customer for the purposes of paragraph (3)(b):
 (a) the reporting entity's ML/TF risk assessment;
 (b) the kind of customer to whom the designated services will be provided;
 (c) the kinds of designated services provided, or proposed to be provided, by the reporting entity to the customer;
 (d) the delivery channels by which the reporting entity's designated services are or will be provided to the customer;
 (e) the countries with which the reporting entity deals, or will deal, in providing its designated services