What does a money laundering officer do according to Section 7 GwG? Tasks, liability, order

Section 7 of the Money Laundering Act (GwG) obliges certain obliged entities to appoint a money laundering officer. Recipients include banks, insurance companies with life or accident insurance with premium refunds, payment service providers, securities institutions, goods traders above certain thresholds, real estate agents, notaries, tax advisors, auditors, lawyers and trustees. The money laundering officer is located at management level, is directly subordinate to the management and is responsible for fulfilling the obligations in accordance with Sections 4 to 6 of the GwG and for submitting suspicious activity reports in accordance with Section 43 of the GwG. Section 56 GwG sanctions breaches of duty with fines of up to 150,000 euros as a rule and up to five million euros or ten percent of the consolidated group turnover in the case of serious violations.

This article shows in detail which tasks a money laundering officer takes on operationally and strategically, where his powers end, how the reporting line to management must be structured, what personal liability he bears and when the external appointment is made using the officer-as-a-service model of CIVAC makes sense. The focus is on the operational perspective. What does the role really do, what tools does it need, and how is the set of obligations under Section 7 GwG documented in such a way that the responsible supervisory authority, such as BaFin or the authority under state law, accepts the evidence without discussion. In addition, it is shown how tasks, authorities and liability protection can be presented consistently with a compliance platform and a clear reporting line.

§ 7 GwG is embedded in a canon of obligations, which together with § 4 GwG (risk management), § 5 GwG (risk analysis), § 6 GwG (internal security measures) and § 9 GwG (group-wide obligations) form a self-contained prevention regime. The standard requires certain obliged entities to appoint a money laundering officer and a deputy. According to Section 7 Paragraph 3 of the GwG, the supervisory authority can waive the appointment in individual cases, for example in the case of micro-enterprises with a low risk profile or purely brokerage activities.

Who is required to be appointed is determined by Section 2 of the GwG. Banks, financial service providers, insurance companies with life insurance or accident insurance with premium refunds, payment institutions, electronic money institutions, securities institutions, investment funds, goods dealers who accept cash from 10,000 euros, art dealers from 10,000 euros, real estate agents from 10,000 euros monthly rent, notaries, lawyers, tax advisors, auditors and trustees are subject to the obligations. The exact scope results from Section 2 Paragraph 1 GwG, supplemented by the federal government's national risk analysis.

According to Section 7 Paragraph 1 Sentence 2 GwG, the money laundering officer is directly subordinate to the management. This means a direct reporting line without intermediate levels. Freedom from professional instructions is enshrined in law; the money laundering officer must not be disadvantaged because of his work. According to Section 7 Paragraph 7 GwG, termination of the employment relationship is only permitted for good cause, comparable to the data protection officer according to Section 38 Paragraph 2 BDSG.

CIVAC represents this role as a compliance platform and officer-as-a-service. Licence the workspace for your internal money laundering officer or have our agent appointed if you want to choose external outsourcing. The appointment certificate, signed, filed, verifiable, with clearly documented reporting line to management and written authorities.

Section 7 paragraph 1 GwG names three core tasks. Firstly, the responsibility for compliance with anti-money laundering obligations within the company. Secondly, the responsibility for submitting suspicious activity reports to the Financial Intelligence Unit (FIU) in accordance with Section 43 of the GwG. Thirdly, the role of contact person for the supervisory authorities, law enforcement authorities and the FIU. These three tasks are concretized by a series of additional obligations that are derived from Sections 4 to 6 of the GwG.

Operationally, a broad list of specific tasks is derived from this. Preparation and updating of the risk analysis in accordance with Section 5 GwG at least annually, derived from the business activities, customer base, sales channels and geographical distribution. Conception and implementation of internal security measures in accordance with Section 6 GwG, including principles and procedures, IT-supported monitoring of transactions, employee selection procedures, training and whistleblower structures with connection to the internal reporting office in accordance with HinSchG.

In addition, there is operational responsibility for the due diligence obligations towards contractual partners in accordance with Sections 10 to 17 GwG. Identification of the contractual partner, identification of the beneficial owner in accordance with Section 11 of the GwG, collection of information for the purpose of the business relationship, continuous monitoring, increased due diligence requirements for increased risk, simplified due diligence requirements for low risk. The practice requires an electronic KYC procedure with interfaces to sanctions lists, PEP databases and the transparency register in accordance with Sections 18 ff. GwG.

Finally, training of employees in accordance with Section 6 Paragraph 2 Number 6 GwG. At least annually, documented per person, with knowledge test and refresher for legal changes. In the CIVAC workspace, these tasks are supported with 490 ready-to-use audit templates, from the risk analysis template to the KYC onboarding checklist to the suspicious activity report workflow template, so that the chain of obligations is documented seamlessly and in an audit-proof manner.

§ 43 paragraph 1 GwG obliges obliged parties to immediately report to the FIU facts that indicate that an asset comes from a criminal act that could be a predicate offense of money laundering, is used to finance terrorism or is related to money laundering or terrorism financing. The report is made electronically via the goAML portal. The deadline expires as soon as we become aware of it, which operationally often means a few hours, not days, with a clear escalation outside of business hours.

According to Section 7 Paragraph 5 of the GwG, the money laundering officer is obliged to report the matter as soon as the relevant facts become known to him. The duty affects the function, not the person alone. If the money laundering officer is unable to attend, the deputy takes over. The management may not oppose the reimbursement. A breach of duty with intent or gross negligence can be punishable under Section 261 of the Criminal Code and trigger personal liability for the manager, including criminal proceedings against those directly responsible.

Operationally, reporting involves an internal workflow. Employees report suspicions to the money laundering officer, who checks, evaluates, documents the plausibility, decides on the report and transmits it via goAML. The ban on tipping in accordance with Section 47 of the GwG is important: the contractual partner may not be informed about the report; internal information must be strictly limited. A violation of the tipping ban is subject to independent sanctions and can have criminal consequences.

In the workspace, the reporting path is managed as a versioned workflow. Incoming notices, assessment documentation, decision, report, receipt from the FIU, follow-up. The auditor calls, the evidence is ready. Audit-proof, documented, § 43-proof, supplemented by the possibility of anonymizing internal whistleblowers in accordance with the HinSchG and defined retention periods.

Section 7 paragraph 5 GwG gives the money laundering officer extensive powers. He has access to all the information, data, records and systems he needs for his job. The management must provide the organisational, personnel and material resources. A right to training, IT support and external advice is actually included, even if it is not stated literally, otherwise the fulfilment of the task would be practically impossible. Systematic under-equipment is regularly the subject of supervisory complaints.

The freedom to issue instructions is anchored in Section 7 Paragraph 1 Sentence 2 of the GwG. The management may not give the money laundering officer any technical instructions that would impair the fulfilment of his duties. From a disciplinary point of view, the person remains an employee like anyone else, but the employer's right of direction is limited by the freedom to issue instructions. Conflict situations are not uncommon in practice, for example when the fulfilment of tasks slows down business practice and affects short-term sales targets.

The protection against dismissal according to Section 7 Paragraph 7 GwG is comprehensive. Ordinary termination due to the activity as a money laundering officer is excluded; extraordinary termination only for good cause in accordance with Section 626 of the German Civil Code (BGB). The protection continues until one year after the end of the job, so that the person may not be dismissed immediately after the job ends. In its supervisory practice, BaFin specifically checks whether protection is being observed formally and materially, including transfers to equivalent positions.

The appointment document with the scope of tasks, reporting line, authorities and protective clause is stored as a versioned template in the workspace. Licence the workspace for your internal representatives or have our representatives order it. In both models, protection is documented consistently, including representation regulations, escalation paths and written confirmation of the availability of resources.

The liability risks of the money laundering officer are spread over three levels. Administrative offenses according to Section 56 GwG, criminal offenses according to Section 261 StGB and Section 130 OWiG, as well as under labour law against one's own employer within the framework of internal liability. The fines generally range up to 150,000 euros per violation, and for serious, repeated or systematic violations up to five million euros or ten percent of the previous year's consolidated group sales, whichever is higher. Repeat offenses regularly make the sanction more severe.

The recipients of the fine are primarily the company as the obligated party and secondarily the management person who has violated their duty of supervision in accordance with Section 130 OWiG. The money laundering officer himself is the addressee if he violates specific obligations that he is personally responsible for, in particular the reporting obligation according to Section 43 of the GwG. Examples from administrative practice concern failure to report suspicious activity, inadequate risk analyses, lack of training, insufficient due diligence and violations of the tipping ban in accordance with Section 47 of the Money Laundering Act.

Criminal risks arise from Section 261 of the Criminal Code (money laundering). Anyone who knowingly or carelessly fails to report a suspicious transaction and thus prevents the investigation of a predicate offense can commit a criminal offense. Section 130 OWiG covers the management person's breach of supervisory duty if organisational deficiencies make breaches of duty possible. Internal liability towards the employer can arise if the money laundering officer grossly negligently or intentionally violates duties and this results in damage to the employer.

CIVAC addresses these risks with documented processes, clear reporting lines and complete records. The appointment certificate, signed, filed, verifiable. When ordering externally via Officer-as-a-Service, representation, insurance and escalation paths are also set out in writing, supplemented by D&O protection on the provider side, which accompanies the personal liability exposure of the externally appointed representative.

Section 7 Paragraph 1 GwG does not explicitly distinguish between internal and external money laundering officers. Supervisory practice accepts external agents under two conditions. Firstly, professional qualifications, usually with a professional qualification, relevant experience and regular training. Secondly, organisational integration with access to the relevant systems, regular presence and a clear escalation line to management. BaFin formulates these requirements in its interpretation and application instructions for the AMLA. The state authorities apply similar standards to the non-banking sectors.

Internal representatives are worthwhile for banks, larger insurance companies, payment institutions and all obliged entities with their own compliance department, existing KYC platform and sufficient staffing levels. Personnel costs are generally between 80,000 and 150,000 euros per year for a qualified full-time position, supplemented by training and tooling costs between 20,000 and 50,000 euros per year, depending on the size of the obligated party and the maturity of the systems.

External representatives are worthwhile for goods traders, real estate agents, medium-sized banks, smaller payment service providers, law firms and Tax consulting practices that cannot or do not want to handle the obligations internally. The advantages are professional depth, quick availability, standard replacement arrangements and fixed monthly costs without personnel risk. The disadvantages are the operational distance from day-to-day business and the need for clear interfaces for suspicious activity reporting workflows.

CIVAC offers both models in one system. Licence the workspace for your internal representatives or have our representatives order it. In the external model, a qualified money laundering officer takes over the fulfilment of duties, with a fixed reporting line, representation and insurance protection. Transitions between the models are possible, for example when a company grows and wants to build internally without losing the supervisory track or breaking the documentation chain.

According to Section 7 Paragraph 5 Number 3 GwG, the money laundering officer is the central contact person for the responsible supervisory authority. In the banking sector this is BaFin, and in the case of non-banks it is the federal states with different distributions of responsibility, such as district governments, regional councils or regional court presidents. The supervisory authorities carry out on-site inspections and written requests for information, often on an ad hoc basis, sometimes on a rotating basis based on risk-based selection. A documented information register in the workspace significantly shortens response times.

For suspicious activity reports, the FIU is the central receiving point at the General Customs Directorate. It evaluates the reports, forwards them to public prosecutors if a crime is suspected and makes them available for statistical purposes and national situation reports. The money laundering officer maintains contact with the FIU via the goAML portal, documents queries and responds promptly, usually within one month of the request. Late answers often give rise to follow-up requests with a shortened deadline.

Law enforcement authorities usually approach the obligated party with requests for information in accordance with Section 95 of the Code of Criminal Procedure or as a seizure in accordance with Section 94 of the Code of Criminal Procedure. The money laundering officer coordinates the response, checks the admissibility, obtains legal advice and ensures that the tipping ban is adhered to as far as suspicious activity reports are concerned. A direct confrontation with the prosecutors often takes place in cooperation with the legal department or external criminal defence lawyers, with clearly documented incoming and outgoing correspondence.

In the CIVAC workspace, all official contacts are documented with date, deadline, status and shipping receipt. The reporting line to management contains a monthly overview of open inquiries. The auditor calls, the evidence is ready., including the correspondence history, the internal assessments, the escalation decisions and the documented submission to management with the date, version status and release note.

The focus of supervision is shifting. In recent years, BaFin has increasingly examined the effectiveness of internal security measures, not just their existence. Specifically, this means: Are the risk analyses actually broken down into the specific business model, or are they generic template texts? Are the training courses documented effectively, or are there just attendance lists without any reference to the content? Are the due diligence obligations carried out in practice or just formally checked off? These questions now determine the outcome of on-site supervisory inspections.

For goods traders, the focus is on threshold monitoring when accepting cash, identifying the contractual partner and the ongoing monitoring of recurring business relationships. For real estate agents and notaries, the focus is on identifying the beneficial owner, the origin of the assets and the suspicious activity reporting practice for cash payments. At banks, transaction monitoring, sanctions screening and PEP identification are classic audit areas, supplemented by adverse media research in the event of increased risks.

A common practical problem is the inadequate updating of the risk analysis. Section 5 of the GwG requires regular, at least annual updates, which in practice are often compared with the national risk analysis. If the risk analysis is carried out unchanged over years, this is a reliable finding for a fine procedure, as the supervisory authority can systematically derive the breach of duty from it. A second practical problem is the insufficient separation between standard and enhanced due diligence obligations.

Others manage compliance like a filing cabinet, here it is managed like software. The risk analysis is carried out in the workspace with versions, sources and justifications, annual updates with reminders 60 days before the due date. The federal government's national risk analysis and sectoral interpretation and application instructions are stored as a reference so that every update can be compared with the current supervisory understanding.

The role of the money laundering officer is demanding because it combines operational duties, personal liability and close supervisory integration in one function. Anyone who takes the obligations under Section 7 GwG seriously does not build a file roll, but rather an integrated compliance function with a clear reporting line, documented suspicious activity reporting workflows and verifiable training and due diligence processes that remain visible in day-to-day business and are immediately accessible in the event of an audit.

CIVAC is a compliance platform and officer-as-a-service. Licence the workspace for your internal money laundering officer or have our officer appoint one. In the internal model, you use the stored templates for risk analysis, KYC, suspicious activity reports and training, the 490 ready-to-use audit templates, the reporting line to management and the EU data residency. In the external model, CIVAC provides a qualified money laundering officer with an appointment certificate, representation, insurance protection and an established reporting line.

The money laundering officer works in the same system with the Compliance Officer and the data protection functions, so that whistleblower reports, data protection requirements and KYC data can be used without multiple recording. This integration saves effort while at the same time increasing the quality of supervision because interface gaps are systematically closed and parallel isolated solutions are eliminated.

Turn reading into a mandate. Write to info@civac.de or use the contact form on civac.de. We discuss the obliged entity status according to Section 2 GwG, business model, existing structures and the appropriate model, then you will receive a concrete proposal with a clear amount of effort per month. The appointment certificate, signed, filed, verifiable. The auditor calls, the evidence is ready., audit-proof and Section 7-proof. Transitions between internal and external models are possible without a migration break because the workspace and documentation chain remain consistent and ensure immediate information in the event of a supervisory audit, including historical versions of all mandatory documents.