Annual compliance update for management body and main stakeholders AML/CFT – DORA – GDPR

Objectives

• Strengthen your understanding of your duties under AML/CFT, DORA and GDPR, including clear decision-making responsibilities, oversight expectations, and where personal exposure and accountability can arise.
• Enhance your ability to identify and challenge key risks (financial crime, ICT and operational resilience, data protection and third-party risk) to enable balanced, well-informed discussions, better escalation, and evidence-based decisions at management body level.

• Leave with a practical set of board-level questions and insights  

Content

1. AML/CFT

• Update on the legal and regulatory AML/CFT framework
• The AML/CFT professional obligations applicable to the collective investment scheme sector,
• The AML/CFT governance requirements
• Latest trends in regulatory supervision
• Q&A

2. Digital operational resilience act

Role & legal accountability of the management body

• Oversight over ICT risk framework
• Duty to approve ICT resilience strategies and ensure adequate resources
• Personal exposure to sanctions

DORA maintenance activities oversight

• Documentation duties, audit trail, follow up
• Incident reporting obligations
• Monitoring third party ICT risk

Practical questions and feed-backs on internal audits and CSSF supervisory practices

3. GDPR

Accountability obligations and board liability

• Governance duties under GDPR
• Records of processing, accountability, risk-based controls
• Data subject rights handling
• Third party processors and due diligence
• How GDPR overlaps with the AI Act and DORA / NIS 2

Data breach response

• Incident detection & internal reporting channels
• 72-hour reporting obligation
• Supervisory expectations

Practical questions and recent updates

Speakers

Our speakers belong to both our specialised and complementary teams and as such, cover all legal, regulatory, taxation and advisory aspects of doing business in Luxembourg. We invite you to check our training agenda where the speakers are listed on each training session.

Duration

​3 hours

Languages

English

---

For more information please contact us by e-mail institute@arendt.com