Spotlight on Anti-Money Laundering (Part 2 of 3): Establishing an AML Compliance Program at a Non-Bank Residential Mortgage Lenders and Originators


Auto Finance Attorney John Redding

As reported in Part 1 of this series, all non-bank residential mortgage lenders and originators (RMLOs) have until August 13, 2012 to establish an Anti-Money Laundering (AML) program as part of the new rule.

Howard Eisenhardt, Counsel in BuckleySandler’s Washington, DC office, cautions against simply attempting to use a bank model AML template. “Bank models are focused on cash, account monitoring, and include many things that are not part of the business model of an RMLO. In addition, there are many things peculiar to an RMLO that would not be present in the traditional depository AML program. While some parts may be the same, the RMLO AML Program is not a ‘one size fits all.’ The bank model is like the proverbial square peg, the RMLO model is more like a round hole, and the two just don’t fit together,” explains Eisenhardt.

Instead, Eisenhardt suggests RMLOs follow a five-step process to establish an AML compliance program that will identify and address the unique challenges they face.

  1. Conduct a risk assessment – Conducting an initial risk assessment, focusing on all business lines, products, services, customers, and geographical locations will allow a company to determine exposure to risks associated with money laundering, terrorist financing, and other laws. The information gleaned from the risk assessment will drive the development of its AML program.
  2. Determine internal policies, procedures, and controls – Incorporate policies, procedures, and controls based on the risk assessment in the step above.
  3. Appoint a designated BSA Compliance Officer – Though it might seem obvious, when appointing a compliance officer, the individual must be competent in the area. He / she should have a knowledge of the BSA and its implementing regulations and be qualified by experience, knowledge, and training. Simply inserting an existing compliance officer with no AML/BSA experience into this role may not be effective.
  4. Establish an employee training program – Provide on-going training for appropriate personnel concerning their responsibilities under the AML program. Training should include a general overview of the law and highlight red flags that they should be looking for.
  5. Implement an independent audit function – To ensure an AML program is effective, regular testing is critical. Testing is an important factor in developing conclusions about the integrity of overall controls and risk management processes. Testing can be done by an independent third party or can be done by an internal resource as long as that person does not work for or report to the BSA Officer.

Eisenhardt points out that AML Programs and their requirements are uncharted waters for RMLOs, but strongly advises against delaying rolling out a program. He suggests a company familiarize itself with the regulations and start with a well thought out, comprehensive risk assessment.


Written by:

Published In:

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© BuckleySandler LLP | Attorney Advertising

Don't miss a thing! Build a custom news brief:

Read fresh new writing on compliance, cybersecurity, Dodd-Frank, whistleblowers, social media, hiring & firing, patent reform, the NLRB, Obamacare, the SEC…

…or whatever matters the most to you. Follow authors, firms, and topics on JD Supra.

Create your news brief now - it's free and easy »

All the intelligence you need, in one easy email:

Great! Your first step to building an email digest of JD Supra authors and topics. Log in with LinkedIn so we can start sending your digest...

Sign up for your custom alerts now, using LinkedIn ›

* With LinkedIn, you don't need to create a separate login to manage your free JD Supra account, and we can make suggestions based on your needs and interests. We will not post anything on LinkedIn in your name.