βœ“ Updated for 2026 Irish AML Regulations βœ“ CPD Eligible βœ“ Trusted by 400+ Irish firms
πŸ“ž +353 1 685 5970

Last updated 15 April 2026. Written by the Harrington Compliance content team and reviewed by an Irish-qualified MLRO practising in a Central Bank-supervised firm.

If you run compliance at an Irish regulated firm, your anti money laundering training programme is one of the most tested parts of your whole framework. In every Central Bank inspection since 2022, training documentation has been flagged as the single most common gap β€” not policies, not CDD files, not STR processes. Training.

This guide sets out, in plain English, exactly what Irish law and supervisors expect from anti money laundering training in 2026, how often you need to deliver it, what it needs to contain, and what audit evidence you need to keep.

Quick take

Every designated person in Ireland must deliver AML training at onboarding and at least annually afterwards. The programme must be specific to the Criminal Justice Act, not generic, and evidence must be retained for six years. The best way to fail an inspection is to rely on a PDF and a signed attendance sheet.

Why AML training matters in Ireland

Ireland's primary AML legislation is the Criminal Justice (Money Laundering and Terrorist Financing) Act 2010 (as amended). Section 54 of that Act imposes a direct training obligation on every designated person:

"A designated person shall ensure that persons involved in the conduct of the designated person's business are instructed on the law relating to money laundering and terrorist financing… and are provided with ongoing training."

That wording is deliberately broad. Irish supervisors β€” the Central Bank of Ireland, the CRO AMLCU for accountancy firms, the Department of Justice for solicitors, the PSRA for estate agents β€” have used it to set steadily higher expectations about what actually qualifies as "ongoing training."

Who has to do AML training?

Section 25 of the CJA defines "designated persons." In practice, this captures nearly every Irish regulated professional services firm, including:

If your firm falls into any of those categories, every single person involved in the conduct of the firm's business needs AML training β€” not just the MLRO, not just client-facing staff. That includes admin, IT, finance, and often directors who aren't "operational."

How often must anti money laundering training be delivered?

The CJA requires training to be "ongoing." In practice, Irish supervisors have settled on a clear expectation:

Firms that deliver training once and rely on it for multiple years are a standing red flag in inspection reports.

What should your AML training cover?

The Central Bank's Anti-Money Laundering Guidelines for the Financial Sector and related sectoral guidance set out what good content looks like. At a minimum, your anti money laundering training programme should cover:

  1. The law β€” the CJA, EU AML Directives, sanctions regimes
  2. Money laundering and terrorist financing typologies relevant to your sector
  3. Customer Due Diligence β€” standard, simplified, and enhanced
  4. Beneficial ownership and the Central Register of Beneficial Ownership (RBO)
  5. PEP identification and ongoing monitoring
  6. Internal reporting to the MLRO and external reporting to FIU Ireland / Revenue
  7. Tipping-off prohibitions and related offences
  8. Record keeping and the six-year retention rule
  9. Role-specific responsibilities (what I have to do, today)
  10. Firm-specific policies, procedures, and escalation routes

What counts as acceptable evidence?

This is where most firms underperform. A signed attendance sheet is not enough. The Central Bank increasingly looks for:

Inspector's favourite question

"Show me the most recent training completion record for a member of staff of your choice, and tell me why they completed that specific version." If you can't answer it in under 60 seconds, your programme is probably not audit-ready.

Classroom vs. e-learning

The CJA is technology-neutral β€” it doesn't prescribe a delivery mode. For most Irish firms in 2026, a well-structured e-learning programme is significantly stronger evidence than a half-day classroom session, because it produces the audit trail supervisors now expect.

That said, e-learning quality varies wildly. Generic "global" AML modules that gesture vaguely at international standards are not a defence. Your programme has to reference Irish law, Irish cases, and your sector.

Common audit findings in 2024–2026

Based on published Central Bank inspection outcomes and enforcement decisions, the top AML training findings are:

  1. No evidence of onboarding training before client contact
  2. Annual refresh missed for some staff (often senior partners)
  3. Training content not updated after a CJA amendment
  4. No end-of-module assessment β€” just attendance
  5. No sector-specific content despite operating in a regulated sector
  6. No evidence of content review or version control

Each of these is avoidable with a modern training platform. None of them is avoidable with a PDF and a sign-in sheet.

What 'audit-ready' actually looks like

When the Central Bank arrives, an audit-ready AML training file contains, as a minimum:

Getting there in one week

If your current programme doesn't look like that, the quickest way to close the gap is to move to a purpose-built, Irish-first compliance training platform. Harrington Compliance's AML course is built entirely around the CJA, includes randomised assessment and audit-ready reporting, and typically takes a firm from "policy PDF and sign-in sheet" to "audit-ready" in under a week.

Book a 15-minute walkthrough β†’

Related reading

Get your team audit-ready in 40 minutes

See the Harrington AML course, the MLRO dashboard, and the audit pack in one 15-minute session.

Book a Free Demo β†’