CIMA’s AML/CFT/CPF Compliance Rule applies to all financial services providers (FSPs) that are regulated and supervised by the Cayman Islands Monetary Authority (CIMA) under the Regulatory Acts, a definition wide enough to capture an estimated 35,000 CIMA-registered Cayman Islands funds directly, not only their licensed managers. This marks a change from the years when many funds relied on their manager’s or administrator’s AML programme without maintaining a fully documented one of their own.
A wide definition of who is covered
The Rule text applies it to “all FSPs that are regulated and supervised by CIMA under the Regulatory Acts,” and extends this expressly to branches, subsidiaries, affiliates and other members of a CIMA-regulated financial group.
That reaches funds registered under the Mutual Funds Act and the Private Funds Act, managers and advisers registered under the Securities Investment Business Act, and other CIMA-licensed providers such as administrators and trust companies.
Funds are squarely in scope, not just their managers
Historically, CIMA’s AML inspections focused heavily on managers and administrators, with a fund’s own compliance obligations often satisfied by relying on those parties.
The Compliance Programme Rule states explicitly that it extends to the fund itself as a Regulated FSP, as well as to group members. Registration as a fund does not place an entity outside the Rule, and relying on a manager’s or administrator’s programme does not remove the fund’s own obligation to demonstrate compliance.
Proportionality, not a single fixed standard
The Rule requires each FSP to implement a compliance programme “commensurate with its size, complexity, structure, nature of business, and the risk profile of its operations.” A small, single-strategy fund and a large, multi-share-class platform are both in scope, but the depth of the programme each needs to maintain differs.
What sits outside the Rule’s reach
The Rule itself specifies no list of exemptions from within the FSPs it covers.
An entity falls outside its reach only where the entity is not itself regulated and supervised by CIMA in the first place, for example if it qualifies for an exemption from registration under the relevant Regulatory Act. Any structure uncertain of its own registration status should confirm it directly with its administrator or legal counsel rather than assume it is out of scope.
Why this matters for governance
A fund that has never separately documented its own AML/CFT/CPF programme, on the assumption that its manager’s programme covers it, needs its own programme. CIMA can request evidence of the fund’s own compliance programme directly, and the fund’s governing body, not only its manager, carries responsibility for it.
Confirming whether an entity is in scope, and whether it can rely on another party’s programme, is the first practical step before addressing the independent audit and reporting requirements that follow.
Related questions: What is CIMA’s AML/CFT/CPF Compliance Rule, and when did it take effect? | Does outsourcing AML functions to a fund administrator or third-party AML officer transfer away a fund’s compliance responsibility?
wb.group helps funds confirm their AML/CFT/CPF scope and build the documentation CIMA expects. Contact us for more information.
Scope of CIMA’s AML/CFT/CPF Compliance Rule
CIMA’s AML/CFT/CPF Compliance Rule applies to all financial services providers (FSPs) that are regulated and supervised by the Cayman Islands Monetary Authority (CIMA) under the Regulatory Acts, a definition wide enough to capture an estimated 35,000 CIMA-registered Cayman Islands funds directly, not only their licensed managers. This marks a change from the years when many funds relied on their manager’s or administrator’s AML programme without maintaining a fully documented one of their own.
Yes. A fund that is itself an FSP regulated by CIMA must be able to demonstrate its own compliance programme, whether maintained in-house or through a properly documented delegation to its manager or administrator. Relying on another party’s programme without documenting the arrangement does not satisfy the Rule.
No. Size and complexity affect how detailed a fund’s compliance programme needs to be, since the Rule requires proportionality, but they do not remove a fund from scope if it is registered with and supervised by CIMA.
Yes. A fund’s manager, if licensed or registered by CIMA in its own right – for example under the Securities Investment Business Act – is a separate FSP with its own obligations under the Rule, distinct from the fund’s.
Because the Rule reaches every CIMA-registered fund as well as licensed managers, administrators and other service providers, industry estimates put the number of affected Cayman funds alone at approximately 35,000, in addition to the managers and providers already accustomed to CIMA’s AML supervision.