These Regulations are formulated in accordance with Paragraph 3 of Article 3, Paragraph 4 of Article 7, Paragraph 3 of Article 8 and Paragraph 3 of Article 10 of the Money Laundering Control Act (hereafter referred to as “the Act”) and Paragraph 5 of Article 7 of the Counter-Terrorism Financing Act.

The terms used in these Regulations are defined as follows:
1. Attorney: refers to the practicing attorney as defined under Article 19 of the Attorney Regulation Act and the foreign attorney as defined under Paragraph 2 of Article 114 of the same Act.
2. High-risk country or territory: refers to a country or territory listed in the Paragraph 2 of Article 11 of the Act.
3. Beneficial owner: refers to an individual natural person who exercises ultimate effective control over a legal person or agreement, or who directly or indirectly holds more than 25 % of shares of capitals of such legal person.

The attorney, who is retained to prepare or engage in the designated transactions under each matter of Subparagraphs 3 of Paragraph 3 of Article 5 of the Act, shall conduct Customer Due Diligence (CDD) and Enhanced Due Diligence (EDD) procedures to verify the identity of the client according to the provisions of Article 4 to Article 8, and shall retain the document to verify identity and transaction record according to Article 9. If the retained matter includes any situation in the provision of Article 10, it shall be reported to the Investigation Bureau of the Ministry of Justice according to provision of Article 11.
The act of “prepare” specified in the preceding paragraph refers to the preliminary works of managing transactions after attorney being retained.

While an attorney and the client establish the attorney-client relationship, the attorney shall apply a risk-based approach to verify the identity of the client.
The “risk-based” specified in the preceding paragraph shall set the background of the client, types of transaction, transaction amount and direct source or destination of funds as the assessment matters; the direct source or destination of funds or the client which comes from high-risk countries or territories shall be assessed as high-risk.
Anyone who is assessed as high-risk shall obtain the consent of the leading attorney or the attorney in charge of operation/management of a law firm or a dedicated person designated by him/her while establishing the attorney-client relationship, and it shall pay constant attention to any situation that should be reported according to the provision of Article 10.

If a client has any of the following situations in the customer due diligence process, the attorney shall consider declining to establish the attorney-client relationship or terminating the attorney-client relationship:
1. The client is suspected of using an anonymous name, a fake name, or the name of a shell firm, or a shell corporation or entity.
2. The client uses forged or altered identification documents.
3. The client refuses to provide identification documents.
4. The client procrastinates in providing identification documents in an unusual manner.
5. Documents provided by the client are suspicious or unclear, or the client refuses to provide other supporting documents, or the documents provided cannot be authenticated without reasonable explanations.
6. The client is an individual, a legal person or an organization sanctioned under the Counter-Terrorism Financing Act, or a terrorist or terrorist group identified or investigated by a foreign government or an international anti-money laundering organization. However, this does not apply to payments made under paragraph 1, Article 6 of the Counter-Terrorism Financing Act.

When an attorney and the client establish the attorney-client relationship, the ranges of CDD are as follows:
1. If the client is a natural person: name, birth date, gender, ID certificate number, occupation, nationality, address of residence and contact information.
2. If the client is a legal person:
(1) Name, registered address, registered country, contact information and business matters. However, if the business matters cannot be obtained according to the local law, it shall not be limited by these Regulation
(2) Structure of control right and beneficial owner
(3) Name of senior manager of the legal person.
3. If the client is the trustee of a trust or any legal agreement similar to trust: name, address of residence and contact information of the client, trustee, beneficiary of trust and the director, supervisor, trustee, beneficiary or senior manager of such legal agreement.
If any person is assessed as high-risk according to the preceding Article, the attorney shall verify his/her identity and understand the purpose of the retained case and the channels to acquire funds according to the provisions in the preceding Paragraph
If the appointment is made by a representative, the attorney shall be aware of the fact of appointment and verify the identity of the client and the representative according to the provision in Paragraph 1. However, if there is a long-term cooperation relationship between the representative and the attorney, or if the representative is a trustworthy authority (institution) or a law firm, the attorney may only be aware of the fact of agency and the identity of the representative.
If the client has any of the following circumstances, or his/her identity can be verified by law or based on objective fact, the provision of Paragraph 1 may not be applied thereto:
1. The government authority and government-owned enterprise institution of R.O.C.
2. The foreign government authority or non-high-risk country of territory.
3. Public company and its subsidiaries in R.O.C.
4. The exchange-listed company or the OTC-listed company which is listed in a non-high-risk country or territory and has disclosed its major shareholders according to the regulatory requirements of the place where it is listed, or the company controlled by it.
5. The financial institution and its managed investment tool, which are supervised by R.O.C.
6. The financial institution which is set up outside the border of R.O.C. and is not located in high-risk country or territory, and the investment tool managed by such financial institution.
7. The funds managed by the government authority of R.O.C.
8. The client had established the attorney-client relationship with the attorney in the past and the ending period has not exceeded one year after the previous attorney-client relationship ended, unless it is assessed as high -risk according to the provision of Paragraph 2, of Article 4.

The methods which shall be used by attorney to verify the client’s identity are as follows:
1. If the client is a natural person, the attorney shall review the ID card, health insurance card, alien resident certificate (ARC), passport or any other original documents that can prove the client’s identity. However, if the original document cannot be verified, the attorney shall verify the identity according to other reasonable facts or methods.
2. If the client is a legal person, the attorney shall acquire the following information to understand the nature of its business and the structure of control rights
(1) Proof of establishment or registration, client office, and business place.
(2) Articles of Incorporation.
(3) Register of directors and supervisors.
(4) The documents or statements which can prove the beneficial owners.
3. If the client is the trustee of a trust or any legal agreement similar to trust, the attorney shall acquire the following information to understand its nature and structure of control rights:
(1) Proof of enrollment or registration, client office, and business place or residence of the trustee. However, if it does not need to enroll or register according to laws, it shall not be limited by these Regulations.
(2) Trust contract or the documents of legal agreement
(3) The identification documents of the client, trustee, beneficiary of trust and the director, supervisor, trustee, beneficiary or manager of such legal agreement.
(4) The documents or statements which can prove the owner or the beneficial owner.
If any of the preceding documents is a copy, the attorney shall verify that the copy is in line with the original according to reasonable facts or methods

If an attorney retains a third party to conduct the customer due diligence process on the client, agent, and beneficial owner or the attorney-client relationship, the attorney shall still bear the responsibility for the customer due diligence process, and shall comply with the following provisions:
1. The necessary customer due diligence information shall be obtainable.
2. Appropriate measures shall be taken to assure that the retained third party will provide copies of identification data and other relevant documentation relating to customer due diligence as instructed by the attorney.
3. It shall be confirmed that the third party has appropriate measures in place for compliance with relevant requirements for customer due diligence and record retention.
4. It shall be confirmed that the jurisdiction where the third party is located has anti-money laundering and countering financing of terrorism regulations in place that are consistent with the standards set out by the Financial Action Task Force (FATF).

In respect of the politically exposed persons (PEPs) and their family members and close associates as defined in Paragraph 3 of Article 7 of the Act, by applying a risk-based approach, if he/she is assessed as high-risk according to provisions in Paragraph 2 of Article 4, the attorney shall verify the client’s identity and conduct EDD procedures as follows:
1. Shall obtain the consent of the leading attorney or the attorney in charge of operation/management of a law firm or a dedicated person designated by him/her while establishing the attorney-client relationship.
2. Understand the purpose of retained matter and the ways of acquiring funds.
3. Pay constant attention to any situation that should be reported according to Article 10 during the attorney-client relationship.

If any of the following circumstances exists during the attorney-client relationship, the attorney shall verify the client’s identity again:
1. If he/she knows the change of the client’s identity;
2. If he/she finds that the identity information of the client is false;
3. If it has been over one year since the establishment of attorney-client relationship, unless the client is assessed as low-risk.
If there is a fact which can reasonably suspect that the client or the his/her transaction might be involved in money-laundering or terrorism financing (ML/TF) activities, and if the identity verification procedure of the client might cause the client to conceal or destroy ML/TF information, the attorney may omit the relevant verification procedure and directly report such fact to the Investigation Bureau of the Ministry of Justice in accordance with Article 11, before or during the process of the above said verification procedure.
The duty to verify the client’s identity shall be terminated at the end of the attorney-client relationship

The documentations acquired according to the CDD procedures under Paragraph 2 of Article7 of the Act refer to copies, electronic files or copied information of identification documents or statements of the client and other related personnel as required by these Regulation; if their identities are verified by reasonable facts or methods, the description or certificate of such facts or methods shall be stored accordingly.
The transaction records specified in Paragraph 2 of Article 8 of the Act refer to copies or electronic files of the business relationship documents and record certificates of retained matters.
The documentations under the preceding paragraphs refer to information and transaction records of customer due diligence kept by the attorney which can restore respective transactions and to which rapid access of the competent authority after authorization by law can be assured.

The situation that attorney shall report according to the provision of Paragraph 1 of Article 10 of the Act refers to the retained matter under any of the following situation:
1. There is an objective fact to indicate that identity documentation or transaction documentation provided by the client is false, and no reasonable explanation is provided for the false documentation.
2. The client or the representative does not provide the document for CDD within the time limit set by the attorney.
3. In the event of the remuneration or transaction amount exceeding NTD 500,000, the amount was paid by cash, foreign-currency cash, traveler check, foreign currency bill or other bearer financial instruments without a proper reason.
4. In the event of the remuneration or transaction amount exceeding NTD 500,000, the client on his/her own or demands to pay in cash less than NTD 500,000 for several times or successively without a proper reason.
5. Demand to purchase and sell real estate or business entity immediately without a proper reason.
6. The client is the designated individual, legal person or entity sanctioned under the Counter-Terrorism Financing Act, or the terrorist or terrorist group identified or investigated by foreign governments or international organizations published by the Ministry of Justice.
7. The transaction funds directly come from or will be paid to high-risk countries or territories and are associated with terrorism activities, terrorism organizations or terrorism financing.
8. In the event of being retained to operate the designated transactions specified in Subparagraph 5 of Paragraph 3 of Article 5 of the Act, the client does not explain the reason for arrangement.
9. Knowing clearly that there is no existence of such client; or there is a fact to indicate that the client’s identity is used fraudulently by others.
10. In the event that the client is a natural person, the client refuses to meet with the attorney or be directly contacted by the attorney without a proper reason.

If there is an objective to indicate that the client has any of the circumstances under the preceding paragraph, the attorney shall report the following matters in writing to the Investigation Bureau of the Ministry of Justice by mail, fax, e-mail or other methods in accordance with the format designed by the Investigation Bureau of the Ministry of Justice within five working days after finding out such fact.
1. The following basic information of the client; if the retainer is made by client’s representative, the following basic information of the representative shall be included:
(1) If the client is a natural person: name, date of birth, gender, identity certificate number, occupation, nationality, address of residence and contact information.
(2) If the client is a legal person: name, enrolled or registered date and its approval number, contact information and address of responsible person or manager.
(3) Whether the client is the politically exposed person (PEP) and his or her family members and close relatives specified in Paragraph 3 of Article 7 of the Act.
(4) The relationship between the representative and the client.
2. Retained matters:
(1) Transaction type.
(2) Starting date and termination date of the transaction
(3) Payment method and amount
(4) Transaction account number
(5) The situation and reason that is in compliance with Article 10
3. Name, attorney certificate number and contactinformation of the reporting attorney.
If several attorneys are jointly retained, they may choose one attorney to be the reporting representative.

If the client is on the sanction list as published under Articles 4 and 5 of the Counter-Terrorism Financing Act, the attorney may omit to conduct the activities under each subparagraph of Paragraph 1 of Article 7 of the Counter-Terrorism Financing Act with respect to any property or interest therein of the client that is held or managed by him/her.
If, due to the attorney-client relationship, the attorney becomes aware that the client or other individual, legal person or entity involved in the retained case is on the sanction list as published under Articles 4 and 5 of the Counter-Terrorism Financing Act, the attorney shall report the financial or property interests of such individual, legal person or group that is held or managed by him/her as well as the place where such financial or property interest is located, to the Investigation Bureau of the Ministry of Justice in accordance with the provision of the preceding Article.

The leading attorney or the attorney in charge of operation/management of a law firm who conducts matters specified in the Money Laundering Control Act or the Counter-Terrorism Financing Act (hereinafter referred to as “leading attorney” or “managing attorney”) shall establish the internal control system of anti-money laundering and countering the financing of terrorism (AML/CFT) for his/her law firm that is in line with the business size of the firm.
The internal control system of AML/CFT under the preceding paragraph shall include the following matters:
1. The firm’s procedures for implementing AML/CFT in accordance with the Act and these Regulations.
2. The operation and internal control procedures for coordination and monitoring AML/CFT operations in the firm conducted by the leading attorney or managing attorney or the dedicated person designated by him/her.
3. The monitoring on suspicious money-laundering (ML) transactions of retained matter that has been reported in accordance with these Regulations shall be strengthened.
4. In selecting an attorney of other personnel, attention should be paid to his/her moral character in addition to professional competence.
5. Formulate the on-job training program for AML/CFT and provide the personnel of the firm with updated regulatory requirements of AML/CFT.

Before conducting new business, an attorney shall assess money laundering and terrorism financing risks, and shall establish corresponding risk management measures to mitigate the risks identified.
New business under the preceding paragraph includes new payment mechanism and the use of new technology for new or existing business.

The leading attorney or the managing attorney shall prepare AML/CFT risk assessment report of his/her firm, and shall update such risk assessment report on annual basis.
The preparation and update of the risk assessment report under the preceding paragraph shall take into consideration the client’s identity, the type of case retained by the client, the type of transaction, geographic risk, payment method, business practice and other matters related to the risk.
The leading attorney or the managing attorney shall provide the risk assessment report according to the audit schedule of the Ministry of Justice.

The leading attorney or the managing attorney shall encourage the attorneys and the foreign attorneys of his/her firm to participate the on-job training for AML/CFT organized by individual bar association, government agency, legal person or entity.

The leading attorney or the managing attorney shall establish an audit system based on the scale of its business in respect of the internal control system of AML/CFT under Articles 14 to the preceding article, and shall conduct a self-censorship or internal audit procedures with written records on annual basis.

The period for which the leading attorney or the managing attorney should prepare the risk assessment report and conduct relevant matters under Article 13 to the preceding article shall start from the year in which the attorney of the law firm is retained to conduct matters relating to AML/CFT and shall continue until the following year in which the attorney-client is ended.

The Ministry of Justice shall conduct the risk-based supervision, and shall conduct by itself or entrust the bar association to conduct the site or off-site audits every two years.
The leading attorney or the managing attorney shall cooperate in the audits under the preceding paragraph, shall explain the status of establishment and implementation of internal control and audit system of the firm in respect of anti-money laundering and countering financing of terrorism matters, and shall provide information relating to internal control and audit system without evasion, hindrance or refusal thereof.

These Regulations shall be implemented as of the date of promulgation.