FIC: Directive 12 on submissions of RMCPs

FIC: Directive 12 on submissions of RMCPs logo

Summary:
The Financial Intelligence Centre (FIC) has issued Directive 12 for certain accountable institutions on the submissions of Risk Management and Compliance Programmes (RMCPs), as listed in Scheduled 1 to the Financial Intelligence Centre Act (FICA).


Article:

Directive 12 requires accountable institutions listed in item 1, 2, 3, 9, 11 (excluding bank, mutual bank, and co-operative bank credit providers), 14, 20, 21 and 22 of Schedule 1 to the FICA to submit their Risk Management and Compliance Programmes (RMCPs) to the FIC on an annual basis.

Directive 12 provides for the *manner and timeframes* within which specified accountable institutions are required to submit a copy of the documentation describing their risk management and compliance programmes to the FIC in terms of the FIC Act. 

Specified accountable institutions should make available a copy of the documentation describing its RMCP available to the centre according to the due dates set out in Annexure A:

 

This Directive enables the Centre to monitor accountable institutions’ levels of compliance with the FIC Act, as envisioned in terms of section 4(c) of FICA.

This directive is issued in terms of section 43A of FICA, which means that the Directive has the full force of law. Section 43 of FICA empowers the FIC to issue legally binding directives to accountable and reporting institutions concerning compliance with anti-money laundering, terrorist financing, and proliferation financing laws.

Non-compliance is treated as a statutory violation.

Draft Directive 12 was issued in July 2026 - Refer to our previous Alert dated 7 August 2026

Click here to download the 8-page document:

https://www.fic.gov.za/wp-content/uploads/2026/09/Directive-12-On-the-submission-of-risk-management-and-compliance-programmes.pdf 

Relevance to Auditors, Independent Reviewers & Accountants:

  • The Financial Intelligence Centre Act (FICA) is yet another piece of legislation that your clients must comply with, and which you must assess compliance with.  If they don’t comply with the relevant laws and regulations, you have certain reporting obligations in terms of NOCLAR (NOn-Compliance with Laws And Regulations) – this could include reporting to management, qualifying your audit opinion, reporting a Reportable Irregularity, etc.
  • As an auditor and independent reviewer, you need to consider amendments, regulations, guidance and directives that are gazetted relating to FIC and accountable institutions, to ensure that your clients (or even your own practice) comply with their reporting obligations.
  • As an Accountable Institution, you need to submit your RMCP, or face administrative sanctions.

Relevance to Your clients:

  • Relevant entities (specifically accountable institutions) have a duty to comply with the FIC Act, otherwise they could be held liable. This includes online submission of their RMCP to FIC.
  • Relevant entities should be aware of amendments, regulations, guidance and directives that are gazetted relating to FIC and accountable institutions, to ensure that they comply with their reporting obligations.
  • All accountable institutions need to submit their RCR, or face administrative sanctions.

There are not comments for this article at the moment, check back later.
You must be logged in to add a comment, log in now.

Explore Smarty