CPD requirements for Irish compliance professionals

Who sets your obligation

CPD in Ireland comes from more than one direction, and the sources stack rather than substitute:

• The regulator. The Central Bank’s minimum competency requirements apply to people carrying out certain activities, notably advising on or arranging retail financial products.
• Your professional body. Chartered Accountants Ireland, CPA Ireland, ACCA, the Law Society, LIA and the Institute of Banking each run their own scheme, with their own hours and their own categories.
• Your employer. Firms set internal requirements, and under the fitness and probity regime a firm has to be satisfied that individuals remain competent and capable.

Working out which apply to a given person is the first task, and it is role-based rather than title-based. Two people with identical job titles can sit under different obligations depending on what they actually do.

Minimum competency and formal hours

Where the Central Bank’s minimum competency framework applies, an accredited individual must complete a set number of formal CPD hours each year, in relevant subject areas, and maintain a record of them. The scheme is usually administered through a recognised professional body such as LIA or the Institute of Banking.

Two features cause most of the trouble:

1. Hours must be formal. Reading around a subject is valuable and generally does not count. Formal CPD carries a structure, a provider and an assessment or attendance record.
2. Subject relevance is assessed. Hours have to relate to the activities the person is accredited for, so a full quota in the wrong subjects can still leave a shortfall.

Confirm the current hour requirement and category split with your accrediting body each year rather than carrying forward last year’s assumption — the schemes are revised periodically.

What the professional bodies expect

The accountancy and legal bodies run cycles that differ from each other in hours, in the split between structured and unstructured learning, and in how they verify. What they have in common is that the member carries the burden of proof, not the employer.

For compliance staff in particular, the same piece of learning can often be claimed under more than one scheme, provided each scheme’s evidence requirements are met. That is legitimate and worth planning for deliberately, rather than discovering in December.

CPD for the MLRO and the compliance officer

Compliance officers and MLROs usually sit outside the Minimum Competency Code unless they also advise on or arrange retail products, so their CPD obligation comes from their professional body and from the firm’s duty under Fitness and Probity to keep them competent and capable. That makes the plan the firm’s responsibility as much as the individual’s.

What a defensible year looks like

• Law and guidance. Changes to the Criminal Justice Acts, Central Bank guidelines and the EU AML package, taken as they land rather than once a year.
• Typologies. FIU Ireland and FATF reporting on how money is actually laundered through the firm’s products.
• Sanctions. Screening, designations and the reporting route, which moves faster than any other part of the regime.
• Adjacent regimes. Data protection, DORA, the Individual Accountability Framework and conduct, because the MLRO is consulted on all of them.
• The firm’s own products. None of the above is useful without knowing where the risk sits in what the firm actually sells.

Agree the plan with the line manager or the board at the start of the year, record each item as it is completed with its evidence, and expect the Central Bank to ask for the record. Inspections test the MLRO’s own training before the firm’s, because an MLRO who cannot evidence their own competence cannot credibly sign off anyone else’s.

Designations and professional bodies

The Association of Compliance Officers in Ireland, the Institute of Banking, LIA and the International Compliance Association each run designations and diplomas for compliance and financial crime roles, and each attaches an annual CPD requirement to holding the designation. Those hours are a floor, not a plan. The firm’s risk profile decides what the hours should contain.

CPD as Fitness and Probity evidence

Under the Fitness and Probity Standards a person in a controlled function must be competent and capable, and the firm has to satisfy itself of that on appointment and on an ongoing basis. For firms within the Individual Accountability Framework that now includes an annual certification. The CPD record is the main evidence behind both, so the firm should hold a copy rather than rely on the individual producing one on the day.

Running the firm’s CPD, not only your own

The compliance officer usually owns the training matrix: every role mapped to the courses it needs, the frequency, who sits under the Minimum Competency Code, and the evidence held for each person. Review it against the business risk assessment each year, report coverage to the board, and keep the matrix somewhere other than one person’s inbox so it survives turnover. A platform that records completions and exports the evidence does most of the administration; the judgement about what each role needs is still the officer’s.

CPD requirements for accountants in Ireland

Accountants sit under their professional body first. Chartered Accountants Ireland, CPA Ireland and ACCA each run a CPD scheme with a rolling cycle, a minimum each year and a split between structured (verifiable) and unstructured learning. The hour figures differ between the bodies and are revised, so take the current numbers from your own body rather than from a colleague in a different one.

• Structured hours need evidence. A provider, a syllabus and proof of completion. An online course with an assessment and a certificate qualifies; reading a technical update generally counts as unstructured.
• Relevance is judged against the role. Audit, tax and advisory staff can all claim AML, data protection and ethics learning, because the obligations apply to the practice as a whole.
• The statutory duty is separate. A practice that is a designated person under the Criminal Justice Act has to train staff on money laundering whatever the CPD position. The same course can meet that duty and count as structured CPD, provided the certificate is kept.

Practices often ask whether AML training "counts". For members of the accountancy bodies it is relevant structured learning when it carries a syllabus, an assessment and a certificate. The bodies do not accredit individual courses, so the record you keep is what makes the entry defensible.

For the statutory side, the AML training requirements for accountants in Ireland set out who must be trained, what it must cover and how often.

Formal versus informal

The distinction decides whether an hour counts, so it is worth being precise. Formal CPD generally involves a structured learning activity, a defined syllabus or set of learning outcomes, and evidence of participation or assessment. Informal CPD covers the reading, discussion and on-the-job learning that develops competence but cannot be evidenced to the same standard.

A short online course with a syllabus, an assessment and a certificate is usually formal. The same content delivered as a recorded talk with nothing at the end usually is not. If you are relying on hours, check how the provider evidences them before you take it.

Recording it so it survives a check

A CPD record is examined when somebody has a reason to doubt it, which is exactly when a thin record is most costly. A defensible entry carries:

• The date, the provider and the title of the activity
• The number of hours claimed, and the category claimed under
• The learning outcomes or syllabus covered
• Evidence of completion — a certificate, a result, or an attendance record
• A short note on relevance to the role, which is the part everyone omits

Keep the evidence, not just the log. A spreadsheet listing forty hours with no certificates behind it is an assertion. The retention period should match whatever your body and your employer require, and where the same activity supports fitness and probity certification it needs to survive as long as that file does.

Where compliance training fits

AML, data protection, conduct and financial crime training tend to sit comfortably within relevant CPD categories for people in regulated roles, because the subject matter is directly connected to the activities being accredited.

The practical requirement is evidence. A course that issues a timestamped certificate naming the learner, the syllabus, the completion date, the assessment score and the hours claimed gives you an entry you can defend. One that issues nothing gives you a memory.

It is worth saying plainly that recognition rests with your professional body. A provider can state the hours a course represents and evidence them properly; whether a particular body accepts them for a particular member is that body’s decision, and worth confirming before you rely on it.