Key Takeaway
For sole directors and sole practitioners, self-appointment to all three governance roles is mandatory. You cannot delegate these roles to external helpers, contractors or family members. You are the only person who can fill these positions.
The Three Mandatory Roles
As a sole director or sole practitioner, you must hold all three of these roles:
- AML/CTF Compliance Officer - your designated point of contact with AUSTRAC and responsible for day-to-day compliance oversight
- Senior Manager - the senior person with authority over the business who must approve high-risk relationships and sign off on policies
- Governing Body - performs the supervisory and oversight function
What the Legislation Says
The Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) requires reporting entities to have an AML/CTF program that includes the appointment of an AML/CTF Compliance Officer, a Senior Manager and a Governing Body. These roles must be held by members of senior management with real control over the business.
For sole practitioners and single-director companies, you are the only person who meets the senior management requirement. There is no alternative. You cannot appoint a spouse, bookkeeper or external consultant to any of these roles because they are not senior management of your business.
Understanding the Three Roles
AML/CTF Compliance Officer
Your designated point of contact with AUSTRAC. This person is also responsible for the day-to-day management of your AML/CTF program, including overseeing customer due diligence, monitoring for suspicious activity, managing reporting obligations and ensuring the program remains current. Must be senior management.
Senior Manager
The senior person with authority over the business operations. For a sole director, this is you. This role ensures there is executive-level accountability for compliance.
The Senior Manager must also approve certain high-risk customer relationships (for example, foreign PEPs) and sign off on the AML/CTF program and policies. These are not functions that can be delegated.
Governing Body
Performs the supervisory and oversight function for your AML/CTF program. This is not a decision-making role per se - it is about ensuring appropriate oversight and accountability. For a board, this would be the directors in their supervisory capacity. For a sole practitioner, you perform this oversight function yourself.
The Governing Body receives reports from the AML Compliance Officer and must be notified of material changes to the risk assessment. As a sole practitioner, you fulfil this function by regularly reviewing your own compliance activities and risk profile.
Your Responsibilities
As a sole practitioner holding all three roles, you perform the following across your three capacities:
- Overseeing the AML/CTF program and ensuring it remains current and effective
- Reporting obligations including suspicious matter reports (SMRs) and threshold transaction reports (TTRs) where applicable
- Customer due diligence procedures and ongoing monitoring
- Record keeping in accordance with legislative requirements
- Training (even if you are the only person requiring training)
- Regular reviews of your program to ensure it addresses current ML/TF/PF risks
- Supervisory oversight of your own compliance activities
Practical Considerations
While holding all three roles yourself, there are some practical matters to consider:
Things to Keep in Mind
- Document your appointments formally in your AML/CTF program
- Complete appropriate training to understand your obligations
- Consider succession planning if you become incapacitated
- Maintain records of your compliance activities
What About Getting Help?
While you cannot delegate the three governance roles, you can still get assistance with AML compliance:
- Outsource specific functions like customer verification or transaction monitoring
- Use compliance software to automate workflows and record-keeping
- Engage consultants to help develop and review your program
The key distinction is that you remain in all three governance roles with ultimate responsibility, while others may assist with operational tasks.
Common Misconceptions
Some practitioners worry that AUSTRAC might view self-appointment unfavourably. This is not the case. AUSTRAC understands that sole practitioners have no alternative. What matters is that:
- You have a documented AML/CTF program appropriate to your business
- You understand your obligations across all three roles
- You are actually performing the compliance functions
- You can demonstrate compliance if audited
Getting Started
If you are a sole practitioner preparing for Tranche 2 obligations, your next steps should include:
- Enrolling with AUSTRAC (required from 31 March 2026)
- Developing or obtaining an AML/CTF program tailored to your designated services
- Formally appointing yourself to all three governance roles within that program
- Completing AML/CTF training
- Implementing customer due diligence procedures