GENERAL PROVISIONS FOR THE CERTIFICATION OF INDEPENDENT EXTERNAL AUDITORS, COMPLIANCE OFFICERS AND OTHER PROFESSIONALS IN MATTERS OF PREVENTION OF OPERATIONS WITH RESOURCES OF ILLEGAL ORIGIN AND TERRORIST FINANCING

Published in the Official Gazette of the Federation on November 1, 2019.

The National Banking and Securities Commission, pursuant to Articles 4, fractions X, X Bis, XXXVI and XXXVIII, and 16, fraction I of the Law of the National Banking and Securities Commission,

CONSIDERING

That on October 2, 2014, the “General Provisions for the Certification of Independent External Auditors, Compliance Officers and Other Professionals in Matters of Prevention of Operations with Resources of Illegal Origin and Terrorist Financing” were published in the Official Gazette of the Federation, derived from the authority added to the Law of the National Banking and Securities Commission for the Commission itself to certify compliance officers, as well as independent external auditors and other professionals, so that they may provide their services to entities and persons subject to the supervision of this decentralized body, in order to verify compliance with financial laws and provisions emanating from them, in matters of prevention, detection and reporting of acts, omissions or operations that could fall under the circumstances of Articles 139 Quáter or 400 Bis of the Federal Penal Code;

That on March 13, 2015 and July 4, 2017, the aforementioned provisions were modified, with the objective that the Commission could issue the reference certification to those independent external auditors, compliance officers and other professionals who collaborate in the elaboration of the evaluation to which participants will be subjected, among other modifications;

That in view of the fact that the object of certification is to verify that persons who carry out the verification of compliance with financial laws and provisions emanating from them, in matters of prevention, detection and reporting of acts, omissions or operations that could fall under the circumstances of Articles 139 Quáter or 400 Bis of the Federal Penal Code, have the minimum knowledge in accordance with the highest international standards in the matter, it is necessary to update the process of obtaining said certification in order to make it more transparent, clear and expeditious;

That in order to grant greater legal certainty and reduce the economic burden on compliance officers, independent external auditors and other professionals, it is necessary to modify the regulation regarding the renewal of the certificate, derogating the obligation related to training;

That it is necessary to derogate the norms relative to the certification of legal entities, in order to avoid double regulation, since the Guidelines for the Elaboration of the Audit Report to Evaluate Compliance with General Provisions in Matters of Prevention of Operations with Resources of Illegal Origin and Terrorist Financing, as well as the Minimum Standards in Matters of Audit in Prevention of Operations with Resources of Illegal Origin and Terrorist Financing for Legal Entities, already contain the elements relative to the elaboration and content of audit opinions;

That in order to reinforce the transparency of the certification process and prevent conflicts of interest, it is necessary that this Commission have the power to assist itself, in the different stages of the process, with legal entities of a public or private nature, national or foreign, that provide it with various services such as the elaboration and application of the evaluation, as well as the review and issuance of the results thereof, and

That inasmuch as the modifications to the current General Provisions imply a total restructuring of the normative body, it is necessary to issue a new order that, in an orderly, coherent and clear manner, precisely establishes the requirements and stages of the certification process, has resolved to issue the following:

GENERAL PROVISIONS FOR THE CERTIFICATION OF INDEPENDENT EXTERNAL AUDITORS, COMPLIANCE OFFICERS AND OTHER PROFESSIONALS IN MATTERS OF PREVENTION OF OPERATIONS WITH RESOURCES OF ILLEGAL ORIGIN AND TERRORIST FINANCING

INDEX

Chapter I

Preliminary Provisions

Chapter II

On the Process of Obtaining the Certificate

Section I

On Requirements and Documentation

Section II

On the Evaluation Procedure

Section III

On the Issuance of the Certificate

Chapter III

On the Renewal of Certification

Chapter IV

On the Revocation of Certification

Chapter V

Final Provisions

---

Chapter I

Preliminary Provisions

Article 1.- These provisions aim to establish the requirements and the applicable process for the Commission to certify compliance officers, independent external auditors and other professionals, so that they may provide their services to entities and persons subject to the supervision of the Commission, for the verification of compliance with obligations contained in financial laws and provisions emanating from them, in matters of prevention, detection and reporting of acts, omissions or operations that could fall under the circumstances of Articles 139 Quáter or 400 Bis of the Federal Penal Code.

Likewise, they aim to indicate the requirements and procedures to certify independent external auditors and other professionals so that they may assist the Commission when it hires them, for the verification of compliance with the laws and provisions referred to in the first paragraph of this article.

Article 2.- For the purposes of these provisions, singular or plural shall be understood by:

I. Certificate, the document issued electronically by the Commission, in which the certification referred to in Article 4, fractions X and X Bis of the Law is recorded.
II. Commission, the National Banking and Securities Commission.
III. Instruction Manual, the document made known by the Commission through its Internet portal, which details the process for obtaining or renewing the Certificate, as well as the specifications required to carry out its processing.
IV. Law, the Law of the National Banking and Securities Commission.
V. Participant, the natural person who intends to obtain or, if applicable, renew the Certificate in terms of what is provided in these provisions.

Article 3.- The interpretation of these provisions and the attention of consultations related to their application shall correspond to the Vice Presidency of Supervision of Preventive Processes of the Commission.

Chapter II

On the Process of Obtaining the Certificate

Article 4.- The process of obtaining the Certificate shall consist, at least, of the following stages:

I. Publication of the public call.
II. Registration and obtaining of folio and password.
III. Submission of application by the Participant.
IV. Checking of documentation with originals.
V. Evaluation.
VI. Issuance of the Certificate.

Article 5.- The process of obtaining the Certificate shall begin with the publication of the public call in the Official Gazette of the Federation, in which the corresponding participation bases will be included.
The participation bases will indicate, among other aspects, the stages of the certification process, the headquarters, the dates and time of application of the evaluations, as well as the Internet address where Participants can find the Instruction Manual to consult the terms and conditions related to the certification process.

Article 6.- Participants, in order to obtain the corresponding Certificate, must register on the Commission's Internet portal.
Once the Participant registers, it will be considered that they accept the terms and conditions provided in the call and the Instruction Manual indicated in Article 5 of these provisions. At that same act, a folio number, a key and a password will be provided to them, which will serve to submit the application, using the formats and the Instruction Manual, as well as to follow up on the status of the process of obtaining the Certificate. All files will be attached electronically in accordance with the specifications provided in the Instruction Manual.

Article 7.- The Commission may interrupt and, if applicable, unilaterally terminate the process of obtaining the Certificate when:

I. The Participant is within the official lists issued by Mexican authorities, international organizations, intergovernmental groups or authorities of other countries, of persons linked or probably linked to operations with resources of illegal origin, terrorism or its financing, or with other illegal activities.
II. The Participant has provided false, altered information or documentation that does not coincide with the source that gave rise to it.
III. Any other cause arises that the Commission considers serious, according to the information it has, obtains or that is provided by public, national, foreign or international institutions.
When the Commission interrupts the process of obtaining the Certificate, it will require the Participant to manifest in writing what is in their interest and provide the information or documentation that disproves the facts attributed to them, within a period of three business days counted from the next business day after the respective notification takes effect. If the Participant does not attend to said requirement, their application will be considered not submitted, being able to present a new one, prior to the corresponding payment of fees. Once the information or documentation provided by the Participant has been analyzed, and in case the facts that gave rise to the interruption are disproven, the Commission will resume the process of obtaining the Certificate; otherwise, it will terminate said process for the Participant. The Commission will notify the Participant of the meaning of the resolution within a period not exceeding fifteen business days counted from the next business day after the date on which the Participant presents to the Commission the writing referred to in the second paragraph of this article, without prejudice to exercising the rights that correspond to them in their defense, in accordance with the applicable legal regulations.

Section I

On Requirements and Documentation

Article 8.- Participants must provide and attach to the application for obtaining the Certificate, the following information and documentation:

I. Valid official identification issued by a Mexican authority, which may be the voter credential, passport, professional ID card or driver's license. In the case of natural persons of foreign nationality, it will be necessary to present the passport and the document issued by the National Institute of Migration that accredits their migratory status and their legal stay in national territory.
II. Updated curriculum vitae.
III. Letter under oath stating that they are not within the circumstances referred to in Article 9, fractions I and II of these provisions, as well as that the information and documentation provided in accordance with this article is true.
IV. Proof of payment of fees for the concept of certification, which, once their application has been accepted, cannot be used again, except in cases of fortuitous event or force majeure, in which case it must be documented.
V. The rest indicated in the Instruction Manual.
The Commission may carry out the necessary actions to verify the truthfulness of the information and documentation referred to in this article.

Article 9.- The following are impediments to obtain the Certificate:

I. Having been sentenced for any property crime.
II. Being disqualified to hold a job, position or commission in the public service, or in the Mexican financial system or of any other country.
III. The current suspension, cancellation or revocation of any registration to function as an independent external auditor, or that some Certificate previously revoked by the Commission or another certification issued by any recognized self-regulatory body in terms of applicable legal provisions.
IV. Being within the official lists issued by Mexican authorities, international organizations, intergovernmental groups or authorities of other countries, of persons linked or probably linked to operations with resources of illegal origin, terrorism or its financing, or with other illegal activities.

Article 10.- The Commission will have a period of fifteen business days, counted from the next business day after it has issued the receipt of acknowledgment of the Participant's application for obtaining the Certificate, to notify whether the application was accepted or rejected, except for the circumstance provided for in Article 11 of these provisions. In case the Participant is not notified within the indicated period, it will be understood that their application was accepted. At the request of the Participant and in terms of the Instruction Manual, the Commission will issue a record of such circumstance within two business days following the receipt of said request.

Article 11.- In case the Participant has omitted information or documentation, or if errors, corrections, strikethroughs or illegibility occur, the Commission will, for only one occasion, request that they remedy the deficiency or omission in question. This, without prejudice to the Commission's ability to require, cite or contact the Participant, to clarify doubts regarding the information or documentation attached to the application. The Participant will have a period of five business days counted from the next business day after the notification of the application referred to in the previous paragraph takes effect, to remedy what is appropriate. Once the requirement is remedied, the period referred to in the first paragraph of Article 10 of these provisions will restart. In case the Participant does not remedy the deficiencies or omissions in the information or documentation, their application will be considered not submitted, saving their right to present a new one.

Article 12.- Prior to the Participant sustaining the evaluation, the Commission will check the documents indicated in fractions I, III and V of Article 8 of these provisions, which have been sent electronically in accordance with the Instruction Manual, against the originals that the Participant will have the obligation to present on the day of the evaluation. In case the Participant does not present the original documents for checking or the presented ones do not coincide with those sent electronically, the Participant will not have the right to sustain the evaluation and their application will be discarded.

Section II

On the Evaluation Procedure

Article 13.- The evaluation procedure shall comprise, at least, the following areas in matters of prevention of operations with resources of illegal origin and terrorist financing:

I. The national regulatory framework.
II. International context.
III. Audit, supervision and risk-based approach.

Article 14.- The Commission will make known, through its Internet portal, the syllabus and study guide for the evaluation.

Article 15.- The Participant, in order to present the evaluation, must exhibit the valid official identification attached to their application, in terms of fraction I of Article 8 of these provisions.
In case the Participant does not appear on the day of the evaluation, it will be understood that they withdraw their application for obtaining the Certificate.

Article 16.- The Commission will notify the Participant, in accordance with Article 23 of these provisions, the result that falls upon their evaluation within twenty business days following the day on which it was sustained.
The result referred to in the previous paragraph will be "Passing" or "Not Passing" and in no case will it contain grades, scores or percentages.

Section III

On the Issuance of the Certificate

Article 17.- In case the result that falls upon the evaluation is "Passing", the Commission will issue the Certificate to the Participant within five business days following its notification.

Article 18.- The Certificate will be issued electronically, will contain the date of issuance, as well as expiration, and will be issued under the security and inviolability standards that the Commission itself considers. The list of certified persons will be public, prior to the consent of the Participant and can be consulted on the Commission's Internet portal. The validity of the Certificate will be five years and will begin to be calculated from the date of its issuance.

Chapter III

On the Renewal of Certification

Article 19.- In order to obtain the renewal of the corresponding Certificate, Participants must observe what is provided in the previous chapters.

Article 20.- The issuance of a new Certificate will render ineffective the one issued previously.

Chapter IV

On the Revocation of Certification

Article 21.- The Commission may revoke the Certificate of any person who falls into any of the following circumstances:

I. It is detected or occurs the updating of any of the circumstances referred to in Article 9 of these provisions.
II. The circumstances established in Article 7 of these provisions are updated.
The list of persons whose Certificate is revoked will be public.

Article 22.- In case the Commission considers that a person with a valid Certificate has updated any of the circumstances for the revocation of their Certificate, it will notify the interested party thereof so that, within the term of twenty days counted from the next business day after the notification takes effect, they manifest what is in their right, offer evidence and formulate the arguments they consider necessary to disprove the imputations pointed out against them. The Commission will issue a definitive resolution on the revocation within thirty business days following the expiration of the period referred to in the previous paragraph. What is provided in this article will be carried out electronically, in accordance with what is indicated in the Instruction Manual.

Chapter V

Final Provisions

Article 23.- Notifications related to the circumstances indicated in these provisions will be carried out by the Commission through the email address that the Participant has indicated for such purposes in the corresponding application, in terms of what is provided in the Instruction Manual. Once the Commission sends its communications electronically, the corresponding notification will be considered made and an electronic record will be generated containing the notification number, as well as the date and time of the respective sending, considering said record as an acknowledgment of receipt for all legal effects that correspond. This, regardless of whether the Participant downloads or not the electronic files. Notifications will take effect on the next business day after the communication is made.

Article 24.- The Commission may carry out the process for obtaining the Certificate or its renewal, with the support of legal entities of a public or private nature, national or foreign.

Article 25.- The Commission may carry out individual and direct invitations to certification processes.

Article 26.- The Commission may issue the Certificate to those persons who have participated in the process of elaboration of the evaluation to be applied to Participants, when they so request, provided that they are not within any of the circumstances provided for in Article 9 and present the information and documentation referred to in Article 8 of these provisions.

TRANSITORY CLAUSES

FIRST.- These provisions will enter into force the day following their publication in the Official Gazette of the Federation.

SECOND.- The General Provisions for the Certification of Independent External Auditors, Compliance Officers and Other Professionals in Matters of Prevention of Operations with Resources of Illegal Origin and Terrorist Financing, published in the Official Gazette of the Federation on October 2, 2014 and its modifications are repealed.

THIRD.- Certificates issued by the National Banking and Securities Commission in favor of legal entities, before the entry into force of these provisions, will produce their effects under the same terms, deadlines and conditions established at the moment they were granted and until the end of their validity.

FOURTH.- Participants whose Certificate expires in 2020 may submit the corresponding renewal application in any of the processes referred to in the call that the Commission issues for that year.
In these cases, when the Participant's Certificate expires before the result of their evaluation is notified, said Certificate will be valid until the notification of the result thereof.
When the Participant does not submit their Certificate renewal application in terms of the first paragraph of this article, or it is rejected, the Certificate will expire on the date provided therein.