Record Retention Under AMLA 2010: Your 10-Year Compliance Obligations

The Mandatory 10-Year Retention Period

Under the Anti-Money Laundering Act (AMLA) 2010, the responsibility for maintaining accurate business records has shifted from mere accounting best practice to a strict legal obligation. Section 7 of the Act, read alongside the Anti-Money Laundering and Countering Financing of Terrorism Regulations, mandates that reporting entities and business organizations maintain records of transactions, identification documents, and account files for a minimum period of ten years following the completion of a transaction or the termination of a business relationship.

This requirement is not limited to financial institutions. Any business falling under the scope of 'Designated Non-Financial Businesses and Professions' (DNFBPs) must adhere to these timelines. Failure to produce these records during a regulatory inquiry can result in severe penalties, including heavy fines and the freezing of business operations.

Document Format: Physical vs. Digital

While the law does not strictly forbid physical filing, the SECP and FBR increasingly favor electronic archives that provide an audit trail. To be compliant, your records must satisfy the following criteria:

• Authenticity: Records must be original or certified true copies.
• Accessibility: Data must be readily retrievable. If stored in the cloud, ensure the service provider complies with local data sovereignty laws applicable to Pakistan.
• Integrity: Documents must be tamper-proof. Any amendments to financial records must be logged and dated.

What to Expect During an FBR Inspection

When the FBR or a regulatory agency initiates an inspection, the primary focus is on 'Verification of Provenance.' The inspectors are not just looking for tax invoices; they are auditing your internal controls to ensure you are not facilitating money laundering or illicit financial flows.

Common inspection focal points:

• KYC/CDD Documentation: Copies of CNICs, NTN certificates, and incorporation documents for all clients and vendors.
• Transaction Logs: Detailed records of high-value cash transactions or suspicious financial patterns.
• Source of Funds: Proof of payment trails for major business acquisitions or capital injections.

Step-by-Step Compliance Checklist

1. Categorize Records: Separate tax-related documents (Income Tax Ordinance 2001) from AML-specific KYC files.
2. Implement a Centralized Archive: Ensure both physical and digital filing systems are synced annually.
3. Internal Audit: Conduct a mock audit of your records. If you cannot locate a document from 2015 today, address the gap immediately through professional corporate legal services.
4. Appoint a Compliance Officer: Even for smaller firms, designate a specific individual responsible for record maintenance and regulatory liaison.

Practical Risks and Legal Consequences

Inadequate record-keeping is often the primary cause for the rejection of appeals during tax litigation. If your documentation is incomplete, the FBR may exercise their powers to make 'Best Judgment Assessments' under Section 121 of the Income Tax Ordinance, which rarely favors the taxpayer. For expert guidance on managing these risks, feel free to reach out to our advisory team.

Common Compliance Failures

Many businesses mistakenly discard records after the 6-year period prescribed for standard tax audits. However, the AMLA 10-year rule overrides general tax practices. Always default to the longer retention period to ensure total regulatory alignment across all applicable statutes.