Article

What "PEP" actually means, across jurisdictions

"Politically exposed person" gets used as if it's one universal legal category. It isn't. FATF sets a non-binding baseline, and the EU, US, UK, and Singapore each fill it in differently — who counts, which family members count, and for how long. A jurisdiction-by-jurisdiction explainer.

Published 2026-07-11 · ProofAML editorial

"Is this person a PEP?" sounds like a yes-or-no question with a stable answer. It isn't, and treating it as one is a common source of both over- and under-screening in cross-border compliance programs. "Politically exposed person" is not a defined term in any single global statute — it's a family of related national definitions, all built on top of one non-binding international standard, that diverge on exactly the questions that matter operationally: who counts, which relatives and associates count, and for how long the status persists after someone leaves office.

The baseline: FATF Recommendation 12

The Financial Action Task Force — the standard-setting body behind essentially every national AML/CFT regime — addresses PEPs in Recommendation 12 and its Interpretive Note. FATF's framework distinguishes three categories of PEP by the jurisdiction of the office held:

  • Domestic PEPs — entrusted with a prominent public function domestically, i.e., in the assessing institution's own country.
  • Foreign PEPs — entrusted with a prominent public function by a foreign country.
  • International-organization PEPs — entrusted with a prominent function by an international organization (a UN body, IMF, World Bank, and equivalents).

FATF also defines family members and close associates: family typically covers a spouse or partner, children and their spouses or partners, and parents; close associates cover people with joint beneficial ownership of an entity with the PEP, known close business relations with the PEP, or sole beneficial ownership of an entity known to exist for the PEP's benefit.

Two things about this baseline matter more than the categories themselves. First, it's deliberately non-prescriptive: FATF requires enhanced due diligence for foreign PEPs and a risk-based approach for domestic and international-organization PEPs, but leaves the operational detail — who exactly counts, how long the flag persists — to each country's own implementing legislation. Second, precisely because of that latitude, "domestic" and "foreign" is not a property of the person — it's relative to whoever is doing the screening. A sitting member of the Bundestag is a domestic PEP to a German bank and a foreign PEP to a Singaporean one. The categories describe a relationship between the PEP and the screener, not a fixed label on the individual.

Where jurisdictions diverge: domestic vs. foreign treatment

The starting point for most AML regimes historically was to require enhanced due diligence for foreign PEPs only, treating domestic officials as a lower-priority risk category, if a category at all. Several major regimes have since closed that gap — but not all of them, and not on the same timeline:

  • European Union. Since the EU's Fourth AML Directive, the Union has treated domestic and foreign PEPs identically. Article 22 of Directive (EU) 2015/849 — carried through the Fifth and Sixth AMLDs — requires enhanced due diligence for both, with no distinction in the level of scrutiny based on which country's office the person holds.
  • United Kingdom. The Money Laundering Regulations 2017, as amended in 2020 to align with the EU's Fifth AMLD, likewise require enhanced due diligence for both domestic and foreign PEPs — a position the UK retained post-Brexit.
  • Singapore. MAS Notice 626 explicitly defines three separate categories — domestic PEP, foreign PEP, and international-organisation PEP — each with its own definition, mirroring FATF's three-way split directly into binding regulatory text, with "prominent public functions" enumerated to include heads of state and government, ministers, senior civil and public servants, senior judicial and military officials, senior executives of state-owned corporations, senior political-party officials, legislators, and senior international-organization management.
  • United States. The US is the outlier in this group. Federal regulation does not use the term "PEP" at all. The defined term is "senior foreign political figure" (31 CFR 1010.605), and it is explicitly a foreign-office concept — tied to Section 312 of the USA PATRIOT Act's enhanced-due-diligence requirements for correspondent and private banking accounts. There is no equivalent federal statutory requirement specifically targeting domestic political figures; US-domestic PEP screening happens where it happens as a voluntary, risk-based industry practice guided by the FFIEC BSA/AML Examination Manual and a 2020 interagency joint statement, not as a standalone regulatory mandate.

Where jurisdictions diverge: how long the status lasts

FATF's Interpretive Note doesn't fix a period for how long a former PEP keeps the flag — it requires risk-based measures "for as long as appropriate," weighing the person's continuing influence and the surrounding country and individual risk. That non-prescriptive standard produces real variation downstream:

  • EU — Article 22 sets the one hard number among the regimes here: enhanced due diligence continues for at least 12 months after someone leaves office, and must continue beyond that floor for as long as the individualized risk warrants. Twelve months is a minimum, not a target.
  • US — no fixed period at the federal level. Section 312 enhanced due diligence applies to senior-foreign-political-figure private banking relationships for as long as the relationship carries elevated risk; there's no statutory decay clock analogous to the EU's floor.
  • UK and Singapore — both risk-based and FATF-aligned, without a legislated minimum-duration figure equivalent to the EU's Article 22 floor in the sources reviewed here.

Because "for as long as appropriate" isn't directly operable as a matching rule, screening vendors and internal compliance programs each tend to publish their own concrete retention convention to make the standard usable in practice — a worked example, not a regulatory requirement. We publish ours: a seniority-tiered methodology with a 50/20/5-year retention window by PEP level, described in full on our PEP reference page, and the reasoning behind adopting it is in our coverage announcement.

Where jurisdictions diverge: who counts as family or a close associate

The scope of "family member" is a specific, citable point of divergence, not a minor drafting difference:

  • FATF's typical formulation covers spouse/partner, children and their spouses/partners, and parents.
  • The US senior-foreign-political-figure rule defines immediate family more narrowly in one direction and more broadly in another: spouses, parents, siblings, children, and a spouse's parents and siblings — siblings are explicitly in scope, which FATF's typical formulation omits.
  • Singapore's MAS Notice 626 goes further still: parent, step-parent, child, step-child, adopted child, spouse, sibling, step-sibling, and adopted sibling — explicitly reaching step- and adopted relationships that neither the FATF baseline nor the US rule spells out.

The practical consequence: a PEP's sibling is a screenable family member under the US and Singaporean definitions reviewed here, but not under FATF's own typical formulation of the term. A cross-border compliance program that applies one jurisdiction's family/associate scope globally will systematically over- or under-flag relatives, depending on which definition it borrowed and which jurisdiction's customer it's actually screening.

The practical takeaway

None of this variance is a data-quality problem to fix — it's a genuine feature of how FATF's standard gets implemented. A PEP program that's accurate for one regulatory regime can be simultaneously wrong for another, on the same underlying facts, because "PEP" doesn't mean one thing. The fix is treating jurisdiction as a first-class input to the screening decision, not an afterthought layered on top of a single global PEP flag.

See our AML/CFT jurisdiction guides for the fuller regulatory detail behind each regime — including the EU, the US, the UK, Singapore, and the FATF baseline itself — and our jurisdiction comparison matrix for a side-by-side view. To see the classification framework applied to real records, browse the PEP corpus directly.

Turn this into a screening action

Screen against the sources behind this post


← All posts