Poland expands GIIF role in WMD-financing controls

Poland’s Government has adopted a draft amendment that would bring WMD-proliferation financing into the domestic restrictive-measures framework and expand the General Inspector of Financial Information’s (GIIF) supervisory role. The Ministry of Finance announced the decision on 22 September 2026.

The proposal is not yet binding law on the supplied evidence. Its practical significance lies in the control perimeter it would create: sanctions-related controls, beneficial-ownership information and regulatory reporting would be connected more directly to GIIF’s functions, with the provisions generally intended to take effect on 1 January 2027.

GIIF would own the expanded supervisory perimeter

The draft would introduce provisions concerning restrictive measures linked to financing the proliferation of weapons of mass destruction. The Ministry refers to European Union regulations concerning measures against Iran and North Korea, including the freezing of financial funds and economic resources and restrictions on making them available.

The authority’s own description links those measures to GIIF supervision. The draft would expand GIIF’s tasks and supervisory powers to cover matters concerning restrictive measures related to WMD proliferation. That is a proposed change to the authority’s remit, not evidence that firms already face a new reporting threshold, customer-risk category or filing obligation.

For obliged institutions, the relevant control question is narrower and more practical: whether existing sanctions-screening, transaction-monitoring and escalation processes can identify activity involving funds or economic resources subject to those measures. The announcement does not specify a new reporting test or prescribe how firms must evidence such controls. Any mapping of those controls before enactment is therefore a readiness measure, not a current supervisory requirement.

The Financial Security Committee operating at GIIF would also receive additional responsibilities concerning WMD-proliferation financing. The Ministry says the committee could recommend legislative changes concerning restrictive measures. Such recommendations would create a policy channel, but would not themselves amend the AML/CFT framework.

CRBR and SIGIIF turn the proposal into an implementation question

The draft would change access to the Central Register of Beneficial Owners (CRBR). Information would be available to specified authorities and institutions, as well as to people demonstrating a legitimate interest connected with preventing or combating money laundering, terrorist financing or specified offences.

The announcement does not describe the application process, the evidence required to establish legitimate interest or the information categories that would be disclosed. It also does not say that CRBR entries would become conclusive evidence of beneficial ownership or impose a new ownership-disclosure duty on obliged institutions.

Those omissions define the immediate implementation issue. Firms using CRBR information in customer due diligence will need to understand the final access rules and how they affect ownership and control assessments, but the supplied source does not establish a revised evidential standard.

The proposal also provides for SIGIIF 2.0, a new GIIF information system intended to automate the authority’s functions. Its goAML component, developed by the United Nations Office on Drugs and Crime, would enable electronic transmission of information and notifications and improve communication between GIIF, obliged institutions and cooperating units.

SIGIIF is the clearest operational dependency in the draft. The announcement identifies the system and its intended function, but gives no technical specification, migration date or testing timetable. Firms can review reporting ownership and data flows as optional preparation; they cannot yet treat a particular interface, message format or submission process as a legal requirement.

The next test is the enacted text and implementation timetable

The Ministry says the new provisions would generally enter into force on 1 January 2027. The source records Government adoption of a draft but does not provide the parliamentary timetable, final transitional provisions or technical instructions for SIGIIF. Those points remain unresolved rather than established features of the reform.

The Ministry also says the amendment would align Polish legislation with EU law, FATF standards, MONEYVAL recommendations and UN Security Council resolutions. That description supplies the policy context, but the announcement does not identify a separate EU technical measure governing SIGIIF or a further Level-2 process that firms must follow.

The domestic mechanism is more concrete: expanded GIIF powers, WMD-related restrictive-measure controls, altered CRBR access and an electronic channel for information and notifications. Together, those elements indicate where firms should focus readiness work without converting a draft announcement into a present duty.

The next observable supervisory checkpoint is publication of the enacted text, its commencement provisions or GIIF’s technical instructions for SIGIIF and goAML.