Regulation 9

the legal practitioner or law practice must scrutinise transactions undertaken throughout the course of the business relationship to ensure that those transactions are consistent with the legal practitioner’s or law practice’s knowledge of —

the client;

the client’s business;

the client’s risk profile; and

where appropriate, the source of funds for those transactions;

the legal practitioner or law practice must ensure that the customer due diligence data, documents and information obtained in respect of the following persons are relevant and kept up-to-date, by undertaking reviews of existing customer due diligence data, documents and information, particularly if the client is a higher risk client:

the client;

each person acting on behalf of the client;

each person on whose behalf the client is acting;

each beneficial owner of the client;

where the legal practitioner or law practice assesses the client to be a higher risk client, or the business relationship with the client to be a higher risk business relationship, the legal practitioner or law practice must —

perform enhanced customer due diligence measures in accordance with rule 13; and

obtain the approval of the legal practitioner’s or law practice’s senior management to retain the client or continue the business relationship with the client.