TL;DR
- Every reporting entity under the Prevention of Money-laundering Act 2002 must designate a Principal Officer at management level and a Designated Director, and communicate their name, designation and address to FIU-IND under Rule 7(1) of the PML (Maintenance of Records) Rules 2005.
- The Principal Officer files the entity's reports to FIU-IND.
- Banks and NBFCs must keep the two roles with different people, and FIU-IND guidance for trust and company service providers asks for the same.
Quick Answer: Every reporting entity under PMLA must appoint a Principal Officer at management level and a Designated Director. Rule 7(1) of the PML (Maintenance of Records) Rules 2005 requires their name, designation and address to be communicated to FIU-IND. The Principal Officer files the reports; banks and NBFCs must keep the two roles with different people.
The Principal Officer is the reporting entity's link to the Financial Intelligence Unit-India (FIU-IND). The Designated Director answers for overall compliance. Both duties apply to every class of reporting entity, which the guide to who is a reporting entity under PMLA sets out.
Principal Officer and Designated Director at a glance
| Point | Principal Officer | Designated Director | Provision |
|---|---|---|---|
| Who | An officer designated by the reporting entity, at management level | MD or whole-time director authorised by the Board, for a company | Rules 2(1)(f), 2(1)(ba) |
| Role | Furnishes information to FIU-IND | Ensures overall compliance with Chapter IV of the Act and the Rules | Rules 7(2), 8; Rule 2(1)(ba) |
| Communicated to | FIU-IND | FIU-IND | Rule 7(1) |
| Same person? | Not for banks and NBFCs; FIU-IND guidance asks trust and company service providers to separate them | Not for banks and NBFCs | RBI KYC Directions 2025, para 14; FIU-IND guidance |
Who Must Appoint a Principal Officer Under Rule 7?
Every reporting entity, because Rules 7 and 8 apply to all of them: banks, financial institutions including NBFCs, intermediaries and designated businesses or professions. Rule 7(1) requires each one to communicate the name, designation and address of its Designated Director and Principal Officer to the Director, FIU-IND.
What Level Must the Principal Officer Hold?
Management level. G.S.R. 652(E) of 4 September 2023 added a proviso to Rule 2(1)(f) that the Principal Officer "shall be an officer at the management level". FIU-IND guidance for trust and company service providers suggests not below the level of head of audit or compliance, or chief risk officer. The general compliance officer's role is covered separately, and advisory services can help decide who should hold this one.
Who Is the Principal Officer for an Individual Professional?
The professional. FIU-IND's guidelines for practising chartered accountants, company secretaries and cost accountants state that, for an individual practitioner, the professional is the Principal Officer. A firm appoints both a Designated Director and a Principal Officer.
Is There a Deadline to Communicate the Appointment?
Rule 7(1) sets no day count. FIU-IND's guidance for trust and company service providers asks for the details "at the earliest", and any change should be updated promptly so that reports are not filed by an officer FIU-IND does not have on record.
How Is the Principal Officer Registered With FIU-IND?
Through FIU-IND's FINnet 2.0 portal, for most reporting entities. FIU-IND requires them to register on the portal before they can file reports, and the registration records the Principal Officer and Designated Director. The enrolment manual is on FIU-IND's FINnet 2.0 page.
| Step | What happens |
|---|---|
| 1. Entity registration | The reporting entity registers on FINnet 2.0 |
| 2. Officer details | Name, designation and address of the Principal Officer and Designated Director are entered |
| 3. Report filing | The Principal Officer files reports on the portal from then on |
| 4. Changes | A change of Principal Officer or Designated Director is updated with FIU-IND |
FIU-IND publishes lists of NBFCs that failed to register on FINnet 2.0, so registration is checked. Professionals brought in by the 3 May 2023 notification, such as practising chartered accountants, file through their own institutes, as FIU-IND's guidelines for them explain.
How Does the Principal Officer Differ From the Designated Director?
The Designated Director answers for overall compliance; the Principal Officer does the reporting. Rule 2(1)(ba) of the PML Rules, made under the Prevention of Money-laundering Act 2002, defines the Designated Director by type of entity.
| Type of reporting entity | Designated Director |
|---|---|
| Company | The managing director or a whole-time director authorised by the Board |
| Partnership firm | The managing partner |
| Proprietary concern | The proprietor |
| Trust | The managing trustee |
| Unincorporated association or body of individuals | The person who controls and manages it |
| Entity in an IFSC | The head of the entity in India |
Can One Person Hold Both Roles?
No, for banks and NBFCs. Paragraph 14 of the Reserve Bank of India (RBI) KYC Directions 2025 bars nominating the Principal Officer as the Designated Director, and FIU-IND's guidance for trust and company service providers says the two should be separate individuals.
What Does the Principal Officer Do?
The Principal Officer furnishes the transactions listed in Rule 3(1) to FIU-IND, on the basis of information available with the reporting entity, and keeps a copy for the official record under Rule 7(2). Cash transaction and similar reports are due by the 15th of the next month, and a suspicious transaction is reported promptly once the Principal Officer is satisfied, under Rule 8.
Rule 7(3) requires each reporting entity to build an internal mechanism for detecting and furnishing information. Rule 7(4) binds the entity, its Designated Director, officers and employees to follow the procedure for furnishing information that the Director, FIU-IND specifies in consultation with the entity's regulator. Groups with several reporting entities can compare approaches in the guides to compliance reporting across entities and RegTech platforms.
How Are the Appointments Kept Current?
The appointments go stale when people change roles, and FIU-IND then holds the wrong officer. A compliance management platform holds the Principal Officer and Designated Director as dated records, with the FINnet 2.0 update as evidence.
LexComply does not register with or report to FIU-IND; the reporting entity does. To see how the appointments would be tracked, get in touch.
Common Mistakes to Avoid
- Appointing a junior officer as Principal Officer. The proviso to Rule 2(1)(f), inserted by G.S.R. 652(E) of 4 September 2023, requires an officer at management level.
- Naming one person to both roles in a bank or non-banking financial company (NBFC). Paragraph 14 of the RBI KYC Directions 2025 bars the Principal Officer from being the Designated Director.
- Waiting for a deadline in Rule 7(1). The rule sets no day count, so details should be communicated and updated at once.
- Filing STRs against a seven-day limit. Rule 8(2), as substituted in October 2023, requires suspicious transactions to be reported promptly.
- Citing the 2016 KYC Master Direction. RBI replaced it with entity-wise KYC Directions on 28 November 2025.
- Leaving FINnet 2.0 unregistered. FIU-IND requires registration before reporting, except for professionals who report through their institutes, and publishes lists of non-compliant entities.
Legal Disclaimer
This article is general information on Indian anti-money-laundering law, current as at the date shown above. It is not legal advice and does not take account of any particular entity's facts. Obtain professional advice before acting on any position described here.