Irish Client Asset Requirements: the CAMP, the HCAO and the New Head of Safeguarding

Ireland has its own client asset regime, and it is not a translation of the UK’s. Firms that assume CASS knowledge transfers across the Irish Sea find the architecture recognisable and the specifics different — different legal instruments, a different named accountable individual, and a central governance document with no direct UK equivalent. With Ireland the first-priority market for most firms expanding into the EU post-Brexit, the differences are worth knowing precisely.

Two regimes, one statutory instrument

Both Irish regimes sit in the Central Bank (Supervision and Enforcement) Act 2013 (Section 48(1)) (Investment Firms) Regulations 2023, S.I. No. 10 of 2023. The Client Asset Requirements are in Part 6 and cover client assets held by investment firms and credit institutions. The Investor Money Requirements are in Part 7 and cover investor money held by fund service providers.

The commencement dates differ by firm type: the CAR applied to investment firms from 1 July 2023 and to credit institutions from 1 January 2024, with credit institutions addressed separately in Chapter 10.

Segregation: the detail is in the exceptions

Chapter 1 permits either an individual third-party client asset account or an omnibus account, with the condition that where an omnibus account is used, accounting segregation must be maintained — internal records showing each client’s balance and movements. Client assets held through a nominee attract the same safeguarding obligations. Money pledged or charged within a third-party client asset account remains client funds, because title does not pass absolutely.

Client funds should be deposited directly into a third-party client asset account, and firms are expected to instruct clients and third parties to pay in directly and to have systems and controls ensuring they do. Non-client money landing in such an account should be paid out promptly, except the minimum needed to open or maintain it.

The Central Bank recognises three practical exceptions — money mistakenly paid into the firm’s own account, mixed remittances, and trade settlement receipts — and requires firms to document them in the Client Asset Management Plan, move the funds promptly under Regulation 50(3), investigate, and prevent recurrence where possible. Cheques must be recorded in the books immediately on receipt, deposited promptly, stored securely if received late, and are treated as client funds until presented and paid. Business continuity plans are expected to cover cheque processing if an office closes unexpectedly.

Two further points catch firms out. Funds should be deposited in the currency received unless no suitable account exists and opening one would be unduly burdensome, with the firm’s accepted currencies and exchange-rate policy disclosed to clients under Regulation 59(1)(b). And non-regulated money should not enter a client asset account at all — but if it is segregated anyway, clients must be told it is not protected as client assets and not covered by the Investor Compensation Scheme.

For physical financial instruments, Chapter 1 expects a secure location such as a vault, recording on receipt, controls against damage, misappropriation or loss, and a movement log under Regulation 51(5) with entries made on the day of receipt.

The Client Asset Management Plan

The CAMP is the feature with no neat UK counterpart, and it is the document an inspection starts from. The Central Bank describes it as the firm’s master record of client asset arrangements, risks and mitigating controls, structured under six headings: business model and risk assessment, operational structures, governance and outsourcing, processes and records, insolvency information, and additional information.

Its required contents include a Client Asset Applicability Matrix, a Client Asset Risk Matrix, a materiality framework, a breach and incident log, and an insolvency road-map — the last existing so that distribution information is readily available if the firm fails. Key judgements must be documented with their basis: materiality thresholds, approval of new products, appointment of new third parties.

Under Regulation 72 the CAMP must be reviewed and updated at least annually, and the Central Bank additionally characterises it as a living document requiring continual re-assessment. Material changes must be notified to, discussed with and approved by the board; non-material changes documented and reported as the accountable individual considers necessary. Materiality thresholds themselves require board approval, and reporting obligations to the Central Bank are triggered by them. The external auditor reviews the firm’s processes for keeping the CAMP appropriate.

The Head of Client Asset Oversight

Firms holding client assets must appoint a Head of Client Asset Oversight under Regulation 71 of the CAR and paragraph 6 of Schedule 3 to the MiFID Regulations. The role is a Pre-Approval Controlled Function, PCF-45, so it requires Central Bank pre-approval and ongoing compliance with the Fitness and Probity Standards.

The HCAO should be a senior manager with direct access to the board for this function, free from conflicts of interest and sufficiently removed from day-to-day client asset operations. Responsibilities include monitoring and challenging how client asset responsibilities are discharged using both daily and less frequent monitoring; facilitating regular client asset reporting to the board; sample-reviewing calculations, reconciliations and adjustments where others perform the Regulation 57(8) and 58(11) reviews; periodically reviewing the firm’s obligations and formally reporting findings to the board; overseeing outsourced client asset functions and independently challenging outsourced providers’ management information; and maintaining open engagement with the external auditors.

One responsibility is explicitly a training duty: the HCAO is expected to deliver ongoing client asset training to staff and board members. The role must also be covered during absences by a suitably senior person with client asset expertise.

Appointing an HCAO does not dilute board accountability. The board remains ultimately accountable for effective safeguarding, must ensure the HCAO has adequate authority, training, resources and expertise, must conduct sufficient due diligence before nominating the individual, and must receive regular quantitative and qualitative client asset reporting at a frequency set by the firm and documented in the CAMP.

New for 2026: the Head of Safeguarding

The accountable-individual model has just been extended. The Central Bank Reform Act 2010 (Sections 20 and 22) (Amendment) Regulations 2026, S.I. No. 20 of 2026, signed on 28 January 2026 and in operation from 10 February 2026, replaced Schedule 2 of the 2011 Regulations with a new list of pre-approval controlled functions. It creates a Head of Safeguarding role in two sectors:

• PCF-56 — payment institutions authorised or required to be authorised under the Payment Services Regulations 2009, and e-money institutions under the Electronic Money Regulations 2011
• PCF-57 — crypto-asset service providers within the meaning of Regulation (EU) 2023/1114, the MiCA Regulation

Both sit in the part of Schedule 2 headed pre-approval controlled functions in relation to specified regulated financial service providers, so both require Central Bank pre-approval. For payments, e-money and crypto firms in Ireland, safeguarding has moved from an operational obligation to a named, pre-approved, individually accountable one.

Why this is a competence problem

The Irish regime names the individual and then requires that individual to train everyone else. An HCAO must be senior enough to challenge the board, independent enough to be free of operational conflicts, and expert enough to deliver training to staff and directors — and the board must satisfy itself on all three before nominating them. That is a defined competence standard, assessed by the regulator at approval and audited afterwards through the CAMP.

Firms comparing the two jurisdictions should read this alongside the UK’s CASS client money rules, and anyone navigating the PCF approval process should start with the Central Bank Fitness and Probity regime. Our CPD course library covers the governance, risk and audit foundations these roles assume.

Frequently asked questions

Is the HCAO the same as a CASS operational oversight function?

They are analogous but not identical. The Irish role is a pre-approval controlled function, PCF-45, requiring Central Bank approval before appointment and ongoing Fitness and Probity compliance, and it carries an explicit obligation to train staff and board members.

How often must the CAMP be reviewed?

At least annually under Regulation 72. The Central Bank also treats it as a living document requiring continual re-assessment, so an annual review alone is unlikely to satisfy an inspection if material changes went undocumented in between.

Do the Client Asset Requirements apply to fund service providers?

No. Fund service providers holding investor money fall under the Investor Money Requirements in Part 7 of the same statutory instrument. The CAR in Part 6 apply to investment firms and credit institutions.

Who needs a Head of Safeguarding?

Payment institutions and e-money institutions, where the role is PCF-56, and crypto-asset service providers under MiCA, where it is PCF-57, following S.I. No. 20 of 2026 which came into operation on 10 February 2026.