Client due diligence (CDD) client and matter risk assessments are an essential exercise in complying with various regulatory and professional requirements, getting to know your client, and, ultimately, protecting your firm. Regulatory requirements The Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 (MLR 2017), SI 2017/692, as amended, set out the administrative requirements of the anti-money laundering (AML) regime. Where the MLR 2017 apply, conducting CDD is an absolute requirement. It is not in itself subject to the risk-based approach. Certain components of CDD however, allow for flexibility and positively require risk assessment. You must determine the extent of your CDD measures and ongoing monitoring on a risk-sensitive basis, depending on the type of client, business relationship and matter. You must be able to demonstrate to your supervisory authority (the SRA) that the extent of the measures you have taken to satisfy CDD requirements are appropriate in view of the risks of money laundering and terrorist financing, including risks: