The following is a non-exhaustive list of risk variables that obliged entities shall take into account when drawing up their risk assessment in accordance with Article 10 and when determining to what extent to apply customer due diligence measures in accordance with Article 20:
(a) Customer risk variables:
(i) the customer's and the customer's beneficial owner's business or professional activity;
(ii) the customer's and the customer's beneficial owner's reputation;
(iii) the customer's and the customer's beneficial owner's nature and behaviour;
(iv) the jurisdictions in which the customer and the customer's beneficial owner are based;
(v) the jurisdictions that are the customer's and the customer's beneficial owner's main places of business;
(vi) the jurisdictions to which the customer and the customer's beneficial owner have relevant personal links;
(b) Product, service or transaction risk variables:
(i) the purpose of an account or relationship;
(ii) the regularity or duration of the
…