The legal basis for ongoing obligations
The ongoing obligations of AEO holders are set out in Article 23 of the Union Customs Code and further elaborated in Commission Delegated Regulation (EU) 2015/2446 and Commission Implementing Regulation (EU) 2015/2447. The core obligation is stated simply: an AEO holder must notify the issuing customs authority of any factor arising after the decision was taken that may influence the decision's continuation or content.
This is a continuous obligation from the date of certification. It does not expire, does not require a periodic filing schedule, and applies immediately when a relevant change occurs. Dutch Customs does not send annual reminder notices. The obligation is on the holder to identify and report changes proactively.
What must be notified to Dutch Customs
Any change that materially affects one of the five AEO criteria requires notification. The following are the most common examples in practice.
Compliance record changes
If your company receives a customs enforcement notice, a post-clearance assessment, a penalty, or a formal finding of a declaration error after your AEO was issued, you must notify Dutch Customs. Minor corrections you initiate voluntarily carry less weight than enforcement actions, but both must be reported if they are material.
You must also notify if a key person in your organisation with customs responsibility is found to have a serious infringement on their personal compliance record. This includes directors and managers who were named in your AEO application as responsible for customs matters.
Record management changes
Significant changes to your IT systems, accounting software, customs declaration systems, or document storage procedures that affect how customs records are managed must be reported. A full system migration or outsourcing of your customs administration to a third party falls within this obligation.
Financial solvency changes
If your business enters financial difficulty, initiates insolvency proceedings, or if your financial position deteriorates to a degree that would not have met the solvency criterion at application, you must notify Dutch Customs. The most common trigger is a significant change in annual accounts compared to the financial position at the time of application.
Security and safety changes (AEOF only)
For AEOF holders, changes to physical security arrangements, access control systems, staff screening procedures, or supply chain security practices must be notified if they reduce the level of security below what was assessed during the original audit. Moving to new premises, expanding into new warehouse locations, or changing your logistics provider structure all typically require notification.
Corporate structure changes
Mergers, acquisitions, changes in legal form, changes in ownership, and corporate restructurings all require notification. A change in the legal entity that holds the EORI number the AEO is linked to requires particular attention: if the legal entity changes as a result of a restructuring, the existing AEO may not automatically transfer to the new entity and a new application may be required.
There is no minimum materiality threshold defined in the regulation. When in doubt about whether a change requires notification, notify. Failing to notify a material change and having Dutch Customs discover it during a monitoring visit is treated as a compliance breach, which has more serious consequences than a proactive notification that turns out to be unnecessary.
How Dutch Customs monitors compliance
Dutch Customs monitors AEO holders through a combination of ongoing data analysis and periodic re-assessments. The data analysis is continuous: customs declaration data, post-clearance audit findings, and enforcement records are reviewed against the AEO holder register. Any pattern that suggests criteria may no longer be met triggers a follow-up.
Periodic re-assessments are not scheduled at a fixed interval. Dutch Customs determines the frequency based on the risk profile of the holder, which is updated as new information becomes available. A holder with a clean post-certification record and no significant changes may go several years between formal reassessments. A holder who has notified multiple changes or who has experienced compliance issues will be reassessed more frequently.
During a reassessment, the auditor reviews the criteria that may have changed since the original certification. It is not a full restart of the initial audit; it is targeted to the areas that require verification. The holder has the same right to respond to findings as during the initial application.
Suspension: what triggers it and what it means
Dutch Customs may suspend an AEO certificate if it identifies an issue that makes it uncertain whether the holder still meets the criteria. Suspension is not the same as revocation. During a suspension period, the AEO benefits are temporarily inactive: the holder cannot use the certificate in declarations, and the facilitations do not apply. However, the certificate number remains valid and no new application is needed if the criteria are confirmed to still be met after investigation.
Typical triggers for suspension include: an ongoing customs enforcement investigation, insolvency proceedings, a serious declaration error identified through post-clearance audit, or a notified change that Dutch Customs needs to assess before confirming continued compliance.
The suspension period gives the holder time to remediate identified gaps or to demonstrate that the issue does not actually affect compliance with the AEO criteria. Dutch Customs sets a deadline for the holder's response. If the response is satisfactory, the suspension is lifted. If not, the case is escalated to revocation proceedings.
Revocation and reapplication
Revocation terminates the AEO certificate permanently. It occurs when Dutch Customs determines that the criteria are no longer met and the deficiencies cannot be remediated within a reasonable timeframe, or when the holder has failed to respond to a suspension notice.
After revocation, the operator may not apply for a new AEO certificate for a period determined by the nature of the failure. For revocations involving serious infringements of customs legislation, the exclusion period is generally three years. For other grounds, the exclusion period may be shorter, but in all cases the operator must demonstrate that the conditions that led to revocation have been resolved before a new application will be considered.
Setting up internal AEO compliance monitoring
The most effective way to manage ongoing obligations is to treat AEO compliance as an internal governance function, not an occasional administrative task. This means assigning a named owner for AEO compliance, building notification checkpoints into corporate change processes, and conducting an internal AEO self-review at least annually.
An annual internal review checks the same criteria that Dutch Customs would check: are there any open compliance issues, have there been changes to record systems or financial position, has anything changed in the security setup. If gaps are identified internally before Dutch Customs identifies them, you can notify proactively and manage the response rather than react to a monitoring finding.
The self-assessment questionnaire used during the original application is a useful reference for the annual review. It covers all the criteria systematically and gives you a framework for checking each area.
For an overview of the full certification process that preceded these obligations, see the article on the AEO application process step by step.