Source: OJ L, 2024/1640, 19.6.2024

Current language: EN

Article 48 Exchange of information in relation to implementation of group-wide policies in third countries


Summary What does Article 48 of the Sixth anti-money laundering (AML 6) directive say?

This brief article addresses a specific cross-border compliance problem: what happens when a third country's law prevents obliged entities from implementing the group-wide AML/CFT policies, procedures and controls required under Article 16 of Regulation (EU) 2024/1624.

It creates a mutual information-sharing obligation among supervisors, including AMLA, and opens the door to coordinated action when such legal conflicts arise.

Supervisors are also directed to consider a range of legal obstacles in third countries when making this assessment, such as professional secrecy rules, data protection deficiencies, and other information-sharing constraints.

Important points:

  • Supervisors, including AMLA, are required to notify each other when a third country's law blocks the implementation of group-wide AML/CFT policies required under Article 16 of Regulation (EU) 2024/1624.
  • Supervisors may take coordinated action to pursue a solution when such conflicts are identified.
  • When assessing whether a third country blocks implementation, supervisors must take into account legal constraints including professional secrecy, insufficient data protection levels, and other limits on information exchange.

Springlex's summary of the article, a reading aid, not a substitute for the legal text.

Supervisors, including AMLA, shall inform each other of instances in which the law of a third country does not permit the implementation of the policies, procedures and controls required under Article 16 of Regulation (EU) 2024/1624. In such cases, coordinated actions may be taken by supervisors to pursue a solution. In assessing which third countries do not permit the implementation of the policies, procedures and controls required under Article 16 of Regulation (EU) 2024/1624, supervisors shall take into account any legal constraints that may hinder proper implementation of those policies, procedures and controls, including professional secrecy, an insufficient level of data protection and other constraints limiting the exchange of information that may be relevant for that purpose.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod