Source: OJ L, 2024/1640, 19.6.2024

Current language: EN

Article 67 Professional secrecy requirements


Summary What does Article 67 of the Sixth anti-money laundering (AML 6) directive say?

This article establishes the professional secrecy regime that governs supervisory authorities and related public bodies under the Directive.

It sets the baseline rule that all current and former staff of supervisors, as well as auditors and experts acting on their behalf, are bound by professional secrecy, meaning confidential information can only be disclosed in summary or aggregate form that prevents identification of individual obliged entities.

Crucially, the article then carves out a broad set of permitted information-sharing channels, allowing confidential information to flow freely between supervisors, FIUs, competent authorities, and prudential supervisors of credit and financial institutions, both within and across Member States.

This article works in close conjunction with Article 68, which further authorises specific disclosure scenarios building on the framework established here.

Important points:

  • Member States are required to bind all current and former supervisory staff, auditors, and experts to professional secrecy obligations.
  • Confidential information received by any authority or self-regulatory body through the permitted information-sharing channels may only be used for the discharge of its duties under this Directive or related Union legal acts, or in the context of relevant legal proceedings.
  • Any exchange of information between financial supervisors and prudential supervisory authorities remains subject to the professional secrecy requirements established in this article.

Springlex's summary of the article, a reading aid, not a substitute for the legal text.

    1. Member States shall require that all persons working for or who have worked for supervisors and the public authorities referred to in Article 52, as well as auditors or experts acting on behalf of those supervisors or authorities be bound by the obligation of professional secrecy.

    2. Without prejudice to cases covered by criminal investigations and prosecutions under Union and national law and information provided to FIUs pursuant to Articles 42 and 43, confidential information which the persons referred to in the first subparagraph receive in the course of their duties under this Directive may be disclosed only in summary or aggregate form, in such a way that individual obliged entities cannot be identified.

    1. Paragraph 1 of this Article shall not prevent the exchange of information between:

      1. supervisors, whether within a Member State or in different Member States, including AMLA when acting as a supervisor or public authorities as referred to in Article 52 of this Directive;

      2. supervisors as well as the public authorities referred to in Article 52 of this Directive and FIUs;

      3. supervisors as well as the public authorities referred to in Article 52 of this Directive and competent authorities referred to in Article 2(1), points (44)(c) and (d) of Regulation (EU) 2024/1624;

      4. financial supervisors and authorities in charge of supervising credit institutions and financial institutions in accordance with other Union legal acts relating to the supervision of credit institutions and financial institutions, including the ECB acting in accordance with Regulation (EU) No 1024/2013, whether within a Member State or in different Member States.

    2. For the purposes of point (d) of the first subparagraph of this paragraph, the exchange of information shall be subject to the professional secrecy requirements provided for in paragraph 1.

    1. Any authority or self-regulatory body that receives confidential information pursuant to paragraph 2 shall only use this information:

      1. in the discharge of its duties under this Directive or under other Union legal acts in the field of AML/CFT, of prudential regulation and supervision of credit institutions and financial institutions, including sanctioning;

      2. in an appeal against a decision of the authority or self-regulatory body, including court proceedings;

      3. in court proceedings initiated pursuant to special provisions provided for in Union law adopted in the field of this Directive or in the field of prudential regulation and supervision of credit institutions and financial institutions.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod