Article 10 Cross-Border Dissemination

This is a draft act

This text has been parsed from the AMLA final report draft as published on 3 July 2026. While we run a suite of validations, the automated parsing can result in errors. Also, before it is finally adopted by the Commission, its wording, numbering and references may change, and entire articles might be removed or added.

Summary What does Article 10 of the ITS on FIU-to-FIU exchanges say?

This article governs how Financial Intelligence Units (FIUs) must handle Cross-Border Disseminations (XBDs).

It sits alongside Article 9, which covers Cross-Border Reports (XBRs), together forming the two-part framework for cross-border information sharing.

Article 10 sets out the process for transmitting XBDs, the scope of information that can be shared, how to handle follow-up requests, and importantly, carves out an exemption from the XBD obligation in specific multi-jurisdictional information-sharing scenarios.

Important points:

  • FIUs must apply the relevant selection criteria before forwarding structured key data from a suspicion report as an XBD, using the format set out in Annex VI.
  • The information shared in an XBD is strictly limited to data relating to primary subjects or those for whom a full positive hit has been identified — no broader sharing is permitted.
  • FIUs are exempt from transmitting an XBD where the underlying suspicion report originates from a multi-Member State information-sharing partnership and has already been transmitted to each relevant FIU directly.

Springlex's summary of the article is a reading aid, not a substitute for the legal text.

    1. When transmitting a Cross Border dissemination, the FIU shall, after applying the selection criteria laid down in the Commission Delegated Regulation (EU) 2027/XXXX adopted pursuant to Article 31(3) of Directive (EU) 2024/1640, forward the structured key data of the report of suspicions, following the instructions provided in Annex VI.

    1. After receiving a request for further information, the FIU shall follow the instructions provided in Annex III.

    1. The information shared shall be strictly limited to data relating to the primary subject(s), as defined in article 2(1)(e) of the Commission Delegated Regulation (EU) 2027/XXXX adopted pursuant to Article 31(3) of Directive (EU) 2024/1640, or to the subject(s) for which a full positive hit has been identified pursuant to Article 5(9) of the same Regulation.

    1. Where an FIU receives a report of suspicions arising from the activities of a partnership for information sharing which involves obliged entities established in several Member States, and where that report has been transmitted to each relevant FIU in accordance with Article 69(8), second subparagraph of Regulation (EU) 2024/1624, it shall not be required to transmit the corresponding XBD.

Table of contents

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Contact us:

springlex@springflod.se

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod