Article 4 Information exchange arrangements


This is a draft act

This text has been parsed from the AMLA final report draft as published on 1 October 2026. While we run a suite of validations, the automated parsing can result in errors. Also, before it is finally adopted by the Commission, its wording, numbering and references may change, and entire articles might be removed or added.

Summary What does Article 4 of the RTS on home-host supervisory cooperation say?

This article sets out the rules governing how supervisors should handle requests for information, acting as a practical companion to Article 3, which establishes the general framework for cooperation requests.

The core principle here is efficiency and necessity: before formally requesting information from another supervisor, the requesting supervisor must first check whether that information is already available through existing registers and databases.

Beyond this pre-request due diligence, the article also addresses what happens when information cannot be provided on time, the prohibition on exchanging legally privileged information, and the ongoing maintenance of shared information.

Important points:

  • Supervisors are required to check existing registers and databases — including beneficial ownership registers, central bank account registers, and the central AML/CFT database — before submitting a formal information request.
  • Information covered by legal privilege must not be exchanged under this Regulation.
  • Where a requested supervisor cannot meet a deadline, it must still provide whatever information it has available within the agreed timeframe, and information already exchanged must be updated at intervals agreed between the relevant supervisors.

Springlex's summary of the article is a reading aid, not a substitute for the legal text.

    1. Prior to submitting a request for information, supervisors specified in Article 1 shall verify whether the requested information is already available and accessible. It includes, where relevant, assessing whether such information is included in the data contained in the central beneficial ownership registers established under Article 10 of Directive (EU) 2024/1640, in the central bank account registers or electronic data retrieval systems referred to in Article 16 of Directive (EU) 2024/1640 and in any other registers held by the European Supervisory Authorities or the European Central Bank. Supervisors may also consider requesting access to data contained in the central AML/CFT database established under Article 11 of Regulation (EU) 2024/1620.

    1. In cases where the supervisor does not possess the requested information it shall assess whether the information could be obtained by using its powers, including by requesting it directly from the obliged entity concerned or by requesting it from another authority which can exchange such information.

    1. Information covered by legal privilege within the meaning of Article 70(2) of Regulation (EU) 2024/1624 shall not be exchanged for the purposes of this Regulation.

    1. Where, as referred to in Article 3(6), the requested supervisor is not able to provide all the information required within the deadline set out in the request, it shall provide the information it has available within the deadline provided in accordance with Article 3(6).

    1. Upon request, information exchanged shall be updated at intervals agreed between the relevant supervisors.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod