Reading

The text on a date

The text of one Luxembourg work as it stood on one date, or of one EU work in the wording that answers that date (its original wording or a later consolidated one), article by article, as the publisher wrote it, with what a quotation of it needs. The identifier and the date go to this server in the request and nowhere else, and this page keeps nothing.

Today in Luxembourg: 2026-10-31.

Lex shows the published text of the law. It does not tell you whether or how it applies to your situation and is not legal advice.

055 Article 55

Quoted from 32015L0849, eng, the consolidated wording of 2024-12-30 (the publisher's consolidation date).

Article 55 1. Member States shall ensure that the information exchanged pursuant to Articles 52 and 53 is used only for the purpose for which it was sought or provided and that any dissemination of that information by the receiving FIU to any other authority, agency or department, or any use of this information for purposes beyond those originally approved, is made subject to the prior consent by the FIU providing the information. 2. Member States shall ensure that the requested FIU’s prior consent to disseminate the information to competent authorities is granted promptly and to the largest extent possible, regardless of the type of associated predicate offences. The requested FIU shall not refuse its consent to such dissemination unless this would fall beyond the scope of application of its AML/CFT provisions or could lead to impairment of an investigation, or would otherwise not be in accordance with fundamental principles of national law of that Member State. Any such refusal to grant consent shall be appropriately explained. Those exceptions shall be specified in a way which prevents misuse of, and undue limitations to, the dissemination of information to competent authorities.

Text digest fc9b8d78142db08846328bdf23a12a53571cf74298305679034ca12b34f33087, body digest 98ebb4570e800a5e2fd2deb4b38d320505a573eb7b3a4cc43d608e9150da0a45, official source https://publications.europa.eu/resource/cellar/8825da22-bc8c-11ef-91ed-01aa75ed71a1.0006.01, /eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/055

Cite this article

Usual citation
Article 55 of Directive (EU) 2015/849
With its permalink
Article 55 of Directive (EU) 2015/849 (https://law.soufien.lu/eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/055)
Evidence form
Article 55 of Directive (EU) 2015/849
Permalink: https://law.soufien.lu/eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/055

CELEX: 02015L0849-20241230

Wording: the consolidated wording of 2024-12-30

Published in: the Official Journal reference is not held by this index.

Text digest (SHA-256): fc9b8d78142db08846328bdf23a12a53571cf74298305679034ca12b34f33087

Consulted on Lex on 2026-10-31 (date in Luxembourg).

Only the Official Journal of the European Union published in electronic form is authentic and produces legal effects (Regulation (EU) No 216/2013, Article 1(2)); this text is a reproduction read from the Publications Office's Formex package, not the authentic edition.

The whole act in this wording

© European Union, https://eur-lex.europa.eu

Only the Official Journal of the European Union published in electronic form is authentic and produces legal effects (Regulation (EU) No 216/2013, Article 1(2)); this text is a reproduction read from the Publications Office's Formex package, not the authentic edition.

How to read this

The publisher's dates this site holds for this act

  • Entry into force: 2015-06-25 (the publisher's qualifier, word for word: DATPUB +20 V ART 68)
  • End of validity, in whole or in part: 2027-07-09 (the publisher's qualifier, word for word: A/PAR 32024L1640)
  • Deadline: 2017-06-26 (the publisher's qualifier, word for word: V ART 45.10 ET 48.10)
  • Deadline: 2017-06-26 (the publisher's qualifier, word for word: V ART 6.1 ET 17 ET 18.4)
  • Deadline: 2020-01-01 (the publisher's qualifier, word for word: V ART 17 ET 18.4 ET 48.10)
  • Deadline: 2024-01-01 (the publisher's qualifier, word for word: V ART 24a)
  • Deadline: 2024-06-30 (the publisher's qualifier, word for word: V ART 19b.3)
  • Deadline: 2024-12-30 (the publisher's qualifier, word for word: V ART 15.5 ET 18.5 ART 19a.2)
  • Signature: 2015-05-20 (the publisher's qualifier, word for word: Strasbourg)

Not held for this act: application. The publisher's dated statements this site holds for it give no such date, which says nothing of whether the act has one.

None of the dates above is used to choose a wording: each wording below carries its own date.

32015L0849, eng, the consolidated wording of 2024-12-30 (the publisher's consolidation date)

This is the latest wording held: it answers every later date, and an amendment the publisher has not yet consolidated is not in it.

2 other publisher works carry this date: 1 with this same text held here, 1 with no text held here.

/eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng

81 articles quoted, 0 held without text.

Contents
  1. Page 1: Article 1 to Article 38
  2. Page 2: Article 39 to Article 69

Page 2 of 2: Article 39 to Article 69.

  1. 039 Article 39

    Article 39 1. Obliged entities and their directors and employees shall not disclose to the customer concerned or to other third persons the fact that information is being, will be or has been transmitted in accordance with Article 33 or 34 or that a money laundering or terrorist financing analysis is being, or may be, carried out. 2. The prohibition laid down in paragraph 1 shall not include disclosure to the competent authorities, including the self-regulatory bodies, or disclosure for law enforcement purposes. 3. The prohibition laid down in paragraph 1 of this Article shall not prevent disclosure between the credit institutions and financial institutions from the Member States provided that they belong to the same group, or between those entities and their branches and majority owned subsidiaries established in third countries, provided that those branches and majority-owned subsidiaries fully comply with the group-wide policies and procedures, including procedures for sharing information within the group, in accordance with Article 45, and that the group-wide policies and procedures comply with the requirements set out in this Directive. 4. The prohibition laid down in paragraph 1 shall not prevent disclosure between the obliged entities as referred to in point (3)(a) and (b) of Article 2(1), or entities from third countries which impose requirements equivalent to those laid down in this Directive, who perform their professional activities, whether as employees or not, within the same legal person or a larger structure to which the person belongs and which shares common ownership, management or compliance control. 5. For obliged entities referred to in points (1), (2), (3)(a) and (b) of Article 2(1) in cases relating to the same customer and the same transaction involving two or more obliged entities, the prohibition laid down in paragraph 1 of this Article shall not prevent disclosure between the relevant obliged entities provided that they are from a Member State, or entities in a third country which imposes requirements equivalent to those laid down in this Directive, and that they are from the same professional category and are subject to obligations as regards professional secrecy and personal data protection. 6. Where the obliged entities referred to in point (3)(a) and (b) of Article 2(1) seek to dissuade a client from engaging in illegal activity, that shall not constitute disclosure within the meaning of paragraph 1 of this Article.

    Text digest 5e0c6a5f78916b44299eb859fac6ac34846c5c8c73c83a65778dfedd988feb45, body digest 98ebb4570e800a5e2fd2deb4b38d320505a573eb7b3a4cc43d608e9150da0a45, official source https://publications.europa.eu/resource/cellar/8825da22-bc8c-11ef-91ed-01aa75ed71a1.0006.01, /eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/039

  2. 040 Article 40

    Article 40 1. Member States shall require obliged entities to retain the following documents and information in accordance with national law for the purpose of preventing, detecting and investigating, by the FIU or by other competent authorities, possible money laundering or terrorist financing: (a) in the case of customer due diligence, a copy of the documents and information which are necessary to comply with the customer due diligence requirements laid down in Chapter II, including, where available, information obtained through electronic identification means, relevant trust services as set out in Regulation (EU) No 910/2014 or any other secure, remote or electronic, identification process regulated, recognised, approved or accepted by the relevant national authorities, for a period of five years after the end of the business relationship with their customer or after the date of an occasional transaction; (b) the supporting evidence and records of transactions, consisting of the original documents or copies admissible in judicial proceedings under the applicable national law, which are necessary to identify transactions, for a period of five years after the end of a business relationship with their customer or after the date of an occasional transaction. Upon expiry of the retention periods referred to in the first subparagraph, Member States shall ensure that obliged entities delete personal data, unless otherwise provided for by national law, which shall determine under which circumstances obliged entities may or shall further retain data. Member States may allow or require further retention after they have carried out a thorough assessment of the necessity and proportionality of such further retention and consider it to be justified as necessary for the prevention, detection or investigation of money laundering or terrorist financing. That further retention period shall not exceed five additional years. The retention period referred to in this paragraph, including the further retention period that shall not exceed five additional years, shall also apply in respect of the data accessible through the centralised mechanisms referred to in Article 32a. 2. Where, on 25 June 2015, legal proceedings concerned with the prevention, detection, investigation or prosecution of suspected money laundering or terrorist financing are pending in a Member State, and an obliged entity holds information or documents relating to those pending proceedings, the obliged entity may retain that information or those documents, in accordance with national law, for a period of five years from 25 June 2015. Member States may, without prejudice to national criminal law on evidence applicable to ongoing criminal investigations and legal proceedings, allow or require the retention of such information or documents for a further period of five years where the necessity and proportionality of such further retention has been established for the prevention, detection, investigation or prosecution of suspected money laundering or terrorist financing.

    Text digest 8b944fa1b12581b47f2822ea5dadfb39b8535f044b1c678299aa91f85acde32e, body digest 98ebb4570e800a5e2fd2deb4b38d320505a573eb7b3a4cc43d608e9150da0a45, official source https://publications.europa.eu/resource/cellar/8825da22-bc8c-11ef-91ed-01aa75ed71a1.0006.01, /eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/040

  3. 041 Article 41

    Article 41 1. The processing of personal data under this Directive is subject to Regulations (EU) 2016/679 and (EU) 2018/1725 of the European Parliament and of the Council. 2. Personal data shall be processed by obliged entities on the basis of this Directive only for the purposes of the prevention of money laundering and terrorist financing as referred to in Article 1 and shall not be further processed in a way that is incompatible with those purposes. The processing of personal data on the basis of this Directive for any other purposes, such as commercial purposes, shall be prohibited. 3. Obliged entities shall provide new clients with the information required pursuant to Article 10 of Directive 95/46/EC before establishing a business relationship or carrying out an occasional transaction. That information shall, in particular, include a general notice concerning the legal obligations of obliged entities under this Directive to process personal data for the purposes of the prevention of money laundering and terrorist financing as referred to in Article 1 of this Directive. 4. In applying the prohibition of disclosure laid down in Article 39(1), Member States shall adopt legislative measures restricting, in whole or in part, the data subject's right of access to personal data relating to him or her to the extent that such partial or complete restriction constitutes a necessary and proportionate measure in a democratic society with due regard for the legitimate interests of the person concerned to: (a) enable the obliged entity or competent national authority to fulfil its tasks properly for the purposes of this Directive; or (b) avoid obstructing official or legal inquiries, analyses, investigations or procedures for the purposes of this Directive and to ensure that the prevention, investigation and detection of money laundering and terrorist financing is not jeopardised.

    Text digest 738ad806cdc215b44805ed00cb05c99032e40a8d00bcc191d434c40f745f14db, body digest 98ebb4570e800a5e2fd2deb4b38d320505a573eb7b3a4cc43d608e9150da0a45, official source https://publications.europa.eu/resource/cellar/8825da22-bc8c-11ef-91ed-01aa75ed71a1.0006.01, /eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/041

  4. 042 Article 42

    Article 42 Member States shall require that their obliged entities have systems in place that enable them to respond fully and speedily to enquiries from their FIU or from other authorities, in accordance with their national law, as to whether they are maintaining or have maintained, during a five-year period prior to that enquiry a business relationship with specified persons, and on the nature of that relationship, through secure channels and in a manner that ensures full confidentiality of the enquiries.

    Text digest 804b27ef68b446526b1cf842b15ee31632040e8932e575abb9af58be579136c0, body digest 98ebb4570e800a5e2fd2deb4b38d320505a573eb7b3a4cc43d608e9150da0a45, official source https://publications.europa.eu/resource/cellar/8825da22-bc8c-11ef-91ed-01aa75ed71a1.0006.01, /eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/042

  5. 043 Article 43

    Article 43 The processing of personal data on the basis of this Directive for the purposes of the prevention of money laundering and terrorist financing as referred to in Article 1 shall be considered to be a matter of public interest under Regulation (EU) 2016/679 of the European Parliament and of the Council.

    Text digest 408a440d66dec8f4a5573b4644c8ee14cd5aebb32bfc5669d973920af49cf4a3, body digest 98ebb4570e800a5e2fd2deb4b38d320505a573eb7b3a4cc43d608e9150da0a45, official source https://publications.europa.eu/resource/cellar/8825da22-bc8c-11ef-91ed-01aa75ed71a1.0006.01, /eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/043

  6. 044 Article 44

    Article 44 1. Member States shall, for the purposes of contributing to the preparation of risk assessment pursuant to Article 7, ensure that they are able to review the effectiveness of their systems to combat money laundering or terrorist financing by maintaining comprehensive statistics on matters relevant to the effectiveness of such systems. 2. The statistics referred to in paragraph 1 shall include: (a) data measuring the size and importance of the different sectors which fall within the scope of this Directive, including the number of natural persons and entities and the economic importance of each sector; (b) data measuring the reporting, investigation and judicial phases of the national AML/CFT regime, including the number of suspicious transaction reports made to the FIU, the follow-up given to those reports and, on an annual basis, the number of cases investigated, the number of persons prosecuted, the number of persons convicted for money laundering or terrorist financing offences, the types of predicate offences, where such information is available, and the value in euro of property that has been frozen, seized or confiscated; (c) if available, data identifying the number and percentage of reports resulting in further investigation, together with the annual report to obliged entities detailing the usefulness and follow-up of the reports they presented; (d) data regarding the number of cross-border requests for information that were made, received, refused and partially or fully answered by the FIU, broken down by counterpart country; (e) human resources allocated to competent authorities responsible for AML/CFT supervision as well as human resources allocated to the FIU to fulfil the tasks specified in Article 32; (f) the number of on-site and off-site supervisory actions, the number of breaches identified on the basis of supervisory actions and sanctions/administrative measures applied by supervisory authorities. 3. Member States shall ensure that a consolidated review of their statistics is published on an annual basis. 4. Member States shall transmit annually to the Commission the statistics referred to in paragraph 2. The Commission shall publish an annual report summarising and explaining the statistics referred to in paragraph 2, which shall be made available on its website.

    Text digest f08707513c389022a7b593243be761bb7db98172d58233967e6507992015c9a4, body digest 98ebb4570e800a5e2fd2deb4b38d320505a573eb7b3a4cc43d608e9150da0a45, official source https://publications.europa.eu/resource/cellar/8825da22-bc8c-11ef-91ed-01aa75ed71a1.0006.01, /eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/044

  7. 045 Article 45

    Article 45 1. Member States shall require obliged entities that are part of a group to implement group-wide policies and procedures, including data protection policies and policies and procedures for sharing information within the group for AML/CFT purposes. Those policies and procedures shall be implemented effectively at the level of branches and majority-owned subsidiaries in Member States and third countries. 2. Member States shall require that obliged entities that operate establishments in another Member State ensure that those establishments respect the national provisions of that other Member State transposing this Directive. 3. Member States shall ensure that where obliged entities have branches or majority-owned subsidiaries located in third countries where the minimum AML/CFT requirements are less strict than those of the Member State, their branches and majority-owned subsidiaries located in the third country implement the requirements of the Member State, including data protection, to the extent that the third country's law so allows. 4. The Member States and EBA shall inform each other of instances in which the law of a third country does not permit the implementation of the policies and procedures required under paragraph 1. In such cases, coordinated actions may be taken to pursue a solution. In assessing which third countries do not permit the implementation of the policies and procedures required under paragraph 1, Member States and EBA shall take into account any legal constraints that may hinder the proper implementation of those policies and procedures, including secrecy, data protection and other constraints limiting the exchange of information that may be relevant for that purpose. 5. Member States shall require that, where a third country's law does not permit the implementation of the policies and procedures required under paragraph 1, obliged entities ensure that branches and majority-owned subsidiaries in that third country apply additional measures to effectively handle the risk of money laundering or terrorist financing, and inform the competent authorities of their home Member State. If the additional measures are not sufficient, the competent authorities of the home Member State shall exercise additional supervisory actions, including requiring that the group does not establish or that it terminates business relationships, and does not undertake transactions and, where necessary, requesting the group to close down its operations in the third country. 6. EBA shall develop draft regulatory technical standards specifying the type of additional measures referred to in paragraph 5 and the minimum action to be taken by credit institutions and financial institutions where a third country’s law does not permit the implementation of the measures required under paragraphs 1 and 3. EBA shall submit the draft regulatory technical standards referred to in the first subparagraph to the Commission by 26 December 2016. 7. Power is delegated to the Commission to adopt the regulatory technical standards referred to in paragraph 6 of this Article in accordance with Articles 10 to 14 of Regulations (EU) No 1093/2010, (EU) No 1094/2010 and (EU) No 1095/2010. 8. Member States shall ensure that the sharing of information within the group is allowed. Information on suspicions that funds are the proceeds of criminal activity or are related to terrorist financing reported to the FIU shall be shared within the group, unless otherwise instructed by the FIU. 9. Member States may require electronic money issuers as defined in Article 2, point (3), of Directive 2009/110/EC, payment service providers as defined in Article 4, point (11), of Directive (EU) 2015/2366 and crypto-asset service providers established on their territory in forms other than a branch, and whose head office is situated in another Member State, to appoint a central contact point in their territory. That central contact point shall ensure, on behalf of the entity operating on a cross-border basis, compliance with AML/CFT rules and shall facilitate supervision by supervisors, including by providing supervisors with documents and information on request. 10. EBA shall develop draft regulatory technical standards on the criteria for determining the circumstances in which the appointment of a central contact point pursuant to paragraph 9 is appropriate, and what the functions of the central contact points should be. EBA shall submit the draft regulatory technical standards referred to in the first subparagraph to the Commission by 26 June 2017. 11. Power is delegated to the Commission to adopt the regulatory technical standards referred to in paragraph 10 of this Article in accordance with Articles 10 to 14 of Regulations (EU) No 1093/2010, (EU) No 1094/2010 and (EU) No 1095/2010.

    Text digest 125e7f2d0b3e4fa522c7d385afa7f5f195d5b0902e6b2b9b45a32d27d571a6a5, body digest 98ebb4570e800a5e2fd2deb4b38d320505a573eb7b3a4cc43d608e9150da0a45, official source https://publications.europa.eu/resource/cellar/8825da22-bc8c-11ef-91ed-01aa75ed71a1.0006.01, /eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/045

  8. 046 Article 46

    Article 46 1. Member States shall require that obliged entities take measures proportionate to their risks, nature and size so that their employees are aware of the provisions adopted pursuant to this Directive, including relevant data protection requirements. Those measures shall include participation of their employees in special ongoing training programmes to help them recognise operations which may be related to money laundering or terrorist financing and to instruct them as to how to proceed in such cases. Where a natural person falling within any of the categories listed in point (3) of Article 2(1) performs professional activities as an employee of a legal person, the obligations in this Section shall apply to that legal person rather than to the natural person. 2. Member States shall ensure that obliged entities have access to up-to-date information on the practices of money launderers and financers of terrorism and on indications leading to the recognition of suspicious transactions. 3. Member States shall ensure that, where practicable, timely feedback on the effectiveness of and follow-up to reports of suspected money laundering or terrorist financing is provided to obliged entities. 4. Member States shall require that, where applicable, obliged entities identify the member of the management board who is responsible for the implementation of the laws, regulations and administrative provisions necessary to comply with this Directive.

    Text digest 98d39fa6f1624638b413ba3ab24c438d6f7af55f4ee178b4cc97708847e85e22, body digest 98ebb4570e800a5e2fd2deb4b38d320505a573eb7b3a4cc43d608e9150da0a45, official source https://publications.europa.eu/resource/cellar/8825da22-bc8c-11ef-91ed-01aa75ed71a1.0006.01, /eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/046

  9. 047 Article 47

    Article 47 1. Member States shall ensure that currency exchange and cheque-cashing offices and trust or company service providers are licensed or registered, and that providers of gambling services are regulated. 2. Member States shall require competent authorities to ensure that the persons who hold a management function in the entities referred to in paragraph 1, or are the beneficial owners of such entities, are fit and proper persons. 3. With respect to the obliged entities referred to in point (3)(a), (b) and (d) of Article 2(1), Member States shall ensure that competent authorities take the necessary measures to prevent criminals convicted in relevant areas or their associates from holding a management function in or being the beneficial owners of those obliged entities.

    Text digest 76d93a83abc4abc778c314b5669bed36c07346d7fd94fc9841d34fd76232a89e, body digest 98ebb4570e800a5e2fd2deb4b38d320505a573eb7b3a4cc43d608e9150da0a45, official source https://publications.europa.eu/resource/cellar/8825da22-bc8c-11ef-91ed-01aa75ed71a1.0006.01, /eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/047

  10. 048 Article 48

    Article 48 1. Member States shall require the competent authorities to monitor effectively, and to take the measures necessary to ensure, compliance with this Directive. 1a. In order to facilitate and promote effective cooperation, and in particular the exchange of information, Member States shall communicate to the Commission the list of competent authorities of the obliged entities listed in Article 2(1), including their contact details. Member States shall ensure that the information provided to the Commission remains updated. The Commission shall publish a register of those authorities and their contact details on its website. The authorities in the register shall, within the scope of their powers, serve as a contact point for the counterpart competent authorities of the other Member States. The financial supervisory authorities of the Member States shall also serve as a contact point for EBA. In order to ensure the adequate enforcement of this Directive, Member States shall require that all obliged entities are subject to adequate supervision, including the powers to conduct on-site and off-site supervision, and shall take appropriate and proportionate administrative measures to remedy the situation in the case of breaches. 2. Member States shall ensure that the competent authorities have adequate powers, including the power to compel the production of any information that is relevant to monitoring compliance and perform checks, and have adequate financial, human and technical resources to perform their functions. Member States shall ensure that staff of those authorities are of high integrity and appropriately skilled, and maintain high professional standards, including standards of confidentiality, data protection and standards addressing conflicts of interest. 3. In the case of credit institutions, financial institutions, and providers of gambling services, competent authorities shall have enhanced supervisory powers. 4. Member States shall ensure that competent authorities of the Member State in which the obliged entity operates establishments supervise the respect by those establishments of the national provisions of that Member State transposing this Directive. In the case of credit and financial institutions that are part of a group, Member States shall ensure that, for the purposes laid down in the first subparagraph, the competent authorities of the Member State where a parent undertaking is established cooperate with the competent authorities of the Member States where the establishments that are part of group are established. In the case of the establishments referred to in Article 45(9), supervision as referred to in the first subparagraph of this paragraph may include the taking of appropriate and proportionate measures to address serious failings that require immediate remedies. Those measures shall be temporary and be terminated when the failings identified are addressed, including with the assistance of or in cooperation with the competent authorities of the home Member State of the obliged entity, in accordance with Article 45(2). 5. Member States shall ensure that the competent authorities of the Member State in which the obliged entity operates establishments shall cooperate with the competent authorities of the Member State in which the obliged entity has its head office, to ensure effective supervision of the requirements of this Directive. In the case of credit and financial institutions that are part of a group, Member States shall ensure that the competent authorities of the Member State where a parent undertaking is established supervise the effective implementation of the group-wide policies and procedures referred to in Article 45(1). For that purpose, Member States shall ensure that the competent authorities of the Member State where credit and financial institutions that are part of the group are established cooperate with the competent authorities of the Member State where the parent undertaking is established. 6. Member States shall ensure that when applying a risk-based approach to supervision, the competent authorities: (a) have a clear understanding of the risks of money laundering and terrorist financing present in their Member State; (b) have on-site and off-site access to all relevant information on the specific domestic and international risks associated with customers, products and services of the obliged entities; and (c) base the frequency and intensity of on-site and off-site supervision on the risk profile of obliged entities, and on the risks of money laundering and terrorist financing in that Member State. 7. The assessment of the money laundering and terrorist financing risk profile of obliged entities, including the risks of non-compliance, shall be reviewed both periodically and when there are major events or developments in their management and operations. 8. Member States shall ensure that competent authorities take into account the degree of discretion allowed to the obliged entity, and appropriately review the risk assessments underlying this discretion, and the adequacy and implementation of its internal policies, controls and procedures. 9. In the case of the obliged entities referred to in point (3)(a), (b) and (d) of Article 2(1), Member States may allow the functions referred to in paragraph 1 of this Article to be performed by self-regulatory bodies, provided that those self-regulatory bodies comply with paragraph 2 of this Article. 10. By 26 June 2017, the ESAs shall issue guidelines, addressed to competent authorities, in accordance with Article 16 of Regulation (EU) No 1093/2010, on the characteristics of a risk-based approach to supervision and the steps to be taken when conducting supervision on a risk-based basis. From 1 January 2020, EBA shall, where appropriate, issue such guidelines. Specific account shall be taken of the nature and size of the business, and, where appropriate and proportionate, specific measures shall be laid down.

    Text digest 1bf619ba0959e34f9009751ab16a9ae0d3b054c629809cf3af5ff6ab277fe6f4, body digest 98ebb4570e800a5e2fd2deb4b38d320505a573eb7b3a4cc43d608e9150da0a45, official source https://publications.europa.eu/resource/cellar/8825da22-bc8c-11ef-91ed-01aa75ed71a1.0006.01, /eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/048

  11. 049 Article 49

    Article 49 Member States shall ensure that policy makers, the FIUs, supervisors and other competent authorities involved in AML/CFT, as well as tax authorities and law enforcement authorities when acting within the scope of this Directive, have effective mechanisms to enable them to cooperate and coordinate domestically concerning the development and implementation of policies and activities to combat money laundering and terrorist financing, including with a view to fulfilling their obligation under Article 7.

    Text digest 6ddcbd9bc4e32b17ca1604be94764ff149611afeaead3583a46a5ae6df0880af, body digest 98ebb4570e800a5e2fd2deb4b38d320505a573eb7b3a4cc43d608e9150da0a45, official source https://publications.europa.eu/resource/cellar/8825da22-bc8c-11ef-91ed-01aa75ed71a1.0006.01, /eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/049

  12. 050 Article 50

    Article 50 The competent authorities shall provide EBA with all the information necessary to allow it to carry out its duties under this Directive.

    Text digest c000c9cc3546ecf49454362dd5179256078449fa83be06760a49ffd87f831551, body digest 98ebb4570e800a5e2fd2deb4b38d320505a573eb7b3a4cc43d608e9150da0a45, official source https://publications.europa.eu/resource/cellar/8825da22-bc8c-11ef-91ed-01aa75ed71a1.0006.01, /eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/050

  13. 050A Article 50a

    Article 50a Member States shall not prohibit or place unreasonable or unduly restrictive conditions on the exchange of information or assistance between competent authorities for the purposes of this Directive. In particular Member States shall ensure that competent authorities do not refuse a request for assistance on the grounds that: (a) the request is also considered to involve tax matters; (b) national law requires obliged entities to maintain secrecy or confidentiality, except in those cases where the relevant information that is sought is protected by legal privilege or where legal professional secrecy applies, as described in Article 34(2); (c) there is an inquiry, investigation or proceeding underway in the requested Member State, unless the assistance would impede that inquiry, investigation or proceeding; (d) the nature or status of the requesting counterpart competent authority is different from that of requested competent authority.

    Text digest 0d300da87f1452e8ee24319172a4002e21e698abdbec7bb890b5c8e5f77f3dbc, body digest 98ebb4570e800a5e2fd2deb4b38d320505a573eb7b3a4cc43d608e9150da0a45, official source https://publications.europa.eu/resource/cellar/8825da22-bc8c-11ef-91ed-01aa75ed71a1.0006.01, /eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/050A

  14. 051 Article 51

    Article 51 The Commission may lend such assistance as may be needed to facilitate coordination, including the exchange of information between FIUs within the Union. It may regularly convene meetings of the EU FIUs' Platform composed of representatives from Member States' FIUs, in order to facilitate cooperation among FIUs, exchange views and provide advice on implementation issues relevant for FIUs and reporting entities as well as on cooperation-related issues such as effective FIU cooperation, the identification of suspicious transactions with a cross-border dimension, the standardisation of reporting formats through the FIU.net or its successor, the joint analysis of cross-border cases, and the identification of trends and factors relevant to assessing the risks of money laundering and terrorist financing at national and supranational level.

    Text digest 3f4352d95eb99e071c1a2db2e8a7c4f608adbdd6149ad9acc1fdfeb70e441505, body digest 98ebb4570e800a5e2fd2deb4b38d320505a573eb7b3a4cc43d608e9150da0a45, official source https://publications.europa.eu/resource/cellar/8825da22-bc8c-11ef-91ed-01aa75ed71a1.0006.01, /eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/051

  15. 052 Article 52

    Article 52 Member States shall ensure that FIUs cooperate with each other to the greatest extent possible, regardless of their organisational status.

    Text digest 97942767299b9f3eb1b45de80788f57a0bf52e60b89a9cd26e8fb2563211a8ff, body digest 98ebb4570e800a5e2fd2deb4b38d320505a573eb7b3a4cc43d608e9150da0a45, official source https://publications.europa.eu/resource/cellar/8825da22-bc8c-11ef-91ed-01aa75ed71a1.0006.01, /eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/052

  16. 053 Article 53

    Article 53 1. Member States shall ensure that FIUs exchange, spontaneously or upon request, any information that may be relevant for the processing or analysis of information by the FIU related to money laundering or terrorist financing and the natural or legal person involved, regardless of the type of associated predicate offences and even if the type of associated predicate offences is not identified at the time of the exchange. A request shall contain the relevant facts, background information, reasons for the request and how the information sought will be used. Different exchange mechanisms may apply if so agreed between the FIUs, in particular as regards exchanges through the FIU.net or its successor. When an FIU receives a report pursuant to point (a) of the first subparagraph of Article 33(1) which concerns another Member State, it shall promptly forward it to the FIU of that Member State. 2. Member States shall ensure that the FIU to whom the request is made is required to use the whole range of its available powers which it would normally use domestically for receiving and analysing information when it replies to a request for information referred to in paragraph 1 from another FIU. The FIU to whom the request is made shall respond in a timely manner. When an FIU seeks to obtain additional information from an obliged entity established in another Member State which operates on its territory, the request shall be addressed to the FIU of the Member State in whose territory the obliged entity is established. That FIU shall obtain information in accordance with Article 33(1) and transfer the answers promptly. 3. An FIU may refuse to exchange information only in exceptional circumstances where the exchange could be contrary to fundamental principles of its national law. Those exceptions shall be specified in a way which prevents misuse of, and undue limitations on, the free exchange of information for analytical purposes.

    Text digest 021d4f56c6a7cf53afdf67c41ec6f8a6b666d8bb5e7efb15b7e2a7f4b6070f3d, body digest 98ebb4570e800a5e2fd2deb4b38d320505a573eb7b3a4cc43d608e9150da0a45, official source https://publications.europa.eu/resource/cellar/8825da22-bc8c-11ef-91ed-01aa75ed71a1.0006.01, /eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/053

  17. 054 Article 54

    Article 54 Information and documents received pursuant to Articles 52 and 53 shall be used for the accomplishment of the FIU's tasks as laid down in this Directive. When exchanging information and documents pursuant to Articles 52 and 53, the transmitting FIU may impose restrictions and conditions for the use of that information. The receiving FIU shall comply with those restrictions and conditions. Member States shall ensure that FIUs designate at least one contact person or point to be responsible for receiving requests for information from FIUs in other Member States.

    Text digest 2b5536fbc67e51a5fe5f131d45437a643e8e9b3c21095dfe10773ebea44cd3a9, body digest 98ebb4570e800a5e2fd2deb4b38d320505a573eb7b3a4cc43d608e9150da0a45, official source https://publications.europa.eu/resource/cellar/8825da22-bc8c-11ef-91ed-01aa75ed71a1.0006.01, /eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/054

  18. 055 Article 55

    Article 55 1. Member States shall ensure that the information exchanged pursuant to Articles 52 and 53 is used only for the purpose for which it was sought or provided and that any dissemination of that information by the receiving FIU to any other authority, agency or department, or any use of this information for purposes beyond those originally approved, is made subject to the prior consent by the FIU providing the information. 2. Member States shall ensure that the requested FIU’s prior consent to disseminate the information to competent authorities is granted promptly and to the largest extent possible, regardless of the type of associated predicate offences. The requested FIU shall not refuse its consent to such dissemination unless this would fall beyond the scope of application of its AML/CFT provisions or could lead to impairment of an investigation, or would otherwise not be in accordance with fundamental principles of national law of that Member State. Any such refusal to grant consent shall be appropriately explained. Those exceptions shall be specified in a way which prevents misuse of, and undue limitations to, the dissemination of information to competent authorities.

    Text digest fc9b8d78142db08846328bdf23a12a53571cf74298305679034ca12b34f33087, body digest 98ebb4570e800a5e2fd2deb4b38d320505a573eb7b3a4cc43d608e9150da0a45, official source https://publications.europa.eu/resource/cellar/8825da22-bc8c-11ef-91ed-01aa75ed71a1.0006.01, /eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/055

  19. 056 Article 56

    Article 56 1. Member States shall require their FIUs to use protected channels of communication between themselves and encourage the use of the FIU.net or its successor. 2. Member States shall ensure that, in order to fulfil their tasks as laid down in this Directive, their FIUs cooperate in the application of state-of-the-art technologies in accordance with their national law. Those technologies shall allow FIUs to match their data with that of other FIUs in an anonymous way by ensuring full protection of personal data with the aim of detecting subjects of the FIU's interests in other Member States and identifying their proceeds and funds.

    Text digest ccc361cc7a38651c241c2f693dcaebe901cff3d0857b13a5a5119340e9a84555, body digest 98ebb4570e800a5e2fd2deb4b38d320505a573eb7b3a4cc43d608e9150da0a45, official source https://publications.europa.eu/resource/cellar/8825da22-bc8c-11ef-91ed-01aa75ed71a1.0006.01, /eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/056

  20. 057 Article 57

    Article 57 Differences between national law definitions of predicate offences as referred to in point 4 of Article 3 shall not impede the ability of FIUs to provide assistance to another FIU and shall not limit the exchange, dissemination and the use of information pursuant to Articles 53, 54 and 55.

    Text digest 240c59b910758b3b8a1e072f3a9b99c63d0559809f37473c2f206e2800a2b892, body digest 98ebb4570e800a5e2fd2deb4b38d320505a573eb7b3a4cc43d608e9150da0a45, official source https://publications.europa.eu/resource/cellar/8825da22-bc8c-11ef-91ed-01aa75ed71a1.0006.01, /eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/057

  21. 057A Article 57a

    Article 57a 1. Member States shall require that all persons working for or who have worked for competent authorities supervising credit and financial institutions for compliance with this Directive and auditors or experts acting on behalf of such competent authorities shall be bound by the obligation of professional secrecy. Without prejudice to cases covered by criminal law, confidential information which the persons referred to in the first subparagraph receive in the course of their duties under this Directive may be disclosed only in summary or aggregate form, in such a way that individual credit and financial institutions cannot be identified. 2. Paragraph 1 shall not prevent the exchange of information between: (a) competent authorities supervising credit and financial institutions within a Member State in accordance with this Directive or other legislative acts relating to the supervision of credit and financial institutions; (b) competent authorities supervising credit and financial institutions in different Member States in accordance with this Directive or other legislative acts relating to the supervision of credit and financial institutions, including the European Central Bank (ECB) acting in accordance with Council Regulation (EU) No 1024/2013. That exchange of information shall be subject to the conditions of professional secrecy indicated in paragraph 1. By 10 January 2019, the competent authorities supervising credit and financial institutions in accordance with this Directive and the ECB, acting pursuant to Article 27(2) of Regulation (EU) No 1024/2013 and point (g) of the first subparagraph of Article 56 of Directive 2013/36/EU of the European Parliament and of the Council, shall conclude, with the support of the European Supervisory Authorities, an agreement on the practical modalities for exchange of information. 3. Competent authorities supervising credit and financial institutions receiving confidential information as referred to in paragraph 1, shall only use this information: (a) in the discharge of their duties under this Directive or under other legislative acts in the field of AML/CFT, of prudential regulation and of supervising credit and financial institutions, including sanctioning; (b) in an appeal against a decision of the competent authority supervising credit and financial institutions, including court proceedings; (c) in court proceedings initiated pursuant to special provisions provided for in Union law adopted in the field of this Directive or in the field of prudential regulation and supervision of credit and financial institutions. 4. Member States shall ensure that competent authorities supervising credit and financial institutions cooperate with each other for the purposes of this Directive to the greatest extent possible, regardless of their respective nature or status. Such cooperation also includes the ability to conduct, within the powers of the requested competent authority, inquiries on behalf of a requesting competent authority, and the subsequent exchange of the information obtained through such inquiries. 5. Member States may authorise their national competent authorities which supervise credit and financial institutions to conclude cooperation agreements providing for collaboration and exchanges of confidential information with the competent authorities of third countries that constitute counterparts of those national competent authorities. Such cooperation agreements shall be concluded on the basis of reciprocity and only if the information disclosed is subject to a guarantee of professional secrecy requirements at least equivalent to that referred to in paragraph 1. Confidential information exchanged according to those cooperation agreements shall be used for the purpose of performing the supervisory task of those authorities. Where the information exchanged originates in another Member State, it shall only be disclosed with the explicit consent of the competent authority which shared it and, where appropriate, solely for the purposes for which that authority gave its consent.

    Text digest c8955c5d3f4396d8f76f0b70e353a772d7b45f6197450923bb152c144f5a0989, body digest 98ebb4570e800a5e2fd2deb4b38d320505a573eb7b3a4cc43d608e9150da0a45, official source https://publications.europa.eu/resource/cellar/8825da22-bc8c-11ef-91ed-01aa75ed71a1.0006.01, /eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/057A

  22. 057B Article 57b

    Article 57b 1. Notwithstanding Article 57a(1) and (3) and without prejudice to Article 34(2), Member States may authorise the exchange of information between competent authorities in the same Member State or in different Member States, between the competent authorities and authorities entrusted with the supervision of financial sector entities and natural or legal persons acting in the exercise of their professional activities as referred to in point (3) of Article 2(1) and the authorities responsible by law for the supervision of financial markets in the discharge of their respective supervisory functions. The information received shall in any event be subject to professional secrecy requirements at least equivalent to those referred to in Article 57a(1). 2. Notwithstanding Article 57a(1) and (3), Member States may, by virtue of provisions laid down in national law, authorise the disclosure of certain information to other national authorities responsible by law for the supervision of the financial markets, or with designated responsibilities in the field of combating or investigation of money laundering, the associated predicate offences or terrorist financing. However, confidential information exchanged according to this paragraph shall only be used for the purpose of performing the legal tasks of the authorities concerned. Persons having access to such information shall be subject to professional secrecy requirements at least equivalent to those referred to in Article 57a(1). 3. Member States may authorise the disclosure of certain information relating to the supervision of credit institutions for compliance with this Directive to Parliamentary inquiry committees, courts of auditors and other entities in charge of enquiries, in their Member State, under the following conditions: (a) the entities have a precise mandate under national law to investigate or scrutinise the actions of authorities responsible for the supervision of those credit institutions or for laws on such supervision; (b) the information is strictly necessary for fulfilling the mandate referred to in point (a); (c) the persons with access to the information are subject to professional secrecy requirements under national law at least equivalent to those referred to in Article 57a(1); (d) where the information originates in another Member State, it shall not be disclosed without the express consent of the competent authorities which have disclosed it and, solely for the purposes for which those authorities gave their consent.

    Text digest b9f1595d16db4070a911fb342c95672ec62ef8e4bb1b38496eb7376bb28c9154, body digest 98ebb4570e800a5e2fd2deb4b38d320505a573eb7b3a4cc43d608e9150da0a45, official source https://publications.europa.eu/resource/cellar/8825da22-bc8c-11ef-91ed-01aa75ed71a1.0006.01, /eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/057B

  23. 058 Article 58

    Article 58 1. Member States shall ensure that obliged entities can be held liable for breaches of national provisions transposing this Directive in accordance with this Article and Articles 59 to 61. Any resulting sanction or measure shall be effective, proportionate and dissuasive. 2. Without prejudice to the right of Member States to provide for and impose criminal sanctions, Member States shall lay down rules on administrative sanctions and measures and ensure that their competent authorities may impose such sanctions and measures with respect to breaches of the national provisions transposing this Directive, and shall ensure that they are applied. Member States may decide not to lay down rules for administrative sanctions or measures for breaches which are subject to criminal sanctions in their national law. In that case, Member States shall communicate to the Commission the relevant criminal law provisions. Member States shall further ensure that where their competent authorities identify breaches which are subject to criminal sanctions, they inform the law enforcement authorities in a timely manner. 3. Member States shall ensure that where obligations apply to legal persons in the event of a breach of national provisions transposing this Directive, sanctions and measures can be applied to the members of the management body and to other natural persons who under national law are responsible for the breach. 4. Member States shall ensure that the competent authorities have all the supervisory and investigatory powers that are necessary for the exercise of their functions. 5. Competent authorities shall exercise their powers to impose administrative sanctions and measures in accordance with this Directive, and with national law, in any of the following ways: (a) directly; (b) in collaboration with other authorities; (c) under their responsibility by delegation to such other authorities; (d) by application to the competent judicial authorities. In the exercise of their powers to impose administrative sanctions and measures, competent authorities shall cooperate closely in order to ensure that those administrative sanctions or measures produce the desired results and coordinate their action when dealing with cross-border cases.

    Text digest f1ac24f11872367c203e6cb2e1158b11b58dd1cdc3971422ca12d22f6c0ed140, body digest 98ebb4570e800a5e2fd2deb4b38d320505a573eb7b3a4cc43d608e9150da0a45, official source https://publications.europa.eu/resource/cellar/8825da22-bc8c-11ef-91ed-01aa75ed71a1.0006.01, /eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/058

  24. 059 Article 59

    Article 59 1. Member States shall ensure that this Article applies at least to breaches on the part of obliged entities that are serious, repeated, systematic, or a combination thereof, of the requirements laid down in: (a) Articles 10 to 24 (customer due diligence); (b) Articles 33, 34 and 35 (suspicious transaction reporting); (c) Article 40 (record-keeping); and (d) Articles 45 and 46 (internal controls). 2. Member States shall ensure that in the cases referred to in paragraph 1, the administrative sanctions and measures that can be applied include at least the following: (a) a public statement which identifies the natural or legal person and the nature of the breach; (b) an order requiring the natural or legal person to cease the conduct and to desist from repetition of that conduct; (c) where an obliged entity is subject to an authorisation, withdrawal or suspension of the authorisation; (d) a temporary ban against any person discharging managerial responsibilities in an obliged entity, or any other natural person, held responsible for the breach, from exercising managerial functions in obliged entities; (e) maximum administrative pecuniary sanctions of at least twice the amount of the benefit derived from the breach where that benefit can be determined, or at least EUR . 3. Member States shall ensure that, by way of derogation from paragraph 2(e), where the obliged entity concerned is a credit institution or financial institution, the following sanctions can also be applied: (a) in the case of a legal person, maximum administrative pecuniary sanctions of at least EUR or 10 % of the total annual turnover according to the latest available accounts approved by the management body; where the obliged entity is a parent undertaking or a subsidiary of a parent undertaking which is required to prepare consolidated financial accounts in accordance with Article 22 of Directive 2013/34/EU, the relevant total annual turnover shall be the total annual turnover or the corresponding type of income in accordance with the relevant accounting Directives according to the last available consolidated accounts approved by the management body of the ultimate parent undertaking; (b) in the case of a natural person, maximum administrative pecuniary sanctions of at least EUR , or in the Member States whose currency is not the euro, the corresponding value in the national currency on 25 June 2015. 4. Member States may empower competent authorities to impose additional types of administrative sanctions in addition to those referred to in points (a) to (d) of paragraph 2 or to impose administrative pecuniary sanctions exceeding the amounts referred to in point (e) of paragraph 2 and in paragraph 3.

    Text digest 041c596d4cbb2b7cbb76227eb57b2e849e81c43dfad28b19d63e3f2bbef87b63, body digest 98ebb4570e800a5e2fd2deb4b38d320505a573eb7b3a4cc43d608e9150da0a45, official source https://publications.europa.eu/resource/cellar/8825da22-bc8c-11ef-91ed-01aa75ed71a1.0006.01, /eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/059

  25. 060 Article 60

    Article 60 1. Member States shall ensure that a decision imposing an administrative sanction or measure for breach of the national provisions transposing this Directive against which there is no appeal shall be published by the competent authorities on their official website immediately after the person sanctioned is informed of that decision. The publication shall include at least information on the type and nature of the breach and the identity of the persons responsible. Member States shall not be obliged to apply this subparagraph to decisions imposing measures that are of an investigatory nature. Where the publication of the identity of the persons responsible as referred to in the first subparagraph or the personal data of such persons is considered by the competent authority to be disproportionate following a case-by-case assessment conducted on the proportionality of the publication of such data, or where publication jeopardises the stability of financial markets or an on-going investigation, competent authorities shall: (a) delay the publication of the decision to impose an administrative sanction or measure until the moment at which the reasons for not publishing it cease to exist; (b) publish the decision to impose an administrative sanction or measure on an anonymous basis in a manner in accordance with national law, if such anonymous publication ensures an effective protection of the personal data concerned; in the case of a decision to publish an administrative sanction or measure on an anonymous basis, the publication of the relevant data may be postponed for a reasonable period of time if it is foreseen that within that period the reasons for anonymous publication shall cease to exist; (c) not publish the decision to impose an administrative sanction or measure at all in the event that the options set out in points (a) and (b) are considered insufficient to ensure: (i) that the stability of financial markets would not be put in jeopardy; or (ii) the proportionality of the publication of the decision with regard to measures which are deemed to be of a minor nature. 2. Where Member States permit publication of decisions against which there is an appeal, competent authorities shall also publish, immediately, on their official website such information and any subsequent information on the outcome of such appeal. Moreover, any decision annulling a previous decision to impose an administrative sanction or a measure shall also be published. 3. Competent authorities shall ensure that any publication in accordance with this Article shall remain on their official website for a period of five years after its publication. However, personal data contained in the publication shall only be kept on the official website of the competent authority for the period which is necessary in accordance with the applicable data protection rules. 4. Member States shall ensure that when determining the type and level of administrative sanctions or measures, the competent authorities shall take into account all relevant circumstances, including where applicable: (a) the gravity and the duration of the breach; (b) the degree of responsibility of the natural or legal person held responsible; (c) the financial strength of the natural or legal person held responsible, as indicated for example by the total turnover of the legal person held responsible or the annual income of the natural person held responsible; (d) the benefit derived from the breach by the natural or legal person held responsible, insofar as it can be determined; (e) the losses to third parties caused by the breach, insofar as they can be determined; (f) the level of cooperation of the natural or legal person held responsible with the competent authority; (g) previous breaches by the natural or legal person held responsible. 5. Member States shall ensure that legal persons can be held liable for the breaches referred to in Article 59(1) committed for their benefit by any person, acting individually or as part of an organ of that legal person, and having a leading position within the legal person based on any of the following: (a) power to represent the legal person; (b) authority to take decisions on behalf of the legal person; or (c) authority to exercise control within the legal person. 6. Member States shall also ensure that legal persons can be held liable where the lack of supervision or control by a person referred to in paragraph 5 of this Article has made it possible to commit one of the breaches referred to in Article 59(1) for the benefit of that legal person by a person under its authority.

    Text digest e80a7207e0438dd65f4740d582e941bdaf10a4053807b03c46e3f585c18a51d2, body digest 98ebb4570e800a5e2fd2deb4b38d320505a573eb7b3a4cc43d608e9150da0a45, official source https://publications.europa.eu/resource/cellar/8825da22-bc8c-11ef-91ed-01aa75ed71a1.0006.01, /eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/060

  26. 061 Article 61

    Article 61 1. Member States shall ensure that competent authorities, as well as, where applicable, self-regulatory bodies, establish effective and reliable mechanisms to encourage the reporting to competent authorities, as well as, where applicable self-regulatory bodies, of potential or actual breaches of the national provisions transposing this Directive. For that purpose, they shall provide one or more secure communication channels for persons for the reporting referred to in the first subparagraph. Such channels shall ensure that the identity of persons providing information is known only to the competent authorities, as well as, where applicable, self-regulatory bodies. 2. The mechanisms referred to in paragraph 1 shall include at least: (a) specific procedures for the receipt of reports on breaches and their follow-up; (b) appropriate protection for employees or persons in a comparable position, of obliged entities who report breaches committed within the obliged entity; (c) appropriate protection for the accused person; (d) protection of personal data concerning both the person who reports the breaches and the natural person who is allegedly responsible for a breach, in compliance with the principles laid down in Directive 95/46/EC; (e) clear rules that ensure that confidentiality is guaranteed in all cases in relation to the person who reports the breaches committed within the obliged entity, unless disclosure is required by national law in the context of further investigations or subsequent judicial proceedings. 3. Member States shall require obliged entities to have in place appropriate procedures for their employees, or persons in a comparable position, to report breaches internally through a specific, independent and anonymous channel, proportionate to the nature and size of the obliged entity concerned. Member States shall ensure that individuals, including employees and representatives of the obliged entity who report suspicions of money laundering or terrorist financing internally or to the FIU, are legally protected from being exposed to threats, retaliatory or hostile action, and in particular from adverse or discriminatory employment actions. Member States shall ensure that individuals who are exposed to threats, hostile actions, or adverse or discriminatory employment actions for reporting suspicions of money laundering or terrorist financing internally or to the FIU are entitled to present a complaint in a safe manner to the respective competent authorities. Without prejudice to the confidentiality of information gathered by the FIU, Member States shall also ensure that such individuals have the right to effective remedy to safeguard their rights under this paragraph.

    Text digest bf8f5a2b9fe6a5d70e4302d4dce9fde44a890f872d77e5dccde81c9b03133e26, body digest 98ebb4570e800a5e2fd2deb4b38d320505a573eb7b3a4cc43d608e9150da0a45, official source https://publications.europa.eu/resource/cellar/8825da22-bc8c-11ef-91ed-01aa75ed71a1.0006.01, /eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/061

  27. 062 Article 62

    Article 62 1. Member States shall ensure that their competent authorities inform EBA of all administrative sanctions and measures imposed in accordance with Articles 58 and 59 on credit institutions and financial institutions, including of any appeal in relation thereto and the outcome thereof. 2. Member States shall ensure that their competent authorities, in accordance with their national law, check the existence of a relevant conviction in the criminal record of the person concerned. Any exchange of information for those purposes shall be carried out in accordance with Decision 2009/316/JHA and Framework Decision 2009/315/JHA as implemented in national law. 3. EBA shall maintain a website with links to each competent authority’s publication of administrative sanctions and measures imposed in accordance with Article 60 on credit institutions and financial institutions, and shall show the time period for which each Member State publishes administrative sanctions and measures.

    Text digest 198bf8de36e42013b909bcb9461d9224e0a7ba447dec2a87452702b3f25da817, body digest 98ebb4570e800a5e2fd2deb4b38d320505a573eb7b3a4cc43d608e9150da0a45, official source https://publications.europa.eu/resource/cellar/8825da22-bc8c-11ef-91ed-01aa75ed71a1.0006.01, /eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/062

  28. 063 Article 63

    Article 63 Point (d) of paragraph 2 of Article 25 of Regulation (EU) No 648/2012 of the European Parliament and the Council is replaced by the following: ‘(d) the CCP is established or authorised in a third country that is not considered, by the Commission in accordance with Directive (EU) 2015/849 of the European Parliament and of the Council, as having strategic deficiencies in its national anti-money laundering and counter financing of terrorism regime that poses significant threats to the financial system of the Union.

    Text digest 0649d6c5f28f63d0c85e8dde82573c8f3c64016a917042246f5641bb71045262, body digest 98ebb4570e800a5e2fd2deb4b38d320505a573eb7b3a4cc43d608e9150da0a45, official source https://publications.europa.eu/resource/cellar/8825da22-bc8c-11ef-91ed-01aa75ed71a1.0006.01, /eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/063

  29. 064 Article 64

    Article 64 1. The power to adopt delegated acts is conferred on the Commission subject to the conditions laid down in this Article. 2. The power to adopt delegated acts referred to in Article 9 shall be conferred on the Commission for an indeterminate period of time from 25 June 2015. 3. The power to adopt delegated acts referred to in Article 9 may be revoked at any time by the European Parliament or by the Council. A decision to revoke shall put an end to the delegation of the power specified in that decision. It shall take effect on the day following the publication of the decision in the Official Journal of the European Union or at a later date specified therein. It shall not affect the validity of any delegated acts already in force. 4. As soon as it adopts a delegated act, the Commission shall notify it simultaneously to the European Parliament and to the Council. 5. A delegated act adopted pursuant to Article 9 shall enter into force only if no objection has been expressed either by the European Parliament or the Council within a period of one month of notification of that act to the European Parliament and the Council or if, before the expiry of that period, the European Parliament and the Council have both informed the Commission that they will not object. That period shall be extended by one month at the initiative of the European Parliament or of the Council.

    Text digest 623ae488a566c93db42adfcdbc965c1d11e6fddfba89ee7a59f5cd988604613b, body digest 98ebb4570e800a5e2fd2deb4b38d320505a573eb7b3a4cc43d608e9150da0a45, official source https://publications.europa.eu/resource/cellar/8825da22-bc8c-11ef-91ed-01aa75ed71a1.0006.01, /eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/064

  30. 064A Article 64a

    Article 64a 1. The Commission shall be assisted by the Committee on the Prevention of Money Laundering and Terrorist Financing (the ‘Committee’) as referred to in Article 23 of Regulation (EU) 2015/847 of the European Parliament and of the Council. That committee shall be a committee within the meaning of Regulation (EU) No 182/2011. 2. Where reference is made to this paragraph, Article 5 of Regulation (EU) No 182/2011 shall apply.

    Text digest ca91aa9759cd82518f4a8c00d377ee791661275597725e0b297f30d00c2c6620, body digest 98ebb4570e800a5e2fd2deb4b38d320505a573eb7b3a4cc43d608e9150da0a45, official source https://publications.europa.eu/resource/cellar/8825da22-bc8c-11ef-91ed-01aa75ed71a1.0006.01, /eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/064A

  31. 065 Article 65

    Article 65 1. By 11 January 2022, and every three years thereafter, the Commission shall draw up a report on the implementation of this Directive and submit it to the European Parliament and to the Council. That report shall include in particular: (a) an account of specific measures adopted and mechanisms set up at Union and Member State level to prevent and address emerging problems and new developments presenting a threat to the Union financial system; (b) follow-up actions undertaken at Union and Member State level on the basis of concerns brought to their attention, including complaints relating to national laws hampering the supervisory and investigative powers of competent authorities and self-regulatory bodies; (c) an account of the availability of relevant information for the competent authorities and FIUs of the Member States, for the prevention of the use of the financial system for the purposes of money laundering and terrorist financing; (d) an account of the international cooperation and information exchange between competent authorities and FIUs; (e) an account of necessary Commission actions to verify that Member States take action in compliance with this Directive and to assess emerging problems and new developments in the Member States; (f) an analysis of feasibility of specific measures and mechanisms at Union and Member State level on the possibilities to collect and access the beneficial ownership information of corporate and other legal entities incorporated outside of the Union and of the proportionality of the measures referred to in point (b) of Article 20; (g) an evaluation of how fundamental rights and principles recognised by the Charter of Fundamental Rights of the European Union have been respected. The first report, to be published by 11 January 2022, shall be accompanied, if necessary, by appropriate legislative proposals, including, where appropriate, with respect to virtual currencies, empowerments to set-up and maintain a central database registering users’ identities and wallet addresses accessible to FIUs, as well as self-declaration forms for the use of virtual currency users, and to improve cooperation between Asset Recovery Offices of the Member States and a risk-based application of the measures referred to in point (b) of Article 20. 2. By 1 June 2019, the Commission shall assess the framework for FIUs’ cooperation with third countries and obstacles and opportunities to enhance cooperation between FIUs in the Union including the possibility of establishing a coordination and support mechanism. 3. The Commission shall, if appropriate, issue a report to the European Parliament and to Council to assess the need and proportionality of lowering the percentage for the identification of beneficial ownership of legal entities in light of any recommendation issued in this sense by international organisations and standard setters with competence in the field of preventing money laundering and combating terrorist financing as a result of a new assessment, and present a legislative proposal, if appropriate.

    Text digest 5ca2d7dbe34c9b17d4bd085c10eb7ec70b1d633cc003a565027df34f64423ae6, body digest 98ebb4570e800a5e2fd2deb4b38d320505a573eb7b3a4cc43d608e9150da0a45, official source https://publications.europa.eu/resource/cellar/8825da22-bc8c-11ef-91ed-01aa75ed71a1.0006.01, /eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/065

  32. 066 Article 66

    Article 66 Directives 2005/60/EC and 2006/70/EC are repealed with effect from 26 June 2017. References to the repealed Directives shall be construed as references to this Directive and shall be read in accordance with the correlation table set out in Annex IV.

    Text digest 351b9564ac257a606cf7f8ebefd06e62f5099a942ad2ce758e65d792ce35b25b, body digest 98ebb4570e800a5e2fd2deb4b38d320505a573eb7b3a4cc43d608e9150da0a45, official source https://publications.europa.eu/resource/cellar/8825da22-bc8c-11ef-91ed-01aa75ed71a1.0006.01, /eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/066

  33. 067 Article 67

    Article 67 1. Member States shall bring into force the laws, regulations and administrative provisions necessary to comply with this Directive by 26 June 2017. Member States shall apply Article 12(3) as of 10 July 2020. Member States shall set up the registers referred to in Article 30 by 10 January 2020 and the registers referred to in Article 31 by 10 March 2020 and the centralised automated mechanisms referred to in Article 32a by 10 September 2020. The Commission shall ensure the interconnection of registers referred to in Articles 30 and 31 in cooperation with the Member States by 10 March 2021. Member States shall immediately communicate the text of the measures referred to in this paragraph to the Commission. When Member States adopt those measures, they shall contain a reference to this Directive or be accompanied by such a reference on the occasion of their official publication. The methods of making such reference shall be laid down by Member States. 2. Member States shall communicate to the Commission the text of the main provisions of national law which they adopt in the field covered by this Directive. 3. Member States shall adopt and publish, by 30 December 2024, the laws, regulations and administrative provisions necessary to comply with Article 2(1), point 3, Article 3, point (2)(g), Article 3, points (8), (18), (19) and (20), Article 19a(1), Article 19b(1) and (2), Article 45(9) and Article 47(1). They shall immediately communicate the text of those measures to the Commission. They shall apply those measures from 30 December 2024.

    Text digest fe5e03bad035ab6f8b5d0ce047b2ee01b38f7ed8320846321234be9a705c649a, body digest 98ebb4570e800a5e2fd2deb4b38d320505a573eb7b3a4cc43d608e9150da0a45, official source https://publications.europa.eu/resource/cellar/8825da22-bc8c-11ef-91ed-01aa75ed71a1.0006.01, /eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/067

  34. 068 Article 68

    Article 68 This Directive shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union.

    Text digest fb87bc0aa7291286a271dfd083fea4aa47f83ed99fd9a4f02c9572decedd8460, body digest 98ebb4570e800a5e2fd2deb4b38d320505a573eb7b3a4cc43d608e9150da0a45, official source https://publications.europa.eu/resource/cellar/8825da22-bc8c-11ef-91ed-01aa75ed71a1.0006.01, /eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/068

  35. 069 Article 69

    Article 69 This Directive is addressed to the Member States.

    Text digest fd22e41fdf8910ca9b2cde59e20cab60c6102dc1b837c315a66f709500c8eebf, body digest 98ebb4570e800a5e2fd2deb4b38d320505a573eb7b3a4cc43d608e9150da0a45, official source https://publications.europa.eu/resource/cellar/8825da22-bc8c-11ef-91ed-01aa75ed71a1.0006.01, /eu-eurlex/32015L0849/2024-12-30--05e15786487864f59bbed53f2c14e41385a1297d968243b122d12011191c2b12/eng/069

What this reading does not hold

  • publisher_signature: no signature or attestation of the publisher is held; the digests are this index's own reading of the retained package
  • unconsolidated_amendments: an amendment the publisher has not yet consolidated is not held: the latest consolidated wording answers every later date, as dated
  • force_dates: the act's own dates are said under force_dates, as the publisher's dated statements on the act give them; none of them is used to choose a wording, each wording carries its own date, and a date the publisher records without a dated statement is not held
  • observation_time: when the publisher served the retained package is not held, so no observation time is stated
  • markup_and_notes: the Formex markup, notes and tables are not served as structure; the text is the article's searchable text, in publisher order
  • annexes: no annex text is held: annexes are not indexed as articles, so no annex is searched, quoted or exported; annexes_not_served lists the annexes the corpus classified against the publisher PDF on the members an expression was read from, with the official source to read them, and an empty list says only that the corpus classified none there, not that the act has none