Commission Delegated Regulation (EU) 2019/758 of 31 January 2019 supplementing Directive (EU) 2015/849
as it stood on 2019-01-31, permalink: /eu-eurlex/32019r0758/2019-01-31
Article 1
This Regulation lays down a set of additional measures, including minimum action, that credit institutions and financial institutions must take to effectively handle the money laundering and terrorist financing risk where a third country's law does not permit the implementation of group-wide policies and procedures as referred to in Article 45(1) and (3) of Directive (EU) 2015/849 at the level of branches or majority-owned subsidiaries that are part of the group and established in the third country.
Article 2
For each third country where they have established a branch or they are a majority owner of a subsidiary, credit institutions and financial institutions shall at least:
| (a) | assess the money laundering and terrorist financing risk to their group, record that assessment, keep it up to date and retain it in order to be able to share it with their competent authority; |
|---|
| (b) | ensure that the risk referred to in point (a) is reflected appropriately in their group-wide anti-money laundering and countering the financing of terrorism policies and procedures; |
|---|
| (c) | obtain senior management approval at group-level for the risk assessment referred to in point (a) and for the group-wide anti-money laundering and countering the financing of terrorism policies and procedures referred to in point (b); |
|---|
| (d) | provide targeted training to relevant staff members in the third country to enable them to identify money laundering and terrorist financing risk indicators, and ensure that the training is effective. |
|---|
Article 3
- Where the third country's law prohibits or restricts the application of policies and procedures that are necessary to identify and assess adequately the money laundering and terrorist financing risk associated with a business relationship or occasional transaction due to restrictions on access to relevant customer and beneficial ownership information or restrictions on the use of such information for customer due diligence purposes, credit institutions or financial institutions shall at least:
| (a) | inform the competent authority of the home Member State without undue delay and in any case no later than 28 calendar days after identifying the third country of the following:(i)the name of the third country concerned;(ii)how the implementation of the third country's law prohibits or restricts the application of policies and procedures that are necessary to identify and assess the money laundering and terrorist financing risk associated with a customer; |
|---|---|
| (i) | the name of the third country concerned; |
| (ii) | how the implementation of the third country's law prohibits or restricts the application of policies and procedures that are necessary to identify and assess the money laundering and terrorist financing risk associated with a customer; |
| (b) | ensure that their branches or majority-owned subsidiaries that are established in the third country determine whether consent from their customers and, where applicable, their customers' beneficial owners, can be used to legally overcome restrictions or prohibitions referred to in point (a)(ii); |
|---|
| (c) | ensure that their branches or majority-owned subsidiaries that are established in the third country require their customers and, where applicable, their customers' beneficial owners, to give consent to overcome restrictions or prohibitions referred to in point (a)(ii) to the extent that this is compatible with the third country's law. |
|---|
- Where the consent referred to in point (c) of paragraph 1 is not feasible, credit institutions and financial institutions shall take additional measures as well as their standard anti-money laundering and countering the financing of terrorism measures, to manage the money laundering and terrorist financing.
Those additional measures shall include the additional measure set out in point (c) of Article 8 and one or more of the measures set out in points (a), (b), (d), (e) and (f) of that Article.
Where a credit institution or financial institution cannot effectively manage the money laundering and terrorist financing risk by applying the measures referred to in paragraphs 1 and 2, it shall:
| (a) | ensure that the branch or majority-owned subsidiary terminates the business relationship; |
|---|
| (b) | ensure that the branch or majority-owned subsidiary not carry out the occasional transaction; |
|---|
| (c) | close down some or all of the operations provided by their branch and majority- owned subsidiary established in the third country. |
|---|
- Credit institutions and financial institutions shall determine the extent of the additional measures referred to in paragraphs 2 and 3 on a risk-sensitive basis and be able to demonstrate to their competent authority that the extent of additional measures is appropriate in view of the money laundering and terrorist financing risk.
Article 4
- Where a third country's law prohibits or restricts the sharing or processing of customer data for anti-money laundering and countering the financing of terrorism purposes within the group, credit institutions and financial institution shall at least:
| (a) | inform the competent authority of the home Member State without undue delay and in any case no later than 28 days after identifying the third country of the following:(i)the name of the third country concerned;(ii)how the implementation of the third country's law prohibits or restricts the sharing or processing of customer data for anti-money laundering and countering the financing of terrorism purposes; |
|---|---|
| (i) | the name of the third country concerned; |
| (ii) | how the implementation of the third country's law prohibits or restricts the sharing or processing of customer data for anti-money laundering and countering the financing of terrorism purposes; |
| (b) | ensure that their branches or majority-owned subsidiaries that are established in the third country determine whether consent from their customers and, where applicable, their customers' beneficial owners, can be used to legally overcome restrictions or prohibitions referred to in point (a)(ii); |
|---|
| (c) | ensure that their branches or majority-owned subsidiaries that are established in the third country require their customers and, where applicable, their customers' beneficial owners, to provide consent to overcome restrictions or prohibitions referred to in point (a)(ii) to the extent that this is compatible with the third country's law. |
|---|
In cases where consent referred to in point (c) of paragraph 1 is not feasible, credit institutions and financial institutions shall take additional measures as well as their standard anti-money laundering and countering the financing of terrorism measures to manage risk. These additional measures shall include the additional measure set out in point (a) of Article 8 or the additional measure set out in point (c) of that Article. Where the money laundering and terrorist financing risk is sufficient to require further additional measures, credit and financial institutions shall apply one or more of the remaining additional measures set out in points (a) to (c) of Article 8.
Where a credit institution or financial institution cannot effectively manage the money laundering and terrorist financing risk by applying the measures referred to in paragraphs 1 and 2, it shall close down some or all of the operations provided by their branch and majority-owned subsidiary established in the third country.
Credit institutions and financial institutions shall determine the extent of the additional measures referred to in paragraphs 2 and 3 on a risk-sensitive basis and be able to demonstrate to their competent authority that the extent of additional measures is appropriate in view of the risk of money laundering and terrorist financing.
Article 5
- Where the third country's law prohibits or restricts the sharing of information referred to in Article 33(1) of Directive (EU) 2015/849 by branches and majority-owned subsidiaries established in the third country with other entities in their group, credit institutions and financial institutions shall at least:
| (a) | inform the competent authority of the home Member State without undue delay and in any case no later than 28 days after identifying the third country of the following:(i)the name of the third country concerned;(ii)how the implementation of the third country's law prohibits or restricts the sharing or processing of the content of information referred to in Article 33(1) of Directive (EU) 2015/849 identified by a branch and majority-owned subsidiary established in a third country with other entities in their group; |
|---|---|
| (i) | the name of the third country concerned; |
| (ii) | how the implementation of the third country's law prohibits or restricts the sharing or processing of the content of information referred to in Article 33(1) of Directive (EU) 2015/849 identified by a branch and majority-owned subsidiary established in a third country with other entities in their group; |
| (b) | require the branch or majority-owned subsidiary to provide relevant information to the credit institution's or financial institution's senior management so that it is able to assess the money laundering and terrorist financing risk associated with the operation of such a branch or majority-owned subsidiary and the impact this has on the group, such as:(i)the number of suspicious transactions reported within a set period;(ii)aggregated statistical data providing an overview of the circumstances that gave rise to suspicion. |
|---|---|
| (i) | the number of suspicious transactions reported within a set period; |
| (ii) | aggregated statistical data providing an overview of the circumstances that gave rise to suspicion. |
- Credit institutions and financial institutions shall take additional measures as well as their standard anti-money laundering and countering the financing of terrorism measures and the measures referred to in paragraph 1 to manage risk.
Those additional measures shall include one or more of the additional measures set out in points (a) to (c) and (g) to (i) of Article 8.
Where credit institutions and financial institutions cannot effectively manage the money laundering and terrorist financing risk by applying the measures referred to in paragraphs 1 and 2, they shall close down some or all of the operations provided by their branch and majority-owned subsidiary established in the third country.
Credit institutions and financial institutions shall determine the extent of the additional measures referred to in paragraphs 2 and 3 on a risk-sensitive basis and be able to demonstrate to their competent authority that the extent of additional measures is appropriate in view of the risk of money laundering and terrorist financing.
Article 6
Where the third country's law prohibits or restricts the transfer of data related to customers of a branch and majority-owned subsidiary established in a third country to a Member State for the purpose of supervision for anti-money laundering and countering the financing of terrorism, credit institutions and financial institutions shall at least:
| (a) | inform the competent authority of the home Member State without undue delay and in any case no later than 28 calendar days after identifying the third country of the following:(i)the name of the third country concerned;(ii)how the implementation of the third country's law prohibits or restricts the transfer of data related to customers for the purpose of supervision for anti-money laundering and countering the financing of terrorism; |
|---|---|
| (i) | the name of the third country concerned; |
| (ii) | how the implementation of the third country's law prohibits or restricts the transfer of data related to customers for the purpose of supervision for anti-money laundering and countering the financing of terrorism; |
| (b) | carry out enhanced reviews, including, where this is commensurate with the money laundering and terrorist financing risk associated with the operation of the branch or majority-owned subsidiary established in the third country, onsite checks or independent audits, to be satisfied that the branch or majority-owned subsidiary effectively implements group-wide policies and procedures and that it adequately identifies, assesses and manages the money laundering and terrorist financing risks; |
|---|
| (c) | provide the findings of the reviews referred to in point (b) to the competent authority of the home Member State upon request; |
|---|
| (d) | require the branch or majority-owned subsidiary established in the third country regularly to provide relevant information to the credit institution's or financial institution's senior management, including at least the following:(i)the number of high risk customers and aggregated statistical data providing an overview of the reasons why customers have been classified as high risk, such as politically exposed person status;(ii)the number of suspicious transactions identified and reported and aggregated statistical data providing an overview of the circumstances that gave rise to suspicion; |
|---|---|
| (i) | the number of high risk customers and aggregated statistical data providing an overview of the reasons why customers have been classified as high risk, such as politically exposed person status; |
| (ii) | the number of suspicious transactions identified and reported and aggregated statistical data providing an overview of the circumstances that gave rise to suspicion; |
| (e) | make the information referred to in point (d) available to the competent authority of the home Member State upon request. |
|---|
Article 7
- Where the third country's law prohibits or restricts the application of record-keeping measures equivalent to those specified in Chapter V of Directive (EU) 2015/849, credit institutions and financial institutions shall at least:
| (a) | inform the competent authority of the home Member State without undue delay and in any case no later than 28 days after identifying the third country of the following:(i)the name of the third country concerned;(ii)how the implementation of the third country's law prohibits or restricts the application of record-keeping measures equivalent to those laid down in Directive (EU) 2015/849; |
|---|---|
| (i) | the name of the third country concerned; |
| (ii) | how the implementation of the third country's law prohibits or restricts the application of record-keeping measures equivalent to those laid down in Directive (EU) 2015/849; |
| (b) | establish whether consent from the customer and, where applicable, their beneficial owner, can be used to legally overcome restrictions or prohibitions referred to in point (a)(ii); |
|---|
| (c) | ensure that their branches or majority-owned subsidiaries that are established in the third country require customers and, where applicable, their customers' beneficial owners, to provide consent to overcome restrictions or prohibitions referred to in point (a)(ii) to the extent that this is compatible with the third country's law. |
|---|
In cases where consent referred to in point (c) of paragraph 1 is not feasible, credit institutions and financial institutions shall take additional measures as well as their standard anti-money laundering and countering the financing of terrorism measures and the measures referred to in paragraph 1 to manage risk. These additional measures shall include one or more of the additional measures set out in points (a) to (c) and (j) of Article 8.
Credit and financial institutions shall determine the extent of the additional measures referred to in paragraph 2 on a risk-sensitive basis and be able to demonstrate to their competent authority that the extent of additional measures is appropriate in view of the risk of money laundering and terrorist financing.
Article 8
Credit institutions and financial institutions shall take the following additional measures pursuant to Article 3(2), Article 4(2), Article 5(2) and Article 7(2) respectively:
| (a) | ensuring that their branches or majority-owned subsidiaries that are established in the third country restrict the nature and type of financial products and services provided by the branch of majority-owned subsidiary in the third country to those that present a low money laundering and terrorist financing risk and have a low impact on the group's risk exposure; |
|---|
| (b) | ensuring that other entities of the same group do not rely on customer due diligence measures carried out by a branch or majority-owned subsidiary established in the third country, but instead carry out customer due diligence on any customer of a branch or majority-owned subsidiary established in third country who wishes to be provided with products or services by those other entities of the same group even if the conditions in Article 28 of Directive (EU) 2015/849 are met; |
|---|
| (c) | carrying out enhanced reviews, including, where this is commensurate with the money laundering and terrorist financing risk associated with the operation of the branch or majority-owned subsidiary established in the third country, onsite checks or independent audits, to be satisfied that the branch or majority-owned subsidiary effectively identifies, assesses and manages the money laundering and terrorist financing risks; |
|---|
| (d) | ensuring that their branches or majority-owned subsidiaries that are established in the third country seek the approval of the credit institution's or financial institution's senior management for the establishment and maintenance of higher-risk business relationships, or for carrying out a higher risk occasional transaction; |
|---|
| (e) | ensuring that their branches or majority-owned subsidiaries that are established in the third country determine the source and, where applicable, the destination of funds to be used in the business relationship or occasional transaction; |
|---|
| (f) | ensuring that their branches or majority-owned subsidiaries that are established in the third country carry out enhanced ongoing monitoring of the business relationship including enhanced transaction monitoring, until the branches or majority-owned subsidiaries are reasonably satisfied that they understand the money laundering and terrorist financing risk associated with the business relationship; |
|---|
| (g) | ensuring that their branches or majority-owned subsidiaries that are established in the third country share with the credit institution or financial institution underlying suspicious transaction report information that gave rise to the knowledge, suspicion or reasonable grounds to suspect that money laundering and terrorist financing was being attempted or had occurred, such as facts, transactions, circumstances and documents upon which suspicions are based, including personal information to the extent that this is possible under the third country's law; |
|---|
| (h) | carrying out enhanced ongoing monitoring on any customer and, where applicable, beneficial owner of a customer of a branch or majority-owned subsidiary established in the third country who is known to have been the subject of suspicious transaction reports by other entities of the same group; |
|---|
| (i) | ensuring that their branches or majority-owned subsidiaries that are established in the third country has effective systems and controls in place to identify and report suspicious transactions; |
|---|
| (j) | ensuring that their branches or majority-owned subsidiaries that are established in the third country keep the risk profile and due diligence information related to a customer of a branch or majority-owned subsidiary established in the third country up to date and secure as long as legally possible, and in any case for at least the duration of the business relationship. |
|---|
Article 9
This Regulation shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union.
It shall apply from 3 September 2019.
Provenance and validity dates, identifier, hash
| as of | 2019-01-31 → this version applied |
| valid | 2019-01-31 → open publisher-asserted |
| type | REG_DEL Commission Delegated Regulation (EU) 2019/758 of 31 January 2019 supplementing Directive (EU) 2015/849 of the European Parliament and of the Council with regard to regulatory technical standards for the minimum action and the type of additional measures credit and financial institutions must take to mitigate money laundering and terrorist financing risk in certain third countries (Text with EEA relevance.) |
| language | en |
| published | 2019-01-31 |
| lex_id | eu-eurlex:32019r0758:2019-01-31 |
| record sha256 | f392b1bae3d37cd6c1e688b3ac823da48524f51ebc05c7d41b2379bab32a5c4e |
New here? What am I looking at?
This is a consolidated text: the original law with every later amendment merged in, as the official publisher produced it for a given date. Laws are amended constantly, so “the law” has no single text, only a text per date. That date is the banner above.
It has no legal force. Only the version published in the official gazette (Mémorial / Official Journal) is authentic, the publishers say so themselves, and so do we. Lex reproduces their text without altering a byte, and links the source on every page. This is legal information, never legal advice: it reports what the text said, never what it means for your situation.
“Valid from → to” = the window in which this text applied. “Open” = still current as far as the publisher has consolidated. Each article carries its own hash so you can prove it was not tampered with , here is how.
timeline next version (2019-01-31) →
| tier | A, publisher-supplied validity dates |
| history begins | publisher |
| index built | 2026-08-07T19:46:23Z · corpus 8d5e859 |
| stamp signature | valid (ECDSA-P256) |