The Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017

Publication: the Commissioners U.K.

85.—(1) Where the Commissioners give a notice under regulation 83, the Commissioners must publish on their official website such information about the matter to which the notice relates as they consider appropriate, subject to paragraphs (2) to (8).

(2) Where the Commissioners publish information under paragraph (1) or (3) about a matter to which a notice under regulation 83 relates and the person to whom the notice is given refers the matter to the tribunal (see regulation 99), the Commissioners must, without undue delay, publish on their official website information about the status of the appeal and its outcome.

(3) Subject to paragraph (4), (5) and (8) where the Commissioners give a notice under regulation 83, they must, without undue delay, publish on their official website information on the type and nature of the breach and the identity of the person on whom the sanction or measure is imposed.

(4) Subject to paragraph (7) and (8), information about a matter to which a notice under regulation 83 relates must be published in accordance with paragraph (5) where—

(a) the Commissioners consider it to be disproportionate to publish the identity of a legal person on whom the sanction or measure is imposed following an assessment by the Commissioners of the proportionality of publishing the person's identity;

(b) the Commissioners consider it to be disproportionate to publish the personal data of the individual on whom the sanction or measure is imposed following an assessment by the Commissioners of the proportionality of publishing the personal data; or

(c) the publication of information under paragraph (3) would jeopardise the stability of the financial markets or an ongoing investigation.

(5) Where paragraph (4) applies, the Commissioners must—

(a) defer the publication of the information about a matter to which a notice under regulation 83 relates until such time as paragraph (4) ceases to apply; or

(b) publish the information on an anonymous basis if publication on that basis would ensure the effective protection of any anonymised personal data in the information.

(6) Where paragraph (5)(b) applies, the Commissioners may make such arrangements as to the publication of information (including as to the timing of publication) as are necessary to preserve the anonymity of the person on whom the sanction or measure is imposed.

(7) The Commissioners may make arrangements for the postponed publication of personal data that is anonymised in information they publish under paragraph (5)(b) if—

(a) the publication of the data is postponed for a reasonable period of time; and

(b) the Commissioners consider that paragraphs (4)(b) and (5)(b) will no longer apply in respect of that data at the time of the postponed publication.

(8) Information about a matter to which a notice relates must not be published if publication in accordance with paragraph under paragraph (5) is considered by the Commissioners insufficient to ensure—

(a) that the stability of the financial markets would not be put in jeopardy; or

(b) that the publication of the information would be proportionate with regard to sanctions or measures which are considered by the Commissioners to be of a minor nature.

(9) Where the Commissioners publish information in accordance with paragraphs (1) to (7), the Commissioners must ensure that the information remains on their official website for at least five years, unless the information is personal data and [F1 the data protection legislation] requires the information to be retained for a different period.

[F2 (10) For the purposes of this regulation, “personal data” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(2) and (14) of that Act).]

Textual Amendments

F1 Words in reg. 85(9) substituted (25.5.2018) by Data Protection Act 2018 (c. 12), s. 212(1), Sch. 19 para. 417(2) (with ss. 117, 209, 210); S.I. 2018/625, reg. 2(1)(g)

F2 Reg. 85(10) substituted (25.5.2018) by Data Protection Act 2018 (c. 12), s. 212(1), Sch. 19 para. 417(3) (with ss. 117, 209, 210); S.I. 2018/625, reg. 2(1)(g)