There are currently no known outstanding effects for the The Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017, Section 41.
41.—(1) Any personal data obtained by relevant persons for the purposes of these Regulations may only be processed for the purposes of preventing [F1money laundering, terrorist financing or proliferation financing].
F2(2) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
(3) No other use may be made of personal data referred to in paragraph (1), unless—
(a)use of the data is permitted by or under an enactment other than these Regulations [F3or the [F4UK GDPR]]; or
(b)the relevant person has obtained the consent of the data subject to the proposed use of the data.
F5(4) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F5(5) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
[F6(6) Before establishing a business relationship or entering into an occasional transaction with a new customer, as well as providing the customer with the information required under Article 13 of the [F7UK GDPR] (information to be provided where personal data are collected from the data subject), relevant persons must provide the customer with a statement that any personal data received from the customer will be processed only—
(a)for the purposes of preventing [F8money laundering, terrorist financing or proliferation financing], or
(b)as permitted under paragraph (3).
(7) In Article 6(1) of the [F9UK GDPR] (lawfulness of processing), the reference in point (e) to processing of personal data that is necessary for the performance of a task carried out in the public interest includes processing of personal data in accordance with these Regulations that is necessary for the prevention of [F10money laundering, terrorist financing or proliferation financing].
(8) In the case of sensitive processing of personal data for the purposes of the prevention of [F11money laundering, terrorist financing or proliferation financing], section 10 of, and Schedule 1 to, the Data Protection Act 2018 make provision about when the processing meets a requirement in Article 9(2) or 10 of the [F12UK GDPR] for authorisation under the law of the United Kingdom (see, for example, paragraphs 10, 11 and 12 of that Schedule).
(9) In this regulation—
“data subject” has the same meaning as in the Data Protection Act 2018 (see section 3 of that Act);
“personal data” and “processing” have the same meaning as in Parts 5 to 7 of that Act (see section 3(2), (4) and (14) of that Act);
“sensitive processing” means the processing of personal data described in Article 9(1) or 10 of the [F13UK GDPR] (special categories of personal data and personal data relating to criminal convictions and offences etc).]
Textual Amendments
F1Words in reg. 41(1) substituted (1.9.2022) by The Money Laundering and Terrorist Financing (Amendment) (No. 2) Regulations 2022 (S.I. 2022/860), regs. 1(5), 6(8)(c)
F2Reg. 41(2) omitted (25.5.2018) by virtue of Data Protection Act 2018 (c. 12), s. 212(1), Sch. 19 para. 415(2) (with ss. 117, 209, 210); S.I. 2018/625, reg. 2(1)(g)
F3Words in reg. 41(3)(a) inserted (25.5.2018) by Data Protection Act 2018 (c. 12), s. 212(1), Sch. 19 para. 415(3) (with ss. 117, 209, 210); S.I. 2018/625, reg. 2(1)(g)
F4Words in reg. 41(3)(a) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 3 para. 110 (with Sch. 3 para. 112); 2020 c. 1, Sch. 5 para. 1(1)
F5Reg. 41(4)(5) omitted (25.5.2018) by virtue of Data Protection Act 2018 (c. 12), s. 212(1), Sch. 19 para. 415(4) (with ss. 117, 209, 210); S.I. 2018/625, reg. 2(1)(g)
F6Reg. 41(6)-(9) inserted (25.5.2018) by Data Protection Act 2018 (c. 12), s. 212(1), Sch. 19 para. 415(5) (with ss. 117, 209, 210); S.I. 2018/625, reg. 2(1)(g)
F7Words in reg. 41(6) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 3 para. 110 (with Sch. 3 para. 112); 2020 c. 1, Sch. 5 para. 1(1)
F8Words in reg. 41(6)(a) substituted (1.9.2022) by The Money Laundering and Terrorist Financing (Amendment) (No. 2) Regulations 2022 (S.I. 2022/860), regs. 1(5), 6(8)(c)
F9Words in reg. 41(7) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 3 para. 110 (with Sch. 3 para. 112); 2020 c. 1, Sch. 5 para. 1(1)
F10Words in reg. 41(7) substituted (1.9.2022) by The Money Laundering and Terrorist Financing (Amendment) (No. 2) Regulations 2022 (S.I. 2022/860), regs. 1(5), 6(8)(c)
F11Words in reg. 41(8) substituted (1.9.2022) by The Money Laundering and Terrorist Financing (Amendment) (No. 2) Regulations 2022 (S.I. 2022/860), regs. 1(5), 6(8)(c)
F12Words in reg. 41(8) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 3 para. 110 (with Sch. 3 para. 112); 2020 c. 1, Sch. 5 para. 1(1)
F13Words in reg. 41(9) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 3 para. 110 (with Sch. 3 para. 112); 2020 c. 1, Sch. 5 para. 1(1)
All content is available under the Open Government Licence v3.0 except where otherwise stated. This site additionally contains content derived from EUR-Lex, reused under the terms of the Commission Decision 2011/833/EU on the reuse of documents from the EU institutions. For more information see the EUR-Lex public statement on re-use.
