Directive (EU) 2015/849 is amended as follows:

1. (1)

   point (3) of Article 2(1) is amended as follows:

   1. (a)

      point (a) is replaced by the following:

      1. ‘(a)

         auditors, external accountants and tax advisors, and any other person that undertakes to provide, directly or by means of other persons to which that other person is related, material aid, assistance or advice on tax matters as principal business or professional activity;’;

   2. (b)

      point (d) is replaced by the following:

      1. ‘(d)

         estate agents including when acting as intermediaries in the letting of immovable property, but only in relation to transactions for which the monthly rent amounts to EUR 10 000 or more;’;

   3. (c)

      the following points are added:

      1. ‘(g)

         providers engaged in exchange services between virtual currencies and fiat currencies;

      2. (h)

         custodian wallet providers;

      3. (i)

         persons trading or acting as intermediaries in the trade of works of art, including when this is carried out by art galleries and auction houses, where the value of the transaction or a series of linked transactions amounts to EUR 10 000 or more;

      4. (j)

         persons storing, trading or acting as intermediaries in the trade of works of art when this is carried out by free ports, where the value of the transaction or a series of linked transactions amounts to EUR 10 000 or more.’;

2. (2)

   Article 3 is amended as follows:

   1. (a)

      point (4) is amended as follows:

      1. (i)

         point (a) is replaced by the following:

         1. ‘(a)
            terrorist offences, offences related to a terrorist group and offences related to terrorist activities as set out in Titles II and III of Directive (EU) 2017/54115;’;

      2. (ii)

         point (c) is replaced by the following:

         1. ‘(c)
            the activities of criminal organisations as defined in Article 1(1) of Council Framework Decision 2008/841/JHA16;’;

   2. (b)

      in point (6), point (b) is replaced by the following:

      1. ‘(b)

         in the case of trusts, all following persons:

         1. (i)

            the settlor(s);

         2. (ii)

            the trustee(s);

         3. (iii)

            the protector(s), if any;

         4. (iv)

            the beneficiaries or where the individuals benefiting from the legal arrangement or entity have yet to be determined, the class of persons in whose main interest the legal arrangement or entity is set up or operates;

         5. (v)

            any other natural person exercising ultimate control over the trust by means of direct or indirect ownership or by other means;’;

   3. (c)

      point (16) is replaced by the following:

      1. ‘(16)

         “electronic money” means electronic money as defined in point (2) of Article 2 of Directive 2009/110/EC, but excluding monetary value as referred to in Article 1(4) and (5) of that Directive;’;

   4. (d)

      the following points are added:

      1. ‘(18)

         “virtual currencies” means a digital representation of value that is not issued or guaranteed by a central bank or a public authority, is not necessarily attached to a legally established currency and does not possess a legal status of currency or money, but is accepted by natural or legal persons as a means of exchange and which can be transferred, stored and traded electronically;

      2. (19)

         “custodian wallet provider” means an entity that provides services to safeguard private cryptographic keys on behalf of its customers, to hold, store and transfer virtual currencies.’;

3. (3)

   Article 6 is amended as follows:

   1. (a)

      in paragraph (2), points (b) and (c) are replaced by the following:

      1. ‘(b)

         the risks associated with each relevant sector including, where available, estimates of the monetary volumes of money laundering provided by Eurostat for each of those sectors;

      2. (c)

         the most widespread means used by criminals to launder illicit proceeds, including, where available, those particularly used in transactions between Member States and third countries, independently of the identification of a third country as high-risk pursuant to Article 9(2).’;

   2. (b)

      paragraph (3) is replaced by the following:

      ‘3.

      The Commission shall make the report referred to in paragraph 1 available to Member States and obliged entities in order to assist them to identify, understand, manage and mitigate the risk of money laundering and terrorist financing, and to allow other stakeholders, including national legislators, the European Parliament, the European Supervisory Authorities (ESAs), and representatives from FIUs, to better understand the risks. Reports shall be made public at the latest six months after having been made available to Member States, except for the elements of the reports which contain classified information.’;

4. (4)

   Article 7 is amended as follows:

   1. (a)

      in paragraph (4), the following points are added:

      1. ‘(f)

         report the institutional structure and broad procedures of their AML/CFT regime, including, inter alia, the FIU, tax authorities and prosecutors, as well as the allocated human and financial resources to the extent that this information is available;

      2. (g)

         report on national efforts and resources (labour forces and budget) allocated to combat money laundering and terrorist financing.’;

   2. (b)

      paragraph 5 is replaced by the following:

      ‘5.

      Member States shall make the results of their risk assessments, including their updates, available to the Commission, the ESAs and the other Member States. Other Member States may provide relevant additional information, where appropriate, to the Member State carrying out the risk assessment. A summary of the assessment shall be made publicly available. That summary shall not contain classified information.’;

5. (5)

   Article 9 is amended as follows:

   1. (a)

      paragraph 2 is replaced by the following:

      ‘2.

      The Commission is empowered to adopt delegated acts in accordance with Article 64 in order to identify high-risk third countries, taking into account strategic deficiencies in particular in the following areas:

      (a)

      the legal and institutional AML/CFT framework of the third country, in particular:

      1. (i)

         the criminalisation of money laundering and terrorist financing;

      2. (ii)

         measures relating to customer due diligence;

      3. (iii)

         requirements relating to record-keeping;

      4. (iv)

         requirements to report suspicious transactions;

      5. (v)

         the availability of accurate and timely information of the beneficial ownership of legal persons and arrangements to competent authorities;

      (b)

      the powers and procedures of the third country’s competent authorities for the purposes of combating money laundering and terrorist financing including appropriately effective, proportionate and dissuasive sanctions, as well as the third country’s practice in cooperation and exchange of information with Member States’ competent authorities;

      (c)

      the effectiveness of the third country’s AML/CFT system in addressing money laundering or terrorist financing risks.’;

   2. (b)

      paragraph 4 is replaced by the following:

      ‘4.

      The Commission, when drawing up the delegated acts referred to in paragraph 2, shall take into account relevant evaluations, assessments or reports drawn up by international organisations and standard setters with competence in the field of preventing money laundering and combating terrorist financing.’;

6. (6)

   in Article 10, paragraph 1 is replaced by the following:

   ‘1.

   Member States shall prohibit their credit institutions and financial institutions from keeping anonymous accounts, anonymous passbooks or anonymous safe-deposit boxes. Member States shall, in any event, require that the owners and beneficiaries of existing anonymous accounts, anonymous passbooks or anonymous safe-deposit boxes be subject to customer due diligence measures no later than 10 January 2019 and in any event before such accounts, passbooks or deposit boxes are used in any way.’;

7. (7)

   Article 12 is amended as follows:

   1. (a)

      paragraph 1 is amended as follows:

      1. (i)

         in the first subparagraph, points (a) and (b) are replaced by the following:

         1. ‘(a)

            the payment instrument is not reloadable, or has a maximum monthly payment transactions limit of EUR 150 which can be used only in that Member State;

         2. (b)

            the maximum amount stored electronically does not exceed EUR 150;’;

      2. (ii)

         the second subparagraph is deleted;

   2. (b)

      paragraph 2 is replaced by the following:

      ‘2.

      Member States shall ensure that the derogation provided for in paragraph 1 of this Article is not applicable in the case of redemption in cash or cash withdrawal of the monetary value of the electronic money where the amount redeemed exceeds EUR 50, or in the case of remote payment transactions as defined in point (6) of Article 4 of the Directive (EU) 2015/2366 of the European Parliament and of the Council17 where the amount paid exceeds EUR 50 per transaction.’;

   3. (c)

      the following paragraph is added:

      ‘3.

      Member States shall ensure that credit institutions and financial institutions acting as acquirers only accept payments carried out with anonymous prepaid cards issued in third countries where such cards meet requirements equivalent to those set out in paragraphs 1 and 2.

      Member States may decide not to accept on their territory payments carried out by using anonymous prepaid cards.’;

8. (8)

   Article 13(1) is amended as follows:

   1. (a)

      point (a) is replaced by the following:

      1. ‘(a)
         identifying the customer and verifying the customer’s identity on the basis of documents, data or information obtained from a reliable and independent source, including, where available, electronic identification means, relevant trust services as set out in Regulation (EU) No 910/2014 of the European Parliament and of the Council18 or any other secure, remote or electronic identification process regulated, recognised, approved or accepted by the relevant national authorities;’;

   2. (b)

      at the end of point (b), the following sentence is added:

      ‘Where the beneficial owner identified is the senior managing official as referred to in Article 3(6)(a) (ii), obliged entities shall take the necessary reasonable measures to verify the identity of the natural person who holds the position of senior managing official and shall keep records of the actions taken as well as any difficulties encountered during the verification process.’;

9. (9)

   Article 14 is amended as follows:

   1. (a)

      in paragraph 1, the following sentence is added:

      ‘Whenever entering into a new business relationship with a corporate or other legal entity, or a trust or a legal arrangement having a structure or functions similar to trusts (“similar legal arrangement”) which are subject to the registration of beneficial ownership information pursuant to Article 30 or 31, the obliged entities shall collect proof of registration or an excerpt of the register.’;

   2. (b)

      paragraph 5 is replaced by the following:

      ‘5.

      Member States shall require that obliged entities apply the customer due diligence measures not only to all new customers but also at appropriate times to existing customers on a risk-sensitive basis, or when the relevant circumstances of a customer change, or when the obliged entity has any legal duty in the course of the relevant calendar year to contact the customer for the purpose of reviewing any relevant information relating to the beneficial owner(s), or if the obliged entity has had this duty under Council Directive 2011/16/EU19.’;

10. (10)

    Article 18 is amended as follows:

    1. (a)

       in paragraph 1, the first subparagraph is replaced by the following:

       ‘In the cases referred to in Articles 18a to 24, as well as in other cases of higher risk that are identified by Member States or obliged entities, Member States shall require obliged entities to apply enhanced customer due diligence measures to manage and mitigate those risks appropriately.’;

    2. (b)

       paragraph 2 is replaced by the following:

       ‘2.

       Member States shall require obliged entities to examine, as far as reasonably possible, the background and purpose of all transactions that fulfil at least one of the following conditions:

       1. (i)

          they are complex transactions;

       2. (ii)

          they are unusually large transactions;

       3. (iii)

          they are conducted in an unusual pattern;

       4. (iv)

          they do not have an apparent economic or lawful purpose.

       In particular, obliged entities shall increase the degree and nature of monitoring of the business relationship, in order to determine whether those transactions or activities appear suspicious.’;

11. (11)

    The following Article is inserted:

    ‘Article 18a

    1.

    With respect to business relationships or transactions involving high-risk third countries identified pursuant to Article 9(2), Member States shall require obliged entities to apply the following enhanced customer due diligence measures:

    (a)

    obtaining additional information on the customer and on the beneficial owner(s);

    (b)

    obtaining additional information on the intended nature of the business relationship;

    (c)

    obtaining information on the source of funds and source of wealth of the customer and of the beneficial owner(s);

    (d)

    obtaining information on the reasons for the intended or performed transactions;

    (e)

    obtaining the approval of senior management for establishing or continuing the business relationship;

    (f)

    conducting enhanced monitoring of the business relationship by increasing the number and timing of controls applied, and selecting patterns of transactions that need further examination.

    Member States may require obliged entities to ensure, where applicable, that the first payment be carried out through an account in the customer’s name with a credit institution subject to customer due diligence standards that are not less robust than those laid down in this Directive.

    2.

    In addition to the measures provided in paragraph 1 and in compliance with the Union’s international obligations, Member States shall require obliged entities to apply, where applicable, one or more additional mitigating measures to persons and legal entities carrying out transactions involving high-risk third countries identified pursuant to Article 9(2). Those measures shall consist of one or more of the following:

    (a)

    the application of additional elements of enhanced due diligence;

    (b)

    the introduction of enhanced relevant reporting mechanisms or systematic reporting of financial transactions;

    (c)

    the limitation of business relationships or transactions with natural persons or legal entities from the third countries identified as high risk countries pursuant to Article 9(2).

    3.

    In addition to the measures provided in paragraph 1, Member States shall apply, where applicable, one or several of the following measures with regard to high-risk third countries identified pursuant to Article 9(2) in compliance with the Union’s international obligations:

    (a)

    refusing the establishment of subsidiaries or branches or representative offices of obliged entities from the country concerned, or otherwise taking into account the fact that the relevant obliged entity is from a country that does not have adequate AML/CFT regimes;

    (b)

    prohibiting obliged entities from establishing branches or representative offices in the country concerned, or otherwise taking into account the fact that the relevant branch or representative office would be in a country that does not have adequate AML/CFT regimes;

    (c)

    requiring increased supervisory examination or increased external audit requirements for branches and subsidiaries of obliged entities located in the country concerned;

    (d)

    requiring increased external audit requirements for financial groups with respect to any of their branches and subsidiaries located in the country concerned;

    (e)

    requiring credit and financial institutions to review and amend, or if necessary terminate, correspondent relationships with respondent institutions in the country concerned.

    4.

    When enacting or applying the measures set out in paragraphs 2 and 3, Member States shall take into account, as appropriate relevant evaluations, assessments or reports drawn up by international organisations and standard setters with competence in the field of preventing money laundering and combating terrorist financing, in relation to the risks posed by individual third countries.

    5.

    Member States shall notify the Commission before enacting or applying the measures set out in paragraphs 2 and 3.’;

12. (12)

    in Article 19, the introductory part is replaced by the following:

    ‘With respect to cross-border correspondent relationships involving the execution of payments with a third-country respondent institution, Member States shall, in addition to the customer due diligence measures laid down in Article 13, require their credit institutions and financial institutions when entering into a business relationship to:’;

13. (13)

    The following Article is inserted:

    ‘Article 20a

    1.

    Each Member State shall issue and keep up to date a list indicating the exact functions which, according to national laws, regulations and administrative provisions, qualify as prominent public functions for the purposes of point (9) of Article 3. Member States shall request each international organisation accredited on their territories to issue and keep up to date a list of prominent public functions at that international organisation for the purposes of point (9) of Article 3. Those lists shall be sent to the Commission and may be made public.

    2.

    The Commission shall compile and keep up to date the list of the exact functions which qualify as prominent public functions at the level of Union institutions and bodies. That list shall also include any function which may be entrusted to representatives of third countries and of international bodies accredited at Union level.

    3.

    The Commission shall assemble, based on the lists provided for in paragraphs 1 and 2 of this Article, a single list of all prominent public functions for the purposes of point (9) of Article 3. That single list shall be made public.

    4.

    Functions included in the list referred to in paragraph 3 of this Article shall be dealt with in accordance with the conditions laid down in Article 41(2).’;

14. (14)

    in Article 27, paragraph 2 is replaced by the following:

    ‘2.

    Member States shall ensure that obliged entities to which the customer is referred take adequate steps to ensure that the third party provides immediately, upon request, relevant copies of identification and verification data, including, where available, data obtained through electronic identification means, relevant trust services as set out in Regulation (EU) No 910/2014, or any other secure, remote or electronic, identification process regulated, recognised, approved or accepted by the relevant national authorities.’;

15. (15)

    Article 30 is amended as follows:

    1. (a)

       paragraph 1 is amended as follows:

       1. (i)

          the first subparagraph is replaced by the following:

          ‘Member States shall ensure that corporate and other legal entities incorporated within their territory are required to obtain and hold adequate, accurate and current information on their beneficial ownership, including the details of the beneficial interests held. Member States shall ensure that breaches of this Article are subject to effective, proportionate and dissuasive measures or sanctions.’;

       2. (ii)

          the following subparagraph is added:

          ‘Member States shall require that the beneficial owners of corporate or other legal entities, including through shares, voting rights, ownership interest, bearer shareholdings or control via other means, provide those entities with all the information necessary for the corporate or other legal entity to comply with the requirements in the first subparagraph.’;

    2. (b)

       paragraph 4 is replaced by the following:

       ‘4.

       Member States shall require that the information held in the central register referred to in paragraph 3 is adequate, accurate and current, and shall put in place mechanisms to this effect. Such mechanisms shall include requiring obliged entities and, if appropriate and to the extent that this requirement does not interfere unnecessarily with their functions, competent authorities to report any discrepancies they find between the beneficial ownership information available in the central registers and the beneficial ownership information available to them. In the case of reported discrepancies, Member States shall ensure that appropriate actions be taken to resolve the discrepancies in a timely manner and, if appropriate, a specific mention be included in the central register in the meantime.’;

    3. (c)

       paragraph 5 is replaced by the following:

       ‘5.

       Member States shall ensure that the information on the beneficial ownership is accessible in all cases to:

       (a)

       competent authorities and FIUs, without any restriction;

       (b)

       obliged entities, within the framework of customer due diligence in accordance with Chapter II;

       (c)

       any member of the general public.

       The persons referred to in point (c) shall be permitted to access at least the name, the month and year of birth and the country of residence and nationality of the beneficial owner as well as the nature and extent of the beneficial interest held.

       Member States may, under conditions to be determined in national law, provide for access to additional information enabling the identification of the beneficial owner. That additional information shall include at least the date of birth or contact details in accordance with data protection rules.’;

    4. (d)

       the following paragraph is inserted:

       ‘5a.

       Member States may choose to make the information held in their national registers referred to in paragraph 3 available on the condition of online registration and the payment of a fee, which shall not exceed the administrative costs of making the information available, including costs of maintenance and developments of the register.’;

    5. (e)

       paragraph 6 is replaced by the following:

       ‘6.

       Member States shall ensure that competent authorities and FIUs have timely and unrestricted access to all information held in the central register referred to in paragraph 3 without alerting the entity concerned. Member States shall also allow timely access by obliged entities when taking customer due diligence measures in accordance with Chapter II.

       Competent authorities granted access to the central register referred to in paragraph 3 shall be those public authorities with designated responsibilities for combating money laundering or terrorist financing, as well as tax authorities, supervisors of obliged entities and authorities that have the function of investigating or prosecuting money laundering, associated predicate offences and terrorist financing, tracing and seizing or freezing and confiscating criminal assets.’;

    6. (f)

       paragraph 7 is replaced by the following:

       ‘7.

       Member States shall ensure that competent authorities and FIUs are able to provide the information referred to in paragraphs 1 and 3 to the competent authorities and to the FIUs of other Member States in a timely manner and free of charge.’;

    7. (g)

       paragraphs 9 and 10 are replaced by the following:

       ‘9.

       In exceptional circumstances to be laid down in national law, where the access referred to in points (b) and (c) of the first subparagraph of paragraph 5 would expose the beneficial owner to disproportionate risk, risk of fraud, kidnapping, blackmail, extortion, harassment, violence or intimidation, or where the beneficial owner is a minor or otherwise legally incapable, Member States may provide for an exemption from such access to all or part of the information on the beneficial ownership on a case-by-case basis. Member States shall ensure that these exemptions are granted upon a detailed evaluation of the exceptional nature of the circumstances. Rights to an administrative review of the exemption decision and to an effective judicial remedy shall be guaranteed. A Member State that has granted exemptions shall publish annual statistical data on the number of exemptions granted and reasons stated and report the data to the Commission.

       Exemptions granted pursuant to the first subparagraph of this paragraph shall not apply to credit institutions and financial institutions, or to the obliged entities referred to in point (3)(b) of Article 2(1) that are public officials.

       10.

       Member States shall ensure that the central registers referred to in paragraph 3 of this Article are interconnected via the European Central Platform established by Article 22(1) of Directive (EU) 2017/1132 of the European Parliament and of the Council20. The connection of the Member States’ central registers to the platform shall be set up in accordance with the technical specifications and procedures established by implementing acts adopted by the Commission in accordance with Article 24 of Directive (EU) 2017/1132 and with Article 31a of this Directive.

       Member States shall ensure that the information referred to in paragraph 1 of this Article is available through the system of interconnection of registers established by Article 22(1) of Directive (EU) 2017/1132, in accordance with Member States’ national laws implementing paragraphs 5, 5a and 6 of this Article.

       The information referred to in paragraph 1 shall be available through the national registers and through the system of interconnection of registers for at least five years and no more than 10 years after the corporate or other legal entity has been struck off from the register. Member States shall cooperate among themselves and with the Commission in order to implement the different types of access in accordance with this Article.’;

16. (16)

    Article 31 is amended as follows:

    1. (a)

       paragraph 1 is replaced by the following:

       ‘1.

       Member States shall ensure that this Article applies to trusts and other types of legal arrangements, such as, inter alia, fiducie, certain types of Treuhand or fideicomiso, where such arrangements have a structure or functions similar to trusts. Member States shall identify the characteristics to determine where legal arrangements have a structure or functions similar to trusts with regard to such legal arrangements governed under their law.

       Each Member State shall require that trustees of any express trust administered in that Member State obtain and hold adequate, accurate and up-to-date information on beneficial ownership regarding the trust. That information shall include the identity of:

       (a)

       the settlor(s);

       (b)

       the trustee(s);

       (c)

       the protector(s) (if any);

       (d)

       the beneficiaries or class of beneficiaries;

       (e)

       any other natural person exercising effective control of the trust.

       Member States shall ensure that breaches of this Article are subject to effective, proportionate and dissuasive measures or sanctions.’;

    2. (b)

       paragraph 2 is replaced by the following:

       ‘2.

       Member States shall ensure that trustees or persons holding equivalent positions in similar legal arrangements as referred to in paragraph 1 of this Article, disclose their status and provide the information referred to in paragraph 1 of this Article to obliged entities in a timely manner, where, as a trustee or as person holding an equivalent position in a similar legal arrangement, they form a business relationship or carry out an occasional transaction above the thresholds set out in points (b), (c) and (d) of Article 11.’;

    3. (c)

       the following paragraph is inserted:

       ‘3a.

       Member States shall require that the beneficial ownership information of express trusts and similar legal arrangements as referred to in paragraph 1 shall be held in a central beneficial ownership register set up by the Member State where the trustee of the trust or person holding an equivalent position in a similar legal arrangement is established or resides.

       Where the place of establishment or residence of the trustee of the trust or person holding an equivalent position in similar legal arrangement is outside the Union, the information referred to in paragraph 1 shall be held in a central register set up by the Member State where the trustee of the trust or person holding an equivalent position in a similar legal arrangement enters into a business relationship or acquires real estate in the name of the trust or similar legal arrangement.

       Where the trustees of a trust or persons holding equivalent positions in a similar legal arrangement are established or reside in different Member States, or where the trustee of the trust or person holding an equivalent position in a similar legal arrangement enters into multiple business relationships in the name of the trust or similar legal arrangement in different Member States, a certificate of proof of registration or an excerpt of the beneficial ownership information held in a register by one Member State may be considered as sufficient to consider the registration obligation fulfilled.’;

    4. (d)

       paragraph 4 is replaced by the following:

       ‘4.

       Member States shall ensure that the information on the beneficial ownership of a trust or a similar legal arrangement is accessible in all cases to:

       (a)

       competent authorities and FIUs, without any restriction;

       (b)

       obliged entities, within the framework of customer due diligence in accordance with Chapter II;

       (c)

       any natural or legal person that can demonstrate a legitimate interest;

       (d)

       any natural or legal person that files a written request in relation to a trust or similar legal arrangement which holds or owns a controlling interest in any corporate or other legal entity other than those referred to in Article 30(1), through direct or indirect ownership, including through bearer shareholdings, or through control via other means.

       The information accessible to natural or legal persons referred to in points (c) and (d) of the first subparagraph shall consist of the name, the month and year of birth and the country of residence and nationality of the beneficial owner, as well as nature and extent of beneficial interest held.

       Member States may, under conditions to be determined in national law, provide for access of additional information enabling the identification of the beneficial owner That additional information shall include at least the date of birth or contact details, in accordance with data protection rules. Member States may allow for wider access to the information held in the register in accordance with their national law.

       Competent authorities granted access to the central register referred to in paragraph 3a shall be public authorities with designated responsibilities for combating money laundering or terrorist financing, as well as tax authorities, supervisors of obliged entities and authorities that have the function of investigating or prosecuting money laundering, associated predicate offences and terrorist financing, tracing, and seizing or freezing and confiscating criminal assets.’;

    5. (e)

       the following paragraph is inserted:

       ‘4a.

       Member States may choose to make the information held in their national registers referred to in paragraph 3a available on the condition of online registration and the payment of a fee, which shall not exceed the administrative costs of making the information available, including costs of maintenance and developments of the register.’;

    6. (f)

       paragraph 5 is replaced by the following:

       ‘5.

       Member States shall require that the information held in the central register referred to in paragraph 3a is adequate, accurate and current, and shall put in place mechanisms to this effect. Such mechanisms shall include requiring obliged entities and, if appropriate and to the extent that this requirement does not interfere unnecessarily with their functions, competent authorities to report any discrepancies they find between the beneficial ownership information available in the central registers and the beneficial ownership information available to them. In the case of reported discrepancies Member States shall ensure that appropriate actions be taken to resolve the discrepancies in a timely manner and, if appropriate, a specific mention be included in the central register in the meantime.’;

    7. (g)

       paragraph 7 is replaced by the following:

       ‘7.

       Member States shall ensure that competent authorities and FIUs are able to provide the information referred to in paragraphs 1 and 3 to the competent authorities and to the FIUs of other Member States in a timely manner and free of charge.’;

    8. (h)

       the following paragraph is inserted:

       ‘7a.

       In exceptional circumstances to be laid down in national law, where the access referred to in points (b), (c) and (d) of the first subparagraph of paragraph 4 would expose the beneficial owner to disproportionate risk, risk of fraud, kidnapping, blackmail, extortion, harassment, violence or intimidation, or where the beneficial owner is a minor or otherwise legally incapable, Member States may provide for an exemption from such access to all or part of the information on the beneficial ownership on a case-by-case basis. Member States shall ensure that these exemptions are granted upon a detailed evaluation of the exceptional nature of the circumstances. Rights to an administrative review of the exemption decision and to an effective judicial remedy shall be guaranteed. A Member State that has granted exemptions shall publish annual statistical data on the number of exemptions granted and reasons stated and report the data to the Commission.

       Exemptions granted pursuant to the first subparagraph shall not apply to the credit institutions and financial institutions, and to obliged entities referred to in point (3)(b) of Article 2(1) that are public officials.

       Where a Member State decides to establish an exemption in accordance with the first subparagraph, it shall not restrict access to information by competent authorities and FIUs.’;

    9. (i)

       paragraph 8 is deleted;

    10. (j)

        paragraph 9 is replaced by the following:

        ‘9.

        Member States shall ensure that the central registers referred to in paragraph 3a of this Article are interconnected via the European Central Platform established by Article 22(1) of Directive (EU) 2017/1132. The connection of the Member States’ central registers to the platform shall be set up in accordance with the technical specifications and procedures established by implementing acts adopted by the Commission in accordance with Article 24 of Directive (EU) 2017/1132 and with Article 31a of this Directive.

        Member States shall ensure that the information referred to in paragraph 1 of this Article is available through the system of interconnection of registers established by Article 22(2) of Directive (EU) 2017/1132, in accordance with Member States’ national laws implementing paragraphs 4 and 5 of this Article.

        Member States shall take adequate measures to ensure that only the information referred to in paragraph 1 that is up to date and corresponds to the actual beneficial ownership is made available through their national registers and through the system of interconnection of registers, and the access to that information shall be in accordance with data protection rules.

        The information referred to in paragraph 1 shall be available through the national registers and through the system of interconnection of registers for at least five years and no more than 10 years after the grounds for registering the beneficial ownership information as referred to in paragraph 3a have ceased to exist. Member States shall cooperate with the Commission in order to implement the different types of access in accordance with paragraphs 4 and 4a.’;

    11. (k)

        the following paragraph is added:

        ‘10.

        Member States shall notify to the Commission the categories, description of the characteristics, names and, where applicable, legal basis of the trusts and similar legal arrangements referred to in paragraph 1 by 10 July 2019. The Commission shall publish the consolidated list of such trusts and similar legal arrangements in the Official Journal of the European Union by 10 September 2019.

        By 26 June 2020, the Commission shall submit a report to the European Parliament and to the Council assessing whether all trusts and similar legal arrangements as referred to in paragraph 1 governed under the law of Member States were duly identified and made subject to the obligations as set out in this Directive. Where appropriate, the Commission shall take the necessary steps to act upon the findings of that report.’;

17. (17)

    the following Article is inserted:

    ‘Article 31aImplementing acts

    Where necessary in addition to the implementing acts adopted by the Commission in accordance with Article 24 of Directive (EU) 2017/1132 and in accordance with the scope of Article 30 and 31 of this Directive, the Commission shall adopt by means of implementing acts technical specifications and procedures necessary to provide for the interconnection of Member States’ central registers as referred to in Article 30(10) and Article 31(9), with regard to:

    1. (a)

       the technical specification defining the set of the technical data necessary for the platform to perform its functions as well as the method of storage, use and protection of such data;

    2. (b)

       the common criteria according to which beneficial ownership information is available through the system of interconnection of registers, depending on the level of access granted by Member States;

    3. (c)

       the technical details on how the information on beneficial owners is to be made available;

    4. (d)

       the technical conditions of availability of services provided by the system of interconnection of registers;

    5. (e)

       the technical modalities how to implement the different types of access to information on beneficial ownership based on Article 30(5) and Article 31(4);

    6. (f)

       the payment modalities where access to beneficial ownership information is subject to the payment of a fee according to Article 30(5a) and Article 31(4a) taking into account available payment facilities such as remote payment transactions.

    Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 64a(2).

    In its implementing acts, the Commission shall strive to reuse proven technology and existing practices. The Commission shall ensure that the systems to be developed shall not incur costs above what is absolutely necessary in order to implement this Directive. The Commission’s implementing acts shall be characterised by transparency and the exchange of experiences and information between the Commission and the Member States.’;

18. (18)

    in Article 32 the following paragraph is added:

    ‘9.

    Without prejudice to Article 34(2), in the context of its functions, each FIU shall be able to request, obtain and use information from any obliged entity for the purpose set in paragraph 1 of this Article, even if no prior report is filed pursuant to Article 33(1)(a) or 34(1).’;

19. (19)

    the following Article is inserted:

    ‘Article 32a

    1.

    Member States shall put in place centralised automated mechanisms, such as central registries or central electronic data retrieval systems, which allow the identification, in a timely manner, of any natural or legal persons holding or controlling payment accounts and bank accounts identified by IBAN, as defined by Regulation (EU) No 260/2012 of the European Parliament and of the Council21, and safe-deposit boxes held by a credit institution within their territory. Member States shall notify the Commission of the characteristics of those national mechanisms.

    2.

    Member States shall ensure that the information held in the centralised mechanisms referred to in paragraph 1 of this Article is directly accessible in an immediate and unfiltered manner to national FIUs. The information shall also be accessible to national competent authorities for fulfilling their obligations under this Directive. Member States shall ensure that any FIU is able to provide information held in the centralised mechanisms referred to in paragraph 1 of this Article to any other FIUs in a timely manner in accordance with Article 53.

    3.

    The following information shall be accessible and searchable through the centralised mechanisms referred to in paragraph 1:

    • — for the customer-account holder and any person purporting to act on behalf of the customer

      the name, complemented by either the other identification data required under the national provisions transposing point (a) of Article 13(1) or a unique identification number;

    • — for the beneficial owner of the customer-account holder

      the name, complemented by either the other identification data required under the national provisions transposing point (b) of Article 13(1) or a unique identification number;

    • — for the bank or payment account

      the IBAN number and the date of account opening and closing;

    • — for the safe-deposit box

      name of the lessee complemented by either the other identification data required under the national provisions transposing Article 13(1) or a unique identification number and the duration of the lease period.

    4.

    Member States may consider requiring other information deemed essential for FIUs and competent authorities for fulfilling their obligations under this Directive to be accessible and searchable through the centralised mechanisms.

    5.

    By 26 June 2020, the Commission shall submit a report to the European Parliament and to the Council assessing the conditions and the technical specifications and procedures for ensuring secure and efficient interconnection of the centralised automated mechanisms. Where appropriate, that report shall be accompanied by a legislative proposal.’;

20. (20)

    the following Article is inserted:

    ‘Article 32b

    1.

    Member States shall provide FIUs and competent authorities with access to information which allows the identification in a timely manner of any natural or legal persons owning real estate, including through registers or electronic data retrieval systems where such registers or systems are available.

    2.

    By 31 December 2020, the Commission shall submit a report to the European Parliament and to the Council assessing the necessity and proportionality of harmonising the information included in the registers and assessing the need for the interconnection of those registers. Where appropriate, that report shall be accompanied by a legislative proposal.’;

21. (21)

    in Article 33(1), point (b) is replaced by the following:

    1. ‘(b)

       providing the FIU directly, at its request, with all necessary information.’;

22. (22)

    in Article 34, the following paragraph is added:

    ‘3.

    Self-regulatory bodies designated by Member States shall publish an annual report containing information about:

    (a)

    measures taken under Articles 58, 59 and 60;

    (b)

    number of reports of breaches received as referred to in Article 61, where applicable;

    (c)

    number of reports received by the self-regulatory body as referred to in paragraph 1 and the number of reports forwarded by the self-regulatory body to the FIU where applicable;

    (d)

    where applicable number and description of measures carried out under Article 47 and 48 to monitor compliance by obliged entities with their obligations under:

    1. (i)

       Articles 10 to 24 (customer due diligence);

    2. (ii)

       Articles 33, 34 and 35 (suspicious transaction reporting);

    3. (iii)

       Article 40 (record-keeping); and

    4. (iv)

       Articles 45 and 46 (internal controls).’;

23. (23)

    Article 38 is replaced by the following:

    ‘Article 38

    1.

    Member States shall ensure that individuals, including employees and representatives of the obliged entity who report suspicions of money laundering or terrorist financing internally or to the FIU, are legally protected from being exposed to threats, retaliatory or hostile action, and in particular from adverse or discriminatory employment actions.

    2.

    Member States shall ensure that individuals who are exposed to threats, retaliatory or hostile actions, or adverse or discriminatory employment actions for reporting suspicions of money laundering or terrorist financing internally or to the FIU are entitled to present a complaint in a safe manner to the respective competent authorities. Without prejudice to the confidentiality of information gathered by the FIU, Member States shall also ensure that such individuals have the right to an effective remedy to safeguard their rights under this paragraph.’;

24. (24)

    in Article 39, paragraph 3 is replaced by the following:

    ‘3.

    The prohibition laid down in paragraph 1 of this Article shall not prevent disclosure between the credit institutions and financial institutions from the Member States provided that they belong to the same group, or between those entities and their branches and majority owned subsidiaries established in third countries, provided that those branches and majority-owned subsidiaries fully comply with the group-wide policies and procedures, including procedures for sharing information within the group, in accordance with Article 45, and that the group-wide policies and procedures comply with the requirements set out in this Directive.’;

25. (25)

    in Article 40, paragraph 1 is amended as follows:

    1. (a)

       point (a) is replaced by the following:

       1. ‘(a)

          in the case of customer due diligence, a copy of the documents and information which are necessary to comply with the customer due diligence requirements laid down in Chapter II, including, where available, information obtained through electronic identification means, relevant trust services as set out in Regulation (EU) No 910/2014 or any other secure, remote or electronic, identification process regulated, recognised, approved or accepted by the relevant national authorities, for a period of five years after the end of the business relationship with their customer or after the date of an occasional transaction;’;

    2. (b)

       the following subparagraph is added:

       ‘The retention period referred to in this paragraph, including the further retention period that shall not exceed five additional years, shall also apply in respect of the data accessible through the centralised mechanisms referred to in Article 32a.’;

26. (26)

    Article 43 is replaced by the following:

    ‘Article 43

    The processing of personal data on the basis of this Directive for the purposes of the prevention of money laundering and terrorist financing as referred to in Article 1 shall be considered to be a matter of public interest under Regulation (EU) 2016/679 of the European Parliament and of the Council22.’;

27. (27)

    Article 44 is replaced by the following:

    ‘Article 44

    1.

    Member States shall, for the purposes of contributing to the preparation of risk assessment pursuant to Article 7, ensure that they are able to review the effectiveness of their systems to combat money laundering or terrorist financing by maintaining comprehensive statistics on matters relevant to the effectiveness of such systems.

    2.

    The statistics referred to in paragraph 1 shall include:

    (a)

    data measuring the size and importance of the different sectors which fall within the scope of this Directive, including the number of natural persons and entities and the economic importance of each sector;

    (b)

    data measuring the reporting, investigation and judicial phases of the national AML/CFT regime, including the number of suspicious transaction reports made to the FIU, the follow-up given to those reports and, on an annual basis, the number of cases investigated, the number of persons prosecuted, the number of persons convicted for money laundering or terrorist financing offences, the types of predicate offences, where such information is available, and the value in euro of property that has been frozen, seized or confiscated;

    (c)

    if available, data identifying the number and percentage of reports resulting in further investigation, together with the annual report to obliged entities detailing the usefulness and follow-up of the reports they presented;

    (d)

    data regarding the number of cross-border requests for information that were made, received, refused and partially or fully answered by the FIU, broken down by counterpart country;

    (e)

    human resources allocated to competent authorities responsible for AML/CFT supervision as well as human resources allocated to the FIU to fulfil the tasks specified in Article 32;

    (f)

    the number of on-site and off-site supervisory actions, the number of breaches identified on the basis of supervisory actions and sanctions/administrative measures applied by supervisory authorities.

    3.

    Member States shall ensure that a consolidated review of their statistics is published on an annual basis.

    4.

    Member States shall transmit annually to the Commission the statistics referred to in paragraph 2. The Commission shall publish an annual report summarising and explaining the statistics referred to in paragraph 2, which shall be made available on its website.’;

28. (28)

    in Article 45, paragraph 4 is replaced by the following:

    ‘4.

    The Member States and the ESAs shall inform each other of instances in which the law of a third country does not permit the implementation of the policies and procedures required under paragraph 1. In such cases, coordinated actions may be taken to pursue a solution. In the assessing which third countries do not permit the implementation of the policies and procedures required under paragraph 1, Member States and the ESAs shall take into account any legal constraints that may hinder proper implementation of those policies and procedures, including secrecy, data protection and other constraints limiting the exchange of information that may be relevant for that purpose.’;

29. (29)

    in Article 47, paragraph 1 is replaced by the following:

    ‘1.

    Member States shall ensure that providers of exchange services between virtual currencies and fiat currencies, and custodian wallet providers, are registered, that currency exchange and cheque cashing offices, and trust or company service providers are licensed or registered, and that providers of gambling services are regulated.’;

30. (30)

    Article 48 is amended as follows:

    1. (a)

       the following paragraph is inserted:

       ‘1a.

       In order to facilitate and promote effective cooperation, and in particular the exchange of information, Member States shall communicate to the Commission the list of competent authorities of the obliged entities listed in Article 2(1), including their contact details. Member States shall ensure that the information provided to the Commission remains updated.

       The Commission shall publish a register of those authorities and their contact details on its website. The authorities in the register shall, within the scope of their powers, serve as a contact point for the counterpart competent authorities of the other Member States. Financial supervisory authorities of the Member States shall also serve as a contact point for the ESAs.

       In order to ensure the adequate enforcement of this Directive, Member States shall require that all obliged entities are subject to adequate supervision, including the powers to conduct on-site and off-site supervision, and shall take appropriate and proportionate administrative measures to remedy the situation in the case of breaches.’;

    2. (b)

       paragraph 2 is replaced by the following:

       ‘2.

       Member States shall ensure that the competent authorities have adequate powers, including the power to compel the production of any information that is relevant to monitoring compliance and perform checks, and have adequate financial, human and technical resources to perform their functions. Member States shall ensure that staff of those authorities are of high integrity and appropriately skilled, and maintain high professional standards, including standards of confidentiality, data protection and standards addressing conflicts of interest.’;

    3. (c)

       paragraph (4) is replaced by the following:

       ‘4.

       Member States shall ensure that competent authorities of the Member State in which the obliged entity operates establishments supervise the respect by those establishments of the national provisions of that Member State transposing this Directive.

       In the case of credit and financial institutions that are part of a group, Member States shall ensure that, for the purposes laid down in the first subparagraph, the competent authorities of the Member State where a parent undertaking is established cooperate with the competent authorities of the Member States where the establishments that are part of group are established.

       In the case of the establishments referred to in Article 45(9), supervision as referred to in the first subparagraph of this paragraph may include the taking of appropriate and proportionate measures to address serious failings that require immediate remedies. Those measures shall be temporary and be terminated when the failings identified are addressed, including with the assistance of or in cooperation with the competent authorities of the home Member State of the obliged entity, in accordance with Article 45(2).’;

    4. (d)

       in paragraph (5), the following subparagraph is added:

       ‘In the case of credit and financial institutions that are part of a group, Member States shall ensure that the competent authorities of the Member State where a parent undertaking is established supervise the effective implementation of the group-wide policies and procedures referred to in Article 45(1). For that purpose, Member States shall ensure that the competent authorities of the Member State where credit and financial institutions that are part of the group are established cooperate with the competent authorities of the Member State where the parent undertaking is established.’;

31. (31)

    Article 49 is replaced by the following:

    ‘Article 49

    Member States shall ensure that policy makers, the FIUs, supervisors and other competent authorities involved in AML/CFT, as well as tax authorities and law enforcement authorities when acting within the scope of this Directive, have effective mechanisms to enable them to cooperate and coordinate domestically concerning the development and implementation of policies and activities to combat money laundering and terrorist financing, including with a view to fulfilling their obligation under Article 7.’;

32. (32)

    in Section 3 of Chapter VI, the following subsection is inserted:

    ‘Subsection IIa Cooperation between competent authorities of the Member States

    Article 50a

    Member States shall not prohibit or place unreasonable or unduly restrictive conditions on the exchange of information or assistance between competent authorities for the purposes of this Directive. In particular Member States shall ensure that competent authorities do not refuse a request for assistance on the grounds that:

    1. (a)

       the request is also considered to involve tax matters;

    2. (b)

       national law requires obliged entities to maintain secrecy or confidentiality, except in those cases where the relevant information that is sought is protected by legal privilege or where legal professional secrecy applies, as described in Article 34(2);

    3. (c)

       there is an inquiry, investigation or proceeding underway in the requested Member State, unless the assistance would impede that inquiry, investigation or proceeding;

    4. (d)

       the nature or status of the requesting counterpart competent authority is different from that of requested competent authority.’;

33. (33)

    Article 53 is amended as follows:

    1. (a)

       in paragraph 1, the first subparagraph is replaced by the following:

       ‘1.

       Member States shall ensure that FIUs exchange, spontaneously or upon request, any information that may be relevant for the processing or analysis of information by the FIU related to money laundering or terrorist financing and the natural or legal person involved, regardless of the type of associated predicate offences and even if the type of associated predicate offences is not identified at the time of the exchange.’;

    2. (b)

       in paragraph 2, second subparagraph, the second sentence is replaced by the following:

       ‘That FIU shall obtain information in accordance with Article 33(1) and transfer the answers promptly.’;

34. (34)

    in Article 54, the following subparagraph is added:

    ‘Member States shall ensure that FIUs designate at least one contact person or point to be responsible for receiving requests for information from FIUs in other Member States.’;

35. (35)

    In Article 55, paragraph 2 is replaced by the following:

    ‘2.

    Member States shall ensure that the requested FIU’s prior consent to disseminate the information to competent authorities is granted promptly and to the largest extent possible, regardless of the type of associated predicate offences. The requested FIU shall not refuse its consent to such dissemination unless this would fall beyond the scope of application of its AML/CFT provisions or could lead to impairment of an investigation, or would otherwise not be in accordance with fundamental principles of national law of that Member State. Any such refusal to grant consent shall be appropriately explained. Those exceptions shall be specified in a way which prevents misuse of, and undue limitations to, the dissemination of information to competent authorities.’;

36. (36)

    Article 57 is replaced by the following:

    ‘Article 57

    Differences between national law definitions of predicate offences as referred to in point 4 of Article 3 shall not impede the ability of FIUs to provide assistance to another FIU and shall not limit the exchange, dissemination and the use of information pursuant to Articles 53, 54 and 55.’;

37. (37)

    in Section 3 of Chapter VI, the following subsection is added:

    ‘Subsection IIIa Cooperation between competent authorities supervising credit and financial institutions and other authorities bound by professional secrecy

    Article 57a

    1.

    Member States shall require that all persons working for or who have worked for competent authorities supervising credit and financial institutions for compliance with this Directive and auditors or experts acting on behalf of such competent authorities shall be bound by the obligation of professional secrecy.

    Without prejudice to cases covered by criminal law, confidential information which the persons referred to in the first subparagraph receive in the course of their duties under this Directive may be disclosed only in summary or aggregate form, in such a way that individual credit and financial institutions cannot be identified.

    2.

    Paragraph 1 shall not prevent the exchange of information between:

    (a)

    competent authorities supervising credit and financial institutions within a Member State in accordance with this Directive or other legislative acts relating to the supervision of credit and financial institutions;

    (b)

    competent authorities supervising credit and financial institutions in different Member States in accordance with this Directive or other legislative acts relating to the supervision of credit and financial institutions, including the European Central Bank (ECB) acting in accordance with Council Regulation (EU) No 1024/201323. That exchange of information shall be subject to the conditions of professional secrecy indicated in paragraph 1.

    By 10 January 2019, the competent authorities supervising credit and financial institutions in accordance with this Directive and the ECB, acting pursuant to Article 27(2) of Regulation (EU) No 1024/2013 and point (g) of the first subparagraph of Article 56 of Directive 2013/36/EU of the European Parliament and of the Council24, shall conclude, with the support of the European Supervisory Authorities, an agreement on the practical modalities for exchange of information.

    3.

    Competent authorities supervising credit and financial institutions receiving confidential information as referred to in paragraph 1, shall only use this information:

    (a)

    in the discharge of their duties under this Directive or under other legislative acts in the field of AML/CFT, of prudential regulation and of supervising credit and financial institutions, including sanctioning;

    (b)

    in an appeal against a decision of the competent authority supervising credit and financial institutions, including court proceedings;

    (c)

    in court proceedings initiated pursuant to special provisions provided for in Union law adopted in the field of this Directive or in the field of prudential regulation and supervision of credit and financial institutions.

    4.

    Member States shall ensure that competent authorities supervising credit and financial institutions cooperate with each other for the purposes of this Directive to the greatest extent possible, regardless of their respective nature or status. Such cooperation also includes the ability to conduct, within the powers of the requested competent authority, inquiries on behalf of a requesting competent authority, and the subsequent exchange of the information obtained through such inquiries.

    5.

    Member States may authorise their national competent authorities which supervise credit and financial institutions to conclude cooperation agreements providing for collaboration and exchanges of confidential information with the competent authorities of third countries that constitute counterparts of those national competent authorities. Such cooperation agreements shall be concluded on the basis of reciprocity and only if the information disclosed is subject to a guarantee of professional secrecy requirements at least equivalent to that referred to in paragraph 1. Confidential information exchanged according to those cooperation agreements shall be used for the purpose of performing the supervisory task of those authorities.

    Where the information exchanged originates in another Member State, it shall only be disclosed with the explicit consent of the competent authority which shared it and, where appropriate, solely for the purposes for which that authority gave its consent.

    Article 57b

    1.

    Notwithstanding Article 57a(1) and (3) and without prejudice to Article 34(2), Member States may authorise the exchange of information between competent authorities in the same Member State or in different Member States, between the competent authorities and authorities entrusted with the supervision of financial sector entities and natural or legal persons acting in the exercise of their professional activities as referred to in point (3) of Article 2(1) and the authorities responsible by law for the supervision of financial markets in the discharge of their respective supervisory functions.

    The information received shall in any event be subject to professional secrecy requirements at least equivalent to those referred to in Article 57a(1).

    2.

    Notwithstanding Article 57a(1) and (3), Member States may, by virtue of provisions laid down in national law, authorise the disclosure of certain information to other national authorities responsible by law for the supervision of the financial markets, or with designated responsibilities in the field of combating or investigation of money laundering, the associated predicate offences or terrorist financing.

    However, confidential information exchanged according to this paragraph shall only be used for the purpose of performing the legal tasks of the authorities concerned. Persons having access to such information shall be subject to professional secrecy requirements at least equivalent to those referred to in Article 57a(1).

    3.

    Member States may authorise the disclosure of certain information relating to the supervision of credit institutions for compliance with this Directive to Parliamentary inquiry committees, courts of auditors and other entities in charge of enquiries, in their Member State, under the following conditions:

    (a)

    the entities have a precise mandate under national law to investigate or scrutinise the actions of authorities responsible for the supervision of those credit institutions or for laws on such supervision;

    (b)

    the information is strictly necessary for fulfilling the mandate referred to in point (a);

    (c)

    the persons with access to the information are subject to professional secrecy requirements under national law at least equivalent to those referred to in Article 57a(1);

    (d)

    where the information originates in another Member State, it shall not be disclosed without the express consent of the competent authorities which have disclosed it and, solely for the purposes for which those authorities gave their consent.’;

38. (38)

    in Article 58(2), the following subparagraph is added:

    ‘Member States shall further ensure that where their competent authorities identify breaches which are subject to criminal sanctions, they inform the law enforcement authorities in a timely manner.’;

39. (39)

    Article 61 is amended as follows:

    1. (a)

       paragraph 1 is replaced by the following:

       ‘1.

       Member States shall ensure that competent authorities, as well as, where applicable, self-regulatory bodies, establish effective and reliable mechanisms to encourage the reporting to competent authorities, as well as, where applicable self-regulatory bodies, of potential or actual breaches of the national provisions transposing this Directive.

       For that purpose, they shall provide one or more secure communication channels for persons for the reporting referred to in the first subparagraph. Such channels shall ensure that the identity of persons providing information is known only to the competent authorities, as well as, where applicable, self-regulatory bodies.’;

    2. (b)

       in paragraph 3, the following subparagraphs are added:

       ‘Member States shall ensure that individuals, including employees and representatives of the obliged entity who report suspicions of money laundering or terrorist financing internally or to the FIU, are legally protected from being exposed to threats, retaliatory or hostile action, and in particular from adverse or discriminatory employment actions.

       Member States shall ensure that individuals who are exposed to threats, hostile actions, or adverse or discriminatory employment actions for reporting suspicions of money laundering or terrorist financing internally or to the FIU are entitled to present a complaint in a safe manner to the respective competent authorities. Without prejudice to the confidentiality of information gathered by the FIU, Member States shall also ensure that such individuals have the right to effective remedy to safeguard their rights under this paragraph.’;

40. (40)

    the following Article is inserted:

    ‘Article 64a

    1.

    The Commission shall be assisted by the Committee on the Prevention of Money Laundering and Terrorist Financing (the “Committee”) as referred to in Article 23 of Regulation (EU) 2015/847 of the European Parliament and of the Council25. That committee shall be a committee within the meaning of Regulation (EU) No 182/201126.

    2.

    Where reference is made to this paragraph, Article 5 of Regulation (EU) No 182/2011 shall apply.’;

41. (41)

    Article 65 is replaced by the following:

    ‘Article 65

    1.

    By 11 January 2022, and every three years thereafter, the Commission shall draw up a report on the implementation of this Directive and submit it to the European Parliament and to the Council.

    That report shall include in particular:

    (a)

    an account of specific measures adopted and mechanisms set up at Union and Member State level to prevent and address emerging problems and new developments presenting a threat to the Union financial system;

    (b)

    follow-up actions undertaken at Union and Member State level on the basis of concerns brought to their attention, including complaints relating to national laws hampering the supervisory and investigative powers of competent authorities and self-regulatory bodies;

    (c)

    an account of the availability of relevant information for the competent authorities and FIUs of the Member States, for the prevention of the use of the financial system for the purposes of money laundering and terrorist financing;

    (d)

    an account of the international cooperation and information exchange between competent authorities and FIUs;

    (e)

    an account of necessary Commission actions to verify that Member States take action in compliance with this Directive and to assess emerging problems and new developments in the Member States;

    (f)

    an analysis of feasibility of specific measures and mechanisms at Union and Member State level on the possibilities to collect and access the beneficial ownership information of corporate and other legal entities incorporated outside of the Union and of the proportionality of the measures referred to in point (b) of Article 20;

    (g)

    an evaluation of how fundamental rights and principles recognised by the Charter of Fundamental Rights of the European Union have been respected.

    The first report, to be published by 11 January 2022, shall be accompanied, if necessary, by appropriate legislative proposals, including, where appropriate, with respect to virtual currencies, empowerments to set-up and maintain a central database registering users’ identities and wallet addresses accessible to FIUs, as well as self-declaration forms for the use of virtual currency users, and to improve cooperation between Asset Recovery Offices of the Member States and a risk-based application of the measures referred to in point (b) of Article 20.

    2.

    By 1 June 2019, the Commission shall assess the framework for FIUs’ cooperation with third countries and obstacles and opportunities to enhance cooperation between FIUs in the Union including the possibility of establishing a coordination and support mechanism.

    3.

    The Commission shall, if appropriate, issue a report to the European Parliament and to Council to assess the need and proportionality of lowering the percentage for the identification of beneficial ownership of legal entities in light of any recommendation issued in this sense by international organisations and standard setters with competence in the field of preventing money laundering and combating terrorist financing as a result of a new assessment, and present a legislative proposal, if appropriate.’;

42. (42)

    in Article 67, paragraph (1) is replaced by the following:

    ‘1.

    Member States shall bring into force the laws, regulations and administrative provisions necessary to comply with this Directive by 26 June 2017.

    Member States shall apply Article 12(3) as of 10 July 2020.

    Member States shall set up the registers referred to in Article 30 by 10 January 2020 and the registers referred to in Article 31 by 10 March 2020 and the centralised automated mechanisms referred to in Article 32a by 10 September 2020.

    The Commission shall ensure the interconnection of registers referred to in Articles 30 and 31 in cooperation with the Member States by 10 March 2021.

    Member States shall immediately communicate the text of the measures referred to in this paragraph to the Commission.

    When Member States adopt those measures, they shall contain a reference to this Directive or be accompanied by such a reference on the occasion of their official publication. The methods of making such reference shall be laid down by Member States.’;

43. (43)

    in Annex II, point (3), the introductory part is replaced by the following:

    1. ‘(3)

       Geographical risk factors — registration, establishment, residence in:’;

44. (44)

    Annex III is amended as follows:

    1. (a)

       in point (1), the following point is added:

       1. ‘(g)

          customer is a third country national who applies for residence rights or citizenship in the Member State in exchange of capital transfers, purchase of property or government bonds, or investment in corporate entities in that Member State.’;

    2. (b)

       point (2) is amended as follows:

       1. (i)

          point (c) is replaced by the following:

          1. ‘(c)

             non-face-to-face business relationships or transactions, without certain safeguards, such as electronic identification means, relevant trust services as defined in Regulation (EU) No 910/2014 or any other secure, remote or electronic, identification process regulated, recognised, approved or accepted by the relevant national authorities;’;

       2. (ii)

          the following point is added:

          1. ‘(f)

             transactions related to oil, arms, precious metals, tobacco products, cultural artefacts and other items of archaeological, historical, cultural and religious importance, or of rare scientific value, as well as ivory and protected species.’.