The Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017

Publication: the FCA U.K.

84.—(1) Where a warning notice is given by the FCA under regulation 81(2), neither the FCA nor any person to whom it is given or copied may publish the notice or any details concerning it.

(2) Where the FCA gives a decision notice under regulation 81(6), the FCA must publish on their official website such information about the matter to which the notice relates as it considers appropriate, subject to paragraphs (3) to (9).

(3) Where the FCA publishes information under paragraph (2) or (4) about a matter to which a decision notice relates and the person to whom the notice is given refers the matter to the Upper Tribunal (see regulation 93), the FCA must, without undue delay, publish on its official website information about the status of the appeal and its outcome.

(4) Subject to paragraph (5), (6) and (9) where the FCA gives a final notice, it must, without undue delay, publish on its official website information on the type and nature of the breach and the identity of the person on whom the sanction or measure is imposed.

(5) Subject to paragraph (8) and (9), information about a matter to which a final notice relates must be published in accordance with paragraph (6) where—

(a) the FCA considers it to be disproportionate to publish the identity of a legal person on whom the sanction or measure is imposed following an assessment by the FCA of the proportionality of publishing the person's identity;

(b) the FCA considers it to be disproportionate to publish the personal data of the individual on whom the sanction or measure is imposed following an assessment by the FCA of the proportionality of publishing the personal data; or

(c) the publication of information under paragraph (4) would jeopardise the stability of the financial markets or an ongoing investigation.

(6) Where paragraph (5) applies, the FCA must—

(a) defer the publication of the information about a matter to which a final notice relates until such time as paragraph (5) ceases to apply; or

(b) publish the information on an anonymous basis if publication on that basis would ensure the effective protection of any anonymised personal data in the information.

(7) Where paragraph (6)(b) applies, the FCA may make such arrangements as to the publication of information (including as to the timing of publication) as are necessary to preserve the anonymity of the person on whom the sanction or measure is imposed.

(8) The FCA may make arrangements for the postponed publication of personal data that is anonymised in information it publishes under paragraph (6)(b) if—

(a) the publication of the data is postponed for a reasonable period of time; and

(b) the FCA considers that paragraphs (5)(b) and (6)(b) will no longer apply in respect of that data at the time of the postponed publication.

(9) Information about a matter to which a final notice relates must not be published if publication in accordance with paragraph under paragraph (6) is considered by the FCA insufficient to ensure—

(a) that the stability of the financial markets would not be put in jeopardy; or

(b) that the publication of the information would be proportionate with regard to sanctions or measures which are considered by the FCA to be of a minor nature.

(10) Where the FCA publishes information in accordance with paragraphs (2) to (8), the FCA must ensure that the information remains on its official website for at least five years, unless the information is personal data and [F1 the data protection legislation] requires the information to be retained for a different period.

[F2 (11) For the purposes of this regulation, “personal data” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(2) and (14) of that Act).]

Textual Amendments

F1 Words in reg. 84(10) substituted (25.5.2018) by Data Protection Act 2018 (c. 12), s. 212(1), Sch. 19 para. 416(2) (with ss. 117, 209, 210); S.I. 2018/625, reg. 2(1)(g)

F2 Reg. 84(11) substituted (25.5.2018) by Data Protection Act 2018 (c. 12), s. 212(1), Sch. 19 para. 416(3) (with ss. 117, 209, 210); S.I. 2018/625, reg. 2(1)(g)