Record-keeping
19.—(1) Subject to paragraph (4), a relevant person must keep the records specified in paragraph (2) for at least the period specified in paragraph (3).
(2) The records are—
(a)a copy of, or the references to, the evidence of the customer’s identity obtained pursuant to regulation 7, 8, 10, 14 or 16(4);
(b)the supporting records (consisting of the original documents or copies) in respect of a business relationship or occasional transaction which is the subject of customer due diligence measures or ongoing monitoring.
(3) The period is five years beginning on—
(a)in the case of the records specified in paragraph (2)(a), the date on which—
(i)the occasional transaction is completed; or
(ii)the business relationship ends; or
(b)in the case of the records specified in paragraph (2)(b)—
(i)where the records relate to a particular transaction, the date on which the transaction is completed;
(ii)for all other records, the date on which the business relationship ends.
(4) A relevant person who is relied on by another person must keep the records specified in paragraph (2)(a) for five years beginning on the date on which he is relied on for the purposes of regulation 7, 10, 14 or 16(4) in relation to any business relationship or occasional transaction.
(5) A person referred to in regulation 17(2)(a) or (b) who is relied on by a relevant person must, if requested by the person relying on him within the period referred to in paragraph (4)—
(a)as soon as reasonably practicable make available to the person who is relying on him any information about the customer (and any beneficial owner) which he obtained when applying customer due diligence measures; and
(b)as soon as reasonably practicable forward to the person who is relying on him copies of any identification and verification data and other relevant documents on the identity of the customer (and any beneficial owner) which he obtained when applying those measures.
(6) A relevant person who relies on a person referred to in regulation 17(2)(c) or (d) (a “third party”) to apply customer due diligence measures must take steps to ensure that the third party will, if requested by the relevant person within the period referred to in paragraph (4)—
(a)as soon as reasonably practicable make available to him any information about the customer (and any beneficial owner) which the third party obtained when applying customer due diligence measures; and
(b)as soon as reasonably practicable forward to him copies of any identification and verification data and other relevant documents on the identity of the customer (and any beneficial owner) which the third party obtained when applying those measures.
(7) Paragraphs (5) and (6) do not apply where a relevant person applies customer due diligence measures by means of an outsourcing service provider or agent.
(8) For the purposes of this regulation, a person relies on another person where he does so in accordance with regulation 17(1).