PART 4Reliance and Record-keeping
Record-keeping40
1
2
The records are—
a
b
sufficient supporting records (consisting of the original documents or copies) in respect of a transaction (whether or not the transaction is an occasional transaction) which is the subject of customer due diligence measures or ongoing monitoring to enable the transaction to be reconstructed.
3
Subject to paragraph (4), the period is five years beginning on the date on which the relevant person knows, or has reasonable grounds to believe—
a
that the transaction is complete, for records relating to an occasional transaction; or
b
that the business relationship has come to an end for records relating to—
i
any transaction which occurs as part of a business relationship, or
ii
customer due diligence measures taken in connection with that relationship.
4
A relevant person is not required to keep the records referred to in paragraph (3)(b)(i) for more than 10 years.
5
Once the period referred to in paragraph (3), or if applicable paragraph (4), has expired, the relevant person must delete any personal data obtained for the purposes of these Regulations unless—
a
the relevant person is required to retain records containing personal data—
i
by or under any enactment, or
ii
for the purposes of any court proceedings;
b
the data subject has given consent to the retention of that data; or
c
the relevant person has reasonable grounds for believing that records containing the personal data need to be retained for the purpose of legal proceedings.
6
7
A person referred to in regulation 39(3) (“A”) who is relied on by a relevant person (“B”) must, if requested by B within the period referred to in paragraph (3) or, if applicable, paragraph (4), immediately—
a
make available to B any information about the customer, any person purporting to act on behalf of the customer and any beneficial owner of the customer, which A obtained when applying customer due diligence measures; and
b
forward to B copies of any identification and verification data and other relevant documents on the identity of the customer, any person purporting to act on behalf of the customer and any beneficial owner of the customer, which A obtained when applying those measures.
8
Paragraph (7) does not apply where a relevant person applies customer due diligence measures by means of an agent or an outsourcing service provider (within the meaning of regulation 39(8)).
9
For the purposes of this regulation—
a
B relies on A where B does so in accordance with regulation 39(1);
b
“copy” means a copy of the original document which would be admissible as evidence of the original document in court proceedings;
c
“personal data” and “data subject” have the meanings given in section 1 of the Data Protection Act 199896.