Severity: Medium Draft consultation EU Action required
EDPB and AMLA develop Joint Guidelines on information sharing for AML compliance
Original title: EDPB and AMLA to develop Joint Guidelines on partnerships for information sharing
- Published
- Source: edpb.europa.eu
- Effective
- Deadline
- Not stated
- Framework: GDPR
- Regulation (EU) 2016/679 (as corrected 2018) source
- in 14 days
- Indicative European Parliament plenary date (first reading) for the small mid-caps omnibus, COM(2025) 501, which would raise the Article 30 records exemption to organisations under 750 employees - a forecast, not a fixed date source
Why it matters
The European Data Protection Board (EDPB) and Anti-Money Laundering Authority (AMLA) are jointly developing guidelines to clarify information sharing practices under Article 75 of the AML Regulation, which comes into force on 10 July 2027. The Joint Guidelines will provide practical guidance on how companies, professionals, and authorities can build effective partnerships for sharing information to detect and prevent money laundering and terrorist financing while maintaining data protection safeguards. Industry and stakeholders will have opportunities to provide input through events and a public consultation scheduled for the first half of 2027.
What changed
- Art. 75 of the AML Regulation enables information sharing on financial crime between companies, professionals, and public authorities from 10 July 2027, requiring clarity on how data protection rules apply to such sharing
- EDPB and AMLA will jointly develop practical guidelines setting out how partnerships can be established to combine effective information sharing with personal data protection safeguards
- A public consultation on the draft Joint Guidelines is planned for the first half of 2027, with an earlier stakeholder event scheduled later in 2026 to gather initial perspectives
Who is affected
Organizations covered by anti-money laundering rules (financial institutions, designated non-financial businesses and professions), competent authorities, Financial Intelligence Units (FIUs), data protection authorities, and other supervisory bodies in the EU
What to do
Organizations covered by anti-money laundering rules must comply with data protection safeguards when sharing information with each other and public authorities under Article 75 of the AML Regulation.
AI-assisted summary of the official document; the official text prevails. Not legal advice.