← Ireland

S.I. No. 22/2023 - European Union (Money Laundering and Terrorist Financing) (Use of Financial and Other Information) Regulations 2023

S.I. No. 22/2023 - European Union (Money Laundering

d Terrorist Financing) (Use of Financial

d Other Information) Regulations 2023 Skip to content Disclaimer Feedback Helpdesk Gaeilge Léim go dtí

t-ábhar Séanadh Aiseolas Deasc chabhrach English Gaeilge English Produced by the Office of the Attorney General Táirgthe ag Oifig

Ard-Aighne Home Legislation Acts of the Oireachtas Statutory Instruments Pre-1922 Legislation Constitution External Resources Bills (Houses of the Oireachtas) Iris Oifigiúil / Official Gazette Revised Acts (LRC) Classified List of Legislation (LRC) Translations (acts.ie) Translations (Houses of the Oireachtas) Government Publications for Sale EU Law (EUR-Lex) FAQ Disclaimer Feedback Helpdesk Search Baile Reachtaíocht Achtanna

Oireachtais Ionstraimí Reachtúla Reachtaíocht Réamh-1922 Bunreacht Acmhainní Seachtracha Billí (Tithe

Oireachtais) Iris Oifigiúil Achtanna Athbhreithnithe (CAD) (

Coimisiún um Athchóiriú

Dlí) Liosta Rangaithe Reachtaíochta Aistriúcháin (achtanna.ie) Aistriúcháin (Tithe

Oireachtais) Foilseacháin Rialtais ar Díol Dlí AE (EUR-Lex) CCanna (Ceisteanna Coitianta) Séanadh Aiseolas Deasc chabhrach Cuardach TitleTeideal Year(s) or rangeBliain nó blianta nó raon TypeCineál All Legislation Acts Statutory Instruments Advanced SearchCuardach Casta HomeBaile Statutory InstrumentsIonstraimí Reachtúla 2023 S.I. No. 22/2023 - European Union (Money Laundering

d Terrorist Financing) (Use of Financial

d Other Information) Regulations 2023 S.I. No. 22/2023 - European Union (Money Laundering

d Terrorist Financing) (Use of Financial

d Other Information) Regulations 2023 AmendmentsLeasuithe Download PDF Íoslódáil PDF Notice of the making of this Statutory Instrument was published in “Iris Oifigiúil” of 7th February, 2023. I, SIMON HARRIS, Minister for Justice, in exercise of the powers conferred on me by section 3 of the European Communities Act 1972 (No. 27 of 1972)

d for the purpose of giving effect to Directive (EU) 2019/1153 of the European Parliament

d of the Council of 20 June 20191 , hereby make the following regulations: 1.

(1)These Regulations may be cited as the European Union (Money Laundering

d Terrorist Financing) (Use of Financial

d Other Information) Regulations 2023.

(2)Regulations 4 to 7 shall come into operation on the date of the establishment of the Central Database under the Central Mechanism Regulations. 2.
(1)In these Regulations, unless the context otherwise requires – “Article 3
(1)authorities” shall be construed in accordance with Regulation 3
(1); “Article 3
(2)authorities” shall be construed in accordance with Regulation 3
(2); “Bank” means the Central Bank of Ireland; “Central Database” shall be construed in accordance with the Central Mechanism Regulations; “Central Mechanism” shall be construed in accordance with the Central Mechanism Regulations; “Central Mechanism Regulations” means the European Union (

ti-Money Laundering: Central Mechanism for Information on Safe-Deposit Boxes

d Bank

d Payment Accounts) Regulations 2022 ( S.I. No. 46 of 2022 ); “Directive” means Directive (EU) 2019/1153 of the European Parliament

d of the Council of 20 June 20191 laying down rules facilitating the use of financial

d other information for the prevention, detection, investigation or prosecution of certain criminal offences,

d repealing Council Decision 2000/642/JHA; “Europol” means the body established under Article 1

(1)of Regulation (EU) 2016/794; “FIU Ireland” has the same meaning as it has in section 40A
(2)of the Principal Act; “money laundering” has the same meaning as it has in section 2
(1)of the Principal Act; “Principal Act” means the Criminal Justice (Money Laundering

d Terrorist Financing) Act 2010 ; “Regulation (EU) 2016/794” means Regulation (EU) 2016/794 of the European Parliament

d of the Council of 11 May 20162 on the European Union Agency for Law Enforcement Cooperation (Europol)

d replacing

d repealing Council Decisions 2009/371/JHA, 2009/934/JHA, 2009/935/JHA, 2009/936/JHA

d 2009/968/JHA.

(2)A word or expression that is used in these Regulations

d that is also used in the Directive has, unless the context otherwise requires, the same meaning in these Regulations as it has in the Directive. 3.

(1)The following (hereinafter referred to as “Article 3
(1)authorities”) are designated for the purposes of Article 3
(1)of the Directive: (
  1. a)the Garda Síochána; (
  2. b)FIU Ireland; (
  3. c)the Criminal Assets Bureau.
(2)The following (hereinafter referred to as “Article 3
(2)authorities”) are designated for the purposes of Article 3
(2)of the Directive: (
  1. a)the Garda Síochána; (
  2. b)the Minister for Social Protection. 4.
(1)Article 3
(1)authorities may access

d search, on a case-by-case basis

d in a direct

d immediate manner, bank account information when necessary for the performance of their tasks for the purposes of preventing, detecting, investigating or prosecuting a serious criminal offence or supporting a criminal investigation concerning a serious criminal offence, including the identification, tracing

d freezing of the assets related to such investigation.

(2)The power in subsection
(1)shall be exercised on behalf of the Article 3
(1)authorities by the following persons: (
  1. a)on behalf of the Garda Síochána, a member of the Garda Síochána – (
  2. i)who is engaged in the prevention, detection, investigation or prosecution of a serious criminal offence or supporting a criminal investigation concerning a serious criminal offence as defined by

nex I to Regulation (EU) 2016/794,

d (ii) who was designated

d authorised to exercise the power by a member of the Garda Síochána not below the rank of superintendent, (b) on behalf of FIU Ireland, by a person appointed by the Commissioner of the Garda Síochána in that behalf as referred to in section 40A

(2)of the Principal Act,

d (c) on behalf of the Criminal Assets Bureau, by

officer of the Criminal Assets Bureau, who – (i) is of a grade not below that of Higher Executive Officer, or is a member of the Garda Síochána not below the rank of inspector,

d (ii) who was designated

d authorised to exercise the power by a member of the Garda Síochána not below the rank of superintendent.

(3)Article 3
(1)authorities shall ensure that – (a) their officers

d staff are – (

  1. i)of high integrity, (
  2. ii)appropriately skilled,

d (iii) maintain high professional standards of confidentiality

d data protection,

d (b) the security of the bank account information that is accessed

d searched in accordance with this Regulation is maintained to high technological standards.

(4)The Bank shall ensure that the security of the data that is available to be accessed

d searched in accordance with this Regulation is maintained to high technological standards.

(5)In this Regulation “direct

d immediate” includes the expeditious transmission by the Bank of the bank account information concerned by

automated mechanism to the Article 3

(1)authorities, provided that no intermediary institution is able to interfere with the requested data or the information to be provided. 5.
(1)The Bank shall keep a record of each time

Article 3

(1)authority accesses or searches bank account information

d the record shall include the following information: (

  1. a)the national file reference; (
  2. b)the date

d time of the query or search; (

  1. c)the type of data used to launch the query or search; (
  2. d)the unique identifier of the results; (
  3. e)the name of the authority consulting the registry; (
  4. f)the unique user identifier of the official who made the query or performed the search

d, where applicable, of the official who ordered the query or search

d, insofar as is possible, the unique user identifier of the recipient of the results of the query or search.

(2)The records referred to in paragraph
(1)– (a) shall be checked on a regular basis by the data protection officers of the Central Database

d the Central Mechanism,

d (b) shall be made available, on request, to the Data Protection Commission.

(3)The records referred to in paragraph
(1)shall be – (
  1. a)used only for - (
  2. i)data protection monitoring, including checking the admissibility of a request

d the lawfulness of data processing,

d (

  1. ii)ensuring data security, (
  2. b)protected by appropriate measures against unauthorised access,

d (c) erased five years after their creation, unless they are required for monitoring procedures that are ongoing.

(4)The Bank shall take appropriate measures, which shall include specialised training programmes, so that its staff are aware of applicable European Union

d national law, including in relation to data protection.

(5)In this Regulation “data protection officer” has the same meaning as it has in section 88
(1)of the Data Protection Act 2018 . 6. Article 3
(1)authorities – (a) may reply to Europol to duly justified requests related to bank account information made by Europol on a case-by-case basis within the limits of Europol’s responsibilities

d for the performance of Europol’s tasks,

d (

  1. b)shall ensure that replies to requests under paragraph (
  2. a)are made in accordance with Regulation (EU) 2016/794 electronically through - (
  3. i)the information exchange network commonly known as SIENA, or its successor, in the language applicable to SIENA, or (
  4. ii)where applicable, to the computer network commonly known as FIU.net, or its successor. 7. Article 3

(1)authorities shall be under no obligation to comply with a request referred to in Regulation 6 where to do so would - (
  1. a)be contrary to the essential interests of the security of the State, (
  2. b)jeopardise the success of

ongoing investigation or the safety of

individual, or (c) disclose information relating to organisations or specific intelligence activities in the field of national security, but Article 3

(1)authorities shall comply with the request as soon as the bank account information in question ceases to fall within the scope of paragraph (a), (b) or (c). 8. Section 24
(1)of the Principal Act is amended by the insertion of the following definitions: “ ‘Article 3
(2)authorities’ means the authorities designated under Regulation 3
(2)of the European Union (Money Laundering

d Terrorist Financing) (Use of Financial

d Other Information) Regulations 2023; ‘Directive (EU) 2019/1153’ means Directive (EU) 2019/1153 of the European Parliament

d of the Council of 20 June 20191 laying down rules facilitating the use of financial

d other information for the prevention, detection, investigation or prosecution of certain criminal offences,

d repealing Council Decision 2000/642/JHA; ‘Europol’ means the body established under Article 1

(1)of Regulation (EU) 2016/794; ‘FIU Ireland’ has the meaning assigned to it by section 40A
(2); ‘Regulation (EU) 2016/794’ means Regulation (EU) 2016/794 of the European Parliament

d of the Council of 11 May 20162 on the European Union Agency for Law Enforcement Cooperation (Europol)

d replacing

d repealing Council Decisions 2009/371/JHA, 2009/934/JHA, 2009/935/JHA, 2009/936/JHA

d 2009/968/JHA;”. 9. Section 40A of the Principal Act is amended – (a) in subsection

(1), by the substitution of “Directive

d Directive (EU) 2019/1153” for “Directive”,

d (b) by the insertion of the following subsection after subsection

(2): “
(3)In this Chapter the following have the same meaning as they have in Directive (EU) 2019/1153: (a) associate predicate offences; (b) financial

alysis; (

  1. c)financial information; (
  2. d)serious criminal offences.”. 10. The Principal Act is amended by the insertion of the following section after section 40C: “Requests by FIU Ireland to Article 3

(2)authorities 40CA.
(1)

Article 3

(2)authority shall reply, in a timely manner, to reasoned

d necessary requests by a member of the Garda Síochána who is appointed to FIU Ireland, made on a case-by-case basis, for law enforcement information, where the information is necessary for the prevention, detection

d combating of money laundering, associate predicate offences

d terrorist financing.

(2)In this section - ‘law enforcement information’ has the same meaning as it has in Directive (EU) 2019/1153; ‘terrorist financing’ has the same meaning as it has in Directive (EU) 2019/1153.”. 11. The Principal Act is amended by the insertion of the following section after section 40D: “Requests by Article 3
(2)authorities to FIU Ireland 40DA.
(1)Subject to subsection
(2), FIU Ireland shall cooperate with the Article 3
(2)authorities

d shall reply, in a timely manner, to reasoned

d necessary requests by those authorities, made on a case-by-case basis, for financial information or financial

alysis, where the requests are motivated by concerns relating to the prevention, detection, investigation or prosecution of serious criminal offences.

(2)FIU Ireland shall not be obliged to comply with requests referred to in subsection
(1)– (a) where, in the opinion of FIU Ireland, there are objective grounds for assuming that the provision of such information would have a negative impact on ongoing investigations or

alyses, or (b) in exceptional circumstances, where, in the opinion of FIU Ireland, disclosure of the information would be clearly disproportionate to the legitimate interests of a natural or legal person, or irrelevant with regard to the purposes for which it has been requested.

(3)The financial information or financial

alysis obtained by

Article 3

(2)authority as a result of a request referred to in subsection
(1)may only be used for a purpose other than the purpose of the request where FIU Ireland has given its prior consent.
(4)Where FIU Ireland refuses to accede to a request referred to in subsection
(1), it shall provide

appropriate explanation for the refusal to the Article 3

(2)authority concerned.
(5)The Article 3
(2)authorities may process the financial information

d financial

alysis received from FIU Ireland for the specific purposes of preventing, detecting, investigating or prosecuting serious criminal offences.”. 12. Section 40E of the Principal Act is amended by the insertion of the following subsection after subsection

(3): “
(4)Without prejudice to subsection
(1), in exceptional

d urgent cases

d insofar as is practicable in a prompt manner, FIU Ireland may exchange with other FIUs financial information or financial

alysis that may be relevant for the processing or

alysis of information related to terrorism or organised crime associated with terrorism.”. 13. The Principal Act is amended by the insertion of the following sections in Chapter 3 after section 40E: “Exchange of financial information or financial

alysis 40F.

(1)

Article 3

(2)authority may share financial information or financial

alysis obtained from FIU Ireland, upon request

d on a case-by-case basis, with

authority in

other Member State that has been designated by that Member State under Article 3

(2)of Directive (EU) 2019/1153, where that financial information or financial

alysis is necessary for the prevention, detection

d combating of money laundering, associate predicate offences

d terrorist financing.

(2)

y – (a) dissemination of financial information or financial

alysis obtained by

Article 3

(2)authority from FIU Ireland to

y other authority, agency or department, or (b) use of that information or

alysis for purposes other than those for which the information was originally provided by FIU Ireland, shall be subject to the prior consent of FIU Ireland.

(3)

Article 3

(2)authority may request from

authority in

other Member State that has been designated by that Member State under Article 3

(2)of Directive (EU) 2019/1153, on a case-by-case basis, financial information or financial

alysis that was obtained from the Financial Intelligence Unit in that Member State, where the financial information or financial

alysis is necessary for the prevention, detection

d combating of money laundering, associate predicate offences

d terrorist financing.

(4)

Article 3

(2)authority that receives financial information or financial

alysis pursuant to a request under subsection

(3)shall use that information or

alysis only for the purpose for which it was sought or provided.

(5)FIU Ireland

d Article 3

(2)authorities shall ensure that financial information

d financial

alysis requested or shared under this section shall be transmitted using dedicated secure electronic communications ensuring a high level of data security.

(6)In this section ‘terrorist financing’ has the same meaning as it has in Directive (EU) 2019/1153. Exchange of information between Europol

d FIU Ireland 40G.

(1)FIU Ireland may reply to Europol to duly justified requests related to financial information

d financial

alysis made by Europol on a case-by-case basis within the limits of Europol’s responsibilities

d for the performance of Europol’s tasks.

(2)FIU Ireland shall be under no obligation to comply with a request referred to in subsection
(1)where there are objective grounds for assuming that the provision of the financial information

d financial

alysis to which the request relates would have a negative impact on ongoing investigations or

alyses, or, in exceptional circumstances, where disclosure of the information

d

alysis would be clearly disproportionate to the legitimate interests of a natural or legal person or irrelevant with regard to the purposes for which it has been requested.

(3)FIU Ireland shall be under no obligation to comply with a request referred to in subsection
(1)where to do so would - (
  1. a)be contrary to the essential interests of the security of the State, (
  2. b)jeopardise the success of

ongoing investigation or the safety of

individual, or (c) disclose information relating to organisations or specific intelligence activities in the field of national security, but FIU Ireland shall comply with the request as soon as the financial information or financial

alysis in question ceases to fall within the scope of paragraphs (a), (b) or (c).

(4)FIU Ireland shall – (a) provide

appropriate explanation to Europol for

y failure to comply with a request made under subsection

(1), (b) ensure that requests under subsection
(1)are dealt with in a timely manner,

d in

y event no later than requests from FIUs (as referred to in section 40A

(1)) in other Member States,

d (c) ensure that replies to requests under subsection

(1)are made in accordance with Regulation (EU) 2016/794 electronically through - (
  1. i)the information exchange network commonly known as SIENA, or its successor, in the language applicable to SIENA, or (
  2. ii)where applicable, to the computer network commonly known as FIU.net, or its successor. Processing of certain special categories of personal data 40H.
(1)Article 3
(2)authorities

d FIU Ireland shall, in respect of information exchanged pursuant to section 40CA, section 40DA, section 40E

(4), section 40F

d section 40G, ensure that only staff who have been specifically trained

d specifically authorised may process the following special categories of personal data under the guidance of a data protection officer: (

  1. a)personal data revealing - (
  2. i)the racial or ethnic origin of the data subject, (
  3. ii)the political opinions or the religious or philosophical beliefs of the data subject, or (iii) whether the data subject is a member of a trade union; (
  4. b)data concerning health; (
  5. c)personal data concerning

individual’s sex life or sexual orientation.

(2)In this section the following expressions shall have the meaning that they have in section 69 of the Data Protection Act 2018 : ‘data subject’; ‘personal data’; ‘processing’; ‘special categories of personal data’. Records of certain information requests 40I.
(1)Article 3
(2)authorities

d FIU Ireland shall keep records of requests made

d received under section 40CA, section 40DA, section 40E

(4), section 40F

d section 40G.

(2)The records made shall include - (a) the name

d contact details of the organisation

d of the staff member requesting the information

d, as far as possible, of the recipient of the results of the query or search, (

  1. b)the reference to the national case in relation to which the information is requested, (
  2. c)the subject matter of the requests,

d (d)

y executing measures of such requests.

(3)The records shall be – (a) kept for a period of five years after their creation,

d (b) used solely for the purpose of checking the lawfulness of the processing of personal data.

(4)Article 3
(2)authorities

d FIU Ireland shall make all records available to the Data Protection Commission upon its request.”. 14. Regulation 3 of the Central Mechanism Regulations is amended – (a) in subsection

(2)- (i) paragraph (c), by the substitution of “Database;” for “Database.”,

d (

  1. ii)by the insertion of the following paragraph after paragraph (c): “(
  2. d)enabling FIU Ireland, the Criminal Assets Bureau

d the Garda Síochána to access

d search bank account information from the Central Database in accordance with Regulation 4 of the European Union (Money Laundering

d Terrorist Financing) (Use of Financial

d Other Information) Regulations 2023.”,

d (b) in subsection

(3)(a), by the substitution of “Regulations

d the European Union (Money Laundering

d Terrorist Financing) (Use of Financial

d Other Information) Regulations 2023” for “Regulations”. GIVEN under my Official Seal, 2 February,

  1. SIMON HARRIS, Minister for Justice. 1 OJ No. L 186, 11.7.2019, p.
  2. 2 OJ No. L 135, 24.5.2016, p.
  3. Privacy Statement Accessibility European Legislation Identifier (PDF) Open Data License Ráiteas Príobháideachais Inrochtaineacht Aitheantóir Eorpach Reachtaíochta (ELI) Ceadúnas Sonraí Oscailte Liosta Fianán © Government of Ireland. Oireachtas Copyright Material is reproduced with the permission of the Houses of the Oireachtas © Rialtas na hÉireann. Atáirgtear ábhar faoi Chóipcheart le cead ó Thithe

Oireachtais

🔗 To official source

AI explanation based on the official legal text. Indicative, not a substitute for legal advice.