INTERPRETIVE NOTE TO RECOMMENDATION 1 (ASSESSING ML/TF RISKS AND APPLYING A RISK-BASED APPROACH)

  1. The risk-based approach (RBA) is an effective way to combat money laundering and terrorist financing Terrorist financing is the financing of terrorist acts, and of terrorists and terrorist organisations.. In determining how the RBA should For the purposes of assessing compliance with the FATF Recommendations, the word should has the same meaning as must. be implemented in a sector, countries should consider the capacity and anti-money laundering/countering the financing of terrorism (AML/CFT) experience of the relevant sector. Countries should understand that the discretion afforded, and responsibility imposed on, financial institutions Financial institutions means any natural or legal person who conducts as abusiness one or more of the following activities or operations for or on behalf of a customer:
    1) Acceptance of deposits and other repayable funds from the public.
    2) Lending.
    3) Financial leasing.
    4) Money or value transfer services.
    5) Issuing and managing means of payment (e.g. credit and debit cards,cheques, traveller's cheques, money orders and bankers' drafts, electronic money).
    6) Financial guarantees and commitments.
    7) Trading in:
    a) money market instruments (cheques, bills, certificates of deposit, derivatives etc.);
    b) foreign exchange;
    c) exchange, interest rate and index instruments;
    d) transferable securities;
    8) Participation in securities issues and the provision of financial services related to such issues.
    9) Individual and collective portfolio management.
    11) Otherwise investing, administering or managing funds or money on behalf of other persons.
    12) Underwriting and placement of life insurance and other investment related insurance.
    13) Money and currency changing.
    and designated non-financial bodies and professions (DNFBPs) by the RBA is more appropriate in sectors with greater AML/CFT capacity and experience. This should For the purposes of assessing compliance with the FATF Recommendations, the word should has the same meaning as must. not exempt financial institutions and DNFBPs from the requirement to apply enhanced measures when they identify higher risk scenarios. By adopting a risk-based approach, competent authoritiesCompetent authorities refers to all public authorities with designated responsibilities for combating money laundering and/or terrorist financing. In particular, this includes the FIU; the authorities that have the function of investigating and/or prosecuting money laundering, associated predicate offences and terrorist financing, and seizing/freezing and confiscating criminal assets; authorities receiving reports on cross-border transportation of currency & BNIs; and authorities that have AML/CFT supervisory or monitoring responsibilities aimed at ensuring compliance by financial institutions and DNFBPs with AML/CFT requirements. SRBs are not to be regarded as a competent authorities., financial institutions and DNFBPs should be able to ensure that measures to prevent or mitigate money laundering and terrorist financing are commensurate with the risks identified, and would enable them to make decisions on how to allocate their own resources in the most effective way.
  2. In implementing a RBA, financial institutions Financial institutions means any natural or legal person who conducts as abusiness one or more of the following activities or operations for or on behalf of a customer:
    1) Acceptance of deposits and other repayable funds from the public.
    2) Lending.
    3) Financial leasing.
    4) Money or value transfer services.
    5) Issuing and managing means of payment (e.g. credit and debit cards,cheques, traveller's cheques, money orders and bankers' drafts, electronic money).
    6) Financial guarantees and commitments.
    7) Trading in:
    a) money market instruments (cheques, bills, certificates of deposit, derivatives etc.);
    b) foreign exchange;
    c) exchange, interest rate and index instruments;
    d) transferable securities;
    8) Participation in securities issues and the provision of financial services related to such issues.
    9) Individual and collective portfolio management.
    11) Otherwise investing, administering or managing funds or money on behalf of other persons.
    12) Underwriting and placement of life insurance and other investment related insurance.
    13) Money and currency changing.
    and DNFBPs should For the purposes of assessing compliance with the FATF Recommendations, the word should has the same meaning as must. have in place processes to identify, assess, monitor, manage and mitigate money laundering and terrorist financing Terrorist financing is the financing of terrorist acts, and of terrorists and terrorist organisations. risks. The general principle of a RBA is that, where there are higher risks, countries should require financial institutions and DNFBPs to take enhanced measures to manage and mitigate those risks; and that, correspondingly, where the risks are lower, simplified measures may be permitted. Simplified measures should not be permitted whenever there is a suspicion of money laundering or terrorist financing. Specific Recommendations set out more precisely how this general principle applies to particular requirements. Countries may also, in strictly limited circumstances and where there is a proven low risk of money laundering and terrorist financing, decide not to apply certain Recommendations to a particular type of financial institution or activity, or DNFBP (see below). Equally, if countries determine through their risk assessments that there are types of institutions, activities, businesses or professions that are at risk of abuse from money laundering and terrorist financing, and which do not fall under the definition of financial institution or DNFBP, they should consider applying AML/CFT requirements to such sectors.
  3. Assessing proliferation financing risks and applying risk-based measures
  4. In the context of Recommendation 1, “proliferation financing risk” refers strictly and only to the potential breach, non-implementation or evasion of the targeted financial sanctions obligations referred to Recommendation 7*Paragraphs 1 and 2 of the Interpretive Note to Recommendation 7, and the related footnotes, set out the scope of Recommendation 7 obligations; including that it is limited to targeted financial sanctions and does not cover other requirements of the UNSCRs. The requirements of the FATF Standards relating to proliferation financing are limited to Recommendations 1, 2, 7 and 15 only. The requirements under Recommendation 1 for PF risk assessment and mitigation, therefore, do not expand the scope of other requirements under other Recommendations.. These obligations set out in Recommendation 7 place strict requirements on all natural and legal persons, which are not risk-based. In the context of proliferation financing risk, risk-based measures by financial institutions and DNFBPs seek to reinforce and complement the full implementation of the strict requirements of Recommendation 7, by detecting and preventing the non-implementation, potential breach, or evasion of targeted financial sanctions. In determining the measures to mitigate proliferation financing risks in a sector, countries should consider the proliferation financing risks associated with the relevant sector. By adopting risk-based measures, competent authorities, financial institutions and DNFBPs should be able to ensure that these measures are commensurate with the risks identified, and that would enable them to make decisions on how to allocate their own resources in the most effective way.
  5. Financial institutions and DNFBPs should have in place processes to identify, assess, monitor, manage and mitigate proliferation financing risks*Countries may decide to exempt a particular type of financial institution or DNFBP from the requirements to identify, assess, monitor, manage and mitigate proliferation financing risks, provided there is a proven low risk of proliferation financing relating to such financial institutions or DNFBPs. However, full implementation of the targeted financial sanctions as required by Recommendation 7 is mandatory in all cases.. This may be done within the framework of their existing targeted financial sanctions and/or compliance programmes. Countries should ensure full implementation of Recommendation 7 in any risk scenario. Where there are higher risks, countries should require financial institutions and DNFBPs to take commensurate measures to manage and mitigate the risks. Where the risks are lower, they should ensure that the measures applied are commensurate with the level of risk, while still ensuring full implementation of the targeted financial sanctions as required by Recommendation 7.
  1. Obligations and decisions for countries
    ML/TF risks
    1. Assessing ML/TF risk - Countries*Where appropriate, AML/CFT risk assessments at a supra-national level should be taken into account when considering whether this obligation is satisfied. should For the purposes of assessing compliance with the FATF Recommendations, the word should has the same meaning as must. take appropriate steps to identify and assess the money laundering and terrorist financing risks for the countryAll references in the FATF Recommendations to country or countries apply equally to territories or jurisdictions., on an ongoing basis and in order to: (i) inform potential changes to the country’s AML/CFT regime, including changes to laws, regulations and other measures; (ii) assist in the allocation and prioritisation of AML/CFT resources by competent authoritiesCompetent authorities refers to all public authorities with designated responsibilities for combating money laundering and/or terrorist financing. In particular, this includes the FIU; the authorities that have the function of investigating and/or prosecuting money laundering, associated predicate offences and terrorist financing, and seizing/freezing and confiscating criminal assets; authorities receiving reports on cross-border transportation of currency & BNIs; and authorities that have AML/CFT supervisory or monitoring responsibilities aimed at ensuring compliance by financial institutions and DNFBPs with AML/CFT requirements. SRBs are not to be regarded as a competent authorities.; and (iii) make information available for AML/CFT risk assessments conducted by financial institutions and DNFBPs. Countries should keep the assessments up-to-date, and should have mechanisms to provide appropriate information on the results to all relevant competent authorities and self-regulatory bodies (SRBs), financial institutions and DNFBPs.
    2. Higher risk - Where countries identify higher risks, they should For the purposes of assessing compliance with the FATF Recommendations, the word should has the same meaning as must. ensure that their AML/CFT regime addresses these higher risks, and, without prejudice to any other measures taken by countries to mitigate these higher risks, either prescribe that financial institutions Financial institutions means any natural or legal person who conducts as abusiness one or more of the following activities or operations for or on behalf of a customer:
      1) Acceptance of deposits and other repayable funds from the public.
      2) Lending.
      3) Financial leasing.
      4) Money or value transfer services.
      5) Issuing and managing means of payment (e.g. credit and debit cards,cheques, traveller's cheques, money orders and bankers' drafts, electronic money).
      6) Financial guarantees and commitments.
      7) Trading in:
      a) money market instruments (cheques, bills, certificates of deposit, derivatives etc.);
      b) foreign exchange;
      c) exchange, interest rate and index instruments;
      d) transferable securities;
      8) Participation in securities issues and the provision of financial services related to such issues.
      9) Individual and collective portfolio management.
      11) Otherwise investing, administering or managing funds or money on behalf of other persons.
      12) Underwriting and placement of life insurance and other investment related insurance.
      13) Money and currency changing.
      and DNFBPs take enhanced measures to manage and mitigate the risks, or ensure that this information is incorporated into risk assessments carried out by financial institutions and DNFBPs, in order to manage and mitigate risks appropriately. Where the FATF Recommendations identify higher risk activities for which enhanced or specific measures are required, all such measures must be applied, although the extent of such measures may vary according to the specific level of risk.
    3. Lower risk Countries may decide to allow simplified measures for some of the FATF Recommendations requiring financial institutions or DNFBPs to take certain actions, provided that a lower risk has been identified, and this is consistent with the country’s assessment of its money laundering and terrorist financing risks, as referred to in paragraph 3.

      Independent of any decision to specify certain lower risk categories in line with the previous paragraph, countries may also allow financial institutions and DNFBPs to apply simplified customer due diligence (CDD) measures, provided that the requirements set out in section B below (“Obligations and decisions for financial institutions and DNFBPs”), and in paragraph 7 below, are met.

    4. Exemptions Countries may decide not to apply some of the FATF Recommendations requiring financial institutions or DNFBPs to take certain actions, provided:
      1. there is a proven low risk of money laundering and terrorist financing; this occurs in strictly limited and justified circumstances; and it relates to a particular type of financial institution or activity, or DNFBP; or
      2. a financial activity (other than the transferring of money or value) is carried out by a natural or legal person on an occasional or very limited basis (having regard to quantitative and absolute criteria), such that there is low risk of money laundering and terrorist financing.

      While the information gathered may vary according to the level of risk, the requirements of Recommendation 11 to retain information should For the purposes of assessing compliance with the FATF Recommendations, the word should has the same meaning as must. apply to whatever information is gathered.

    5. Supervision and monitoring of risk - Supervisors Supervisors refers to the designated competent authorities or non-public bodies with responsibilities aimed at ensuring compliance by financial institutions (“financial supervisors” 60Including Core Principles supervisors who carry out supervisory functions that are related to the implementation of the FATF Recommendations.) and/or DNFBPs with requirements to combat money laundering and terrorist financing. Non-public bodies (which could include certain types of SRBs) should have the power to supervise and sanction financial institutions or DNFBPs in relation to the AML/CFT requirements. These nonpublic bodies should also be empowered by law to exercise the functions they perform, and be supervised by a competent authority in relation to such functions. (or SRBs for relevant DNFBPs sectors) should ensure that financial institutions Financial institutions means any natural or legal person who conducts as abusiness one or more of the following activities or operations for or on behalf of a customer:
      1) Acceptance of deposits and other repayable funds from the public.
      2) Lending.
      3) Financial leasing.
      4) Money or value transfer services.
      5) Issuing and managing means of payment (e.g. credit and debit cards,cheques, traveller's cheques, money orders and bankers' drafts, electronic money).
      6) Financial guarantees and commitments.
      7) Trading in:
      a) money market instruments (cheques, bills, certificates of deposit, derivatives etc.);
      b) foreign exchange;
      c) exchange, interest rate and index instruments;
      d) transferable securities;
      8) Participation in securities issues and the provision of financial services related to such issues.
      9) Individual and collective portfolio management.
      11) Otherwise investing, administering or managing funds or money on behalf of other persons.
      12) Underwriting and placement of life insurance and other investment related insurance.
      13) Money and currency changing.
      and DNFBPs are effectively implementing the obligations set out below. When carrying out this function, supervisors Supervisors refers to the designated competent authorities or non-public bodies with responsibilities aimed at ensuring compliance by financial institutions (“financial supervisors” 60Including Core Principles supervisors who carry out supervisory functions that are related to the implementation of the FATF Recommendations.) and/or DNFBPs with requirements to combat money laundering and terrorist financing. Non-public bodies (which could include certain types of SRBs) should have the power to supervise and sanction financial institutions or DNFBPs in relation to the AML/CFT requirements. These nonpublic bodies should also be empowered by law to exercise the functions they perform, and be supervised by a competent authority in relation to such functions. and SRBs should For the purposes of assessing compliance with the FATF Recommendations, the word should has the same meaning as must., as and when required in accordance with the Interpretive Notes to Recommendations 26 and 28, review the money laundering and terrorist financing risk profiles and risk assessments prepared by financial institutions and DNFBPs, and take the result of this review into consideration.
    6. PF risk
    7. Assessing PF risk – Countries*Where appropriate, PF risk assessments at a supra-national level should be taken into account when considering whether this obligation is satisfied. should take appropriate steps to identify and assess the proliferation financing risks for the country, on an ongoing basis and in order to: (i) inform potential changes to the country’s CPF regime, including changes to laws, regulations and other measures; (ii) assist in the allocation and prioritisation of CPF resources by competent authorities; and (iii) make information available for PF risk assessments conducted by financial institutions and DNFBPs. Countries should keep the assessments up-to-date, and should have mechanisms to provide appropriate information on the results to all relevant competent authorities and SRBs, financial institutions and DNFBPs.
    8. Mitigating PF risk - Countries should take appropriate steps to manage and mitigate the proliferation financing risks that they identify. Countries should develop an understanding of the means of potential breaches, evasion and non-implementation of targeted financial sanctions present in their countries that can be shared within and across competent authorities and with the private sector. Countries should ensure that financial institutions and DNFBPs take steps to identify circumstances, which may present higher risks and ensure that their CPF regime addresses these risks. Countries should ensure full implementation of Recommendation 7 in any risk scenario. Where there are higher risks, countries should require financial institutions and DNFBPs to take commensurate measures to manage and mitigate these risks. Correspondingly, where the risks are lower, they should ensure that the measures applied are commensurate with the level of risk, while still ensuring full implementation of the targeted financial sanctions as required by Recommendation 7.
  2. Obligations and decisions for financial institutions and DNFBPs
    ML/TF risks
    1. Assessing MF/TF risks - Financial institutions and DNFBPs should For the purposes of assessing compliance with the FATF Recommendations, the word should has the same meaning as must. be required to take appropriate steps to identify and assess their money laundering and terrorist financing risks (for customers, countries or geographic areas; and products, services, transactions or delivery channels). They should document those assessments in order to be able to demonstrate their basis, keep these assessments up to date, and have appropriate mechanisms to provide risk assessment information to competent authoritiesCompetent authorities refers to all public authorities with designated responsibilities for combating money laundering and/or terrorist financing. In particular, this includes the FIU; the authorities that have the function of investigating and/or prosecuting money laundering, associated predicate offences and terrorist financing, and seizing/freezing and confiscating criminal assets; authorities receiving reports on cross-border transportation of currency & BNIs; and authorities that have AML/CFT supervisory or monitoring responsibilities aimed at ensuring compliance by financial institutions and DNFBPs with AML/CFT requirements. SRBs are not to be regarded as a competent authorities. and SRBs. The nature and extent of any assessment of money laundering and terrorist financing risks should be appropriate to the nature and size of the business. Financial institutions and DNFBPs should always understand their money laundering and terrorist financing risks, but competent authorities or SRBs may determine that individual documented risk assessments are not required, if the specific risks inherent to the sector are clearly identified and understood.
    2. Risk management and mitigation - Financial institutions and DNFBPs should be required to have policies, controls and procedures that enable them to manage and mitigate effectively the risks that have been identified (either by the countryAll references in the FATF Recommendations to country or countries apply equally to territories or jurisdictions. or by the financial institution or DNFBP). They should be required to monitor the implementation of those controls and to enhance them, if necessary. The policies, controls and procedures should be approved by senior management, and the measures taken to manage and mitigate the risks (whether higher or lower) should be consistent with national requirements and with guidance from competent authorities and SRBs.
    3. Higher risk - Where higher risks are identified financial institutions and DNFBPs should be required to take enhanced measures to manage and mitigate the risks.
    4. Lower risk - Where lower risks are identified, countries may allow financial institutions and DNFBPs to take simplified measures to manage and mitigate those risks.
    5. When assessing risk, financial institutions and DNFBPs should consider all the relevant risk factors before determining what is the level of overall risk and the appropriate level of mitigation to be applied. Financial institutions and DNFBPs may differentiate the extent of measures, depending on the type and level of risk for the various risk factors (e.g. in a particular situation, they could apply normal CDD for customer acceptance measures, but enhanced CDD for ongoing monitoring, or vice versa).
    6. PF risk
    7. Assessing PF risk - Financial institutions and DNFBPs should be required to take appropriate steps, to identify and assess their proliferation financing risks. This may be done within the framework of their existing targeted financial sanctions and/or compliance programmes. They should document those assessments in order to be able to demonstrate their basis, keep these assessments up to date, and have appropriate mechanisms to provide risk assessment information to competent authorities and SRBs. The nature and extent of any assessment of proliferation financing risks should be appropriate to the nature and size of the business. Financial institutions and DNFBPs should always understand their proliferation financing risks, but competent authorities or SRBs may determine that individual documented risk assessments are not required, if the specific risks inherent to the sector are clearly identified and understood.
    8. Mitigating PF risk - Financial institutions and DNFBPs should have policies, controls and procedures to manage and mitigate effectively the risks that have been identified. This may be done within the framework of their existing targeted financial sanctions and/or compliance programmes. They should be required to monitor the implementation of those controls and to enhance them, if necessary. The policies, controls and procedures should be approved by senior management, and the measures taken to manage and mitigate the risks (whether higher or lower) should be consistent with national requirements and with guidance from competent authorities and SRBs. Countries should ensure full implementation of Recommendation 7 in any risk scenario. Where there are higher risks, countries should require financial institutions and DNFBPs to take commensurate measures to manage and mitigate the risks (i.e. introducing enhanced controls aimed at detecting possible breaches, non-implementation or evasion of targeted financial sanctions under Recommendation 7). Correspondingly, where the risks are lower, they should ensure that those measures are commensurate with the level of risk, while still ensuring full implementation of the targeted financial sanctions as required by Recommendation 7.

INTERPRETIVE NOTE TO RECOMMENDATION 40 (OTHER FORMS OF INTERNATIONAL COOPERATION)

  • A.
    PRINCIPLES APPLICABLE TO ALL FORMS OF INTERNATIONAL COOPERATION

    Obligations on requesting authorities

    1. When making requests for cooperation, competent authoritiesCompetent authorities refers to all public authorities with designated responsibilities for combating money laundering and/or terrorist financing. In particular, this includes the FIU; the authorities that have the function of investigating and/or prosecuting money laundering, associated predicate offences and terrorist financing, and seizing/freezing and confiscating criminal assets; authorities receiving reports on cross-border transportation of currency & BNIs; and authorities that have AML/CFT supervisory or monitoring responsibilities aimed at ensuring compliance by financial institutions and DNFBPs with AML/CFT requirements. SRBs are not to be regarded as a competent authorities. should For the purposes of assessing compliance with the FATF Recommendations, the word should has the same meaning as must. make their best efforts to provide complete factual and, as appropriate, legal information, including indicating any need for urgency, to enable a timely and efficient execution of the request, as well as the foreseen use of the information requested. Upon request, requesting competent authorities should provide feedback to the requested competent authority on the use and usefulness of the information obtained.

    Unduly restrictive measures

    1. Countries should not prohibit or place unreasonable or unduly restrictive conditions on the provision of exchange of information or assistance. In particular competent authorities should not refuse a request for assistance on the grounds that:
      1. the request is also considered to involve fiscal matters; and/or
      2. laws require financial institutions Financial institutions means any natural or legal person who conducts as abusiness one or more of the following activities or operations for or on behalf of a customer:
        1) Acceptance of deposits and other repayable funds from the public.
        2) Lending.
        3) Financial leasing.
        4) Money or value transfer services.
        5) Issuing and managing means of payment (e.g. credit and debit cards,cheques, traveller's cheques, money orders and bankers' drafts, electronic money).
        6) Financial guarantees and commitments.
        7) Trading in:
        a) money market instruments (cheques, bills, certificates of deposit, derivatives etc.);
        b) foreign exchange;
        c) exchange, interest rate and index instruments;
        d) transferable securities;
        8) Participation in securities issues and the provision of financial services related to such issues.
        9) Individual and collective portfolio management.
        11) Otherwise investing, administering or managing funds or money on behalf of other persons.
        12) Underwriting and placement of life insurance and other investment related insurance.
        13) Money and currency changing.
        or DNFBPs (except where the relevant information that is sought is held in circumstances where legal privilege or legal professional secrecy applies) to maintain secrecy or confidentiality; and/or
      3. there is an inquiry, investigation or proceeding underway in the requested countryAll references in the FATF Recommendations to country or countries apply equally to territories or jurisdictions., unless the assistance would impede that inquiry, investigation or proceeding; and/or
      4. the nature or status (civil, administrative, law enforcement, etc.) of the requesting counterpart authority is different from that of its foreign counterpart.

    Safeguards on information exchanged

    1. Exchanged information should be used only for the purpose for which the information was sought or provided. Any dissemination of the information to other authorities or third parties For the purposes of Recommendations 6 and 7, the term third parties includes, but is not limited to, financial institutions and DNFBPs. Please also refer to the IN to Recommendation 17., or any use of this information for administrative, investigative, prosecutorial or judicial purposes, beyond those originally approved, should be subject to prior authorisation by the requested competent authority.
    2. Competent authoritiesCompetent authorities refers to all public authorities with designated responsibilities for combating money laundering and/or terrorist financing. In particular, this includes the FIU; the authorities that have the function of investigating and/or prosecuting money laundering, associated predicate offences and terrorist financing, and seizing/freezing and confiscating criminal assets; authorities receiving reports on cross-border transportation of currency & BNIs; and authorities that have AML/CFT supervisory or monitoring responsibilities aimed at ensuring compliance by financial institutions and DNFBPs with AML/CFT requirements. SRBs are not to be regarded as a competent authorities. should maintain appropriate confidentiality for any request for cooperation and the information exchanged, in order to protect the integrity of the investigation or inquiry*Information may be disclosed if such disclosure is required to carry out the request for cooperation., consistent with both parties' obligations concerning privacy and data protection. At a minimum, competent authorities should protect exchanged information in the same manner as they would protect similar information received from domestic sources. Countries should establish controls and safeguards to ensure that information exchanged by competent authorities is used only in the manner authorised. Exchange of information should take place in a secure way, and through reliable channels or mechanisms. Requested competent authorities may, as appropriate, refuse to provide information if the requesting competent authority cannot protect the information effectively.

    Power to search for information

    1. Competent authoritiesCompetent authorities refers to all public authorities with designated responsibilities for combating money laundering and/or terrorist financing. In particular, this includes the FIU; the authorities that have the function of investigating and/or prosecuting money laundering, associated predicate offences and terrorist financing, and seizing/freezing and confiscating criminal assets; authorities receiving reports on cross-border transportation of currency & BNIs; and authorities that have AML/CFT supervisory or monitoring responsibilities aimed at ensuring compliance by financial institutions and DNFBPs with AML/CFT requirements. SRBs are not to be regarded as a competent authorities. should be able to conduct inquiries on behalf of a foreign counterpart, and exchange with their foreign counterparts Foreign counterparts refers to foreign competent authorities that exercise similar responsibilities and functions in relation to the cooperation which is sought, even where such foreign competent authorities have a different nature or status (e.g. depending on the country, AML/CFT supervision of certain financial sectors may be performed by a supervisor that also has prudential supervisory responsibilities or by a supervisory unit of the FIU). all information that would be obtainable by them if such inquiries were being carried out domestically.
  • B.
    PRINCIPLES APPLICABLE TO SPECIFIC FORMS OF INTERNATIONAL COOPERATION
    1. The general principles above should apply to all forms of exchange of information between counterparts or non-counterparts, subject to the paragraphs set out below.

    Exchange of information between FIUs

    1. FIUs should exchange information with foreign FIUs, regardless of their respective status; be it of an administrative, law enforcement, judicial or other nature. To this end, FIUs should For the purposes of assessing compliance with the FATF Recommendations, the word should has the same meaning as must. have an adequate legal basis for providing cooperation on money laundering, associated predicate offences and terrorist financing Terrorist financing is the financing of terrorist acts, and of terrorists and terrorist organisations..
    2. When making a request for cooperation, FIUs should make their best efforts to provide complete factual, and, as appropriate, legal information, including the description of the case being analysed and the potential link to the requested countryAll references in the FATF Recommendations to country or countries apply equally to territories or jurisdictions.. Upon request and whenever possible, FIUs should provide feedback to their foreign counterparts Foreign counterparts refers to foreign competent authorities that exercise similar responsibilities and functions in relation to the cooperation which is sought, even where such foreign competent authorities have a different nature or status (e.g. depending on the country, AML/CFT supervision of certain financial sectors may be performed by a supervisor that also has prudential supervisory responsibilities or by a supervisory unit of the FIU). on the use of the information provided, as well as on the outcome of the analysis conducted, based on the information provided.
    3. FIUs should have the power to exchange:
      1. all information required to be accessible or obtainable directly or indirectly by the FIU under the FATF Recommendations, in particular under Recommendation 29; and
      2. any other information which they have the power to obtain or access, directly or indirectly, at the domestic level, subject to the principle of reciprocity.

    Exchange of information between financial supervisors Supervisors refers to the designated competent authorities or non-public bodies with responsibilities aimed at ensuring compliance by financial institutions ("financial supervisors" 60Including Core Principles supervisors who carry out supervisory functions that are related to the implementation of the FATF Recommendations.) and/or DNFBPs with requirements to combat money laundering and terrorist financing. Non-public bodies (which could include certain types of SRBs) should have the power to supervise and sanction financial institutions or DNFBPs in relation to the AML/CFT requirements. These nonpublic bodies should also be empowered by law to exercise the functions they perform, and be supervised by a competent authority in relation to such functions.*This refers to financial supervisors which are competent authorities.

    1. Financial supervisors should cooperate with their foreign counterparts Foreign counterparts refers to foreign competent authorities that exercise similar responsibilities and functions in relation to the cooperation which is sought, even where such foreign competent authorities have a different nature or status (e.g. depending on the country, AML/CFT supervision of certain financial sectors may be performed by a supervisor that also has prudential supervisory responsibilities or by a supervisory unit of the FIU). , regardless of their respective nature or status. Efficient cooperation between financial supervisors aims at facilitating effective AML/CFT supervision of financial institutionsFinancial institutions means any natural or legal person who conducts as abusiness one or more of the following activities or operations for or on behalf of a customer:
      1) Acceptance of deposits and other repayable funds from the public.
      2) Lending.
      3) Financial leasing.
      4) Money or value transfer services.
      5) Issuing and managing means of payment (e.g. credit and debit cards,cheques, traveller's cheques, money orders and bankers' drafts, electronic money).
      6) Financial guarantees and commitments.
      7) Trading in:
      a) money market instruments (cheques, bills, certificates of deposit, derivatives etc.);
      b) foreign exchange;
      c) exchange, interest rate and index instruments;
      d) transferable securities;
      8) Participation in securities issues and the provision of financial services related to such issues.
      9) Individual and collective portfolio management.
      11) Otherwise investing, administering or managing funds or money on behalf of other persons.
      12) Underwriting and placement of life insurance and other investment related insurance.
      13) Money and currency changing.
      . To this end, financial supervisors should have an adequate legal basis for providing cooperation, consistent with the applicable international standards for supervision, in particular with respect to the exchange of supervisory information related to or relevant for AML/CFT purposes.
    2. Financial supervisors should be able to exchange with foreign counterparts Foreign counterparts refers to foreign competent authorities that exercise similar responsibilities and functions in relation to the cooperation which is sought, even where such foreign competent authorities have a different nature or status (e.g. depending on the country, AML/CFT supervision of certain financial sectors may be performed by a supervisor that also has prudential supervisory responsibilities or by a supervisory unit of the FIU). information domestically available to them, including information held by financial institutions, and in a manner proportionate to their respective needs. Financial supervisors should be able to exchange the following types of information when relevant for AML/CFT purposes, in particular with other relevant supervisors that have a shared responsibility for financial institutions operating in the same group:
      1. Regulatory information, such as information on the domestic regulatory system, and general information on the financial sectors.
      2. Prudential information, in particular for Core Principle Supervisors, such as information on the financial institution's business activities, beneficial ownership, management, and fit and properness.
      3. AML/CFT information, such as internal AML/CFT procedures and policies of financial institutions, customer due diligence information, customer files, samples of accountsReferences to "accounts" should be read as including other similar business relationships between financial institutions and their customers. and transaction information.
    3. Financial supervisors Supervisors refers to the designated competent authorities or non-public bodies with responsibilities aimed at ensuring compliance by financial institutions ("financial supervisors" 60Including Core Principles supervisors who carry out supervisory functions that are related to the implementation of the FATF Recommendations.) and/or DNFBPs with requirements to combat money laundering and terrorist financing. Non-public bodies (which could include certain types of SRBs) should have the power to supervise and sanction financial institutions or DNFBPs in relation to the AML/CFT requirements. These nonpublic bodies should also be empowered by law to exercise the functions they perform, and be supervised by a competent authority in relation to such functions. should be able to conduct inquiries on behalf of foreign counterparts Foreign counterparts refers to foreign competent authorities that exercise similar responsibilities and functions in relation to the cooperation which is sought, even where such foreign competent authorities have a different nature or status (e.g. depending on the country, AML/CFT supervision of certain financial sectors may be performed by a supervisor that also has prudential supervisory responsibilities or by a supervisory unit of the FIU). , and, as appropriate, to authorise or facilitate the ability of foreign counterparts to conduct inquiries themselves in the country, in order to facilitate effective group supervision.
    4. Any dissemination of information exchanged or use of that information for supervisory and non- supervisory purposes, should be subject to prior authorisation by the requested financial supervisor, unless the requesting financial supervisor is under a legal obligation to disclose or report the information. In such cases, at a minimum, the requesting financial supervisor should promptly inform the requested authority of this obligation. The prior authorisation includes any deemed prior authorisation under a Memorandum of Understanding or the Multi-lateral Memorandum of Understanding issued by a core principlesCore Principles refers to the Core Principles for Effective Banking Supervision issued by the Basel Committee on Banking Supervision, the Objectives and Principles for Securities Regulation issued by the International Organization of Securities Commissions, and the Insurance Supervisory Principles issued by the International Association of Insurance Supervisors. standard-setter applied to information exchanged under a Memorandum of Understanding or the Multi-lateral Memorandum of Understanding.

    Exchange of information between law enforcement authorities

    1. Law enforcement authorities should be able to exchange domestically available information with foreign counterparts Foreign counterparts refers to foreign competent authorities that exercise similar responsibilities and functions in relation to the cooperation which is sought, even where such foreign competent authorities have a different nature or status (e.g. depending on the country, AML/CFT supervision of certain financial sectors may be performed by a supervisor that also has prudential supervisory responsibilities or by a supervisory unit of the FIU). for intelligence or investigative purposes relating to money laundering, associated predicate offences or terrorist financing, including the identification and tracing of the proceeds Proceeds refers to any property derived from or obtained, directly or indirectly, through the commission of an offence. and instrumentalities of crime.
    2. Law enforcement authorities should also be able to use their powers, including any investigative techniques available in accordance with their domestic law, to conduct inquiries and obtain information on behalf of foreign counterparts. The regimes or practices in place governing such law enforcement cooperation, such as the agreements between Interpol, Europol or Eurojust and individual countries, should govern any restrictions on use imposed by the requested law enforcement authority.
    3. Law enforcement authorities should be able to form joint investigative teams to conduct cooperative investigations, and, when necessary, countries should establish bilateral or multilateral arrangements to enable such joint investigations. Countries are encouraged to join and support existing AML/CFT law enforcement networks, and develop bi-lateral contacts with foreign law enforcement agencies, including placing liaison officers abroad, in order to facilitate timely and effective cooperation.

    Exchange of information between non-counterparts

    1. Countries should For the purposes of assessing compliance with the FATF Recommendations, the word should has the same meaning as must. permit their competent authoritiesCompetent authorities refers to all public authorities with designated responsibilities for combating money laundering and/or terrorist financing. In particular, this includes the FIU; the authorities that have the function of investigating and/or prosecuting money laundering, associated predicate offences and terrorist financing, and seizing/freezing and confiscating criminal assets; authorities receiving reports on cross-border transportation of currency & BNIs; and authorities that have AML/CFT supervisory or monitoring responsibilities aimed at ensuring compliance by financial institutions and DNFBPs with AML/CFT requirements. SRBs are not to be regarded as a competent authorities. to exchange information indirectly with non-counterparts, applying the relevant principles above. Indirect exchange of information refers to the requested information passing from the requested authority through one or more domestic or foreign authorities before being received by the requesting authority. Such an exchange of information and its use may be subject to the authorisation of one or more competent authorities of the requested countryAll references in the FATF Recommendations to country or countries apply equally to territories or jurisdictions.. The competent authority that requests the information should always make it clear for what purpose and on whose behalf the request is made.
    2. Countries are also encouraged to permit a prompt and constructive exchange of information directly with non-counterparts.