(1) Obliged entities under section 2 may only process personal data to the extent necessary for the purposes of the prevention of money laundering and terrorist financing on the basis of this Act.
(2) Insofar as an obliged entity under section 2 subject to the provisions of this Act transmits personal data for purposes defined in subsection (1) to the competent supervisory authorities or the persons and institutions used by the competent supervisory authorities in the performance of their functions, or to the Financial Intelligence Unit, the obligation to inform the data subject under Article 13(3) of Regulation (EU) 2016/679 and the data subject’s right to obtain information under Article 15 of Regulation (EU) 2016/679 do not apply.
(3) Subsections (1) and (2) apply, with the necessary modifications, to third parties within the meaning of section 17 used by an obliged entity to fulfil the general due diligence requirements under 10 (1) nos. 1 to 4.
2020-10-13