Article 47 — FIU.net

Financial crimeLevel 1RegulationAMLAIn forceVerifiedOfficial source

1.The Authority shall ensure adequate, uninterrupted and secure hosting of FIU.net, and ensure the management, maintenance and development of FIU.net. Taking into account the needs of FIUs, the Authority shall ensure that the most advanced and secure technology available is used for FIU.net, subject to a cost-benefit analysis.

Copy link

47(2)

2.The Authority shall ensure uninterrupted functioning of FIU.net and keep it up-to-date. Where necessary to support or strengthen the exchange of information and cooperation between FIUs and based on the needs of FIUs, the Authority shall design and implement, or otherwise make available, upgraded or additional functionalities of FIU.net.

Copy link

47(3)

3.The Authority shall also be responsible for the following tasks relating to FIU.net:

Copy link

47(3)(a)

(a)implement appropriate technical and organisational measures to ensure a level of security that protects personal data;

Copy link

47(3)(b)

(b)plan, coordinate, manage and support any testing activities;

Copy link

47(3)(c)

(c)ensure adequate financial resources;

Copy link

47(3)(d)

(d)provide training on the technical use of FIU.net by end-users.

Copy link

47(4)

4.For the purposes of carrying out the tasks referred to in paragraphs 1, 2 and 3, the Authority shall be empowered to conclude or enter into legally binding contracts or agreements with third-party service providers, after appropriate audits of their security standards.

Copy link

47(5)

5.The Authority shall adopt and implement the measures necessary for the fulfilment of the tasks referred to in this Article, including a security plan, a business continuity plan and a disaster recovery plan for FIU.net.

Copy link

47(6)

6.The General Board in FIU composition, acting unanimously, may decide to suspend the access of an FIU, its counterpart in a third country, or a Union body, office or agency, to FIU.net where it has grounds to believe that such access would jeopardise the implementation of Chapter III of Directive (EU) 2024/1640 and the security and confidentiality of the information held by FIUs and exchanged through the FIU.net system, including where there are concerns in relation to an FIU’s lack of independence and autonomy.

Where the General Board in FIU composition adopts a decision suspending the access of an FIU to FIU.net, the General Board shall act unanimously by vote of all members of the General Board in FIU composition, except the head of the FIU in question.

The General Board in FIU composition shall define the criteria for the suspension of access to FIU.net and adopt rules of procedure for such suspension.

Copy link