PrivacySignal
GDPR / Intl

EDPB and AMLA to develop Joint Guidelines on partnerships for information sharing

EDPB · · EU · GDPR & International

The European Data Protection Board and the newly established Anti-Money Laundering Authority have announced a joint effort to develop guidelines on how financial institutions can share customer information to fight money laundering and terrorist financing without violating data protection rules. The collaboration stems from an explicit provision in the EU's AML Regulation allowing such information exchanges.

Why this matters: Banks and financial firms already collect enormous amounts of personal data. Now there is a formal EU push to make it easier for them to share that data with each other, all in the name of fighting financial crime. That is a legitimate goal. But bulk information sharing between institutions is exactly the kind of arrangement that can quietly erode financial privacy for ordinary people who are not suspected of anything. The joint guidelines will determine how much protection actually survives in practice. Watch what the rules say about consent, purpose limits, and who can be swept in.

Who should care: Lawyers · Privacy officers · AI governance · Compliance · General readers · Policy

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Related stories

GDPR / Intl
K keyt.com · · International

State Privacy Regulator Issues Second Decision Penalizing Out-of-State Data Broker

A state privacy regulator has issued its second enforcement decision against an out-of-state data broker, signaling continued regulatory action beyond its own borders. The decision adds to a pattern of state-level agencies asserting jurisdiction over companies that collect and sell resident data regardless of where those companies are based.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

#state-privacy#regulation#privacy Read original →
GDPR / Intl
Inside Privacy (Covington) · · International

French CNIL Publishes Note on Agentic AI and Data Protection

France's data protection authority, the CNIL, and the French AI and Digital Council released a joint exploratory note examining how existing data protection rules apply to agentic AI systems. The document is framed as an early-stage analysis rather than binding guidance.

Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy

#gdpr#ai#privacy Read original →
GDPR / Intl
T The National Law Review · · International

HOT OFF THE PRESSES: CalPrivacy Brings First Action Against a Data Broker Under Both the CCPA and Delete Act

California's privacy regulator has filed its first enforcement action against a data broker under both the California Consumer Privacy Act and the Delete Act, marking a significant step in the state's use of its data broker oversight tools.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

#state-privacy#privacy Read original →
GDPR / Intl
H Hunton Andrews Kurth LLP · · International

EDPB Calls for Review of EU-U.S. Data Privacy Framework After U.S. Supreme Court Decision on FTC Independence

The European Data Protection Board has called for a review of the EU-U.S. Data Privacy Framework following a U.S. Supreme Court ruling that affects the independence of the Federal Trade Commission, a key enforcement body underpinning the transatlantic data transfer agreement.

Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy

#gdpr#privacy Read original →
GDPR / Intl
Information Commissioner's Office · · UK

ICO statement on Upper Tribunal decision

I need to work carefully here — the excerpt gives almost nothing beyond the headline. I'll write only what the headline and source reasonably imply: the UK's Information Commissioner's Office issued a public statement following a ruling by the Upper Tribunal, which is an appellate body that hears ch

Who should care: Lawyers · Privacy officers · AI governance