Money Laundering: Review of the Reporting ... - Dematerialised ID
Money Laundering: Review of the Reporting ... - Dematerialised ID
Money Laundering: Review of the Reporting ... - Dematerialised ID
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
kpmg<br />
<strong>Review</strong> <strong>of</strong> <strong>the</strong> regime for handling Suspicious Activity Reports<br />
Report <strong>of</strong> recommendations<br />
KPMG LLP<br />
8.4 LEA access to and use <strong>of</strong> Elmer terminals<br />
Recommendation 17<br />
Access to Elmer terminals<br />
8.4.1 All FIUs should have an Elmer terminal, and all accredited FIs should have access rights<br />
to use <strong>the</strong> terminal. The largest LEAs should have <strong>the</strong> option to take a number <strong>of</strong> o<strong>the</strong>r<br />
terminals, subject to agreeing access protocols if <strong>the</strong>y have multiple access to Elmer.<br />
Whilst it would be inappropriate for <strong>the</strong> LEAs to have free access to all <strong>the</strong> types <strong>of</strong> data<br />
available on Elmer, FIUs should be allowed access to manage <strong>the</strong> SARs allocated to <strong>the</strong>m<br />
and held in <strong>the</strong>ir own queue and to conduct specific searches <strong>of</strong> all SARs on <strong>the</strong> Elmer<br />
database.<br />
Meeting <strong>the</strong> requirements <strong>of</strong> <strong>the</strong> Data Protection Act<br />
8.4.2 The Data Protection Act 1998 (“DPA”) permits NCIS to disclose SARs to o<strong>the</strong>r agencies<br />
if, inter alia, <strong>the</strong> disclosure is for “<strong>the</strong> prevention or detection <strong>of</strong> crime”. Initial legal<br />
advice provided to NCIS ECB states that<br />
“…for <strong>the</strong> investigating agency to have <strong>the</strong> benefit <strong>of</strong> an Elmer terminal <strong>the</strong>y give you<br />
an indemnity and <strong>the</strong>y would also have contractually to undertake to maintain <strong>the</strong><br />
confidentiality <strong>of</strong> <strong>the</strong> information <strong>the</strong>reby gleaned”. 15<br />
8.4.3 Access protocols should <strong>the</strong>refore be agreed between ECB and <strong>the</strong> LEAs which will build<br />
this DPA and confidentiality criteria into <strong>the</strong> legal relationship between <strong>the</strong> different<br />
parties. O<strong>the</strong>r safeguards to <strong>the</strong> data held on Elmer and accessible by LEAs should<br />
include:<br />
• The reasons for all search requests should be recorded by <strong>the</strong> LEA on Elmer, based<br />
on a number <strong>of</strong> options all linked to “<strong>the</strong> prevention or detection <strong>of</strong> crime”.<br />
• ECB should <strong>the</strong>n monitor compliance with <strong>the</strong> protocols and <strong>the</strong> reasons given for <strong>the</strong><br />
use made <strong>of</strong> Elmer data.<br />
8.4.4 Implementation <strong>of</strong> <strong>the</strong> range <strong>of</strong> KPMG recommendations will, over time, ensure that<br />
<strong>the</strong>re is a reduction in low quality SARs and those with inadequate reason for suspicion<br />
on Elmer, <strong>the</strong>reby streng<strong>the</strong>ning fur<strong>the</strong>r <strong>the</strong> position under <strong>the</strong> DPA.<br />
8.4.5 ECB will be responsible for ensuring that it has taken appropriate legal advice on its legal<br />
position prior to agreeing <strong>the</strong> relevant protocols. ECB should also enter negotiations with<br />
industry representatives to ensure that <strong>the</strong>se arrangements and use <strong>of</strong> data are appropriate<br />
and, where necessary, renegotiate <strong>the</strong> relevant agreements.<br />
Managing <strong>the</strong> SAR queue - LEA decisions on which SARs should be developed<br />
8.4.6 Individual FIs within FIUs should review <strong>the</strong> queue <strong>of</strong> SARs in Elmer and decide which<br />
ones should be developed into intelligence packages and which should be actioned<br />
immediately (e.g. VAT Carousel fraud) but not developed. The LEA will be able to<br />
15 Letter from Winckworth Sherwood to NCIS 25 November 2002.<br />
jo/fh/519 73