04.05.2015 Views

Money Laundering: Review of the Reporting ... - Dematerialised ID

Money Laundering: Review of the Reporting ... - Dematerialised ID

Money Laundering: Review of the Reporting ... - Dematerialised ID

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

kpmg<br />

<strong>Review</strong> <strong>of</strong> <strong>the</strong> regime for handling Suspicious Activity Reports<br />

Report <strong>of</strong> recommendations<br />

KPMG LLP<br />

8.4 LEA access to and use <strong>of</strong> Elmer terminals<br />

Recommendation 17<br />

Access to Elmer terminals<br />

8.4.1 All FIUs should have an Elmer terminal, and all accredited FIs should have access rights<br />

to use <strong>the</strong> terminal. The largest LEAs should have <strong>the</strong> option to take a number <strong>of</strong> o<strong>the</strong>r<br />

terminals, subject to agreeing access protocols if <strong>the</strong>y have multiple access to Elmer.<br />

Whilst it would be inappropriate for <strong>the</strong> LEAs to have free access to all <strong>the</strong> types <strong>of</strong> data<br />

available on Elmer, FIUs should be allowed access to manage <strong>the</strong> SARs allocated to <strong>the</strong>m<br />

and held in <strong>the</strong>ir own queue and to conduct specific searches <strong>of</strong> all SARs on <strong>the</strong> Elmer<br />

database.<br />

Meeting <strong>the</strong> requirements <strong>of</strong> <strong>the</strong> Data Protection Act<br />

8.4.2 The Data Protection Act 1998 (“DPA”) permits NCIS to disclose SARs to o<strong>the</strong>r agencies<br />

if, inter alia, <strong>the</strong> disclosure is for “<strong>the</strong> prevention or detection <strong>of</strong> crime”. Initial legal<br />

advice provided to NCIS ECB states that<br />

“…for <strong>the</strong> investigating agency to have <strong>the</strong> benefit <strong>of</strong> an Elmer terminal <strong>the</strong>y give you<br />

an indemnity and <strong>the</strong>y would also have contractually to undertake to maintain <strong>the</strong><br />

confidentiality <strong>of</strong> <strong>the</strong> information <strong>the</strong>reby gleaned”. 15<br />

8.4.3 Access protocols should <strong>the</strong>refore be agreed between ECB and <strong>the</strong> LEAs which will build<br />

this DPA and confidentiality criteria into <strong>the</strong> legal relationship between <strong>the</strong> different<br />

parties. O<strong>the</strong>r safeguards to <strong>the</strong> data held on Elmer and accessible by LEAs should<br />

include:<br />

• The reasons for all search requests should be recorded by <strong>the</strong> LEA on Elmer, based<br />

on a number <strong>of</strong> options all linked to “<strong>the</strong> prevention or detection <strong>of</strong> crime”.<br />

• ECB should <strong>the</strong>n monitor compliance with <strong>the</strong> protocols and <strong>the</strong> reasons given for <strong>the</strong><br />

use made <strong>of</strong> Elmer data.<br />

8.4.4 Implementation <strong>of</strong> <strong>the</strong> range <strong>of</strong> KPMG recommendations will, over time, ensure that<br />

<strong>the</strong>re is a reduction in low quality SARs and those with inadequate reason for suspicion<br />

on Elmer, <strong>the</strong>reby streng<strong>the</strong>ning fur<strong>the</strong>r <strong>the</strong> position under <strong>the</strong> DPA.<br />

8.4.5 ECB will be responsible for ensuring that it has taken appropriate legal advice on its legal<br />

position prior to agreeing <strong>the</strong> relevant protocols. ECB should also enter negotiations with<br />

industry representatives to ensure that <strong>the</strong>se arrangements and use <strong>of</strong> data are appropriate<br />

and, where necessary, renegotiate <strong>the</strong> relevant agreements.<br />

Managing <strong>the</strong> SAR queue - LEA decisions on which SARs should be developed<br />

8.4.6 Individual FIs within FIUs should review <strong>the</strong> queue <strong>of</strong> SARs in Elmer and decide which<br />

ones should be developed into intelligence packages and which should be actioned<br />

immediately (e.g. VAT Carousel fraud) but not developed. The LEA will be able to<br />

15 Letter from Winckworth Sherwood to NCIS 25 November 2002.<br />

jo/fh/519 73

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!