A-P08 · TOPIC · financial-crime-data-rightsGRA dossier · service level R0
GRAFinancial Crime and Fraud RiskIn development
Topic dossier · Financial Crime and Fraud Risk

Financial crime data rights

Financial crime controls collect, analyse and share large amounts of personal data, and can close accounts or block payments. These powers affect privacy, access to financial services and the right to explanation and redress. De-risking excludes whole groups. This page sets out how financial crime controls interact with data protection and rights, how effects are measured, and who decides the balance.

Make an enquiry Back to Topics
In this dossier7 parts
  1. 01In briefThe short answer
  2. 02The questionFinancial crime data rights: how the risk develops
  3. 03Key termsTerms used on this page
  4. 04IndicatorsWhat is measured, and how well
  5. 05CanvasFrom sources to decisions
  6. 06SourcesWhere the evidence comes from
  7. 07DecisionsWho decides, and what the evidence serves

GRA · In development · service level R0

01In brief

The short answer.

Financial crime controls and data rights describes the tension between monitoring, screening and sharing data to fight crime and the rights of customers to privacy, access to services and explanation. De-risking and tipping-off rules sharpen it. Legislators, data protection authorities, compliance functions and ombudsmen hold the decisions.

02Geography

Connected activity in Mexico.

Night-time lights and population density, the footprint of electrified, connected activity, framed on Mexico; each layer is a dated NASA product.

The interactive map needs JavaScript; the layer list and sources are below.

Layers 2

Connected activity

Latest available

NASA GIBS / EOSDIS · ASTER GDEM (METI, NASA) · Natural Earth

Loading the latest NASA imagery.

Drag to move. Ctrl or ⌘ and scroll, pinch or the buttons to zoom; hover for the values under the pointer; reset returns to the region.

Night-time lights and population density, the footprint of electrified, connected activity, framed on Mexico.Satellite and model products as NASA publishes them, each with its own date; indicators, not assessments of any place; claim ceiling INTEGRATED.

Data: NASA GIBS · ASTER GDEM · Natural EarthSources and licences

  • We acknowledge the use of imagery provided by services from NASA's Global Imagery Browse Services (GIBS), part of NASA's Earth Science Data and Information System (ESDIS). Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). NASA open data
  • We acknowledge the use of imagery provided by services from NASA's Global Imagery Browse Services (GIBS), part of NASA's Earth Science Data and Information System (ESDIS). Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). NASA open data
  • VIIRS Black Marble night-time lights, NASA Goddard Space Flight Center; distributed by the NASA Level-1 and Atmosphere Archive and Distribution System (LAADS DAAC); imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). NASA open data
  • Center for International Earth Science Information Network (CIESIN), Columbia University. 2018. Gridded Population of the World, Version 4 (GPWv4): Population Density, Revision 11. NASA Socioeconomic Data and Applications Center (SEDAC). Licensed under CC BY 4.0. Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). CC BY 4.0
  • VIIRS near-real-time products (flood, land surface temperature, snow cover, corrected reflectance), NASA LANCE; imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). NASA open data
  • ASTER GDEM is a product of METI and NASA (ASTER Global Digital Elevation Model V003, NASA LP DAAC); imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). NASA open data
  • Made with Natural Earth. Free vector and raster map data @ naturalearthdata.com. Public domain
  • Globe: MapLibre GL JS 6.9.1, BSD-3-Clause, © MapLibre contributors.

Layers and dates

  • Night-time lights, daily: VIIRS Black Marble (VNP46A2), NASA LAADS DAAC · 12 Oct 2026
  • Population density, 2020: Population: CIESIN, Columbia University, Gridded Population of the World v4.11 (2018), NASA SEDAC, CC BY 4.0 · static
  • True colour: VIIRS NOAA-20 corrected reflectance, NASA LANCE · 13 Oct 2026

03Console

Alert triage and investigations, in outline.

The working screen behind this subject: its structure, terms and states. Names are placeholders and values illustrative.

Alert triage and investigations

Financial crime data rights · Bank B monitoring · Today

  • Alerts today
    1807
  • Escalated to cases
    9pct of alerts
  • Open cases older than 30 days
    109Watch
  • Reports filed this month
    77Normal
Backlog above targetGRA · Financial Crime and Fraud Risk

Alert queue

  1. HRapid in-out through new accountsScenario TM-07 · score 924 h
  2. MTrade invoice price outlierScenario TB-03 · score 744 h
  3. MStructuring below thresholdScenario TM-02 · score 805 h
  4. LName match, sanctions listLikely false positive3 h

Counterparty network, case CS-6304

red: accounts under review

Case path

  1. Alertscenario
  2. Triageanalyst
  3. Investigatecase
  4. DecideMLRO
  5. Reportto FIU
  6. Feedbacktuning
Alert triage and investigations: the screen's structure, terms and states for Financial crime data rights.Placeholder names and illustrative values; a design, not a record or a live system.
04The question

Financial crime data rights: how the risk develops.

Sensitive data and privacy boundaries. The dossier below sets out how the risk develops, what is measured, where the data come from, how it is modelled and who decides.

Mechanism

Monitoring is broad

Transaction monitoring and screening process data on all customers to find a few suspects. Data protection law requires necessity, proportionality and safeguards.

Mechanism

De-risking excludes

Institutions close accounts or refuse whole categories of customers, such as charities, money transfer operators or people from certain countries, to avoid risk and cost.

Mechanism

Tipping-off limits explanation

Laws against tipping off suspects stop firms explaining why accounts are closed or payments blocked, leaving innocent customers without reasons.

Mechanism

Sharing needs safeguards

Information sharing between institutions improves detection and raises risks of wrongful exclusion. Legal gateways and oversight define what is allowed.

05Key terms

Terms used on this page.

Each term as this page uses it. Where a standard-setting body defines the term, the wording follows that body.

TermDefinition
De-riskingEnding or restricting relationships with categories of customers to avoid rather than manage risk.
Data minimisationLimiting personal data processing to what is necessary for a stated purpose.
Legal gatewayA legal provision that allows data to be shared between organizations for a defined purpose.
06Indicators

What is measured, and how well.

Each indicator carries its unit, its cadence, the kind of source behind it and the evidence label a value would carry. No values are shown: a programme supplies them under its own authority.

IndicatorUnitCadenceSource typeLabel
Account closures for financial crime reasonscountannualFirm and regulator dataREPORTED
Complaints about account closures and refusalscount and share upheldannualOmbudsman dataOFFICIAL
Correspondent banking relationshipscount by regionannualCPMI dataOFFICIAL
Adults without an accountshare of adultsperiodicWorld Bank Global FindexESTIMATED
Data protection decisions involving financial crime processingcountannualData protection authority recordsOFFICIAL
Legal gateways for information sharingcategorical by jurisdictionon changeLegislationOFFICIAL
07Canvas

From sources to decisions.

The topic as a computational graph: named sources feed the methods, an evidence review gates the outputs, and the decisions stay with the authorities that hold them.

Pipeline canvas · Financial crime data rights as a run graphDesign, not a record
Financial crime data rights: from customer due diligence to suspicious activity reportCustomer due diligence sets a risk rating; transaction monitoring scenarios raise alerts; analysts triage and investigate; the MLRO decides whether to report to the financial intelligence unit; feedback tunes the scenarios. Design of the process, not a record of a run.

Fig. 02Nodes carry their type, two metric rows and a state; connectors show what feeds what; dashed frames name the owners; the timeline is the cadence. Design of the pipeline, not a record of a run.

08Sources

Where the evidence comes from.

Named public datasets and institutional records, each with its licence class. Sources by agreement are used only under their terms and never republished.

SourceWhat it givesLicence class
FATF guidance on financial inclusion and de-riskingRisk-based approach and unintended consequencesFree, FATF terms
FATF stocktake on data pooling and privacyData protection and AML information sharingFree, FATF terms
European Data Protection Board statements on AMLData protection views on AML measuresFree, EU reuse terms
Financial Ombudsman Service decisionsComplaints about account closures and blocksFree, terms per ombudsman
World Bank studies on correspondent banking withdrawalEffects of de-risking on countriesFree, World Bank terms
09Decisions

Who decides, and what the evidence serves.

Financial Crime and Fraud Risk prepares evidence. The decisions below are taken by the authorities named, under their own rules, and never by the platform.

Who decidesThe questionEvidence this page serves
LegislatorsWhat information sharing and data retention the law permitsComparative laws and rights assessments
Data protection authoritiesWhether financial crime processing is lawful and proportionateComplaints and processing records
Firm compliance and conduct functionsHow to apply controls without unjustified exclusionClosure, complaint and outcome data
Ombudsmen and courtsWhether customers were treated fairlyCase records; the page serves context only

Outputs this topic produces

  • Guide to data protection in financial crime controls
  • Brief on de-risking and financial exclusion
  • Comparative notes on information sharing gateways
  • Questions for boards on proportionality and redress
10Core questions

What experts ask.

Data rights specialists ask how financial crime controls can respect privacy and fairness.

  • What legal bases allow institutions to process personal data for financial crime purposes?
  • How can information be shared between institutions to detect crime without excessive intrusion?
  • How do automated controls affect different groups, and how are bias and errors detected?
  • What rights do people have when they are flagged, restricted or excluded?
  • How long should financial crime data be retained, and how is it secured?
11Mechanisms and drivers

Necessary intrusion, with limits.

Anti-money laundering and fraud obligations require institutions to collect and analyse personal data, often with legal exemptions from some data protection rights. Information sharing between institutions can improve detection of networks but raises privacy concerns and must have a legal basis. Privacy-enhancing technologies offer ways to analyse data jointly without exposing it, though their use is still developing.

Automated controls can produce errors that fall unevenly. Names common in particular communities may generate more false matches; behaviour typical of certain groups may be flagged as unusual. People affected may face restricted services without explanation. Governance, testing for bias, human review and redress mechanisms are central safeguards.

12Methods and data

How the evidence is built, and where it stops.

  1. 01

    Legal analysis

    Comparing data protection and financial crime law. Interpretation varies.

  2. 02

    Bias testing

    Assessing outcomes of automated controls across groups with AI and machine learning methods. Data on protected characteristics may be unavailable.

  3. 03

    Privacy-enhancing technology review

    Evaluating techniques for joint analysis with data engineering, interoperability and stewardship. Many are not yet mature.

  4. 04

    Governance review

    Examining data governance and identity safeguards, drawing on digital identity research. Practices vary across firms.

13Methods

How it is studied, and what the methods cannot say.

  1. Data engineering, interoperability and stewardshipScreening data quality · Monitoring coverage checks · Retention and minimisationApplied here
    Canonical · STEM Commons
  2. Digital identity and public digital systemsAssurance levels for onboarding · Defending against deepfakes · Inclusion testingApplied here
    Canonical · STEM Commons
  3. Artificial intelligence and machine learningReal-time fraud scoring · Alert prioritisation · Fairness in fraud controlsApplied here
    Canonical · STEM Commons
14Questions

Questions and answers.

What is de-risking?
Terminating or restricting relationships with categories of customers to avoid rather than manage risk, which the FATF has said can undermine financial inclusion and transparency.
Why won't a bank explain an account closure?
Laws against tipping off suspects can prevent firms from giving reasons where a report has been made, which affects innocent customers too.
Does data protection law apply to AML monitoring?
Yes. Processing for AML must have a legal basis and meet principles such as necessity, proportionality and data minimisation.
Can banks share customer data to fight fraud?
Only where the law provides a basis and under safeguards. Rules differ across jurisdictions and are evolving.
Can automated financial crime controls be biased?
Yes. They can produce more errors for some groups. Testing, human review and redress are needed to detect and correct this.
Does GRA collect customer data?
No. GRA is not a law enforcement body, financial intelligence unit or regulator. It does not investigate cases, receive reports of suspicious activity, screen customers or hold customer data.
Related

Around Financial Crime and Fraud Risk.

Financial Crime and Fraud Risk

Bring your expertise to this field.

The current service level is R0: information and enquiries. An enquiry receives a reference and names the next step; applications, payments, compute allocations and registrations open only when their team, terms and review capacity exist.

Write to the team See all contact routes
Skip to toolbar