+Article 13 Personal data protection and retention periods
---+Article 13 1.
---+Article 13 2.
---+Article 13 3.
---+Article 13 4.
---+Article 13 5.

Article 13 Personal data protection and retention periods

1. Overview

Summary	Regulation
Article 13 1.	The competent authorities shall act as controllers of the personal data they obtain by operation of Articles 3 and 4, Article 5(3) and Article 6.
Article 13 2.	The processing of personal data on the basis of this Regulation shall take place only for the purposes of the prevention and fight against criminal activities.
Article 13 3.	The personal data obtained by operation of Articles 3 and 4, Article 5(3) and Article 6 shall be accessed only by duly authorised staff of the competent authorities and shall be adequately protected against unauthorised access or transmission. Unless otherwise provided for in Articles 9, 10 and 11, the data may not be disclosed or transmitted without the express authorisation of the competent authority which originally obtained them. However, that authorisation shall not be necessary where the competent authorities are required to disclose or transmit that data pursuant to the national law of the Member State in question, particularly in connection with legal proceedings.
Article 13 4.	The competent authorities and the FIU shall store personal data obtained by operation of Articles 3 and 4, Article 5(3) and Article 6 for a period of five years from the date on which the data were obtained. The personal data shall be erased upon the expiry of that period.
Article 13 5.	The period of retention may be extended once by another period which shall not exceed three additional years if: (a) after it has carried out a thorough assessment of the necessity and proportionality of such further retention and considers it to be justified for the fulfilment of its tasks with respect to the fight against money laundering or terrorist financing, the FIU determines that further retention is required; or (b) after they have carried out a thorough assessment of the necessity and proportionality of such further retention and consider it to be justified for the fulfilment of their tasks with respect to providing effective controls as regards the obligation to declare accompanied cash or the obligation to disclose unaccompanied cash, competent authorities determine that further retention is required.

1.1 References

1.2 Identified Requirements

1.3 Related Standards

2. Identified Requirements

Requirements
Source	Requirement

3. Related Standards

Standards
Source	Requirement

Builddate: 12.11.2018 00:00:00 -Doknr: CELEX:32018R1672
EULAW -
EN: Legal acts of the European Union from EUR-Lex, https://eur-lex.europa.eu/. © European Union. Re-use is authorised by Decision 2011/833/EU, provided the source is acknowledged; the consolidated texts are licensed under CC BY 4.0 (EUR-Lex legal notice). Divided into sections and converted into the GRCA format, the wording unchanged. Only the legislation published in the Official Journal of the European Union is deemed authentic.

DE: Rechtsakte der Europäischen Union aus EUR-Lex, https://eur-lex.europa.eu/. © Europäische Union. Weiterverwendung nach Beschluss 2011/833/EU mit Quellenangabe gestattet; die konsolidierten Fassungen stehen unter CC BY 4.0 (Rechtlicher Hinweis von EUR-Lex). In Abschnitte aufgeteilt und in das GRCA-Format umgewandelt, der Wortlaut unverändert. Verbindlich sind allein die im Amtsblatt der Europäischen Union veröffentlichten Rechtsakte.