Agreement between the European Union and the United States on the transfer of financial messaging data

SUMMARY OF:

EU-US agreement on the processing and transfer of Financial Messaging Data from the EU to the US for the purposes of the Terrorist Finance Tracking Program

Decision 2010/412/EU concluding the EU-US agreement on the processing and transfer of Financial Messaging Data from the EU to the US for the purposes of the Terrorist Finance Tracking Program

WHAT IS THE AIM OF THE AGREEMENT AND OF THE DECISION?

With the aim of preventing, investigating, detecting or prosecuting terrorism or terrorist financing, the agreement between the EU and the US concerns the transfer of:

financial payment messages that refer to financial transfers and related data from designated providers* in the EU to the US Treasury Department;
relevant information from the US Treasury Department’s Terrorist Finance Tracking Program (TFTP) to EU countries’ law enforcement, public security or counter-terrorism authorities, or to Europol or Eurojust.

The decision concludes the agreement on behalf of the EU.

KEY POINTS

To obtain the necessary data from the EU, the US Treasury Department makes a request, and sends any additional documents, to a designated provider in the US. At the same time, it sends a copy of these documents to Europol, which checks that the request complies with the requirements of the agreement and notifies the designated provider accordingly. Once the compliance of the request is confirmed, it will have binding legal effect and the designated provider is required to transfer the requested data to the US Treasury Department.
The US Treasury Department must ensure that certain safeguards, particularly in relation to the protection of personal data, are applied when the data provided are processed. The data may only be processed for the purpose of preventing, investigating, detecting or prosecuting terrorism or terrorist financing. It must be secured from unauthorised access, disclosure and loss, as well as from any unauthorised form of processing. A search of the data provided may only be carried out where there is pre-existing information or evidence indicating that the subject of the search might be connected to terrorism or its financing. All searches and the reasons for them must be recorded.
The US Treasury Department must delete non-extracted data:
- no longer necessary for the fight against terrorism, based on (at least) an annual evaluation;
- transmitted without having been requested;
- by 20 July 2012 at the latest, if it was received before 20 July 2007;
- no later than 5 years after receipt, if it was received after 20 July 2007.
Extracted data may be retained for only as long as is necessary to fulfil the purpose for which it was requested. The agreement also defines safeguards to limit the onward transfers of extracted data.
The US Treasury Department must make information from the TFTP that may contribute to the EU’s actions against terrorism available to the relevant authorities of the EU countries concerned and, as appropriate, to Europol and Eurojust. Similarly, if any additional information is thought to be necessary to the US’s fight against terrorism, it must be conveyed back. To facilitate these exchanges of information, a Europol liaison officer may be delegated to the US Treasury Department.
A relevant EU national authority, Europol or Eurojust may ask US Treasury Department to search data acquired through the TFTP and to transfer relevant information if there is reason to believe that a person or entity is connected to terrorism or its financing as defined by Directive (EU) 2017/541 on combating terrorism and Directive (EU) 2015/849 on the prevention of the use of the financial system for money laundering.
During the term of the agreement, the European Commission is to examine the options available for establishing an EU system equivalent to that of the US TFTP. Once a European system is established, there will be the need to review and possibly modify this agreement and ensure the systems are complementary.
Independent overseers monitor compliance with the limitations and safeguards of the agreement. They have the authority to review, query and block searches of data provided, as well as to request additional justifications on the connection to terrorism. One of these overseers is appointed by the Commission.
Via the national data protection authority, a person has the right to request confirmation that his or her personal data have been processed in compliance with data protection rights under Directive (EU) 2016/680 on protecting personal data when being used by police and criminal justice authorities. Disclosure of this information may be refused or restricted if necessary for the fight against terrorism or the protection of public or national security. In such cases, a written explanation will be given to the person, together with information on the possibility to seek administrative and judicial redress in the US. A person also has the right to request the rectification, erasure or blocking of inaccurate or wrongly processed personal data. To maintain the accuracy of information received or transmitted under this agreement, the data may be supplemented, deleted or corrected by each party. The US Treasury Department provides information on the TFTP on a public website, including on the right of redress.

FROM WHEN DO THE AGREEMENT AND DECISION APPLY?

The decision has applied since 13 July 2010. The agreement entered into force on 1 August 2010 for a period of 5 years. After that, it is automatically extended for subsequent periods of one year, unless one of the parties notifies of its intention not to extend it.

BACKGROUND

For more information, see:

Terrorist Finance Tracking Programme (European Commission).

KEY TERMS

Designated providers: providers of international financial payment messaging services.

MAIN DOCUMENTS

Agreement between the European Union and the United States of America on the processing and transfer of Financial Messaging Data from the European Union to the United States for the purposes of the Terrorist Finance Tracking Program (OJ L 195, 27.7.2010, pp. 5-14)

Council Decision 2010/412/EU of 13 July 2010 on the conclusion of the Agreement between the European Union and the United States of America on the processing and transfer of Financial Messaging Data from the European Union to the United States for the purposes of the Terrorist Finance Tracking Program (OJ L 195, 27.7.2010, pp. 3-4)

Successive amendments to Decision 2010/412/EU have been incorporated in the original document. This consolidated version is of documentary value only.

RELATED DOCUMENTS

Directive (EU) 2017/541 of the European Parliament and of the Council of 15 March 2017 on combating terrorism and replacing Council Framework Decision 2002/475/JHA and amending Council Decision 2005/671/JHA (OJ L 88, 31.3.2017, pp. 6-21)

Commission staff working document Joint Review Report of the implementation of the Agreement between the European Union and the United States of America on the processing and transfer of Financial Messaging Data from the European Union to the United States for the purposes of the Terrorist Finance Tracking Program — Accompanying the document — Report from the Commission to the European Parliament and the Council — On the joint review of the implementation of the Agreement between the European Union and the United States of America on the processing and transfer of Financial Messaging Data from the European Union to the United States for the purposes of the Terrorist Finance Tracking Program (SWD(2017) 17 final)

Directive (EU) 2016/680 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, and on the free movement of such data, and repealing Council Framework Decision 2008/977/JHA (OJ L 119, 4.5.2016, pp. 89-131)

See consolidated version.

Information concerning the date of entry into force of the Agreement between the European Union and the United States of America on the processing and transfer of Financial Messaging Data from the European Union to the United States for purposes of the Terrorist Finance Tracking Program (OJ L 195, 27.7.2010, p. 15)

last update 21.01.2019