rec_11

(11) This Regulation should also apply without prejudice to national legislation transposing Directive 95/46/EC of the European Parliament and of the Council Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (OJ L 281, 23.11.1995, p. 31). . For example, personal data collected for the purpose of complying with this Regulation should not be further processed in a way that is incompatible with Directive 95/46/EC. In particular, further processing of personal data for commercial purposes should be strictly prohibited. The fight against money laundering and terrorist financing is recognised as an important public interest ground by all Member States. Therefore, in applying this Regulation, the transfer of personal data to a third country which does not ensure an adequate level of protection in accordance with Article 25 of Directive 95/46/EC should be permitted in accordance with Article 26 thereof. It is important that payment service providers operating in multiple jurisdictions with branches or subsidiaries located outside the Union should not be prevented from transferring data about suspicious transactions within the same organisation, provided that they apply adequate safeguards. In addition, the payment service providers of the payer and of the payee and the intermediary payment service providers should have in place appropriate technical and organisational measures to protect personal data against accidental loss, alteration, or unauthorised disclosure or access.

← rec_10 · All articles · rec_12 →

Source: EUR-Lex (Cellar) · retrieved 2026-10-11 · Text as adopted (Official Journal); later amendments are not incorporated in this text.