Phoenix PDP essentials #6 Today’s focus: staff awareness, why is it essential? Data protection compliance does not rely solely on procedures, policies or tools. It also depends on the behaviours adopted by employees in their day-to-day activities. 1️⃣ Why raise awareness among teams? Employees are on the front line when it comes to processing personal … Read more
Phoenix compliance essentials #23 Today’s focus: circumventing international sanctions through the use of crypto assets Crypto assets raise new compliance challenges, particularly when it comes to complying with international sanctions. ➡️ Any transaction involving crypto assets requires particular vigilance from an AML/CFT/CPF perspective, notably due to: – The speed of transfers,– The pseudonymous nature of … Read more
Phoenix PDP essentials #5 Today’s focus: sensitive data, can we really collect it freely? Certain types of personal data benefit from enhanced protection. Their processing is not prohibited in principle, but it remains strictly regulated. 1️⃣ What is sensitive data? These are special categories of personal data whose use may adversely affect individuals’ rights and … Read more
Phoenix Compliance Essentials #22 Today’s focus: the key stages of KYC You are onboarding a new customer. Do you know exactly what needs to be verified? KYC enables institutions to identify and verify customers, understand their activities and assess their level of risk in order to prevent ML/FT-P-C risks. 1️⃣ Identify the customer Identification must … Read more
Phoenix Data Protection Essentials #4 Today’s focus: data breaches – do you know how to respond when an incident occurs? No organisation is entirely immune to a personal data breach. When an incident occurs, responding quickly is essential.But having the right methodology is just as important. Identify, assess, document, notify, inform and remediate: these are … Read more
Phoenix Compliance Essentials #21 Today’s focus: rebound accounts, understanding a circumvention scheme used in money laundering networks. ➡️ Definition A rebound account (also referred to as a transit account) is a bank or payment account used as an intermediary to conceal the origin of funds or circumvent certain control measures and international sanctions. In practice, … Read more
Phoenix Data Protection Essentials #3 Today’s focus: when is the appointment of a Data Protection Officer mandatory in Monaco? In Monaco, the appointment of a Data Protection Officer (DPO) is mandatory in certain cases provided for under Law No. 1.565 of 3 December 2024. The appointment of a DPO is required where the organisation: ➡️ … Read more
Phoenix Compliance Essentials #20 Today’s focus: risk assessment, a cornerstone or a weakness of your AML/CFT-P-C framework? In the field of AML/CFT-P-C, the risk-based approach is more than a regulatory requirement: it is a structured methodology at the heart of every effective compliance framework. At the core of this approach lies the enterprise-wide risk assessment. … Read more
Phoenix Compliance Essentials #19 Today’s focus: lines of defence within the AML/CFT-P-C framework Compliance is not only about having procedures in place, but also about how they are implemented. The lines of defence provide the structure for that implementation. ➡️ What are the lines of defence? A line of defence represents a level of responsibility … Read more
Phoenix Data Protection Essentials #2 Today’s focus: the risks and penalties for non-compliance with Law No. 1.565 Non-compliance with personal data protection requirements goes far beyond the issue of regulatory penalties. It represents a cross-cutting risk that may affect the organisation as a whole. 1️⃣ The risks 👉 Reputational risk … Read more
