Internal safeguards

(1) Obliged undertakings may, in an individual case, transmit information to one another where there are factual indications that the recipient of the information needs it to assess whether a matter must be reported to the Central Office for Financial Transaction Investigations under section 43(1) of the Money Laundering Act, or a criminal complaint must be filed under section 158 of the Code of Criminal Procedure. The recipient may use the information exclusively to prevent money laundering, terrorist financing, or other criminal acts, or to report under section 158 of the Code of Criminal Procedure. It may use the information only under the conditions specified by the transmitting insurance undertaking.
(2) Where obliged undertakings maintain an internal audit function, they must ensure that a report on the outcome of an internal audit review under section 6(2), point 7, of the Money Laundering Act is submitted promptly, in each case, to management, to the money laundering reporting officer, and, upon request, to the supervisory authority.