S.L. 386.34 Art. 7Relying parties of the repository.    Cap. 373.       Cap. 586.

(1) The following shall, subject to undergoing such registration, verification or accreditation process as may be established by the Registrar, be authorised to access and use the repository as a relying party in accordance with these regulations:

(a) any competent authority, insofar as such access is necessary for the performance of their functions and duties;

(b) any subject persons, for the sole purpose of carrying out customer due diligence and related obligations in accordance with the Prevention of Money Laundering Act and its subsidiary regulations; and

(c) any other person as the Registrar may, from time to time publish on a website maintained by him. The Registrar may determine persons to be eligible to access and use the repository, subject to such conditions that he may impose.

(2) Access by the relying parties referred to in sub-regulation

(1) shall be granted in accordance with these regulations and shall be limited to the extent needed for the performance of the functions and duties in accordance with the purpose referred to in sub-regulation (1), and to what is necessary and proportionate to the objectives pursued.

(3) The relying parties accessing and receiving personal data through the repository shall assume the role of separate controllers and any processing of personal data processed by the relying parties for the purposes specified in sub-regulation (1) shall fully comply with the provisions of Regulation (EU) 2016/679 and the Data Protection Act, including the regulations made thereunder.