Under the laws of Gibraltar, Electronic Money Institutions (EMIs), payment service providers, and partner banks operating IBAN account structures are subject to strict banking secrecy, data protection, and confidentiality obligations. All customer-related information, including personal and corporate identification data, IBAN and account details, transaction records, balances, payment history, as well as KYC, AML, and compliance documentation, is treated as confidential and protected under applicable Gibraltar law and regulatory requirements.
Such information may not be disclosed to any third party except where disclosure is required by applicable laws or regulations, mandated by a court order, requested by a competent authority such as a regulatory, supervisory, judicial, or law enforcement body, necessary for compliance with anti-money laundering, counter-terrorist financing, sanctions, or regulatory reporting obligations, or expressly authorised by the customer.
These confidentiality obligations are applied in accordance with the regulatory framework of the Gibraltar Financial Services Commission (GFSC) and relevant data protection and financial services legislation. Banking secrecy does not prevent the lawful exchange of information between regulated entities, service providers, correspondent partners, or technology platforms where such exchange is required for operational purposes, regulatory compliance, or risk management, provided that appropriate legal, technical, and organisational safeguards are in place.
