18/10/2026
One reminder worth setting.
If you’re captured by AML/CTF, here are 9 questions to ask whoever manages your IT systems.
1️⃣ If I asked who opened a particular client file in March, could you tell me? And could you tell me the same about the mailbox those documents were emailed to?
2️⃣ Which outside parties can reach our client identity data, and what do our agreements with them say about handling it?
3️⃣ How are client identity documents removed once we no longer need them, and does that happen automatically or does somebody have to remember?
And six more, plus what a good answer to each sounds like. All built from what the privacy regulator expects businesses to do.
AML/CTF covers collecting client ID. The Privacy Act covers what happens to it once it’s in your systems.
All 9 questions here: https://it.efex.com.au/aml-ctf/news-resources/nine-questions-for-whoever-manages-your-systems