C-222/25 - Rahapesu Andmebüroo

The Advocate General opined that processing of personal data by Financial Intelligence Units falls within the scope of the LED, and clarified that national law may completely restrict the right of access by data subjects insofar as the rules are precise, clear and accompanied by sufficient safeguards. English Summary. Facts. The data subject made an access request to the Rahapesu Andmebüroo (Financial Intelligence Unit of Estonia, and controller). The data subject sought to determine whether information concerning him had been transmitted to, or whether enquiries had been made by, Estonian or foreign credit institutions or foreign authorities. Two separate requests. The controller rejected the data subject’s access requests on the basis of the national law on the prevention of money laundering and terrorist financing and the law on public information. Particularly, as these laws prevented the controller from disclosing data collected in the course of its duties or any information regar