Key data
| Regulation | Resolution of 17 September 2026, from the General Directorate of Treasury and Financial Policy — SEPBLAC / Bank of Spain Agreement for data access via BELab |
|---|---|
| BOE Publication | 25 September 2026 |
| Effective date | 25 September 2026 |
| Direct stakeholders | Internal researchers at the Bank of Spain and accredited external researchers studying money laundering and terrorist financing |
| Category | Tax Updates / Money Laundering Prevention |
| Year | 2026 |
| Enabled infrastructure | BELab — Bank of Spain Data Laboratory |
| Data-providing body | SEPBLAC (Executive Service of the Commission for the Prevention of Money Laundering and Monetary Infractions) |
SEPBLAC data on fund movements and money laundering operations were, until now, inaccessible to the research community. The Resolution of 17 September 2026 publishes the agreement between the Commission for the Prevention of Money Laundering and Monetary Infractions and the Bank of Spain that changes that situation: researchers—both internal to the Bank of Spain and external properly accredited—will be able to consult that information through the secure BELab environment.
The stated objective of the agreement is to promote academic research and the identification of trends in money laundering and terrorist financing prevention. This is not a free data opening: each request goes through an evaluation process and SEPBLAC maintains control over what is published.
What does this regulation establish?
The agreement articulates a data transfer mechanism with technical and legal safeguards in several layers. The key elements are as follows:
| Element | Detail |
|---|---|
| Data transferred | Information available at SEPBLAC on fund movements and money laundering operations |
| Type of anonymization | Irreversible — SEPBLAC anonymizes the data before transferring it, with no possibility of re-identification |
| Access infrastructure | BELab (Bank of Spain Data Laboratory) — secure and controlled environment |
| Researcher profile | Internal researchers at the Bank of Spain and accredited external researchers |
| Request evaluation | SEPBLAC evaluates each access request on an individual basis |
| Confidentiality agreement | Mandatory for all researchers before accessing the data |
| Publication of results | Requires express SEPBLAC approval before disseminating any results |
| Supervisory body | Coordination and Monitoring Committee, created specifically to oversee compliance with the agreement |
| Transparency requests | Are redirected to SEPBLAC, which is the competent body to resolve them |
The design of the agreement ensures that at no time can researchers extract data outside the BELab environment or publish results without SEPBLAC's approval. Irreversible anonymization is the first technical barrier; the confidentiality agreement and prior approval for publication are the legal barriers.
Economic and operational impact
This agreement does not generate direct costs for companies or the financial sector in general. Its impact is fundamentally operational and institutional, with two main effects:
- For the research ecosystem: A previously inaccessible source of data on money laundering is opened. This can accelerate the production of studies, detection models, and trend analysis that, in the medium term, may influence regulation and compliance systems of financial entities.
- For entities subject to money laundering prevention obligations: The results of research—once approved by SEPBLAC—may translate into new guidelines, risk typologies, or supervisory criteria. Companies with AML/CFT obligations (banks, insurers, notaries, fund managers, among others) should monitor publications derived from this agreement.
There are no sanctions or adaptation deadlines directly associated with this regulation for the private sector. The indirect impact will come through research results and their eventual transfer to SEPBLAC supervisory criteria.
Who does it affect?
- Internal researchers at the Bank of Spain working in areas related to money laundering or terrorist financing.
- Accredited external researchers (academics, research centers, think tanks) who want to access SEPBLAC data for their studies.
- SEPBLAC itself, which assumes responsibility for evaluating requests, anonymizing data, and approving publications.
- Financial entities and subjects obligated in AML/CFT indirectly: research results may influence future supervisory guidelines, risk typologies, and compliance criteria.
- Compliance and Money Laundering Prevention departments of banks, insurers, investment funds, notaries, and other obligated subjects, which must monitor academic production derived from this agreement.
Practical example
A research team from a Spanish university specializing in financial crime wants to analyze patterns of money laundering operations detected by SEPBLAC in recent years. Until 25 September 2026, that access was impossible. With the new agreement, the process would be as follows:
- The team submits a formal request for access to SEPBLAC, detailing the research project.
- SEPBLAC evaluates the request on an individual basis and decides whether to approve it.
- If approved, researchers sign a confidentiality agreement.
- SEPBLAC irreversibly anonymizes the relevant data and makes it available to the team within the secure BELab environment.
- Researchers work with the data exclusively within BELab, with no possibility of extracting it.
- Before publishing any results or article, the team must obtain express approval from SEPBLAC.
- The Coordination and Monitoring Committee oversees that the entire process complies with the agreement.
If during the process any citizen or entity submits a transparency request regarding the data used, it is automatically redirected to SEPBLAC for resolution.
What should stakeholders do now?
- Researchers who want to access the data: Prepare a formal request addressed to SEPBLAC with details of the research project, necessary data, and study purpose. SEPBLAC evaluates each case individually, so the request must be well-founded.
- Researchers accessing the data: Sign the required confidentiality agreement before starting work with the data. Remember that any publication of results requires express SEPBLAC approval.
- Compliance departments of financial entities: Monitor academic publications derived from this agreement. Studies based on real SEPBLAC data can anticipate changes in risk typologies and supervisory criteria.
- AML/CFT managers in obligated subjects: No immediate action is required, but it is advisable to register this agreement as a source of future regulatory signals. Research results may translate into new SEPBLAC guidelines or recommendations.
- Transparency requests: If any party receives a request for access to information related to this data, it must redirect it to SEPBLAC, which is the competent body to resolve it.
Frequently asked questions
Who can access SEPBLAC data through BELab?
Two profiles can access: internal researchers at the Bank of Spain and accredited external researchers. In both cases, access is not automatic: SEPBLAC evaluates each request on an individual basis and must expressly approve it before the researcher can work with the data.
Is the SEPBLAC data transferred personally identifiable data?
No. SEPBLAC irreversibly anonymizes the data before transferring it. This means it is not possible to re-identify any person or entity from the information available in BELab. Irreversible anonymization is a prerequisite for any transfer.
Can a researcher freely publish results once the study is completed?
No. Before publishing any results derived from work with SEPBLAC data, the researcher must obtain express approval from SEPBLAC. This is one of the conditions of the agreement, along with signing the confidentiality agreement prior to access.
What is the Coordination and Monitoring Committee created by this agreement?
It is a body created specifically by the agreement between SEPBLAC and the Bank of Spain to oversee compliance with the agreement's conditions. Its function is to ensure that access to data, work with it, and publication of results comply with what was agreed.
Does this agreement affect companies with money laundering prevention obligations?
Not directly or immediately. It does not generate new obligations or sanctions for the private sector. The indirect impact will come through studies published with SEPBLAC data, which could influence future supervisory guidelines, risk typologies, or compliance criteria applicable to obligated subjects.
Official source
View complete regulation at official source
Disclaimer: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://www.boe.es/diario_boe/txt.php?id=BOE-A-2026-19934