Key Points

• Machine learning (ML) algorithms can improve the fight against anti-money laundering and countering financing of terrorism (AML/CFT) by better detecting suspicious activities by bank customers and improving the handling of AML/CFT alerts by human compliance teams.
• However, the introduction of ML in AML/CFT monitoring systems will require a careful review of their compatibility with European fundamental rights and the General Data Protection Regulation (GDPR).
• This article examines how algorithmic-based monitoring systems would be analysed under European fundamental rights law, and in particular the Court of Justice of the European Union’s (CJEU’s) case law on the processing of personal data for the purpose of fighting crime.
• We identified five problems: first, AML/CFT laws imposing transaction monitoring are not clear and precise enough to comply with CJEU case law and Article 23(2) of the GDPR; second, it is impossible to measure the effectiveness of algorithmic monitoring systems, thereby raising questions about their ‘strict necessity’; third, monitoring systems cover a broad range of offences going from terrorism to tax fraud, violating the CJEU’s principle that intrusive monitoring should be used only for the most serious crimes; fourth, current transparency measures are insufficient because persons targeted by individual AML/CFT alerts are never informed that they have been targeted; finally, institutional oversight mechanisms need to be improved to ensure that questions of effectiveness of monitoring systems and compliance with fundamental rights are considered together.

中文翻译：

---

基于人工智能的反洗钱 (AML) 系统是否侵犯了欧洲的基本权利？

关键点

• 机器学习 (ML) 算法可以通过更好地检测银行客户的可疑活动并改善人类合规团队对 AML/CFT 警报的处理，从而改善反洗钱和打击恐怖主义融资 (AML/CFT) 的斗争。
• 但是，在 AML/CFT 监控系统中引入 ML 需要仔细审查它们与欧洲基本权利和通用数据保护条例 (GDPR) 的兼容性。
• 本文研究了如何在欧洲基本权利法下分析基于算法的监控系统，特别是欧盟法院 (CJEU) 关于处理个人数据以打击犯罪的判例法。
• 我们发现了五个问题：第一，实施交易监控的 AML/CFT 法律不够清晰和准确，无法遵守欧盟法院判例法和 GDPR 第 23(2) 条；其次，无法衡量算法监控系统的有效性，从而引发对其“严格必要性”的质疑；第三，监控系统涵盖了从恐怖主义到税务欺诈等广泛的犯罪行为，违反了欧洲法院关于侵入式监控仅用于最严重犯罪的原则；第四，目前的透明度措施是不够的，因为个人 AML/CFT 警报所针对的人从未被告知他们已成为目标；最后，