(1) Any personal data obtained by relevant persons for the purposes of these Regulations may only be processed for the purposes of preventing money laundering, terrorist financing or proliferation financing.
(2) [deleted]
(3) No other use may be made of personal data referred to in paragraph (1), unless -
(a) use of the data is permitted by or under an enactment other than these Regulations or the UK GDPR; or
(b) the relevant person has obtained the consent of the data subject to the proposed use of the data.
(4) [deleted]
(5) [deleted]
(6) Before establishing a business relationship or entering into an occasional transaction with a new customer, as well as providing the customer with the information required under Article 13 of the UK GDPR (information to be provided where personal data are collected from the data subject), relevant persons must provide the customer with a statement that any personal data received from the customer will be processed only -
(a) for the purposes of prev
…