Priority sector
Law firms, accountants, auditors, tax advisers, notaries and professional bodies hold confidential information and act as gatekeepers of the financial system.
Key obligations
Auditors, external accountants, tax advisers, notaries and lawyers involved in certain transactions are obliged entities under EU anti-money laundering rules.
Professional secrecy and data protection apply together to client files, communications and the tools used to handle them.
In Spain, professional associations (colegios profesionales) must designate a DPO under the LOPDGDD.
Using generative AI on client matters raises confidentiality, data protection and accuracy questions that need clear internal rules.
Professional firms are trusted with their clients' most sensitive information and, in many transactions, with access to the financial system. EU anti-money laundering rules treat them as gatekeepers, professional rules impose strict secrecy, and data protection applies to every client file. The rapid adoption of cloud and AI tools requires clear rules that protect both clients and the firm.
anti-money laundering: risk assessment, client due diligence procedures and support for the compliance officer;
Data Protection Officer: for firms and professional bodies;
AI and cloud governance: policies for the use of generative AI and cloud tools on client matters;
information security: protection of client data and incident response.
A free Compliance Assessment identifies the priorities for your firm.
Related domains: Anti-Money Laundering · Data Protection · Artificial Intelligence · Whistleblower Protection · Anti-Corruption
Regulated functions: Compliance Officer · Data Protection Officer · Information Security Officer · All sectors
General information as at October 2026; it does not constitute legal advice.
Request a free assessment designed for professional firms and bodies.