The FATF is committed to protecting the personal data of users of its websites and the FATF Academy E-Learning platform, which are essential tools for advancing our mission and programme of work.

This privacy policy describes the types of personal data we collect, how it is used, who has access and the duration for which it is retained. It also details the rights granted to website and FATF Academy E-Learning platform users under the Data Protection Rules of the OECD, which apply to the FATF.  Additionally, certain activities are further subject to specific data protection notices (recruitment, procurement).

We collect personal data through our websites and FATF Academy E-Learning platform in two ways: data you provide directly to us and data generated from your activity on the virtual environment.

Data you provide directly. You may voluntarily provide us with personal data when, subscribing to online newsletters or enrolling in FATF Training programmes. This information enables us to provide the services you have requested and may include your name/given name/surname, professional email address, phone number, preferred language, area of expertise, gender, representing jurisdiction, location, employer.

Data generated by your activity.  To ensure the effective functioning and security of our websites and FATF Academy E-Learning platform, and to gain a better understanding of user’s behaviour, we automatically collect the following information as you during your activity on our websites:

• Log information: Details such as the pages you visit, the date and time of your visit and your Internet Protocol (IP) address.
• Device and software information: Specifications about your browser and operating system

This information is collected through the use of various technologies, including cookies. If you have registered and logged-in, your browsing activity is linked to your user credentials enabling us to personalise your experience on our websites, both during your current visit and in the future.

Information processed through FATF Academy E-Learning platform includes your learning history and progress, skills profiles, as well as feedback and assessment of your performance during in-person training activities.

Data Sharing. Where a participant has been nominated by a FATF Member or FSRB Head of Delegation to attend a FATF in-person training activity, the FATF Secretariat may communicate the participant's final performance assessment for that specific activity (A, B, C, or D, or Successful/Not Successful) to the nominating Head of Delegation.  Such disclosure is limited to that specific participant and training activity and does not include any other e-learning records or other personal information.  When registering for the FATF Academy E-Learning Platform you will be asked to consent to this sharing by agreeing to the Terms of Use.

The FATF websites are hosted by the OECD (France). The FATF Academy E-Learning platform is hosted by Rise-Up (France).

In general, access to your personal data is limited to appropriate staff within the Organisation. In certain circumstances we make your data available outside the FATF, such as:   

• Analytics: We use third-party services including Google Analytics (USA) and Microsoft Power BI (Ireland) to better understand user behaviour and user’s training activity. These services access and process data generated by your activity which may be stored using cookies. This data is analysed in a manner that does not directly identify you. 
• Email communications: We use third party services of Mailchimp (France) for sending bulk email communications such as newsletters, platform alerts, and event notifications. These services store contact information that you provide to us via MyOECD and through FATF Academy E-Learning platform registration form as well as information about your interactions with these emails; such as opens and clicks.
• Online surveys: We occasionally use Survey Monkey to run online surveys of user views.
• Online communities: We use third party services, such as Microsoft Sharepoint (Ireland), to facilitate online networking environments. These services store the contact information you provide, along with data generated by your activity and may use cookies to enhance functionality and user experience.  

Data you provide directly is typically kept until either (1) you unsubscribe from the service requested or until (2) three years after your last transaction. We store data about your activity on our websites for 5 years, after which time it is deleted. We store data about your activity on FATF Academy E-Learning platform for seven years.

Where we provide links to websites of other organisations, this privacy policy does not cover how those organisations process personal data. For example, we link to our profiles on a number of social media platforms such as X (formerly Twitter), Facebook, LinkedIn, Instagram and YouTube. We are not responsible for the privacy policies or content on third-party websites and encourage you to read the privacy notices of other websites you visit.  

Under our data protection rules, you have rights to access and rectify your personal data, as well as to object to its processing, and request erasure in certain circumstances. To exercise these rights in connection with your use of this website please contact contact@fatf-gafi.org.

If you have further queries or complaints related to the processing of your personal data, please contact the Data Protection Officer [dpo@oecd.org]. If you need further assistance in resolving claims related to personal data protection you can contact the Data Protection Commissioner [dpc@oecd.org].

Additional information about our approach to data protection is available here.

Last updated: 31 July 2026.