Legal & Tax · Chapter 20
Gold Investment - Data Protection. Discretion. Anonymous Gold Buying

Gold bars in various sizes, a selection of 1 ounce, 2 ounce and 100 gram fine gold, 999 fineness.
What personal data can a gold trading company request when I buy gold, how long must it retain my personal information, and how does it ensure the secure storage of my data?
What happens to personal data when buying gold?
The dealer is required to comply with anti-money laundering legislation. Current rules stipulate that for cash payments exceeding 300,000 Hungarian forints (approximately 1,000 euros) the customer's personal data must be recorded, and copies of identity documents must be taken for purchases exceeding 3.6 million forints (approximately 12,000 euros) on a cumulative basis within one year. Completed offline data collection forms must be retained for 8 years in locked cabinets accessible only to designated personnel under controlled conditions. The dealer is also obliged to verify that the customer does not appear on international sanctions lists.
The customer's name and address must be recorded on the invoice; this is required by the Accounting Act regardless of whether the transaction is settled in cash or by bank transfer.
From an anti-money laundering perspective, the dealer has a direct reporting obligation only if suspicious elements are identified in the customer's behaviour or in the circumstances of the transaction.
A responsible gold trading company takes meticulous care of customer data, both through the protection of its IT systems and by controlling who may access the data. The data processing policy sets out who the precious metals dealer's data processing partners are and what data they may access (e.g. IT service provider, accounting firm, auditor).
The NAV (National Tax and Customs Administration) and law enforcement authorities may request access to any customer data, provided they initiate specific proceedings in connection with a case or an individual. In this respect, there is no difference between banks and precious metals dealers. It should be noted, however, that because the gold market is quite small compared to the broader financial market, it is extremely rare for investigative authorities to begin examining gold companies when tracing an individual's assets or transactions.
Discretion and anonymous buying
Discretion in the precious metals trade does not equate to non-compliance with the law. Above a relatively low threshold, it is not possible to purchase investment gold anonymously in any European Union member state. Anti-money laundering regulations are largely uniform throughout the EU, as they derive from harmonised legislation.
Moneyval, the anti-money laundering and counter-terrorist financing body operating within the framework of the Council of Europe, visits member states at regular intervals and, following an extensive review process, sets out the tasks to be implemented by the country in question in its country report. Hungary is no exception. Following the most recent Moneyval country report, the Hungarian authorities also prepared their action plan, which outlines the scope of forthcoming inspections.
The precious metals dealer is obligated, and bears criminal liability, to file a report, without the customer's knowledge, with the appropriate counterpart integrated into the international FIU (Financial Intelligence Unit) network (in Hungary, this is the HFIU) if suspicious behaviour is observed on the part of the customer, for example if the customer refuses to allow their documents to be copied when the transaction value threshold is reached, or wishes to cancel the transaction.
Since the local FIU forwards data to the internationally competent counterpart authority, an unsuspecting customer who responds to an advertisement promoting anonymous gold purchases may easily find themselves cast as a defendant in a money laundering case, regardless of in which EU member state the law was broken.
