Overview

Data privacy has become an important element of privacy rights in recent years due to the drastic growth and collection of personal data through technology, enhancing economic, social, and legal stakes.

Laws such as the European Union’s GDPR or the California Consumer Protection Act are intended to impose strict rules on businesses that handle customers’ personally identifying information, and issue fines and penalties against those that fail to properly safeguard such information.

Risks for failing to abide by data privacy laws include fines and penalties by regulators, lawsuits, and loss of trust by customers.

Recognizing this new reality of risk, we have created a new code, DPP (Data Privacy and Protection), to capture relevant adverse media and monitored lists into our risk database, including information about businesses that suffer data breaches and other data privacy violations, ransomware attacks, data privacy-related fines, penalties, and lawsuits, and more.

Recognizing the current inherent limits of English-language global coverage, Grid contains the full text of high-quality, human-translated foreign language news through monitoring news sources from leading competitive intelligence services specializing in the monitoring and analysis of online and media content. As most large-circulation, English-language publications will cover high-profile scandals or other risk events, this coverage is strongly weighted toward local media sources that have a higher likelihood of covering early warning indicators of risk by virtue of the fact that most scandals that do not involve national-level figures are covered first by smaller-circulation local publications. MA KYC also takes direct translations from publishers offering English language versions of the original content.

When translation services are not available, data staff manually monitors hundreds of publications in local language daily, searching for risk relevant content. Articles meeting Grid's risk relevant definitions are then summarized in English and captured in Grid as part of our Global Online Media Collection.

Data for Grid is selected on the basis of its utility to assist clients in managing money laundering, fraud, corruption, compliance, organized crime, sanctions, embargoes, and associated regulatory and reputational risks: Moody’s KYC accomplishes this through comprehensive efforts to harness subject matter expertise, experience and technology into an ever-increasing archive of risk.

Hate groups and hate crimes have become an increasingly large problem over the last decade plus, with the steady rise in activity and prominence culminating in the assault of the U.S. Capitol on January 6th, 2021.

While there is currently no domestic terrorism statute in the U.S., the activities of these groups and their frequently political motivations creates a nexus between hate groups and terrorism. Especially given FinCEN’s designation of domestic terrorism financing as a national AML/CFT priority in June 2021, maintaining due diligence on these groups and their affiliations is crucial for both mitigating their impact and avoiding reputational risk.

Moody’s created the HTE risk code in 2021 to provide clear, comprehensive coverage of the influential members and affiliated organizations of hate groups, as well as hate crimes in general. The continued expansion of this content set will ensure that the networks of hate are exposed.

Data for Grid is selected for its utility to assist clients in managing money laundering, fraud, corruption, compliance, organized crime, sanctions, embargoes, and associated regulatory and reputational risks. Moody’s accomplishes this through comprehensive efforts to harness subject matter expertise, experience, and technology into an ever-increasing archive of risk.

The sources used in this hate group and hate crime collection are all publicly available—Moody’s is not the original source for any of the content. Original sources are linked in the Entity URL and Sources sections where available.

Iran Connect is a product designed to assist clients in complying with the Comprehensive Iran Sanctions, Accountability, and Divestment Act (CISADA) of 2010. CISADA expands upon the 1996 Iran Sanctions Act and the Iranian Transaction Regulations administered by the Treasury Department’s Office of Foreign Assets Control (OFAC).

Iran Connect provides detailed, open sourced profiles of Iran-relevant entities and the associated individuals and organizations tied to those entities kept current as new information or details emerge. The profiles for each entity include addresses, aliases, connections and relationships to other records, dates of birth when available, and source information.

Iran Connect data is pulled from foreign Chambers of Commerce, Middle East business advocacy journals; full-scale public source research of IRGC-affiliated persons and organizations inside and outside Iran and any subsidiaries under their control; foreign banks conducting business with the IRGC or IRGC front companies; full mining of relevant investigative reporting and key think tank research on Iran.

Highly trained and qualified analysts conduct quality control and review Iran Connect records at all stages of the research and data entry process; review possible client alerts to minimize false positive returns; and domain experts provide an additional level of materiality review. In our Iran Connect data set, you will see many relationships, including affiliates: Grid defines this relationship type as a well-known client, partner or vendor of the entity concerned.

Data for Grid is selected on the basis of its utility to assist clients in managing money laundering, fraud, corruption, compliance, organized crime, sanctions, embargoes, and associated regulatory and reputational risks: Moody’s KYC accomplishes this through comprehensive efforts to harness subject matter expertise, experience and technology into an ever-increasing archive of risk.

The sources used in this collection are selected based on their ability to identify potential Sanctions related risks based on regulations and recommendations relating to CISADA compliance obligations.

The Controlled Substance Act makes it illegal under US federal law to manufacture, distribute or dispense marijuana, but now a majority of states have legalized certain marijuana related activities. In light of these developments, the US government, through the Department of Justice and FinCEN, has issued guidance to financial institutions on how to bank these types of organizations, including ongoing monitoring of publicly available sources for adverse media about the business and related parties as well as for suspicious activity.

Moody’s has researched publicly available sources to create a database containing thousands of entities and individuals affiliated with Marijuana Related Businesses (MRBs) and the supply chain – growers, wholesalers, retailers, etc.

Further, because of the 2018 Farm Bill and the US Department of Agriculture’s requirement that they approve all state hemp programs by January 1, 2022 lest the state’s hemp production be illegal, we’ve added thousands of profiles for hemp across all applicable states. This data includes both businesses and individuals, and the state’s status with the USDA is noted in each profile.

This dataset allows MA clients to identify, track and continuously monitor such entities, allowing clients to apply the appropriate level of due diligence based on their individual risk policies.

MA strives to identify, for each state and territory, the official published registries of licensed businesses. For those states and jurisdictions that do not publish licensed entities; directories and registers will be used.

The extensive sources used to create PEP Connect™ records are validated and include: media from 240 countries: extensive public source government documents; specialized political, trade, and industry journals; academy specialty publications; and biographic special interest journals.

For each country’s PEPs, teams first research the political hierarchy for each state and employs trained country and regional specialists to create records that capture each category of politically exposed person outlined by regulations associated with the USA PATRIOT Act, Europe’s Financial Action Task Force, the EU Third Money Laundering Directive, and any country-specific regulatory requirements. Grid employs a proprietary category classification for PEPs in PEP Connect to allow for client filtering and risk scoring based on a PEPs position, country, and event parameters.

Categories of PEPs include:

• Heads of state
• Cabinet officials
• Senior officials overseeing key infrastructure sectors
• Senior officials overseeing non-infrastructure sectors
• Municipal level officials
• Regional officials
• Senior legislative branch officials
• Ambassadors and top diplomatic officials
• Senior military officials
• Senior judicial officials
• Political party officials
• Top executives/officers in state-controlled enterprises
• Family members
• Close associates and advisors
• International Sporting Officials
  

The final review of records entered into PEP Connect is designed to ensure that records are of the highest possible quality in terms of their accuracy and completeness. The tools that our PEP Connect teams use to build individual PEP profiles safeguard against the most common errors - i.e., not identifying the category or level of a PEP, etc. A final level of review for quality is completed before our records are shared with our clients. Senior analysts and domain experts thoroughly review 100% of all PEP Connect records created by our regional research teams.

As mandatory federal requirements and an intense focus on national security increase, so does the need for proactive behavior when it comes to building and maintaining a compliance program that will serve your organization and protect you from investigations and potential fines. Highly effective, secure web-based customer verification data technology will reduce your organization’s operation, reputation and compliance risk quickly and in a cost effective manner.

Sanctions Connect is an available dataset that provides information on the individuals and organizations associated with sanctioned entities. Covering all sanctioned countries and entities, the data set establishes the connections to individuals and organizations spanning over 100 countries.

Organization relationships include:

• Subsidiaries (ownership > 50%)
• Affiliates (ownership > 50%)
• Board Members and Senior Officials
• Affiliated Entities of Board Members and Senior Officials
• Family members and close associates of Board Members and Senior Officials Individual relationships include:
• Affiliated entities: All entities in which a Sanctioned Individual currently holds a position
• Family members and close associates of Sanctioned Individuals

This dataset includes connections such as:

• High-Relationship between the Gulf Cartel and Rodolfo Arreola Sanchez – The Gulf Cartel is sanctioned under the Kingpin Act, while Rodolfo Arreola Sanchez acted as the group’s accountant.

Data for Grid is selected on the basis of its utility to assist clients in managing money laundering, fraud, corruption, compliance, organized crime, sanctions, embargoes, and associated regulatory and reputational risks: MA KYC accomplishes this through comprehensive efforts to harness subject matter expertise, experience and technology into an ever-increasing archive of risk.

MA KYC targets open source public records to support Grid, the largest database of potential, probable and known money launderers, fraudsters, organized crime figures, terrorists, and criminals.

Occasionally key information will not be available in Monitored Lists or Adverse Media Articles but can be found elsewhere in publicly available information. This information is added to a profile though Supplemental Profile Information sources and the Entity URL of the source is included in the Source Information section of profile. 

Governments around the world have struggled to understand and regulate cryptocurrencies, which have exploded into a $2 trillion market cap in an extraordinarily short amount of time. Traditional financial institutions are wary of working with crypto-related businesses as the decentralized and anonymous natures of cryptocurrencies make them enticing for criminals.

Global regulators are setting their crypto policies and enforcing them. As the industry becomes more mainstream and crypto-related businesses seek to assimilate into traditional finance, it is important that financial institutions maintain due diligence.

In 2019 a new risk virtual currency risk code was created, known as VCY, to monitor Bitcoin ATM operators, ICOs, and virtual currency exchanges based on guidance released by global financial regulators and industry watchdogs. Now we are expanding that scope to include other crypto-related businesses, such as payment processors and brokers.