Data on borrowers, guarantors, connected persons/entities, depositors, collateral providers, recipients of loro remittances and orderers of nostro remittances, recipients and remitters of the funds in the denar payment operations are processed for the purpose of appropriate identification, measurement and monitoring of the individual types of risks which are included in the scope of work of the supervision at the National Bank, as well as to get a clear and real picture of the manner of managing the individual types of risks and to undertake appropriate supervisory activities for improving the risk management.

The National Bank processes the following categories of personal data: 

- name and surname; 

- identification number of the citizen;

- address;

- data for the transactions of natural persons covered by the controlled sample for credit risk, money laundering risk, as well as in the field of control of the compliance with the regulations (international and domestic payment operations);

- data on the employer and the income;

- data on the property of natural persons on which a mortgage is raised;

- data on connected natural persons and legal entities.

Data are stored for 10 years from the finality of the Report. The deadline is set taking into consideration the supervisory cycle which can last even over 24 months, given that sometimes there is a need for materials from two consecutive controls.