Bolivie KYC, KYB & AML compliance checklist
Une checklist pratique et sourcée pour mettre en œuvre les exigences KYC, KYB et AML en Bolivie.
- Dernière revue
- Dernière revue:
- Version
- Version 1.1
Réponse directe
Que couvre la checklist de conformité pour Bolivie ?
La checklist pour Bolivie traduit les principales règles KYC, KYB et AML en 11 domaines de contrôle et 44 contrôles d’implémentation, avec les autorités, obligations de déclaration et preuves à conserver.
Faits réglementaires clés
- National FIU
- Unidad de Investigaciones Financieras (UIF), a decentralised entity under the Ministry of Economy and Public Finance
- Core framework
- Criminal Code article 185 bis, Law 393, Law 262 and Supreme Decree 4904, plus sector-specific UIF instructions
- Banking-sector rule
- UIF Administrative Resolution 016/2026, amended by Resolution 050/2026
- Suspicious report
- For financial intermediaries, promptly and within 24 hours after classification as suspicious; no minimum amount
- Financial-sector retention
- At least 10 years after the transaction, relationship end or occasional transaction, depending on record type
- Financial-sector beneficial owner
- At least 20% direct or indirect ownership, then control and senior-management fallbacks
- Former PEP period
- The 2026 financial-intermediary instruction retains PEP status for five years after office
- Company registry
- SEPREC administers the Registry of Commerce and a beneficial-owner declaration process
- Financial licensing
- Mass and habitual financial activities require prior ASFI authorisation under Law 393
- Virtual assets
- UIF designated PSAVs as reporting entities in 2025; registration and the live sector instruction must be confirmed
- Privacy
- Constitutional privacy and habeas-data rights, Supreme Decree 1793 article 56 and sector confidentiality rules; no single comprehensive private-sector statute
- FATF status
- Subject to FATF increased monitoring since June 2025; action-plan status reviewed 4 August 2026
Détail d’implémentation
Exigences et actions de conformité pour Bolivie
Ouvrez chaque domaine pour consulter l’exigence, l’action recommandée, les preuves à conserver et la source primaire utilisée.
01Scope, authorities and licensingBolivia designates reporting entities by law and UIF instruments. Resolve the exact activity, entity and supervisor before treating any sector rule as mandatory.4 éléments+
Persons designated by law or UIF must apply the applicable AML/CFT/CPF instruction and report suspicious operations to UIF.
- Action d’implémentation
- Classify every entity and activity against the current UIF sector directory; register the reporting entity, responsible officer and analysts through the current UIF system before regulated operations.
- Preuves à conserver
- Perimeter memo, UIF designation, CARONTE registration, responsible-officer record, instruction inventory and counsel approval.
- Source primaire
- Law 393 art. 495; Supreme Decree 4904 arts. 10 and 15; UIF Resolution 48/2025
Mass and habitual financial intermediation or reserved financial services require prior ASFI authorisation.
- Action d’implémentation
- Separate lending, deposit-taking, payment, exchange, remittance, securities and technology functions; obtain the required constitution and operating authorisations before launch.
- Preuves à conserver
- Product analysis, ASFI application and authorisation, licence conditions, public-register extract and launch approval.
- Source primaire
- Law 393 arts. 6, 19 and 486-490
Financial intermediaries must comply with UIF Resolution 016/2026 as amended, while other sectors use their own current instructions.
- Action d’implémentation
- Map each legal entity to the live sector text and effective date; do not copy banking thresholds or deadlines into a non-bank programme.
- Preuves à conserver
- Entity-rule matrix, effective-date check, change log and board approval.
- Source primaire
- UIF Resolution 016/2026; UIF Resolution 050/2026; UIF external-regulations directory
PSAVs are UIF-designated reporting entities and payment services remain subject to the applicable BCB, ASFI and UIF perimeter.
- Action d’implémentation
- Classify every virtual-asset and payment function, confirm current UIF registration/instruction and obtain any BCB or ASFI approval before offering it.
- Preuves à conserver
- Service taxonomy, legal advice, UIF registration, regulatory correspondence, approvals and launch gate.
- Source primaire
- UIF Resolution 19/2025; Law 393; BCB payment-services regulation
02Governance and risk assessmentThe 2026 financial-sector instruction requires an institution-wide risk system, accountable governance and independent assurance.4 éléments+
A financial intermediary must identify, measure, control, monitor and disclose its LGI/FT/FPADM risks.
- Action d’implémentation
- Assess customers, products, channels, geography, delivery methods and emerging risks; approve risk appetite and remediation.
- Preuves à conserver
- Methodology, risk assessment, data, board minutes, control map and remediation log.
- Source primaire
- UIF Resolution 016/2026 arts. 21-30
The board or equivalent and senior management must oversee the prevention system and a qualified compliance function.
- Action d’implémentation
- Document authority, independence, resources, direct access, appointments, succession and escalation.
- Preuves à conserver
- Governance charter, appointments, UIF notices, budget, reporting packs and conflicts register.
- Source primaire
- UIF Resolution 016/2026 arts. 8-20
Policies, procedures, training and internal and external assurance must be maintained and updated.
- Action d’implémentation
- Approve the manual, deliver role-based annual training, test effectiveness and track findings to verified closure.
- Preuves à conserver
- Manual, training plan and attendance, tests, audit reports, findings and closure evidence.
- Source primaire
- UIF Resolution 016/2026 arts. 18-20 and 59-65
Group controls and outsourced processes do not remove the Bolivian entity's responsibility.
- Action d’implémentation
- Map group data sharing and vendor roles, preserve confidentiality, test delegated controls and escalate legal conflicts.
- Preuves à conserver
- Group standard, contracts, consent or authority analysis, control testing and exception register.
- Source primaire
- UIF Resolution 016/2026 arts. 43, 50 and 67
03Natural-person identification and failed CDDCDD begins before the relationship and continues through monitoring, using reliable customer and independent information.4 éléments+
Financial intermediaries must identify and verify customers, users and beneficial owners before the relationship or transaction.
- Action d’implémentation
- Capture required identity, address, occupation, income and contact fields; authenticate reliable evidence and bind it to the applicant.
- Preuves à conserver
- Application, identity images, source checks, authentication results, timestamps and reviewer decision.
- Source primaire
- UIF Resolution 016/2026 arts. 32-34
CDD must establish purpose, expected activity and risk and be refreshed on doubt, suspicion and specified occasional activity.
- Action d’implémentation
- Record purpose and profile, set risk-based refreshes and trigger reviews for inconsistencies, suspicion and material change.
- Preuves à conserver
- Purpose statement, profile, rating, refresh calendar, event alerts and review history.
- Source primaire
- UIF Resolution 016/2026 arts. 32-33 and 51
Representatives and authorised operators must be identified and their authority verified.
- Action d’implémentation
- KYC the acting person, validate the mandate and scope, and link permissions to the correct customer.
- Preuves à conserver
- Representative KYC, power, registry check, permission record and expiry control.
- Source primaire
- UIF Resolution 016/2026 arts. 34-38
CDD difficulty, refusal, false information or unverifiable funds must trigger escalation and a documented ROS decision.
- Action d’implémentation
- Prevent anonymous or fictitious onboarding, restrict the case, avoid tipping off and decide whether to report or exit.
- Preuves à conserver
- System block, missing-information log, escalation, decision, exit approval and ROS receipt where filed.
- Source primaire
- UIF Resolution 016/2026 arts. 56-58
04KYB, registries and beneficial ownershipKYB must reconcile legal existence, authority, ownership, control, the AML test and the separate SEPREC declaration.4 éléments+
A legal-person customer must be identified through reliable formation, registration, tax, governance and representative evidence.
- Action d’implémentation
- Obtain current SEPREC or competent-register evidence, constitution, NIT, addresses, activity, directors and powers before activation.
- Preuves à conserver
- Registry certificate, formation documents, NIT, governance list, powers, reconciliation and approval.
- Source primaire
- UIF Resolution 016/2026 arts. 35-38; Commercial Code
For financial intermediaries, natural persons with at least 20% direct or indirect ownership must be identified and reasonably verified.
- Action d’implémentation
- Trace every tier, calculate holdings and collect the instruction's minimum beneficial-owner data.
- Preuves à conserver
- Ownership chart, cap tables, calculations, source records, declarations and verification.
- Source primaire
- UIF Resolution 016/2026 art. 39(I)-(III)
If ownership does not identify a beneficial owner, financial intermediaries must identify natural-person control and then the relevant senior manager after reasonable measures.
- Action d’implémentation
- Test voting, contractual and other control; record exhausted measures before using the senior-manager fallback.
- Preuves à conserver
- Control analysis, information requests, verification attempts, fallback rationale and approval.
- Source primaire
- UIF Resolution 016/2026 art. 39(IV)-(VI)
Commercial entities must maintain their SEPREC registration and provide beneficial-owner declarations through the current registry process.
- Action d’implémentation
- Complete the applicable incorporation, renewal and change filings; reconcile SEPREC declarations with AML files and investigate discrepancies.
- Preuves à conserver
- Commercial registration, renewal, beneficial-owner declaration, receipts, discrepancy log and remediation.
- Source primaire
- Commercial Code art. 30; Supreme Decree 4596; SEPREC Resolution 494/2024 and current guidance
05PEPs, enhanced diligence and remote onboardingPEP controls are risk-sensitive, with mandatory intensified measures for foreign PEPs under the financial-sector instruction.4 éléments+
Financial intermediaries must determine whether customers and beneficial owners are PEPs using reliable information.
- Action d’implémentation
- Screen at onboarding and at least semi-annually, capture family and close-associate relationships and retain the basis.
- Preuves à conserver
- Declaration, screening, public-source evidence, relationship analysis, semi-annual review and alerts.
- Source primaire
- UIF Resolution 016/2026 art. 54
Foreign PEPs are high risk; high-risk domestic or international-organisation PEPs require intensified measures.
- Action d’implémentation
- Obtain senior-management approval, establish source of wealth and funds and apply intensified monitoring.
- Preuves à conserver
- Approval, source pack, purpose, monitoring plan, reviews and escalation.
- Source primaire
- UIF Resolution 016/2026 art. 54(II)-(IV)
The financial-sector instruction applies PEP measures to specified family and close associates and retains former-PEP status for five years.
- Action d’implémentation
- Encode the defined relationship scope and five-year rule, then remove status only on reliable evidence that it no longer applies.
- Preuves à conserver
- Relationship map, role dates, rule configuration, review evidence and removal approval.
- Source primaire
- UIF Resolution 016/2026 art. 54(V)-(VI)
Remote onboarding must achieve reliable identification and verification and manage impersonation, fraud and privacy risk.
- Action d’implémentation
- Authenticate documents and person, test liveness where proportionate, secure the flow and provide a manual fallback.
- Preuves à conserver
- Remote-flow design, vendor diligence, attack testing, consent or authority record and manual review.
- Source primaire
- UIF Resolution 016/2026 arts. 32-34; Supreme Decree 1793 art. 56
06Monitoring and suspicious reportingSuspicion is reported regardless of amount. Sector timing must be taken from the controlling instruction.4 éléments+
Financial intermediaries must continuously monitor transactions against customer knowledge, activity, risk and source of funds where needed.
- Action d’implémentation
- Design risk-based scenarios, reconcile complete data, investigate alerts promptly and tune on observed risk.
- Preuves à conserver
- Scenario inventory, data lineage, alert cases, tuning, validation and governance.
- Source primaire
- UIF Resolution 016/2026 arts. 28, 33 and 56
A suspicious attempted or completed operation must be reported to UIF without a minimum amount.
- Action d’implémentation
- Document reasonable grounds, preserve supporting material and file through the current UIF system.
- Preuves à conserver
- Case analysis, decision, electronic ROS, attachments, timestamp and acknowledgement.
- Source primaire
- UIF Resolution 016/2026 arts. 57-58
For financial intermediaries, the ROS must be sent promptly and within 24 hours after classification as suspicious.
- Action d’implémentation
- Timestamp classification, use a deadline control and escalate any portal or evidence issue before expiry.
- Preuves à conserver
- Decision timestamp, 24-hour timer, submission receipt, outage evidence and escalation.
- Source primaire
- UIF Resolution 016/2026 art. 57(I)
ROS information and supporting material are confidential and must not be disclosed to customers, shareholders or third parties.
- Action d’implémentation
- Restrict access, separate customer communications from reporting, and train personnel against tipping off.
- Preuves à conserver
- Access list, confidentiality acknowledgements, communications review, training and incident log.
- Source primaire
- UIF Resolution 016/2026 art. 67; Supreme Decree 4904 art. 11
07Payments, wires, thresholds and agentsPayment, wire and threshold controls are product- and sector-specific; there is no universal transaction-report threshold in this report.4 éléments+
Electronic transfers must carry and retain the information required by the 2026 financial-sector instruction and applicable payment rules.
- Action d’implémentation
- Map ordering and beneficiary fields, reject or investigate deficient transfers and preserve end-to-end data.
- Preuves à conserver
- Message schema, validation rules, exception cases, repair history and retention test.
- Source primaire
- UIF Resolution 016/2026 arts. 45-49; BCB payment-services regulation
BCB regulates payment services, electronic instruments, clearing and settlement, while ASFI authorises covered financial providers.
- Action d’implémentation
- Classify wallet, acquiring, switching, remittance and payment functions and obtain each required approval or no-objection.
- Preuves à conserver
- Perimeter memo, BCB/ASFI correspondence, authorisation, technical certification and change approvals.
- Source primaire
- Law 393; BCB Resolution 079/2022 and current amendments
Any cash, occasional-transaction or systematic report threshold must be taken from the current sector instruction and parameterised with its exact aggregation rule.
- Action d’implémentation
- Maintain a source-linked parameter register; do not treat a banking threshold as universal.
- Preuves à conserver
- Threshold register, source snapshot, aggregation tests, change tickets and report receipts.
- Source primaire
- Supreme Decree 4904 art. 10(q); UIF Resolution 016/2026 arts. 26 and 52-53 as amended
Agents and service providers must operate within the principal's authorisation and tested AML, sanctions, privacy and security controls.
- Action d’implémentation
- Define responsibilities and data flows in contract, train agents and test onboarding, monitoring and escalation end to end.
- Preuves à conserver
- Contract, agent register, training, sample tests, incidents and remediation.
- Source primaire
- Law 393; UIF Resolution 016/2026 arts. 41-43
08Targeted financial sanctionsBolivia uses Law 262, judicial involvement and UIF instructions for UN terrorism designations; proliferation procedures must be checked against the current UIF instrument.4 éléments+
Reporting entities must screen current UN Security Council designations and monitor updates permanently.
- Action d’implémentation
- Synchronise authoritative lists, screen customers, beneficial owners, users and providers, and investigate identity and ownership.
- Preuves à conserver
- List source and version, screening logs, match analysis, ownership test and disposition.
- Source primaire
- Law 262 arts. 1-3; UIF RCSNU Instruction 26/2023 arts. 5-7
A confirmed terrorism-list positive must be frozen preventively under the UIF procedure and communicated without delay.
- Action d’implémentation
- Block funds and other assets without warning, send the prescribed freeze report and preserve the UIF/judicial chronology.
- Preuves à conserver
- Match, freeze timestamp, FC-01, UIF communication, judicial notice and account controls.
- Source primaire
- Law 262; UIF RCSNU Instruction 26/2023 art. 6
After a preventive freeze under the 2023 instruction, the reporting entity must file a ROS within one business day.
- Action d’implémentation
- Link the freeze and ROS cases, control the one-business-day deadline and retain acknowledgements.
- Preuves à conserver
- Freeze record, ROS decision, timer, submission and receipt.
- Source primaire
- UIF RCSNU Instruction 26/2023 art. 6(III)
Proliferation-financing list and freezing measures require the live UIF procedure; older terrorism-only wording is not sufficient.
- Action d’implémentation
- Confirm the current FPADM instrument and list scope with UIF before launch and test release, false-positive and humanitarian-exemption handling.
- Preuves à conserver
- Current-rule confirmation, procedures, test cases, legal advice and regulator correspondence.
- Source primaire
- Supreme Decree 4904 arts. 10 and 15; current UIF sector instruction; controlled uncertainty
09Records and regulator accessRecords must reconstruct decisions and be retrievable for UIF and competent supervisors.4 éléments+
Financial intermediaries must retain transaction, transfer and payment records for at least ten years after the transaction.
- Action d’implémentation
- Apply the ten-year clock to complete transaction data, documents and payment messages and test legal holds.
- Preuves à conserver
- Retention schedule, record samples, clock logic, deletion tests and legal holds.
- Source primaire
- UIF Resolution 016/2026 art. 66(I)(a)
Financial intermediaries must retain CDD, account, correspondence and analysis records for at least ten years after relationship end or the occasional transaction.
- Action d’implémentation
- Trigger retention from the correct event and preserve identity, ownership, risk and analysis history.
- Preuves à conserver
- Customer-close record, retention trigger, archive sample, access log and deletion approval.
- Source primaire
- UIF Resolution 016/2026 art. 66(I)(b)
Records must be sufficient to reconstruct operations and provide evidence in proceedings.
- Action d’implémentation
- Preserve source, timestamps, versions, reviewers, decisions and linked reports in a searchable audit trail.
- Preuves à conserver
- Reconstruction test, source hashes, case export, chain of custody and remediation.
- Source primaire
- UIF Resolution 016/2026 art. 66(II)
UIF and competent supervisors may require confidential information in the form and deadline they specify.
- Action d’implémentation
- Maintain a controlled request process, verify authority, preserve confidentiality and evidence complete timely production.
- Preuves à conserver
- Request, authority check, collection log, approval, production and acknowledgement.
- Source primaire
- Law 393 arts. 495-497; Supreme Decree 4904 arts. 10-12
10Privacy, biometrics and transfersBolivia has constitutional, electronic-communications and sector protections but no single comprehensive private-sector data-protection law equivalent to the GDPR.4 éléments+
Personal-data use must respect constitutional privacy, intimacy, honour, image and habeas-data rights.
- Action d’implémentation
- Map each KYC field to necessity and authority, inform the person, restrict reuse and provide correction and challenge routes.
- Preuves à conserver
- Data inventory, authority matrix, notice, rights workflow, decisions and complaints.
- Source primaire
- Political Constitution arts. 21 and 130-131; Supreme Decree 1793 art. 56
Supreme Decree 1793 requires prior knowledge and express consent for technical processing, subject to legal-authority exceptions, and purpose information.
- Action d’implémentation
- Record the applicable consent or legal duty, specified purpose, recipients and controller details; avoid unrelated secondary use.
- Preuves à conserver
- Notice, consent or exception analysis, purpose register, recipient map and audit log.
- Source primaire
- Supreme Decree 1793 art. 56
Financial consumers have confidentiality rights subject to legal exceptions, including UIF reporting duties.
- Action d’implémentation
- Restrict access, encrypt sensitive records, disclose only under verified authority and log every access and transmission.
- Preuves à conserver
- Access model, encryption, disclosure register, authority evidence, monitoring and incident response.
- Source primaire
- Law 393 arts. 74 and 472-475
Biometrics and cross-border processing require a documented, conservative legal analysis because Bolivia lacks a comprehensive transfer/biometric code.
- Action d’implémentation
- Assess necessity, consent and proportionality; protect templates, map destinations and obtain local advice before transfer or automated use.
- Preuves à conserver
- Impact assessment, biometric design, consent, vendor contract, transfer map, security tests and counsel opinion.
- Source primaire
- Political Constitution arts. 21 and 130-131; Supreme Decree 1793 art. 56; controlled uncertainty
11Practical evidence packsA defensible programme must reproduce what the operator knew, why a rule applied and when each action occurred.4 éléments+
Every onboarding decision should be reconstructable from authoritative evidence.
- Action d’implémentation
- Bundle identity, KYB, ownership, authority, screening, purpose, risk, approvals and exceptions under a stable identifier.
- Preuves à conserver
- Timestamped onboarding pack with source URLs, hashes, reviewer and final decision.
- Source primaire
- Implementation control supporting UIF Resolution 016/2026 arts. 32-39 and 66
Every monitoring and reporting decision should preserve the complete chronology.
- Action d’implémentation
- Capture rule version, inputs, analysis, requests, classification, deadline and ROS or dismissal outcome.
- Preuves à conserver
- Alert case, linked activity, notes, classification time, receipt and quality review.
- Source primaire
- Implementation control supporting UIF Resolution 016/2026 arts. 56-58
Legal parameters must remain linked to the operative sector text and effective date.
- Action d’implémentation
- Maintain a controlled register for thresholds, aggregation, PEP periods, retention, sanctions and reporting deadlines.
- Preuves à conserver
- Parameter register, source snapshot, effective date, change approval, tests and deployment record.
- Source primaire
- Implementation control; current UIF sector instruction
Launch approval must resolve licensing, AML, sanctions, registry, privacy, outsourcing and evidence readiness together.
- Action d’implémentation
- Use a cross-functional go-live gate and block release for unresolved perimeter, source or reporting defects.
- Preuves à conserver
- Signed checklist, legal opinions, registrations, control tests, residual-risk acceptance and rollback plan.
- Source primaire
- Implementation control; Law 393; Supreme Decree 4904
Registre des sources primaires
19 sources utilisées pour cette checklist
Utilisez ces liens pour vérifier la législation, les lignes directrices, les procédures de déclaration et les statuts internationaux.
- UIF external regulations directoryUnidad de Investigaciones Financieras · Official regulator directory
- UIF Resolution 016/2026 - financial-intermediary instructionUnidad de Investigaciones Financieras · Primary regulation
- UIF Resolution 050/2026 - amendments to articles 52 and 53Unidad de Investigaciones Financieras · Primary regulation
- Supreme Decree 4904 - UIF regulationUnidad de Investigaciones Financieras · Official legislation directory
- Law 393 - Financial Services Law, ordered textAutoridad de Supervision del Sistema Financiero · Primary legislation
- UIF national legislation directoryUnidad de Investigaciones Financieras · Official legislation directory
- Law 262 - preventive freezing regimeUnidad de Investigaciones Financieras · Official legislation directory
- UIF UN Security Council freezing guidanceUnidad de Investigaciones Financieras · Official regulator guidance
- UIF frequently asked questionsUnidad de Investigaciones Financieras · Official regulator guidance
- SEPREC Registry of CommerceServicio Plurinacional de Registro de Comercio · Official registry guidance
- SEPREC operational changes and beneficial-owner declarationServicio Plurinacional de Registro de Comercio · Official registry procedure
- SEPREC internal regulations directoryServicio Plurinacional de Registro de Comercio · Official registry directory
- Supreme Decree 1793 - personal-data provisionsAGETIC · Official national-rules directory
- ASFI financial-consumer rightsAutoridad de Supervision del Sistema Financiero · Official regulator guidance
- BCB payment regulations directoryBanco Central de Bolivia · Official regulator directory
- UIF PSAV services and registrationUnidad de Investigaciones Financieras · Official regulator service
- Bolivia country pageFinancial Action Task Force · Authoritative international assessment
- FATF jurisdictions under increased monitoringFinancial Action Task Force · Authoritative current status
- Bolivia first enhanced-follow-up reportGAFILAT · Authoritative regional assessment
Réponses directes
Questions KYC, KYB et AML pour Bolivie
Who receives suspicious operation reports in Bolivia?+
Designated reporting entities file directly with the Unidad de Investigaciones Financieras (UIF) through its current secure system and under the applicable sector instruction.
What is the suspicious-reporting deadline?+
For financial intermediaries under Resolution 016/2026, a suspicious attempted or completed operation is reported promptly and within 24 hours after it is classified as suspicious. Other sectors must use their own current UIF instruction.
Is there one universal threshold report?+
No universal threshold is stated in this report. UIF may require reports with or without thresholds, and each entity must implement the current sector-specific amount, aggregation period and report type.
Who is a beneficial owner for financial-sector CDD?+
The 2026 financial-intermediary instruction identifies natural persons with at least 20% direct or indirect participation, then persons exercising control, and finally a relevant senior manager after documented reasonable measures.
Does Bolivia have a beneficial-owner register?+
SEPREC operates a beneficial-owner declaration process within the Registry of Commerce. Access, filing events and the current form must be confirmed through the live SEPREC procedure; registry information does not replace AML verification.
How long are financial-sector AML records retained?+
Resolution 016/2026 requires at least ten years for transactions after completion and for CDD/account/analysis records after relationship end or the occasional transaction, depending on record type.
Do payment and virtual-asset businesses require approval or registration?+
Potentially. Financial and payment activities may require ASFI or BCB approval. UIF designated PSAVs as reporting entities and provides registration services; the exact live perimeter and sector instruction must be confirmed before launch.
What happens on a UN terrorism-list match?+
Under Law 262 and UIF Instruction 26/2023, the entity follows the preventive-freezing procedure, reports the positive without delay and files the linked ROS within one business day. Judicial review and UIF communications must be preserved.
What privacy law applies to KYC and biometrics?+
Constitutional privacy and habeas-data rights, Supreme Decree 1793 article 56 and sector confidentiality rules apply. Bolivia does not have one comprehensive private-sector data law, so biometric and international-transfer designs require conservative analysis and local advice.
Is Bolivia on the FATF grey list?+
Yes. FATF placed Bolivia under increased monitoring in June 2025. This is not the call-for-action list, and FATF states that risk-based measures should be used rather than blanket de-risking.
Méthode de recherche et de revue
VOVE ID Compliance Research cartographie le périmètre réglementaire, traduit les obligations en contrôles opérationnels, relie les affirmations importantes aux sources et date chaque revue.
General regulatory information, not legal advice, a licensing decision or a substitute for the operative Spanish text, sector instruction, CARONTE procedures or regulator guidance. Reviewed 4 August 2026. The detailed 20% beneficial-owner test, 24-hour post-classification ROS deadline, five-year former-PEP period and ten-year retention rules cited here are from the 2026 financial-intermediary instruction and must not be applied to another sector without checking its current UIF instruction. Confirm perimeter, registration, reporting channel, thresholds, data-processing basis and later FATF/UIF developments with qualified Bolivian counsel and the competent authority before launch.