(3)There are, however, circumstances where a group operates branches or majority-owned subsidiaries in a third country whose law does not permit the implementation of group-wide anti-money laundering and countering the financing of terrorism policies and procedures. This can be the case, for example, where the third country's data protection or banking secrecy law limits the group's ability to access, process or exchange information related to customers of branches or majority-owned subsidiaries in the third country.