Independent EU data-protection counsel

World-Check Removal

World-Check entries can freeze accounts and block transactions. Learn how to request removal under GDPR Articles 16–17, prepare supporting evidence and…

A World-Check entry can block bank accounts, freeze transactions and damage commercial reputation within hours. Removal is possible under Article 17 of the GDPR (right to erasure) and Article 16 (right to rectification) when data is inaccurate, outdated or processed unlawfully. Our independent legal team has handled data-subject access requests and removal applications across 28 jurisdictions, working directly with Refinitiv (now part of the London Stock Exchange Group) and national data-protection authorities.

World-Check is a commercial risk-intelligence database owned by the London Stock Exchange Group (formerly Refinitiv) that aggregates adverse media, sanctions lists, politically exposed person (PEP) designations and law-enforcement data. Banks, payment processors and compliance teams query World-Check during customer due diligence; a profile triggers enhanced scrutiny, account freezes or outright service denial.

Key Takeaways

  • World-Check processes over 5 million profiles and is queried by more than 6,000 financial institutions worldwide (LSEG public filings).
  • Removal or correction is governed by GDPR Articles 16 and 17 (EU) and UK Data Protection Act 2018, Sections 42–43 (UK jurisdiction).
  • Refinitiv must respond to a data-subject access request within one month under Article 12(3) GDPR; complex cases may extend by two further months with written justification.
  • Supporting evidence—court acquittals, dismissal orders, official certificates—is required to demonstrate inaccuracy or unlawfulness of processing.
  • World-Check is distinct from Interpol databases; removal follows private data-protection law, not Interpol Rules on Processing Data.

Why World-Check Entries Cause Immediate Commercial Harm

A World-Check profile appears during automated compliance checks at onboarding, transaction approval and periodic customer reviews. The profile itself does not state guilt, but compliance officers apply a precautionary standard: any adverse entry triggers enhanced due diligence, delays or rejection.

Concrete consequences:

  • Bank-account closure or freezing. Retail and corporate accounts are suspended pending manual review; review timelines range from weeks to indefinite holds. Once frozen, you cannot access funds or conduct business.
  • Payment-processor rejection. Merchant accounts, payment-gateway applications and correspondent-banking relationships are declined without detailed explanation. This cuts off cash flow for e-commerce operations, digital services and international transfers.
  • Investment-fund and wealth-management exclusion. Fund managers and private banks routinely screen investors; a World-Check entry disqualifies applicants from investment opportunities.
  • Employment vetting. Financial-services employers, listed companies and regulated industries query World-Check during background checks.

The absence of a conviction is irrelevant. An arrest, investigation, adverse media report or PEP designation suffices for inclusion. Many profiles persist years after criminal proceedings conclude or charges are dropped, because World-Check relies on automated media scraping and periodic third-party updates rather than real-time judicial monitoring.

Legal Grounds for World-Check Removal or Correction

GDPR Article 16: Right to Rectification

Article 16 of Regulation (EU) 2016/679 obliges controllers to rectify inaccurate personal data without undue delay. A World-Check entry qualifies as inaccurate when:

  • Criminal charges were dismissed, withdrawn or resulted in acquittal, but the profile still references an ongoing investigation.
  • The profile conflates two individuals with similar names (common in transliteration from Arabic, Cyrillic or Chinese scripts).
  • Source citations are outdated, misattributed or factually incorrect (for example, citing a court ruling that was later overturned on appeal).

Refinitiv’s internal procedure requires submission of official documentation: court judgments, prosecutor decisions, certificates of good conduct or press corrections. Self-declarations and lawyer letters without supporting evidence are insufficient.

GDPR Article 17: Right to Erasure (“Right to Be Forgotten”)

Article 17 GDPR provides six grounds for erasure. The most relevant for World-Check removal are:

  1. Data no longer necessary for the purpose (paragraph 1(a)). If the original investigation concluded years ago and no active proceedings exist, continued processing lacks a lawful basis.
  2. Unlawful processing (paragraph 1(d)). If data was scraped from media reports that violated defamation or privacy law, or if the subject was never charged but erroneously included, processing is unlawful from the outset.
  3. Legal obligation to erase (paragraph 1(c)). If a court or data-protection authority orders removal, Refinitiv must comply.

Important limitation: Article 17(3)(e) permits continued processing if necessary for establishment, exercise or defence of legal claims. Refinitiv invokes this exception when profiles relate to ongoing litigation, sanctions enforcement or active regulatory proceedings. You must demonstrate that no such proceedings exist or that the data is factually wrong despite those proceedings.

UK Data Protection Act 2018: National Implementation

For UK residents and data processed in the UK, Sections 42 and 43 of the Data Protection Act 2018 mirror GDPR Articles 16 and 17. World-Check historically operated from the UK (now under LSEG, still UK-regulated), so UK law applies to many requests.

The Information Commissioner’s Office (ICO) supervises compliance. If Refinitiv rejects a removal request without adequate justification, you may lodge a complaint with the ICO and, if dissatisfied, bring judicial-review proceedings before the High Court.

World-Check Removal vs Interpol Data Deletion: Key Differences

Aspect World-Check Interpol (CCF Requests)
Legal basis GDPR Articles 16–17; UK Data Protection Act 2018 Interpol Rules on Processing Data (RPD), Articles 11–12
Controller Private company (LSEG / Refinitiv) Intergovernmental organisation (Interpol)
Procedure Data-subject access request (DSAR) submitted to Refinitiv DPO Application to Commission for the Control of Interpol’s Files (CCF)
Response deadline One month (extendable by two months with justification, Article 12(3) GDPR) Six months (Article 42 RPD), though decisions often issue sooner
Supervisory authority National DPA (ICO in UK, CNIL in France, etc.) EDPS (for Europol data); CCF has no external supervisor
Judicial remedy High Court (UK), Administrative Court (France), national courts per Member State Complaint to CJEU if Europol data involved; no general judicial appeal against CCF decisions, only jurisdictional challenge
Evidence required Court judgments, acquittals, official certificates, press corrections Same, plus detailed statement of grounds and legal arguments

Takeaway: World-Check operates under private data-protection law with faster statutory deadlines and direct judicial remedies. Interpol data removal involves an international administrative body with longer timelines and limited appeal routes. The two processes are independent; an Interpol Red Notice deletion does not automatically remove a World-Check entry, and vice versa.

⚠️ Time is critical — every day matters

Get a free case assessment

Our team specialises in cases with an international element. We review applicable treaties, assess risks, and prepare an action plan.

Free Consultation → 🔒 Confidential · Response within 24h · No obligation

This article is published by an independent law firm for informational purposes only and does not represent or claim affiliation with any government body, international organisation or official authority.

FAQ

Frequently asked questions

How do I find out if I have a World-Check profile?

Submit a data-subject access request (DSAR) directly to Refinitiv via the LSEG website or by post to the Refinitiv Data Protection Officer. Include your full name, date of birth, nationality, known aliases and a copy of your passport or national identity card. Refinitiv must respond within one month confirming whether a profile exists and, if so, providing a full copy of the data held.

Can I remove a World-Check entry if I was never convicted of a crime?

Yes. Article 17 GDPR gives you the right to erasure when data is no longer necessary or was processed unlawfully. Once charges drop, get dismissed, or result in acquittal, keeping an adverse profile on file loses its legal justification. You’ll need to submit the court judgment, prosecutor’s decision, or certificate of good conduct. Refinitiv can refuse only if it can show a continuing legitimate interest—say, ongoing regulatory proceedings or active sanctions enforcement against you.

How long does World-Check removal take?

Refinitiv must respond within one month under Article 12(3) GDPR. Complicated cases stretch to three months if they notify you in writing with an explanation. Here’s the thing: if they refuse, escalating to the Information Commissioner’s Office (UK) or your national data-protection authority adds three to six months. A judicial review before the High Court takes six to twelve months—though urgent interim relief can come within weeks if your circumstances are genuinely pressing.

Does removing a World-Check entry delete my data from all databases?

No. World-Check is just one of many commercial risk databases that banks and compliance teams rely on. Removal there leaves you intact in Dow Jones Risk & Compliance, LexisNexis Bridger Insight, ComplyAdvantage, Interpol databases, and others. Submit separate removal requests to each one. That said, most profiles pull from the same public sources—court records, adverse media coverage—so fixing the source data upstream strengthens every removal request you make.

What if Refinitiv refuses my removal request?

You have three paths forward. Start with internal review—ask Refinitiv’s senior compliance or legal team to reconsider, armed with fresh evidence or stronger legal arguments. Doesn’t work? Lodge a complaint with your national data-protection authority: ICO in the UK, CNIL in France, BfDI in Germany. Finally, you can file judicial-review proceedings before your national court, typically within three months (the UK deadline). We’ve won removal orders through DPA enforcement action and court judgment—both paths succeed when the evidence is solid.

Related

Related services & guides

Europol Lawyers (hub)

Overview of every route to enforce your data-protection rights against Europol.

Preventive Data Check

Check proactively whether Europol holds data on you.

Data Deletion Request

Seek rectification or erasure of inaccurate or unlawfully held data.

Speak to a Europol data-protection lawyer

Confidential, no-obligation assessment of your Europol data, EDPS complaint or CJEU matter. Available 24/7 for urgent cases.

Strictly confidential · Legally privileged · No obligation

Get Free Legal Advice

Message us — we reply within minutes. Consultations are confidential.

Chat on WhatsApp