2.7.4 Compliance & Regulatory Landscape

1. Financial Regulations

• If the platform directly facilitates crypto transactions, it may require certain licenses (Money Transmitter, etc.) in specific jurisdictions.

• KYC/AML checks for high-value trading or fiat-to-crypto conversions, often via third-party services like Sumsub or Onfido.

2. GDPR (Europe)

• Summarized above: user data rights, consent for data usage, breach notifications within 72 hours if personal data is compromised.

3. CCPA (California)

• Similar user rights for data access, deletion.

• Transparent privacy notices for California residents.

4. AML / Anti-Fraud Measures

• If advanced trading features or direct wallet custody is introduced, stronger AML measures come into play: transaction monitoring, suspicious activity reporting.