Regulations and Frameworks

The regulations that shape compliance work: BSA, the EU AML package, MiCA, GDPR, DORA, MLR 2017, POCA and more, with what each requires and who enforces it.

• BSA: Bank Secrecy Act
• PATRIOT Act: USA PATRIOT Act
• AMLA 2020: Anti-Money Laundering Act of 2020
• CTA: Corporate Transparency Act
• Part 504: NYDFS Part 504 Transaction Monitoring Regulation
• FCPA: Foreign Corrupt Practices Act
• SOX: Sarbanes-Oxley Act
• Dodd-Frank: Dodd-Frank Wall Street Reform and Consumer Protection Act
• EU AML Package: EU Anti-Money Laundering Package (AMLR, AMLD6, AMLAR)
• MiCA: Markets in Crypto-Assets Regulation
• TFR: Transfer of Funds Regulation (crypto travel rule)
• GDPR: General Data Protection Regulation
• DORA: Digital Operational Resilience Act
• PSD2: Payment Services Directive 2
• MiFID II: Markets in Financial Instruments Directive II
• MLR 2017: Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017
• POCA: Proceeds of Crime Act 2002
• Bribery Act: Bribery Act 2010
• SAMLA: Sanctions and Anti-Money Laundering Act 2018
• ECCTA: Economic Crime and Corporate Transparency Act 2023
• FATF 40: FATF 40 Recommendations
• Travel Rule: FATF Recommendation 16 (travel rule)
• Wolfsberg: Wolfsberg Group standards
• UDAAP: Unfair, Deceptive, or Abusive Acts or Practices
• Reg E: Regulation E, Electronic Fund Transfers
• PCI DSS: Payment Card Industry Data Security Standard
• GLBA: Gramm-Leach-Bliley Act, Title V
• CCPA/CPRA: California Consumer Privacy Act, as amended by the California Privacy Rights Act
• PCMLTFA: Proceeds of Crime (Money Laundering) and Terrorist Financing Act
• FCA Consumer Duty
• NIS2: Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union
• PS Act: Payment Services Act 2019
• AMLD4 / AMLD5: Fourth and Fifth Anti-Money Laundering Directives
• TILA: Truth in Lending Act
• TISA: Truth in Savings Act
• ECOA: Equal Credit Opportunity Act
• FCRA: Fair Credit Reporting Act
• MLA: Military Lending Act
• SCRA: Servicemembers Civil Relief Act
• EFTA: Electronic Fund Transfer Act
• CAN-SPAM: Controlling the Assault of Non-Solicited Pornography And Marketing Act of 2003
• ISO 27001: ISO/IEC 27001 Information security, cybersecurity and privacy protection, Information security management systems, Requirements
• SOC 2: SOC 2, SOC for Service Organizations: Trust Services Criteria
• CVM regulations: the Comissão de Valores Mobiliários rulebook (Resoluções CVM and Pareceres de Orientação)
• Lei nº 9.613, de 3 de março de 1998, Lei de Lavagem de Dinheiro
• Lei nº 14.478, de 21 de dezembro de 2022, marco legal dos ativos virtuais