Privacy and Data Rights
Data Controller
A data controller decides the purposes and means of processing personal data.
Read full definitionGlossary topic
Regulations and Legal Status
Financial, privacy, and consumer-protection regulation concepts plus legal-status vocabulary.
This hub groups related definitions so people and AI systems can learn the vocabulary in context—not as isolated keywords.
Start here
Financial Compliance
Know Your Customer
Know Your Customer (KYC) is identity and due-diligence verification used by regulated firms—including licensed gambling operators—to understand who a customer is and manage financial-crime risk.
Read full definitionRegulatory Status and Legal Language
Entry Into Force
Entry into force is the moment a legal instrument begins to have legal effect as an instrument.
Read full definition178 published definitions in this topic
- Adequacy DecisionAn adequacy decision is an official finding that another country offers essentially equivalent data-protection standards.
- Administrative EnforcementAdministrative enforcement is regulator-led action such as investigations, orders, and fines rather than private lawsuits.
- Administrative FineAn administrative fine is a monetary penalty imposed by a public authority under administrative powers.
- Adopted RegulationAn adopted regulation is a regulation formally approved by the competent authority but not necessarily fully applicable yet.
- Adverse Media ScreeningAdverse media screening searches news and open sources for negative financial-crime related information about a customer.
- Alternative Dispute ResolutionAlternative dispute resolution (ADR) resolves disputes outside traditional court litigation.
- AmendmentAn amendment is a formal change that adds to, deletes, or revises parts of an existing legal instrument.
- AnonymizationAnonymization irreversibly transforms personal data so the individual is no longer identifiable.
- Anti-Money LaunderingAnti-money laundering (AML) is the set of laws and controls that detect and prevent disguising criminal proceeds—including through gambling accounts and payouts.
- Application DateAn application date is when specific provisions of a law or regulation become operable in practice.
- Audit RequirementAn audit requirement is a duty to conduct or submit to independent or internal examinations of compliance.
- Authorized PaymentAn authorized payment is a payment the payer has consented to under applicable payment-services rules.
- Automatic Renewal LawAn automatic renewal law regulates how subscriptions renew and what disclosures and cancellation paths are required.
- Banking LicenseA banking license is authorization to take deposits and conduct banking business as a bank.
- Behavioral AdvertisingBehavioral advertising selects ads using observed past behavior such as browsing, apps, or purchases.
- Beneficial OwnerA beneficial owner is a person who enjoys the benefits of ownership of an entity even if legal title is held in another name—central to gambling licensing transparency.
- BillA bill is a proposed statute introduced in a legislature for debate and possible enactment.
- Billing Error NoticeA billing error notice is a consumer’s formal notice to a creditor about a billing error on an open-end credit account.
- Binding Corporate RulesBinding corporate rules (BCRs) are approved internal data-protection policies for transfers within a multinational group.
- Binding RegulationA binding regulation is a rule with legal force that creates enforceable duties or rights.
- Biometric DataBiometric data is personal data from specific technical processing of physical, physiological, or behavioral characteristics.
- Breach NotificationBreach notification is the required notice to regulators and/or affected people after a personal-data breach.
- Cancellation RightA cancellation right is an entitlement to end a contract or subscription under statutory or contract rules.
- Card Brand RegistrationCard brand registration is enrolling a merchant, PayFac, or program with a card network as required for certain acquiring models.
- Card Scheme RulesCard scheme rules are the operating regulations issued by card networks that acquirers and merchants must follow.
- CertificationCertification is a formal attestation that a product, system, or process meets defined criteria.
- Civil PenaltyA civil penalty is a monetary sanction imposed for violating a law, typically outside criminal prosecution.
- Code of PracticeA code of practice is a structured set of recommended behaviors, often linked to a statute or sector.
- Competent AuthorityA competent authority is the public body legally designated to perform a specific regulatory function.
- Complaint Handling DeadlineA complaint handling deadline is the maximum time a financial firm has to respond to a customer complaint under conduct rules.
- Compliance DeadlineA compliance deadline is a date by which required actions under a law or order must be completed.
- ConsentConsent is a freely given, specific, informed, and unambiguous indication of agreement to processing.
- Consumer GuaranteeA consumer guarantee is a legally required assurance that products or services meet acceptable quality and match their description.
- Counter-Terrorist FinancingCounter-terrorist financing (CTF/CFT) aims to prevent funds from reaching terrorist organizations or activities.
- Cross-Border Data TransferA cross-border data transfer moves personal data to another country or international organization.
- Customer Due DiligenceCustomer due diligence (CDD) is the baseline identity and risk assessment performed on customers under AML rules.
- Dark PatternA dark pattern is a user-interface design that steers people into choices they might not otherwise make, often against their interests.
- Data BreachA data breach is a security incident leading to accidental or unlawful destruction, loss, alteration, or unauthorized disclosure of or access to personal data.
- Data BrokerA data broker collects and sells or licenses personal information about people, often without a direct consumer relationship.
- Data Broker RegistrationData broker registration is a legal requirement for certain brokers to register with a state or public registry.
- Data ControllerA data controller decides the purposes and means of processing personal data.
- Data Deletion RequestA data deletion request is a consumer or data-subject ask that an organization delete personal data.
- Data LocalizationData localization requires storing or processing certain data within a country’s borders.
- Data MinimizationData minimization means processing only personal data that are adequate, relevant, and limited to what is necessary.
- Data ProcessorA data processor processes personal data on behalf of a controller under instructions.
- Data Protection Impact AssessmentA data protection impact assessment (DPIA) analyzes high-risk personal-data processing and mitigations before it proceeds.
- Data Protection OfficerA data protection officer (DPO) is an expert role advising on and monitoring data-protection compliance where required.
- Data SubjectA data subject is the identified or identifiable person whose personal data are processed.
- De-IdentificationDe-identification is removing or obscuring identifiers so data are less likely to identify a person.
- Deceptive PracticeA deceptive practice misleads consumers about a material fact in a way likely to affect decisions.
- Delegated ActA delegated act is secondary EU legislation that supplements or amends non-essential elements of a basic act.
- Digital Operational Resilience ActThe Digital Operational Resilience Act (DORA) is the EU regulation on ICT risk management and operational resilience for financial entities.
- Draft LawA draft law is a working text of proposed legislation that has not yet been enacted.
- Electronic Funds Transfer ProtectionElectronic funds transfer protection is consumer-rights rules for errors and unauthorized transfers in electronic payment systems.
- Enacted LawAn enacted law is legislation that has completed the formal law-making process and become law.
- Enforcement AuthorityAn enforcement authority is a body empowered to investigate breaches and impose corrective or punitive measures.
- Enhanced Due DiligenceEnhanced due diligence (EDD) is deeper investigation applied to higher-risk merchants or customers.
- Entry Into ForceEntry into force is the moment a legal instrument begins to have legal effect as an instrument.
- Error Resolution RightAn error resolution right lets a consumer require a financial institution to investigate and fix covered electronic transfer errors.
- Explicit ConsentExplicit consent is a clear affirmative statement agreeing to a specific high-risk processing activity.