Skip to content

⚖️ Regulations & Standards

Every eKYC system operates within a web of regulations — AML laws that mandate identity verification, data protection laws that restrict how biometric data is handled, and technical standards that define interoperability. This section maps the complete regulatory landscape.

Articles in This Section

Data Protection & Privacy

# Article What You'll Learn
1 GDPR & eKYC EU data protection — biometrics as special category, consent, DPIA
2 India DPDP Act Digital Personal Data Protection Act 2023 — impact on eKYC
3 Global Privacy Laws for eKYC CCPA, LGPD, PDPA, BIPA — worldwide privacy landscape
4 Biometric Data Protection BIPA, GDPR Article 9, consent requirements, template security

AML/KYC Regulations

# Article What You'll Learn
5 RBI KYC Master Direction India's definitive eKYC regulation — all methods, requirements
6 EU AML Regulations (AMLD/AMLR) 4AMLD → 6AMLD → AMLR 2024 — EU's evolving AML framework
7 USA BSA/CIP/CDD Rule Bank Secrecy Act, Customer Identification Program
8 FATF Mutual Evaluations How countries are assessed, grey/black list impact
9 Regional KYC Regulations Singapore MAS, UAE CBUAE, UK FCA, Hong Kong HKMA

AI & Technology Regulations

# Article What You'll Learn
10 EU AI Act & Biometrics High-risk classification, conformity assessment, fairness
11 Algorithmic Accountability Explainability, bias testing, audit requirements

Technical Standards

# Article What You'll Learn
12 ISO 30107 (PAD Testing) Presentation attack detection testing standard
13 ISO 19795 (Biometric Performance) Biometric testing methodology standard
14 ICAO 9303 (Travel Documents) MRZ, ePassport chip, biometric specifications
15 NIST SP 800-63 (Digital Identity) Identity assurance levels, authentication guidelines
16 eIDAS Technical Standards Trust services, qualified signatures, LoA framework

Compliance Operations

# Article What You'll Learn
17 Building a Compliance Program MLRO role, policies, training, audit
18 Regulatory Sandboxes for eKYC Innovation frameworks, testing new eKYC approaches

Regulatory Map

graph TD
    A[eKYC System] --> B[Must Comply With]

    B --> C[AML/KYC Laws<br/>WHY you must verify]
    B --> D[Privacy Laws<br/>HOW you handle data]
    B --> E[AI Regulations<br/>HOW your models work]
    B --> F[Technical Standards<br/>HOW you test quality]

    C --> C1[FATF Recommendations]
    C --> C2[National AML laws<br/>PMLA, BSA, AMLD]
    C --> C3[Regulator directions<br/>RBI, FCA, FinCEN, MAS]

    D --> D1[GDPR - EU]
    D --> D2[DPDP - India]
    D --> D3[CCPA - California]
    D --> D4[BIPA - Illinois]

    E --> E1[EU AI Act]
    E --> E2[Algorithmic accountability]

    F --> F1[ISO 30107 - PAD]
    F --> F2[ISO 19795 - Biometric testing]
    F --> F3[ICAO 9303 - Documents]
    F --> F4[NIST 800-63 - Identity]

    style A fill:#4051B5,color:#fff