Ah, makes sense it would be targeted twards banking and financial businesses specifically. Better pinch point than some random commerce. In that case audits would be less problematic, though I’m not sure why outsourcing this data is even an option with the current rules. It’s not like a business can be completely hands off in the acquisition or processing of that info.

I’m uninformed about this, but do KYC laws come into effect at some profit point or are they globally enforced. I don’t see how any small businesses could possibly afford a 3rd party audit, or how that would even scale. I agree it’s necessary, but logistically it seems problematic.