Data protection laws of world.
It’s hefty and you’ll need a couple of reams of paper.
To save you the trouble. In my opinion we need a global legal API (!?) framework.
If you know your PCI and loyalty there’s big gaps continent wise and there also needs to be a discussion about geo-location silo-ing, escrow, times expiry and mega-data policy. #whatsyourvectorvictor