Which of the following laws or regulations can impact the application of AML/CFT programs and require financial institutions (r" Is) to balance multiple compliance requirements?

Consumer protection laws intersect with AML in limited ways but do not impose the same direct legal conflicts as data privacy or financial inclusion frameworks, making this a secondary rather than primary compliance tension.

This choice incorrectly characterizes other regulations as non-impactful, when in reality data privacy, consumer protection, and other frameworks impose binding obligations that directly constrain how AML/CFT programs operate.

ESG frameworks influence strategic risk appetite and reporting but do not impose direct legal requirements that conflict with AML/CFT program mechanics in the same binding way as data privacy laws.

Data privacy regulations such as GDPR restrict FIs from freely sharing customer data needed for AML investigations and suspicious activity reporting, while financial inclusion mandates may require serving customers who cannot fully satisfy CDD and KYC documentation requirements - creating a direct and unavoidable compliance conflict that FIs must actively balance.