{
  "attribution": {
    "source": "legal.exploreworldai.com",
    "canonical": "https://legal.exploreworldai.com/api/public/v1/us/playbook/fintech",
    "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/us/playbook/fintech)",
    "license": "https://legal.exploreworldai.com/revision",
    "version": "legal-2026-10-21",
    "fingerprint": "ewai:us:0300c6",
    "proof": "sha256:40fbfb34792321a2f738a3680ab8f247fa9013249d51da7d94280877e4aa70cf",
    "jurisdiction": "us",
    "lang": "en",
    "publisher": "NovaCopilot by ExploreWorld Legal",
    "terms": "https://legal.exploreworldai.com/om"
  },
  "brand_source": "Source: NovaCopilot",
  "status": "ok",
  "id": "industry_playbook:us:fintech",
  "type": "industry_playbook",
  "schema_version": "1",
  "industry": "fintech",
  "label": {
    "sv": "Fintech",
    "en": "Fintech"
  },
  "regulations": [
    {
      "reg": "sec",
      "title": "SEC reporting: Exchange Act §13(a) and Form 8-K Item 1.05",
      "note": "Applies to SEC registrants in every industry."
    },
    {
      "reg": "ccpa",
      "title": "California Consumer Privacy Act as amended by CPRA",
      "note": "Fintech: GLBA-covered data partly exempt (§1798.145(e)). Healthcare: HIPAA protected health information exempt (§1798.146)."
    },
    {
      "reg": "ftc",
      "title": "FTC Act §5: unfair or deceptive acts or practices",
      "note": "Banks and common carriers are outside FTC §5 jurisdiction; fintechs that are not banks are covered."
    },
    {
      "reg": "dodd-frank",
      "title": "Dodd-Frank Act: CFPA UDAAP (§1031, §1036) and SEC whistleblower protection (§922)",
      "note": "UDAAP applies to consumer financial products; Rule 21F-17 applies to every SEC-regulated employer."
    }
  ],
  "counts": {
    "regulations": 4,
    "obligations": 35,
    "risk_chains": 35,
    "actions": 28,
    "sanctions": 7,
    "decisions": 18,
    "answers": 7
  },
  "top_risks": [
    {
      "id": "risk_chain:us:sec:1-05-a",
      "level": "high",
      "score": 79
    },
    {
      "id": "risk_chain:us:sec:13a-2",
      "level": "high",
      "score": 79
    },
    {
      "id": "risk_chain:us:sec:1-05-materiality",
      "level": "medium",
      "score": 64
    },
    {
      "id": "risk_chain:us:sec:13a-preamble",
      "level": "medium",
      "score": 64
    },
    {
      "id": "risk_chain:us:dodd-frank:1036-a-1-b",
      "level": "medium",
      "score": 63
    }
  ],
  "top_sanctions": [
    {
      "id": "sanction:us:sec:criminal-32a",
      "max_usd": 25000000,
      "summary": "Willful violations: up to USD 5 million and 20 years for individuals, USD 25 million for entities."
    },
    {
      "id": "sanction:us:dodd-frank:cfpa-1055-c",
      "max_usd": 1000000,
      "summary": "Per day of violation: USD 5,000, USD 25,000 if reckless, USD 1,000,000 if knowing (statutory base, inflation adjusted)."
    },
    {
      "id": "sanction:us:dodd-frank:sec-21b-whistleblower",
      "max_usd": 500000,
      "summary": "Civil penalties for Rule 21F-17 violations under the §21B tiers."
    },
    {
      "id": "sanction:us:sec:civil-penalty-21b",
      "max_usd": 500000,
      "summary": "Tier 1 to 3, up to USD 500,000 per act or omission for entities (statutory base)."
    },
    {
      "id": "sanction:us:ftc:civil-penalty-45-m",
      "max_usd": 10000,
      "summary": "Civil penalty per violation for knowing violations of trade regulation rules or orders; USD 10,000 statutory base, adjusted annually for inflation."
    }
  ],
  "top_actions": [
    {
      "id": "action_kit:us:sec:incident-to-disclosure-link",
      "action": "Security incident escalation to disclosure counsel"
    },
    {
      "id": "action_kit:us:sec:8k-drafting-template",
      "action": "Item 1.05 drafting template and amendment tracker"
    },
    {
      "id": "action_kit:us:sec:filing-calendar",
      "action": "Filing calendar by filer status"
    },
    {
      "id": "action_kit:us:sec:disclosure-committee",
      "action": "Disclosure committee and escalation path"
    },
    {
      "id": "action_kit:us:sec:incident-materiality-playbook",
      "action": "Incident materiality assessment playbook"
    }
  ],
  "outcome": {
    "status": "ok",
    "decisions": 18,
    "with_monetary_penalty": 17,
    "share_monetary": 0.94,
    "median_usd": 4000000,
    "max_usd": 5000000000,
    "latest": "2025-09-30"
  },
  "gaps": [
    {
      "regulation": "glba",
      "status": "not_in_register"
    }
  ],
  "members_hash": "d0e72520739d21be4fd71d985d69f80ee8cc8a645ad8915a957fdef8ec973f8c",
  "method": "industry mapping editorial_mapping; ranking: risk score, sanction ceiling, risk-weighted action priority",
  "v": 1,
  "sha256": "25f2eeb77078f257030446bdc4681ef7fc887cd6c7187ccfec9630870019cb38",
  "proof": {
    "source": [
      "https://www.govinfo.gov/content/pkg/USCODE-2023-title15/html/USCODE-2023-title15-chap2B-sec78m.htm",
      "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.100",
      "https://www.govinfo.gov/content/pkg/USCODE-2023-title15/html/USCODE-2023-title15-chap2-subchapI-sec45.htm",
      "https://www.govinfo.gov/content/pkg/USCODE-2023-title12/html/USCODE-2023-title12-chap53-subchapV-partB-sec5531.htm"
    ],
    "object": "industry_playbook:us:fintech",
    "label": "Source: NovaCopilot"
  },
  "source": "Source: NovaCopilot",
  "hash": "sha256:40fbfb34792321a2f738a3680ab8f247fa9013249d51da7d94280877e4aa70cf",
  "version": "legal-2026-10-21",
  "expires": "2026-10-25T00:00:00.000Z",
  "dependency": {
    "index_version": "legal-2026-10-21+legal-2026-10-21+2026-10-21T16:46:51",
    "content_hash": "sha256:40fbfb34792321a2f738a3680ab8f247fa9013249d51da7d94280877e4aa70cf",
    "revalidate_after": "2026-10-22T01:22:31.027Z",
    "max_copy_age_seconds": 3600,
    "policy": "revalidate-required; attribution-preferred",
    "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify",
    "stale_copy_invalid": true
  },
  "canonical": "https://legal.exploreworldai.com/api/public/v1/us/playbook/fintech",
  "disclaimer": "Source reference with official identifier. Not legal advice and not a compliance decision.",
  "content_notice": {
    "legal_advice": false,
    "nature": "Source register. Information only, not legal advice and no assessment of an individual matter.",
    "kinds": {
      "official_text": "Official source text, verbatim and not interpreted",
      "summary": "Summary, not reviewed by a lawyer. Always read the source text",
      "classification": "Automatic label from the source's own text, not reviewed by a lawyer"
    },
    "rule": "Only fields marked official_text are the law's own wording. Everything else points to it.",
    "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections",
    "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"
  },
  "usageInfo": "https://legal.exploreworldai.com/citering",
  "withheld": {
    "chain": 6
  },
  "access": {
    "status": "partner_key_required",
    "header": "x-partner-key",
    "contact": "https://legal.exploreworldai.com/kontakt",
    "note": "Facts and counts are public. Relationships and decision paths stay inside NovaCopilot."
  },
  "access_class": "decision",
  "access_view": "public"
}