{
  "schema": "bloch.data.regulatory-register.v1",
  "status": "template_not_a_compliance_assessment",
  "institution": null,
  "jurisdictions": [],
  "sources": [
    {
      "scope_group": "Brazil / LGPD, ANPD, Bacen–CMN and CVM",
      "reference": "LGPD · Law 13.709",
      "official_source": "https://www.planalto.gov.br/ccivil_03/_ato2015-2018/2018/lei/l13709.htm",
      "source_review_date": "2026-09-24",
      "applicability": "requires_institution_review",
      "effective_version": null,
      "control_owner": null,
      "required_controls": [],
      "evidence_references": [],
      "next_review": null
    },
    {
      "scope_group": "Brazil / LGPD, ANPD, Bacen–CMN and CVM",
      "reference": "ANPD 15/2024 · incidents",
      "official_source": "https://www.gov.br/anpd/pt-br/assuntos/noticias/anpd-aprova-o-regulamento-de-comunicacao-de-incidente-de-seguranca",
      "source_review_date": "2026-09-24",
      "applicability": "requires_institution_review",
      "effective_version": null,
      "control_owner": null,
      "required_controls": [],
      "evidence_references": [],
      "next_review": null
    },
    {
      "scope_group": "Brazil / LGPD, ANPD, Bacen–CMN and CVM",
      "reference": "ANPD 19/2024 · transfers",
      "official_source": "https://www.gov.br/anpd/pt-br/assuntos/assuntos-internacionais/transferencia-internacional-de-dados",
      "source_review_date": "2026-09-24",
      "applicability": "requires_institution_review",
      "effective_version": null,
      "control_owner": null,
      "required_controls": [],
      "evidence_references": [],
      "next_review": null
    },
    {
      "scope_group": "Brazil / LGPD, ANPD, Bacen–CMN and CVM",
      "reference": "CMN 4.893 · cybersecurity",
      "official_source": "https://www.bcb.gov.br/estabilidadefinanceira/exibenormativo?numero=4893&tipo=Resolu%C3%A7%C3%A3o+CMN",
      "source_review_date": "2026-09-24",
      "applicability": "requires_institution_review",
      "effective_version": null,
      "control_owner": null,
      "required_controls": [],
      "evidence_references": [],
      "next_review": null
    },
    {
      "scope_group": "Brazil / LGPD, ANPD, Bacen–CMN and CVM",
      "reference": "BCB 85 · covered institutions",
      "official_source": "https://www.bcb.gov.br/estabilidadefinanceira/exibenormativo?numero=85&tipo=Resolu%C3%A7%C3%A3o+BCB",
      "source_review_date": "2026-09-24",
      "applicability": "requires_institution_review",
      "effective_version": null,
      "control_owner": null,
      "required_controls": [],
      "evidence_references": [],
      "next_review": null
    },
    {
      "scope_group": "Brazil / LGPD, ANPD, Bacen–CMN and CVM",
      "reference": "CMN 4.968 · internal controls",
      "official_source": "https://www.bcb.gov.br/estabilidadefinanceira/exibenormativo?numero=4968&tipo=Resolu%C3%A7%C3%A3o+CMN",
      "source_review_date": "2026-09-24",
      "applicability": "requires_institution_review",
      "effective_version": null,
      "control_owner": null,
      "required_controls": [],
      "evidence_references": [],
      "next_review": null
    },
    {
      "scope_group": "Brazil / LGPD, ANPD, Bacen–CMN and CVM",
      "reference": "CVM 35 · intermediaries",
      "official_source": "https://conteudo.cvm.gov.br/legislacao/resolucoes/resol035.html",
      "source_review_date": "2026-09-24",
      "applicability": "requires_institution_review",
      "effective_version": null,
      "control_owner": null,
      "required_controls": [],
      "evidence_references": [],
      "next_review": null
    },
    {
      "scope_group": "Brazil / LGPD, ANPD, Bacen–CMN and CVM",
      "reference": "CVM 21 · portfolio managers",
      "official_source": "https://conteudo.cvm.gov.br/legislacao/resolucoes/resol021.html",
      "source_review_date": "2026-09-24",
      "applicability": "requires_institution_review",
      "effective_version": null,
      "control_owner": null,
      "required_controls": [],
      "evidence_references": [],
      "next_review": null
    },
    {
      "scope_group": "Brazil / LGPD, ANPD, Bacen–CMN and CVM",
      "reference": "CVM 175 · investment funds",
      "official_source": "https://conteudo.cvm.gov.br/legislacao/resolucoes/resol175.html",
      "source_review_date": "2026-09-24",
      "applicability": "requires_institution_review",
      "effective_version": null,
      "control_owner": null,
      "required_controls": [],
      "evidence_references": [],
      "next_review": null
    },
    {
      "scope_group": "Brazil / LGPD, ANPD, Bacen–CMN and CVM",
      "reference": "CVM 50 · PLD/FTP",
      "official_source": "https://conteudo.cvm.gov.br/legislacao/resolucoes/resol050.html",
      "source_review_date": "2026-09-24",
      "applicability": "requires_institution_review",
      "effective_version": null,
      "control_owner": null,
      "required_controls": [],
      "evidence_references": [],
      "next_review": null
    },
    {
      "scope_group": "Global / GDPR, financial-sector resilience and custom jurisdictions",
      "reference": "GDPR · Regulation 2016/679",
      "official_source": "https://eur-lex.europa.eu/eli/reg/2016/679/oj/eng",
      "source_review_date": "2026-09-24",
      "applicability": "requires_institution_review",
      "effective_version": null,
      "control_owner": null,
      "required_controls": [],
      "evidence_references": [],
      "next_review": null
    },
    {
      "scope_group": "Global / GDPR, financial-sector resilience and custom jurisdictions",
      "reference": "DORA · Regulation 2022/2554",
      "official_source": "https://eur-lex.europa.eu/eli/reg/2022/2554/oj/eng",
      "source_review_date": "2026-09-24",
      "applicability": "requires_institution_review",
      "effective_version": null,
      "control_owner": null,
      "required_controls": [],
      "evidence_references": [],
      "next_review": null
    },
    {
      "scope_group": "LatAm / Mexico, Colombia, Chile and Argentina",
      "reference": "Mexico · LFPDPPP",
      "official_source": "https://www.diputados.gob.mx/LeyesBiblio/pdf/LFPDPPP.pdf",
      "source_review_date": "2026-09-24",
      "applicability": "requires_institution_review",
      "effective_version": null,
      "control_owner": null,
      "required_controls": [],
      "evidence_references": [],
      "next_review": null
    },
    {
      "scope_group": "LatAm / Mexico, Colombia, Chile and Argentina",
      "reference": "Colombia · SIC transfer guidance",
      "official_source": "https://sedeelectronica.sic.gov.co/delegatura/proteccion-de-datos-personales/normas-corporativas-vinculantes",
      "source_review_date": "2026-09-24",
      "applicability": "requires_institution_review",
      "effective_version": null,
      "control_owner": null,
      "required_controls": [],
      "evidence_references": [],
      "next_review": null
    },
    {
      "scope_group": "LatAm / Mexico, Colombia, Chile and Argentina",
      "reference": "Colombia · scope and exclusions",
      "official_source": "https://www.sic.gov.co/content/%C2%BF-qu%C3%A9-tipo-de-datos-personales-no-le-son-aplicables-las-disposiciones-de-la-ley-1581-de-2012",
      "source_review_date": "2026-09-24",
      "applicability": "requires_institution_review",
      "effective_version": null,
      "control_owner": null,
      "required_controls": [],
      "evidence_references": [],
      "next_review": null
    },
    {
      "scope_group": "LatAm / Mexico, Colombia, Chile and Argentina",
      "reference": "Chile · Law 21.719 transition",
      "official_source": "https://www.bcn.cl/leychile/navegar?i=1209272",
      "source_review_date": "2026-09-24",
      "applicability": "requires_institution_review",
      "effective_version": null,
      "control_owner": null,
      "required_controls": [],
      "evidence_references": [],
      "next_review": null
    },
    {
      "scope_group": "LatAm / Mexico, Colombia, Chile and Argentina",
      "reference": "Argentina · Law 25.326",
      "official_source": "https://www.argentina.gob.ar/normativa/nacional/ley-25326-64790/texto",
      "source_review_date": "2026-09-24",
      "applicability": "requires_institution_review",
      "effective_version": null,
      "control_owner": null,
      "required_controls": [],
      "evidence_references": [],
      "next_review": null
    }
  ],
  "additional_requirements": [],
  "instructions": "Record applicability, current consolidated version, effective dates, required controls, owner, implementation evidence and next review. This catalog is non-exhaustive. Add institution-specific banking, securities, market infrastructure, accounting, recordkeeping, tax and privacy obligations."
}