What about California (CCPA / CPRA) and other US state privacy laws?
US state privacy statutes (CCPA / CPRA in California, VCDPA in Virginia, CPA in Colorado, and others) generally include exemptions for personal information collected, processed, sold or disclosed pursuant to the BSA / FinCEN regime. Compliance teams should map which exemption applies to which obligation and document the analysis — the exemptions are not blanket.
---