International Compliance Guide
Last updated: October 29, 2025
Overview
This guide provides general information about compliance considerations for platform operators using HelixPoint in different jurisdictions. This is not legal advice, and operators should consult with qualified legal counsel in each jurisdiction where they operate.
Data Protection and Privacy
GDPR (European Union)
- Platforms must have a lawful basis for processing personal data
- Users have rights to access, rectification, erasure, and data portability
- Data Protection Impact Assessments may be required
- Cross-border transfers require appropriate safeguards
- Breach notification within 72 hours
UK GDPR (United Kingdom)
Similar to EU GDPR with some UK-specific variations. Register with ICO if processing UK data.
CCPA/CPRA (California, USA)
- Applies to businesses meeting revenue/data thresholds
- Consumers have right to know, delete, and opt-out of data sales
- Privacy policy must include specific disclosures
PIPEDA (Canada)
Federal privacy law requires consent, transparency, and data security measures.
Tax Obligations
Value Added Tax (VAT)
EU & UK: Digital services supplied to consumers are subject to VAT at the customer's location. Use VAT MOSS (EU) or VAT OSS for simplified reporting across multiple countries.
Goods and Services Tax (GST)
- Australia: 10% GST on digital services to Australian consumers (register if over AUD 75,000)
- New Zealand: 15% GST on digital services (register if over NZD 60,000)
- Canada: GST/HST varies by province; register if required
- Singapore: 9% GST on digital services (register if over SGD 100,000)
Sales Tax (USA)
Economic nexus rules vary by state. Digital goods and services may be taxable. Consider using tax automation services for multi-state compliance.
Consumer Protection
EU Consumer Rights Directive
- 14-day cooling-off period for distance contracts
- Can be waived if customer consents and digital content is supplied immediately
- Clear pre-contractual information required
- Right to withdraw does not apply to fully performed services
UK Consumer Rights Act 2015
Similar to EU rules with additional protections for digital content quality and fitness for purpose.
Australian Consumer Law
- Consumer guarantees apply to services
- Refund rights if service not fit for purpose
- Unfair contract terms provisions
Payment Regulations
EU/UK: E-Money and Payment Services
Good News: Closed-loop systems where credits cannot be redeemed for cash are generally exempt from e-money licensing under PSD2 and UK Payment Services Regulations.
Strong Customer Authentication (SCA)
EU/UK may require SCA for online payments over €30/£30. Stripe handles this automatically.
Japan: Prepaid Payment Instruments
If issuing more than ¥10 million in prepaid value, registration with Financial Services Agency may be required. Closed-loop systems have lighter requirements.
Currency and Pricing
When operating internationally:
- Display prices in local currency when possible
- Clearly disclose any currency conversion fees
- Use Stripe's multi-currency features for better customer experience
- Be transparent about payment processor fees
- Ensure VAT/GST is included in displayed prices where required by law
Language Requirements
Some jurisdictions require terms and policies in local languages:
- Quebec, Canada: French language option required (Bill 96)
- France: Consumer-facing content must be in French
- Germany: German language option recommended
- Japan: Specified Commercial Transactions Act requires Japanese
Accessibility Requirements
- EU: European Accessibility Act applies from June 2025
- USA: ADA compliance recommended; WCAG 2.1 AA standard
- UK: Public Sector Bodies Accessibility Regulations 2018
- Canada: Accessible Canada Act (ACA) requirements
Age Restrictions
Minimum age for online purchases varies:
- EU GDPR: Age of digital consent is 13-16 depending on member state
- USA COPPA: Under 13 requires parental consent
- UK: Age of digital consent is 13
- General: Platform operators should set age policies based on content type
Dispute Resolution
EU Online Dispute Resolution
EU traders must provide link to ODR platform:https://ec.europa.eu/consumers/odr
Alternative Dispute Resolution
Consider joining industry-specific ADR schemes in jurisdictions where you operate.
Compliance Checklist for Platform Operators
- □Determine all jurisdictions where you have users
- □Consult with legal counsel in each major market
- □Register for VAT/GST/sales tax where required
- □Update privacy policy to comply with GDPR/CCPA/local laws
- □Implement cookie consent for EU/UK visitors
- □Add cooling-off period disclosures for EU consumers
- □Display prices with tax included where required
- □Provide terms in local languages where required
- □Set up customer support in relevant time zones
- □Monitor regulatory changes in your markets
Resources and Support
HelixPoint provides technical infrastructure but does not provide legal advice. For jurisdiction-specific guidance, we recommend:
- Consulting with international law firms specializing in fintech
- Joining industry associations (e.g., EMA, PASA, CPA)
- Using compliance automation tools (Stripe Tax, Avalara, etc.)
- Subscribing to regulatory update services
Contact
For technical questions about international implementation: