Payment facilitators must follow several laws. Here are a few with which they must comply:
BSA/AML laws
Fair Credit Reporting Act laws
EFTA and ROSCA - For billing, payment, and subscription services
Card brand rules
GDPR and CCPA - data privacy
PCI-DSS - Card industry data compliance laws
In addition, PayFacs must comply with a range of state-level laws such as money transmission licensing and the Gramm-Leach-Bliley Act.