Know what is handled
Distinguish public market data, internal operational information, confidential business information and personal data where applicable.
PRIVACY · DATA PROTECTION · INTERNATIONAL GOVERNANCE
Traceability without authority transfer
This public page describes JPMTG's data-protection principles and public/private boundaries. Applicable obligations depend on the data, entities, individuals, jurisdictions and transfers involved.
CONTROLpublic data boundary
Jurisdiction-aware controls
Assess relevant requirements in the EU/EEA, Switzerland, the United States and other jurisdictions according to the activity and data concerned.
Document transfers
Identify destination, recipient, purpose and applicable safeguards before protected or personal data is transferred internationally.
INTERNATIONAL · REGULATORY INTELLIGENCE · PERSONAL DATA PROTECTION
International framework map — RIEˣ™
JPMTG’s Regulatory Intelligence Engineˣ™ (RIEˣ™) is intended to identify, classify and contextualize relevant rules by jurisdiction, entity, product, activity and data category. The frameworks below are distinct; their applicability and implementation must be verified for each case. Listing a framework does not certify compliance.
CARF and CRS
CARF (Crypto-Asset Reporting Framework) addresses reporting and automatic exchange of tax-relevant information on in-scope crypto-asset transactions. CRS addresses automatic exchange of financial-account information. They are not the same as FATCA, and implementation/timing depends on domestic law and exchange arrangements.
FATCA
Foreign Account Tax Compliance Act: U.S. tax-reporting framework addressing certain foreign financial accounts and U.S. taxpayers, including reporting by foreign financial institutions under applicable rules and agreements.
Executive Order 14086
Addresses safeguards for U.S. signals-intelligence activities and a redress mechanism under defined conditions. It is not a general privacy statute for every commercial processing activity.
GDPR · EU/EEA
Assess lawful basis, transparency, data-subject rights, security, retention, processors and international transfers under the applicable GDPR framework and national rules.
FADP / nFADP
Swiss Federal Act on Data Protection and its ordinance: assess controller/processor roles, transparency, security, data-subject rights and cross-border disclosure requirements where applicable.
Swiss Federal Data Protection and Information Commissioner ↗
UK GDPR · Data Protection Act
Assess UK data-protection requirements and transfer rules separately from EU/EEA rules where relevant. UK designation under EO 14086 relates to its specific redress mechanism, not a blanket compliance finding.
LGPD
Lei Geral de Proteção de Dados Pessoais (Law 13.709/2018): Brazilian personal-data processing framework, including legal bases, data-subject rights, controller obligations and international-transfer provisions.
MiCA · DORA
MiCA and DORA address different subject matters: crypto-asset markets and digital operational resilience in their respective scope. Neither substitutes for data-protection or tax-reporting requirements.
Applicability before assertion
RIEˣ™ should record jurisdiction, regulated role, data type, purpose, legal basis, transfer destination, source/version, effective date, assessment status and responsible reviewer. Unknown or unverified applicability remains explicitly unknown.
International notice: this is an informational framework map, not legal, tax or regulatory advice, not an exhaustive list of jurisdictions, and not a claim that JPMTG or any product is registered, licensed or compliant under every listed regime. Confirm current law, local implementation, agreements and applicability with qualified counsel.
ACCESS & CONFIDENTIALITY
Least privilege and separation
Access should be limited to authorized roles. Public presentation, private orchestration, custody controls and execution functions remain separated.
RETENTION & TRACEABILITY
Provenance remains attached
Source identity, timestamps, validation status and connector mode remain visible through the NEXUS → ATOMIC pipeline where relevant. Retention and deletion follow applicable documented rules.
PUBLIC / PRIVATE BOUNDARY
Production disabled
No private keys, signing credentials, custody controls or internal production execution endpoints are exposed by this public site.
REGULATORY LIMITS
Framework, not blanket certification
This page describes governance principles; it does not certify compliance for every activity, entity or transfer in every jurisdiction. Specific legal and technical controls require verification.
Copyright and Intellectual Property
© 2026 JP MADISON TRADING GROUP LLC. All rights reserved.
JPMTG names, content, designs, software and other materials are protected by applicable intellectual property laws. Third-party rights remain with their respective owners.