Rules are still forming and vary by country. In the US, whether a token is a security (the Howey test, SEC actions) drives much uncertainty. Europe's MiCA provides a comprehensive framework. Everywhere, the tension is real: privacy and self-custody vs. AML/KYC and consumer protection. As a builder, treat compliance as a design input, not an afterthought — it shapes what you can ship and where.