A working dictionary of the regulations, instruments and concepts that shape AI, Web3, fintech and data practice across Türkiye, the EU and the UAE.
Abu Dhabi Global Market, a common-law financial free zone with its own courts and regulator (FSRA).
EU Regulation 2024/1689 establishing harmonised rules on artificial intelligence based on a risk-based approach.
Anti-Money Laundering, the body of law and controls aimed at preventing the integration of illicit funds into the financial system.
Asset-Referenced Virtual Asset. Dedicated VARA category for tokens representing ownership in real-world assets.
Crypto-Asset Service Provider authorised under MiCA to provide one or more crypto-asset services in the EU.
UAE Capital Market Authority. Federal regulator that replaced the SCA on 1 January 2026 with explicit authority over virtual assets.
Decentralised Autonomous Organisation, a blockchain-based entity governed by smart contracts and token-holder voting.
The natural or legal person who, alone or jointly, determines the purposes and means of processing personal data.
Decentralised Finance, financial protocols built on public blockchains operating without traditional intermediaries.
Dubai Financial Services Authority. Independent regulator for financial services conducted in or from the DIFC.
Dubai International Financial Centre, an independent common-law financial free zone with its own regulator (DFSA).
Data Protection Impact Assessment, a structured analysis required for high-risk processing of personal data.
Financial Action Task Force, the inter-governmental body setting global anti-money-laundering and counter-terrorist-financing standards.
Designated UAE economic area offering 100% foreign ownership, tax incentives, and an independent regulatory regime.
Financial Services Regulatory Authority. Independent regulator of financial services in ADGM, Abu Dhabi.
EU General Data Protection Regulation 2016/679, the primary data protection law for the European Economic Area.
General-Purpose AI model under the EU AI Act, capable of performing a wide range of distinct tasks.
AI systems classified as high-risk under Annex III of the EU AI Act, subject to strict pre-market and post-market obligations.
DFSA regulatory sandbox licence allowing firms to run limited live tests of innovative financial products before full authorization.
Türkiye's Personal Data Protection Law (Law No. 6698), the national data protection regime supervised by KVKK Authority.
Know Your Customer, the customer identification and verification process underpinning AML compliance.
UAE onshore licensing regime under federal commercial law, allowing unrestricted trade across the UAE.
Türkiye's Financial Crimes Investigation Board, the national AML/CFT supervisor and financial intelligence unit.
EU Markets in Crypto-Assets Regulation governing crypto-asset service providers and stablecoin issuers across the European Union.
Money Laundering Reporting Officer. Senior role responsible for AML/CFT reporting and suspicious activity escalation.
Real-World Asset. Any off-chain asset (real estate, funds, commodities, credit) represented on-chain via tokenization.
Self-executing code deployed on a blockchain that automatically enforces the terms of an agreement.
Crypto-asset designed to maintain a stable value by referencing a fiat currency, asset, or basket of assets.
The economic design of a crypto-asset, including supply schedule, distribution, utility, and incentive mechanics.
FATF-aligned obligation requiring VASPs to share originator and beneficiary information for crypto-asset transfers.
Dubai's Virtual Assets Regulatory Authority, the world's first dedicated regulator for virtual asset service providers.
Virtual Asset Service Provider as defined by FATF, providing exchange, transfer, custody, or issuance services.