0 sats \ 3 replies \ @orthzar 16 Dec 2023 \ on: [important] foreign asset control compliance meta
Will the region be checked at the moment when someone tries to interact with SN's wallet? Or will each region the account ever signed-in from be stored?
This matters, because if the account signs in from Belarus just once, then the government could argue that the account is a Belarussian account.
No, it is not stored.
We remain committed to never storing a stacker's IP address without permission. For these changes (when they go live), we simply check an IP against a database of IP ranges thought to belong to these regions and then discard the IP and the result of the query regardless of whether the IP is in one of these regions or not.
reply
Just to make sure we are on the same page, my question is about regions not IP addresses. The part you quoted discusses comparing an IP address to a list of IP ranges. But that is not the same as comparing a region to a list of regions.
The government may be okay with SN not storing IP addresses. But they could demand that SN permanently mark an account as sanctioned if it ever signed in from any sanctioned region.
reply
Sorry, I did miss the nuance in your question.
We do not store the region either.
discard the IP and the result of the query [(aka region)] regardless of whether the IP is in one of these regions or not.
The government may be okay with SN not storing IP addresses. But they could demand that SN permanently mark an account as sanctioned if it ever signed in from any sanctioned region.
If we were doing that, I would say so. The government hasn't demanded anything to be clear. This is self-inflicted compliance in which we are trying to interpret the law to the best of our ability.
reply