What is geolocation compliance

Definition

What is geolocation compliance?

Geolocation compliance is the practice of establishing where a user is in order to satisfy a legal requirement that depends on their location, in regulated gaming, sanctions screening, securities offerings and age verification.

Two kinds of rule

Location rules come in two broad kinds, and they ask different things of the evidence.

Rules about the fact. The law applies if the person is in a place. U.S. sanctions are the clearest case: civil liability for a sanctions violation is strict, so a firm that served someone in a sanctioned country is liable whether or not it knew. What matters is where the person was.
Rules about the belief. The law asks whether the operator reasonably believed the person was somewhere, or took reasonable steps to find out. Securities exemptions and many age-verification statutes work this way. The quality of the method matters, because it is the method that gets judged.

Where it applies

Regulated gaming. U.S. online wagering is licensed state by state, and state regulators write location checks into their rules. New Jersey’s Division of Gaming Enforcement requires a system that can “detect the physical location of a patron upon logging into the gaming system,” and that “shall not accept wagers” while the patron is somewhere unauthorised (N.J.A.C. 13:69O-1.2).
Sanctions. OFAC has named geolocation failures in enforcement, including checking only at onboarding. See in-process geolocation.
Securities. Offerings can be lawful in one country and not another, per instrument. See jurisdictional eligibility.
Age verification. State laws apply to people in the state, so the location check runs before the age check. See Age verification is a location problem.
AI and export controls. Access rules for frontier models and chips depend on where the user is. See Frontier AI access is a location problem.

What a good record looks like

Whichever kind of rule applies, someone else will examine the record later. A log line that says “allowed” shows only that the operator’s system said so. A signed result that an examiner can verify independently is evidence. See proof of location.

No method’s correctness is externally audited today, Octet’s included. A verifiable record shows a check was made and not altered. It does not show the check was right.

Nothing here is legal advice.