I'm reading all the comments here! This is all too interesting but I personally don't have much insights to share on the topic. Definitely a difficult decision from the looks of it, best advice would be to consult with actual compliance lawyers and it's often based on the jurisdiction you're in or catering to