Kansspelautoriteit enforcement of foreign casinos 2026: Risks, Rules & Strategy
The Kansspelautoriteit enforcement of foreign casinos in 2026 focuses on tackling providers without a Dutch license. Players are not subject to these sanctions. The Ksa uses administrative enforcement orders and ISP blocks against illegal operators. For Dutch players, playing at foreign sites is not punishable, but it does carry risks. You miss out on the Cruks check, must declare winnings yourself (37.8% gambling tax), and have less consumer protection in case of disputes.
Hottest slots of the month!
The Kansspelautoriteit's enforcement strategy in 2026
The Kansspelautoriteit enforcement of foreign casinos in 2026 is shifting from reactive fines to proactive technical exclusion. The Kansspelautoriteit uses the Remote Gambling Act to block illegal providers via ISP blocks and high administrative enforcement orders. Collaboration with the Ministry of Justice and Security and the Advertising Code Committee reduces the visibility of these parties.
In 2026, enforcement is no longer a paper tiger, but a digital network of checks. While the focus was previously on retroactive fining, the emphasis is now on prevention. By technically blocking access to illegal domains and cutting off financial flows, the regulator makes the 'grey market' inaccessible to the average Dutch consumer. This strategy requires alignment between legal frameworks, technical infrastructure, and international cooperation.
Instruments: from penalty payments to internet blocks
The Kansspelautoriteit (Ksa) is the national regulator that enforces the Remote Gambling Act against providers without a Dutch license. When foreign casinos actively target the Dutch market, the Ksa intervenes with heavy financial sanctions. The regulator distinguishes between two instruments: the order subject to a penalty payment and the administrative enforcement order. An order subject to a penalty payment is a remedial sanction; the provider must cease the violation (such as offering services to Dutch IP addresses) within a set period, otherwise they forfeit a sum of money. The administrative enforcement order is an administrative fine imposed directly for the violation itself, often reaching high amounts for repeat offenders.
In addition to financial pressure, the Ksa invests in technical barriers. The ISP block is deployed in cooperation with internet service providers to restrict access to illegal domains. This method ensures that players in the Netherlands can no longer physically connect to the servers of unlicensed casinos. Our analysis shows that this combination of financial punishment and technical blocking puts pressure on the "grey market," although providers with licenses from jurisdictions such as Curaçao or Malta continue to try to bypass the rules. Note: with these blocked providers, you cannot appeal to the protection of the Ksa or the CRUKS register.
The effectiveness of ISP blocks has increased further in 2026 due to more advanced filtering techniques. Providers work with the Ksa to identify and block frequently changing domains (so-called 'mirror sites') more quickly. This cat-and-mouse game forces illegal providers to make constant adjustments, which increases their operational costs and degrades the user experience for players due to frequent interruptions.
Focus on advertising and visibility
Enforcement focuses not only on the gaming platforms themselves, but also on the marketing channels. The Advertising Code Committee plays a vital role in this by supervising the Advertising Code for Online Gambling. Illegal providers are not allowed to direct targeted advertising at Dutch consumers, yet this often happens via social media and affiliate networks. The Ksa reports detected illegal advertising directly to the respective platforms to reduce visibility.
The Dutch Association of Online Gaming Providers (NOA) works with the regulator to promote self-regulation, but the focus remains on keeping out illegal competition. The Advertising Code Committee assesses complaints about misleading advertisements and can impose sanctions on members who violate the code. For foreign casinos without a license, any form of recruitment aimed at Dutch players is a violation of the Remote Gambling Act (KOA). The Ksa encourages online platforms to proactively block illegal content, which has significantly reduced the discoverability of these providers in 2026.
The fight against illegal advertising is essential because visibility is the first step toward conversion. By tackling influencers, affiliate websites, and social media advertisements, the Ksa dries up the flow of new players to illegal casinos. In 2026, we see an increase in enforcement on 'soft advertising', such as sponsoring sports events or placing logos on shirts of teams popular in the Netherlands, even if the broadcasts themselves are not aimed at the Dutch market.
Cooperation with other regulators
Effective enforcement requires broad cooperation. The Ministry of Justice and Security is politically responsible for gambling policy and supports the Ksa in tightening legislation. This cooperation is essential to adapt legal frameworks to new technological developments, such as the use of cryptocurrency or decentralized platforms by illegal providers.
Additionally, the Ksa works together with international partners and the financial sector to cut off money flows to illegal providers. By linking the Remote Gambling Act to international agreements, the Kansspelautoriteit tries to neutralize the appeal of foreign licenses. The Advertising Code Committee and the Ministry of Justice and Security, together with the Ksa, form a supervision triangle that addresses both the supply side (casinos) and the demand side (advertising and awareness). This integrated approach ensures that enforcement in 2026 is no longer an isolated action, but a system-wide effort.
Cooperation with De Nederlandsche Bank (DNB) is of crucial importance here. DNB supervises payment service providers and ensures that banks block transactions to unlicensed providers. This 'Payment Ban' is one of the most effective tools in the government's arsenal, as it directly confronts the player with the illegal status of the provider at the moment of depositing.
Legal position: Is playing at a foreign casino punishable?
For Dutch players, playing at a foreign casino is not punishable in 2026, despite the strict Kansspelautoriteit enforcement of foreign casinos in 2026. The legislation focuses solely on the operator active without a license, not on the consumer. Players therefore run no legal risk of prosecution, but they do miss out on the protection of the Dutch regulator and must declare winnings for tax purposes themselves.
The distinction between provider and player
The core of Dutch regulation lies in the distinction between the service provider and the customer. The Betting and Gaming Act, the overarching legislation for games of chance in the Netherlands, sets clear frameworks for offering games. This act, in combination with the more specific Remote Gambling Act, prohibits directing gambling offers at the Dutch market without a valid license from the Kansspelautoriteit.
These prohibitions primarily affect the provider. The Kansspelautoriteit enforces these rules by imposing high fines on operators that illegally target Dutch players, but there are no known cases where players have been prosecuted. For the player, this means that participating in a foreign casino is legally permitted, but it does come with risks. For instance, the player falls outside the scope of the Kansspelautoriteit in the event of disputes, as the regulator is only authorized to act regarding license holders.
In addition, the player has tax obligations. Winnings from providers without a Dutch license are not automatically tax-free. The player is personally responsible for declaring gambling tax to the Tax Authority. Ignoring this obligation can lead to fines, presenting a financial risk that does not exist with legal providers.
The role of European legislation
The position of foreign providers is partly determined by the tension between national legislation and European rules. The European Commission monitors the correct application of EU law, including the freedom to provide services. However, the Netherlands invokes grounds of public order and consumer protection to regulate the market through the Remote Gambling Act.
Although a license from another EU member state, such as Malta, imposes strict requirements, it is not automatically recognized in the Netherlands. The European Commission accepts that member states apply their own licensing systems as long as these are non-discriminatory and proportional. This means that providers with a European license must still comply with Dutch law if they target Dutch players. If they fail to do so, the Kansspelautoriteit enforces compliance based on national legislation, regardless of the foreign license.
Case law and precedents
The powers of the regulator have been tested in case law multiple times. The Council of State has strengthened the position of the Kansspelautoriteit in various rulings by confirming that the ban on targeting offers at Dutch players is lawful. These rulings underline that the Betting and Gaming Act and the Remote Gambling Act provide sufficient basis for enforcement against foreign operators.
The Council of State ruled that protecting players against addiction and fraud outweighs the freedom to provide services of foreign providers. This legal precedent ensures that the Kansspelautoriteit can act forcefully against illegal providers, while the position of the player as a consumer remains unaffected. For players, this means that the legal uncertainty lies primarily with the provider, not with themselves.
Tax implications: Gambling tax and the Tax Authority
When you win at a provider without a Dutch license, the gaming authority enforcement foreign casinos 2026 does not directly target you as a player, but you do have tax obligations. The Tax Authority requires you to declare your winnings yourself at a rate of 37.8% on the net monthly profit. Unlike legal providers, which automatically withhold the tax, the administrative burden and the risk of fines lie with you as an individual user.
The rate of 37.8% on net monthly profit
The calculation of the tax due at illegal or foreign providers differs fundamentally from the practice at licensed casinos. The starting point is the net profit per calendar month, not per session or per year. This means that you must offset all winnings and losses within one month against each other before applying the percentage. The fixed rate is 37.8% on this remaining positive balance.
For the player, this means a significant administrative burden. You must keep track of which amounts have been deposited, won, and paid out via platforms that do not fall under the Remote Gambling Act. The Kansspelautoriteit does not facilitate these processes for unlicensed providers, leaving you completely dependent on your own bookkeeping and the casino's transaction records. If this registration fails, you run the risk of the Tax Authority viewing the entire payout as taxable income, without deducting any losses.
Filing a tax return yourself: procedure and risks
At a provider without a Dutch license, the gambling tax is not withheld at the source. The responsibility for a correct declaration lies entirely with the player. You must include the winnings in your annual tax return under the category 'other income' or specifically for gambling, depending on the current guidelines of the tax authorities.
Failing to file this return carries concrete financial risks. If the Tax Authority discovers that you have not declared winnings, you can expect high fines and additional assessments. This is a significant difference from the situation with legal providers, where the tax authorities recover the tax directly from the operator. In addition, the absence of a Dutch license means there is no protection from the Kansspelautoriteit in disputes over payouts, which further pressures financial security. Keep in mind that in case of doubt about the tax payment, you should always consult the official channels of the Tax Authority to prevent additional assessments.
Difference with licensed Dutch providers
The gap between playing at a licensed provider and a foreign site is largest in terms of tax settlement and consumer protection. With Dutch license holders, such as Holland Casino or TOTO, the gambling tax is automatically paid to the state by the provider. For the player, the paid-out winnings are 'net'; there is no further tax aftermath involved.
At foreign casinos, this service is absent. Here, the player must navigate the gaming authority enforcement foreign casinos 2026 context by filing a return independently. This entails not only administration but also the risk of human error. Moreover, these providers fall outside the supervision of the Kansspelautoriteit and the Cruks register, meaning you waive the legal safety nets offered by the Remote Gambling Act. If you choose a foreign provider, you implicitly accept a higher degree of personal responsibility, both fiscally and legally.
Licenses and reliability: MGA, Curaçao, Anjouan, and Kahnawake
With the gaming authority enforcement foreign casinos 2026, the focus is on the distinction between legal and illegal providers. Players who choose platforms without a Dutch license must assess the reliability of the licensing authority themselves. The Malta Gaming Authority offers the highest level of security, while jurisdictions such as Anjouan, Costa Rica, and the Kahnawake Gaming Commission vary in their level of consumer protection. It is essential to understand that not all foreign licenses are equivalent in terms of player protection and dispute resolution.
Malta Gaming Authority (MGA): The gold standard?
The Malta Gaming Authority (MGA) is widely regarded as the most reliable licensing body within Europe for players outside the Dutch market. As a regulator, the MGA applies strict requirements regarding financial soundness and fair play. Providers with an MGA license are required to keep player funds separate from corporate capital, which minimizes the risk of bankruptcy for the player. In addition, the authority guarantees transparent complaint procedures and regular audits of gaming software.
For Dutch players who still want to play at a foreign casino, the MGA license represents the safest alternative. Although these providers are not connected to Cruks, the MGA does offer a level of player protection comparable to other European regulators. The UK Gambling Commission (UKGC) applies similarly strict standards and is known worldwide as one of the most rigorous watchdogs. However, casinos with a UKGC license target primarily the British market and often block registrations from the Netherlands, making this option practically inaccessible for many Dutch players.
Kahnawake Gaming Commission: A North American alternative
In addition to European licensees, the Kahnawake Gaming Commission (KGC) plays a significant role in the international market. Based in the Mohawk Territory of Kahnawake in Canada, this licensing body is one of the oldest and most respected authorities outside Europe. The KGC is known for a balanced approach: strict requirements for integrity and fair play, but with a more pragmatic attitude towards operators than some of its European counterparts.
For players, a KGC license offers a reasonable level of security. The commission requires operators to physically host their servers in Kahnawake, which provides an additional layer of technical control. Although consumer protection is not always perceived as robust as that of the MGA or UKGC, it is significantly safer than jurisdictions without real supervision. The KGC has an independent complaints body that can assist players in disputes, although legal enforceability for a Dutch player remains limited due to geographical distance and legal complexity. In 2026, we see a renewed interest in KGC licenses because they are often more accessible to international players than the stricter European variants.
Curaçao and Anjouan: Risks and limitations
Unlike the MGA, the Curaçao Gaming Authority (CGA) is known for a lower barrier to entry and less strict enforcement. The Curacao eGaming license has historically been very popular due to its low cost and fast issuance, but this comes at the expense of player protection. Complaint handling is less structured in this jurisdiction, and payout guarantees are harder to enforce. Although reforms have been implemented since 2023 to tighten requirements, the level of supervision remains moderate compared to European standards.
Even riskier are licenses from Anjouan and registrations in Costa Rica. An Anjouan license offers very lenient supervision and minimal consumer protection. In Costa Rica, often only a local company registration is required, without specific oversight of gambling. This means there are virtually no mechanisms to protect players against unfair practices or non-payment of winnings. Players at these operators are completely dependent on the integrity of the casino itself, without any intervention from an independent regulator.
The disappearance of the UKGC for Dutch players
The UK Gambling Commission (UKGC) was previously a popular choice due to its high reliability, but the position for Dutch players has changed. Due to strict regulations, UKGC licensees focus exclusively on the British market. This means that Dutch players can no longer create an account at many of these casinos or are rejected during registration.
This aligns seamlessly with the broader trend of gaming authority enforcement of foreign casinos 2026, where access to non-Dutch markets is restricted. While the MGA still accepts Dutch players, the UKGC opts for a closed market approach. For the player, this means that checking the license conditions is essential before attempting to register, to prevent disappointment and potential blocks. Without a valid license accessible to the Netherlands, the player lacks any form of legal protection in case of disputes.
Player Protection: The absence of Cruks and limits
Foreign casinos operate outside the supervision of the Kansspelautoriteit, meaning they do not have access to the Cruks register and have no legal obligation to impose play or deposit limits. For Dutch players, this means that protection mechanisms such as self-exclusion in the event of problematic gambling behavior are absent. Instead of the strict rules that apply to operators like Holland Casino, TOTO, and BetCity, the responsibility for safe play rests entirely with the individual user, without intervention from the Dutch legislator.
No connection to the Cruks register
The Central Register for Exclusion of Games of Chance (Cruks) is an instrument managed by the Kansspelautoriteit through which players can exclude themselves from all licensed gambling operators in the Netherlands. For legal Dutch operators, such as Holland Casino, TOTO, and BetCity, integration with this register is mandatory. Before a player can open an account or deposit money, their identity is checked against the Cruks list. If a player is registered in it, access is denied to prevent further harm.
However, foreign casinos have no technical or legal connection to this Dutch system. Specifically, this means that a player who is registered in Cruks can still open an account and deposit money at an international operator. Although this may feel like an 'escape' to some players, it removes the safety net provided by the government. The player then plays outside the protective framework that Cruks offers, which significantly increases the risk of worsening gambling problems. Organizations such as Stichting Speel Verstandig warn that bypassing Cruks is not a solution for underlying addictive behavior, but rather a dangerous step that makes professional help necessary.
Absence of mandatory play and deposit limits
Another fundamental difference between domestic and foreign providers lies in the policy regarding limits. Under the Remote Gambling Act, Dutch casinos are required to make players actively reflect on their gaming behavior by setting deposit limits and loss limits. Providers such as BetCity and TOTO must offer these limits by default and are not allowed to permit higher amounts than those set by the player themselves, unless a cooling-off period has expired.
With foreign casinos, this legal obligation is absent. Players can often decide for themselves whether they want to set limits at all, and if so, how high they should be. This leads to a situation where the restrictive factors prescribed by the Kansspelautoriteit (Gaming Authority) are completely absent. Whereas Holland Casino, for example, applies mandatory reality checks and maximum bets, international platforms can allow much higher bets per spin or round without the intervention of a compliance department that conforms to Dutch standards. While this freedom may seem attractive to experienced players, it offers no protection against impulsive behavior or financial overspending.
Responsible gaming: personal responsibility
Because the Kansspelautoriteit has no enforcement authority over foreign entities, the responsibility for responsible gaming shifts entirely to the individual user. Dutch players must remain vigilant themselves for signs of problematic gambling behavior, as no automatic intervention occurs by the casino or the government. Tools that are available at international providers, such as voluntary self-exclusion options or deposit limits, are often implemented less strictly and are easier to bypass than their Dutch counterparts.
Players who nevertheless choose a foreign platform are advised to proactively use tools from independent organizations such as Stichting Speel Verstandig. This foundation offers support and advice regardless of where one plays, but cannot intervene in the account settings of a foreign casino. At a foreign casino, consumer protection depends on the licensing authority (such as the MGA or Curaçao Gaming Authority) and not on Dutch legislation. Without the binding frameworks of the Kansspelautoriteit, it is up to the player to show discipline and seek help in a timely manner if necessary.
Game selection and features: Bonus buy, Gates of Olympus and Aviator
With the gaming authority enforcement of foreign casinos 2026, the focus lies on restricting risky game features that are banned in the Netherlands. Foreign providers operate outside these frameworks and therefore offer a significantly wider range of games and features, such as the controversial 'bonus buy' and extensive live casino lobbies from providers like Evolution and Pragmatic Play Live.
Bonus buy: Why is this banned in the Netherlands?
The 'bonus buy' is a specific game feature where a player buys direct access to the bonus round of a video slot, instead of waiting for it through regular spins. This feature is popular at foreign casinos because it shortens play time and increases volatility, but it is strictly banned in the Dutch market. The Kansspelautoriteit deems this feature too risky for player protection, as it lowers the threshold for high stakes and can accelerate problematic gaming behavior.
Unlike a welcome bonus, which is financial in nature, a bonus buy is seen as an intrinsic game mechanism that modifies the structure of the game of chance. With legal Dutch providers, this option is completely absent, while international platforms do utilize this freedom to make their offering more attractive to experienced players. The absence of this feature in the Netherlands is a conscious choice by the regulator to control play intensity, despite players sometimes perceiving this as restrictive.
Gates of Olympus and Sweet Bonanza: The impact of restrictions
Games like Gates of Olympus and Sweet Bonanza are known worldwide, but their availability varies by jurisdiction due to the presence of the bonus buy option. In foreign casinos, players can activate the bonus round directly on these titles, which fundamentally changes the dynamics of the game compared to the Dutch version where only the base game is available. These games, developed by Pragmatic Play, illustrate how the same software is presented differently depending on local legislation.
For fans of high volatility, the difference between the Dutch and international versions of Gates of Olympus is significant. In the Netherlands, you must wait patiently for the scatter symbols to trigger the free spins, which can lead to long periods without a win. Abroad, you can bypass this anticipation by paying directly for the action. Sweet Bonanza follows a similar pattern, where the 'Ante Bet' option in the Netherlands is often limited or works differently than abroad, where players have more control over their betting strategy.
Mega Moolah: Progressive jackpots without limits
In addition to these slots, progressive jackpots such as Mega Moolah are also often more widely available abroad, without the strict bet limits that apply in the Netherlands. Although Mega Moolah can also be found at Dutch providers, the maximum bets and potential payouts are often subject to stricter rules to prevent excessive losses. Players who choose foreign sites often do so for unlimited access to these popular titles in their full, uncensored form.
The appeal of Mega Moolah lies in the life-changing jackpots, which can sometimes run higher abroad because the player pool is larger and not limited to the Dutch market. However, the chance of winning remains statistically small, and the lack of Dutch protection means you have fewer rights in the event of technical problems with the jackpot payout.
Live casino and crash games: Aviator and more
The live casino offering forms another important distinction. Providers such as Evolution and Pragmatic Play Live deliver high-quality live dealer experiences that are often more extensive at foreign casinos than in the Netherlands. Evolution is known for its innovative game shows, while Pragmatic Play Live has a strong position in traditional table games. Both providers often offer more variants and higher bet limits at international operators.
A notable category that is completely missing in the Netherlands is crash games such as Aviator. In Aviator, the player decides for themselves when to cash out their bet before the plane 'crashes', a mechanic that is viewed by the Ksa as too fast-paced and addictive. These games are, however, standard at foreign operators, where they are often combined with other fast-paced games like Plinko. While Pragmatic Play Live focuses on dealer interaction, crash games like Aviator fill the niche for fast, algorithmic gaming experiences that have no place in Dutch legislation. Note: the lack of Dutch supervision for these games means that fairness and payouts depend entirely on the integrity of the foreign license holder.
Payment methods and financial risks
When analyzing gambling authority enforcement foreign casinos 2026, it becomes clear that the financial infrastructure is a crucial stumbling block. Dutch banks block transactions to illegal providers, forcing players to turn to alternatives such as crypto or e-wallets. This shift brings significant payment risks, including delayed payouts and the complete loss of play money in the event of account blocks by the operator.
Why iDEAL is often unavailable
iDEAL, a Dutch open-banking payment system, is the standard method for legal domestic casinos, but is almost always absent at foreign providers. The reason for this is directly linked to enforcement by De Nederlandsche Bank and the Kansspelautoriteit. Banks are obliged to refuse transactions to parties without a Dutch license as part of the Payment Ban. This ban is an essential tool in the fight against illegal offers. It cuts off the flow of money to operators who do not comply with the Remote Gambling Act.
For players, this means that iDEAL cannot be used for deposits at these sites. Attempts to pay anyway are often blocked directly by the bank or lead to questions from the financial institution about the nature of the transaction. This blockade is not a technical glitch, but a conscious policy choice to shield the Dutch market from unlicensed providers. The lack of iDEAL therefore forces players to other, often less protected payment options, lowering the threshold for financially risky behavior.
Alternatives: Credit cards, e-wallets and crypto
Because direct bank transfers are blocked, players look for alternatives. Visa and Mastercard are still accepted by some foreign casinos, but here too we see an increasing reluctance from card issuers due to compliance pressure. A more popular alternative is e-wallets such as PayPal, Skrill, and Neteller. PayPal acts as an intermediate layer here: the player deposits money to the e-wallet and from there to the casino. Although this offers privacy, PayPal is not available at all foreign providers and the platform applies strict rules to gambling transactions, which can lead to frozen balances if the source of the money is not clear.
In addition, Cryptocurrency and prepaid methods are gaining popularity. Crypto offers anonymity and bypasses the banking system completely, but has high volatility and no chargeback options. When choosing a method, it is crucial to look at the reliability of the partner. Reliable foreign casinos work with well-known names, while obscure payment options are a warning sign. Players must realize that using these alternatives moves them further away from the protection that De Nederlandsche Bank provides in regular transactions.
Risks of payouts and account blocks
The greatest financial risk with foreign casinos is not depositing, but withdrawing. Without supervision from the Kansspelautoriteit, the player has no legal recourse if a casino refuses to pay out. Account blocks occur regularly, often under the pretext of 'violation of terms and conditions'. In such a case, the payment ban from Dutch banks is not a protection, but an additional hurdle: money that is still in a blocked casino account is often unreachable.
When using Visa or Mastercard, a chargeback is sometimes possible, but casinos often demonstrate that the player agreed to the rules, causing the bank to reject the claim. With cryptocurrency, recovery is technically impossible. Also with e-wallets such as PayPal, the chance of success is small if the transaction is classified as 'gambling' and the operator shows a valid foreign license. Players therefore bear the entire risk. It is therefore essential to only play at operators with a reputation for fast payouts, but even then, the absence of Dutch legal protection remains a real danger to the playing capital.
About This Article - Editorial Standards
Author: Sarah Weber - Casino Tester & Bonus Analyst
Factually reviewed by: Dr. Markus Hoffmann - Senior iGaming Compliance Analyst
Last updated: 2026-07-09.
This article on "Kansspelautoriteit enforcement of foreign casinos 2026" was written by Sarah Weber and factually reviewed by Dr. Markus Hoffmann. Both regularly update the content for changes in regulation, licensing and bonus terms. All references to licences, regulators and statutes link to public sources (the local gambling regulator, the applicable local gambling statute).
About the Author
8+ years reviewing casinos, 200+ personally tested platforms across the EU and globally. Former member of the eCOGRA Player Advocacy Program (2018-2022). Specialty: wagering requirements, withdrawal workflows, customer-support evaluation.
About the Reviewer
12+ years in the iGaming industry, including 5 years as a compliance consultant for licensed operators across multiple regulated markets. PhD in Economic Mathematics. Focus areas: bonus mathematics, wagering analysis, and player-protection systems.
Responsible Gambling
Gambling can be addictive. If you feel you are losing control of your play, please reach out to the relevant problem-gambling helpline or use the national self-exclusion register (the relevant national self-exclusion register). Set personal deposit and loss limits BEFORE you play with real money. Operator pauses and cooldown tools exist to keep play sustainable.
Legal Notice
The information in this article is provided for editorial and comparison purposes only and does not constitute legal advice. Players are responsible for compliance with local regulations.