Balancing the need to combat crime (reporting suspicious activity) with the ethical duty to protect customer privacy and data security (GDPR). Also, ensuring AML controls are applied fairly and non-discriminatorily.