What’s the hardest compliance rule you’ve had to design around?

In digital finance, there's a constant tension between rigorous security/compliance checks and a fast, frictionless user experience. Do you have an example of a time a compliance rule actively made your UX worse, but was non-negotiable?