US SEC Digital Assets and Crypto Regulatory Framework
How U.S. securities law applies to digital assets as of September 2026: the SEC's March 2026 interpretation (joined by the CFTC) classifying assets into digital commodities, collectibles, tools, stablecoins and digital securities, explaining when an asset is subject to and separates from an investment contract, and clearing described mining, staking, wrapping and airdrops; the GENIUS Act of July 2025 for payment stablecoins (permitted issuers, one-for-one reserves, monthly disclosure, no yield, AML and sanctions duties, exclusion from the securities definitions); and SAB 122. Regulation Crypto Assets is proposed and the CLARITY Act is not law.
US SEC Digital Assets and Crypto Regulatory Framework is a compliance framework from United States with 5 domains and 16 controls that map to 89 other frameworks. The largest domains are Payment stablecoins (GENIUS Act, binding statute) – US SEC Digital Assets and Crypto Regulatory Framework (7 controls), Security status of digital assets (Commission interpretation, March 2026) – US SEC Digital Assets and Crypto Regulatory Framework (4 controls), Digital asset activities (Commission interpretation) – US SEC Digital Assets and Crypto Regulatory Framework (3 controls). Every control below carries what it requires and what an assessor expects to see.
Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (5)
Accounting for safeguarding (SAB 122, staff guidance) – US SEC Digital Assets and Crypto Regulatory Framework
| Code | Title |
|---|---|
| us-sec-digital-assets-and-crypto-regulatory-framework::SAB 122 | Recognise safeguarding liabilities for others' digital assets under loss contingency rules, not SAB 121 |
Digital asset activities (Commission interpretation) – US SEC Digital Assets and Crypto Regulatory Framework
| Code | Title |
|---|---|
| us-sec-digital-assets-and-crypto-regulatory-framework::INT-V | Keep mining and staking arrangements within the described conditions so they are not securities transactions |
| us-sec-digital-assets-and-crypto-regulatory-framework::INT-VI | Structure wrapping as one-for-one redeemable receipts with locked, unused reserves and no yield |
| us-sec-digital-assets-and-crypto-regulatory-framework::INT-VII | Run airdrops of non-security assets without any consideration from recipients |
Payment stablecoins (GENIUS Act, binding statute) – US SEC Digital Assets and Crypto Regulatory Framework
| Code | Title |
|---|---|
| us-sec-digital-assets-and-crypto-regulatory-framework::GENIUS 10 | Hold reserves, collateral and issuing keys only with regulated custodians |
| us-sec-digital-assets-and-crypto-regulatory-framework::GENIUS 17 | Recognise that permitted issuers' payment stablecoins are excluded from the securities and investment company definitions |
| us-sec-digital-assets-and-crypto-regulatory-framework::GENIUS 3 | Issue payment stablecoins in the U.S. only as a permitted issuer; intermediaries may offer only permitted issuers' coins |
| us-sec-digital-assets-and-crypto-regulatory-framework::GENIUS 4(a)(1) | Back payment stablecoins one for one with listed reserves, publish the redemption policy and fees, and publish reserves monthly |
| us-sec-digital-assets-and-crypto-regulatory-framework::GENIUS 4(a)(10)-(11) | Pay no interest or yield on holding; above $50 billion outstanding, publish PCAOB-audited annual financial statements |
| us-sec-digital-assets-and-crypto-regulatory-framework::GENIUS 4(a)(2)-(3) | Do not rehypothecate reserves; have monthly reports examined by a registered accounting firm and certified by the CEO and CFO |
| us-sec-digital-assets-and-crypto-regulatory-framework::GENIUS 4(a)(5) | Run BSA AML, customer identification, sanctions and freeze capabilities as a financial institution |
Pending rulemaking – US SEC Digital Assets and Crypto Regulatory Framework
| Code | Title |
|---|---|
| us-sec-digital-assets-and-crypto-regulatory-framework::REG CA (proposed) | Proposed Regulation Crypto Assets: offering exemptions and an investment contract safe harbor, not yet adopted |
Security status of digital assets (Commission interpretation, March 2026) – US SEC Digital Assets and Crypto Regulatory Framework
| Code | Title |
|---|---|
| us-sec-digital-assets-and-crypto-regulatory-framework::INT-III | Classify each digital asset in the SEC taxonomy: digital commodity, collectible, tool, stablecoin or digital security |
| us-sec-digital-assets-and-crypto-regulatory-framework::INT-III.D | Assess stablecoins: GENIUS Act payment stablecoins are not securities; other stablecoins depend on the facts |
| us-sec-digital-assets-and-crypto-regulatory-framework::INT-IV.A | Treat promises of essential managerial efforts as creating an investment contract: register or exempt the offering |
| us-sec-digital-assets-and-crypto-regulatory-framework::INT-IV.B | Recognise when an asset separates from the investment contract and disclose completion of promised efforts |
Your Compliance Coverage
If you comply with US SEC Digital Assets and Crypto Regulatory Framework, you already cover:
NRC 10 CFR 73.54 - Nuclear Facility Cybersecurity
13%
3 controls mapped
Compare →South Korea ISMS-P
13%
3 controls mapped
Compare →Austria Data Protection Act (Datenschutzgesetz, DSG, amended 2018)
13%
3 controls mapped
Compare →+ 86 more: NIST SP 800-190 (13%), Singapore Government Instruction Manual on ICT&SS Management (IM8) (13%)
See all 89 mapped frameworks ↓Maps to 89 other frameworks
Coverage is not the same as your position
This page shows what US SEC Digital Assets and Crypto Regulatory Framework overlaps with in general. Where your organisation actually stands, against the standard you are going for and the certifications you already hold, is a different question. Same graph and the same recorded refutations, scoped to you rather than to a pair.
The Compliance Position Diagnostic, $5,000 fixed, ten business daysWhat is US SEC Digital Assets and Crypto Regulatory Framework and who does it apply to?
US SEC Digital Assets and Crypto Regulatory Framework is a compliance framework from United States with 5 domains and 16 controls. How U.S. securities law applies to digital assets as of September 2026: the SEC's March 2026 interpretation (joined by the CFTC) classifying assets into digital commodities, collectibles, tools, stablecoins and digital securities, explaining when an asset is subject to and separates from an investment contract, and clearing described mining, staking, wrapping and airdrops; the GENIUS Act of July 2025 for payment stablecoins (permitted issuers, one-for-one reserves, monthly disclosure, no yield, AML and sanctions duties, exclusion from the securities definitions); and SAB 122. Regulation Crypto Assets is proposed and the CLARITY Act is not law. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
What does US SEC Digital Assets and Crypto Regulatory Framework actually require?
US SEC Digital Assets and Crypto Regulatory Framework has 16 controls organised across 5 domains. The largest domains are Payment stablecoins (GENIUS Act, binding statute) – US SEC Digital Assets and Crypto Regulatory Framework (7 controls), Security status of digital assets (Commission interpretation, March 2026) – US SEC Digital Assets and Crypto Regulatory Framework (4 controls), Digital asset activities (Commission interpretation) – US SEC Digital Assets and Crypto Regulatory Framework (3 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
If I already comply with another framework, how much of US SEC Digital Assets and Crypto Regulatory Framework do I already cover?
US SEC Digital Assets and Crypto Regulatory Framework maps to 89 other compliance frameworks. The top mapping partners are NRC 10 CFR 73.54 - Nuclear Facility Cybersecurity (13% coverage), South Korea ISMS-P (13% coverage), Austria Data Protection Act (Datenschutzgesetz, DSG, amended 2018) (13% coverage). Use our comparison tool to explore control-level mappings between frameworks.
How do I implement US SEC Digital Assets and Crypto Regulatory Framework?
Start your US SEC Digital Assets and Crypto Regulatory Framework compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about US SEC Digital Assets and Crypto Regulatory Framework requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 16 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 1,120 frameworks.
Get Started Free →Free forever, no credit card required