Implementing privacy-preserving transaction layers without breaking regulatory compliance expectations