There are certainly industry-specific constraints which include legal burdens. Just a subset of ones I'm personally familiar with:

* Security clearances.

* Know Your Customer (KYC) and Anti-Money Laundering (AML) in finance.

* HIPAA in healthcare.