Yes rightly pointed out, the regulators are the ones that crack down/fine/impose restrictions.

I'd say there are varying levels of automation, where even to this day within low/medium risk, ~30% of cases get to manual review, and with some that number can be even higher!

Yes sanctions is one area where the human touch is very important! Definitely a high risk category