BCCILA study guide
BCCILA · Work through your exam, one topic at a time.
BCCILA denotes a professional certification in blockchain and crypto-asset law and compliance, aimed at people who sit at the intersection of legal, compliance and technology functions. Typical candidates include in-house counsel, compliance and AML officers, auditors, risk managers, consultants and regulators who need to reason about distributed ledger technology in legal terms rather than write code. The BCCILA study guide has 8 sections and about 2,388 words.
01Blockchain and Distributed Ledger Fundamentals
This domain tests the technical vocabulary that underpins legal and compliance analysis: how a distributed ledger records transactions, how nodes reach consensus, and where finality, privacy, and control actually sit. Expect questions that ask you to map a business use case to a ledger type, identify trust assumptions, and spot when a claimed benefit is not delivered by the architecture.
324 words, about 2 min02Legal and Regulatory Frameworks for Blockchain
This domain tests how law classifies crypto assets and the activities around them. The exam favours substance over labels: what the token gives the holder, how it is marketed, and who performs custody, exchange, transfer, or advice.
313 words, about 2 min03Smart Contracts and Legal Enforceability
This domain tests whether automated code can form an enforceable contract and how courts treat code, incorporated terms, electronic signatures, and automated performance. The exam expects you to separate the smart contract, meaning code, from the legal contract, meaning obligations, and to identify which terms are on-chain, off-chain, or incorporated by reference.
312 words, about 2 min04Anti-Money Laundering and Counter-Terrorist Financing
This domain tests a risk-based AML/CFT programme for virtual assets: customer due diligence, beneficial ownership, ongoing monitoring, the travel rule, suspicious-transaction reporting, sanctions, and recordkeeping. The exam expects FATF-style concepts applied to exchanges, custodians, and other VASPs, including the boundary between custodial and non-custodial services.
300 words, about 2 min05Data Privacy, Security, and Cyber Law
This domain tests privacy and security obligations for ledger-based systems: lawful processing, data minimisation, breach response, and cybersecurity governance. The central tension is between immutable, replicated ledgers and legal duties to correct, erase, or restrict personal data.
287 words, about 1 min06Digital Asset Taxation and Accounting
This domain tests tax and accounting treatment of digital assets: classification, recognition, valuation, and reporting. The exam expects you to distinguish income from capital, identify the taxable event, and apply the relevant accounting model rather than treating all crypto as cash.
320 words, about 2 min07Governance, Compliance, and Risk Management
This domain tests governance and compliance architecture for crypto businesses: board oversight, risk appetite, the three lines of defence, policies, monitoring, outsourcing, and audit. The exam expects practical controls, not slogans, and asks who is accountable when a protocol, DAO, or exchange fails.
263 words, about 1 min08Cross-Border and Jurisdictional Issues
This domain tests how laws travel across borders: licensing perimeters, extraterritorial reach, sanctions, data transfers, tax nexus, and enforcement cooperation. The exam expects you to identify the jurisdiction whose rules apply and the mechanism by which they apply, not merely list countries.
269 words, about 1 min