Key Takeaways
Programme structure decides regulatory scope. Closed loop is lightly regulated; open loop behaves like a payment instrument and is regulated accordingly.
Adding one partner brand or allowing point transfers can move you a regulatory category without changing anything members see.
Work the six dimensions per market: taxation, expiry and fees, licensing and float, privacy and consent, consumer protection, and AML.
Unredeemed value is a liability that licensing thresholds are written about. Monitor the float per market and alert before you approach a trigger.
Employee, partner and B2B rewards sit under different rules entirely, including taxable-benefit treatment and anti-bribery exposure.
Most loyalty programmes are designed by marketing and discovered by legal. That order is the source of nearly every compliance problem in this space, because the decision that determines your regulatory exposure is made on day one: what kind of programme are you building.
A points scheme redeemable only at your own stores is barely regulated. The same scheme, opened to partner brands and allowed to accumulate a float, can cross into payments licensing, anti-money-laundering obligations and tax reporting. Nothing about the member experience changes. The legal position changes completely.
This guide maps the structure: which programme types attract which oversight, the six dimensions that differ by country, and the governance practices that keep a multi-market programme defensible. It is a planning framework, not legal advice, and every figure you build to should be confirmed with counsel in each market.
Programme structure determines regulatory scope
Before any country-specific question, settle this one. Four structures, in increasing order of oversight.
| Programme type | How it works | Typical regulatory weight |
|---|---|---|
| Closed loop | Points earned and redeemed only with the issuing brand | Lightest. Usually treated as a purchase rebate, governed by contract and consumer protection law |
| Semi-closed loop | Redeemable across a selected set of partner merchants | Moderate. Cross-merchant value transfer and shared customer data attract licensing, reporting and privacy scrutiny |
| Open loop | Value spendable broadly, close to a payment instrument | Heaviest. Commonly requires a payments or banking licence, with AML obligations and full consumer protection |
| Coalition | Multiple unrelated brands, often across borders | Most complex. Inter-jurisdictional tax, data-sharing agreements and parallel compliance in every participating market |
The practical consequence: adding one partner brand to a closed-loop scheme can move you a category. Treat that as a legal decision with a commercial input, not the reverse.
4
Programme structures
closed, semi-closed, open, coalition
6
Dimensions that vary
by country, for every programme
1
Decision that drives it all
where points can be redeemed
The six dimensions that differ by country
Rather than a country-by-country list that ages badly, work the six axes below for each market you operate in. These are the questions that change the answer.
1. Taxation
The near-universal principle is that rewards earned against a purchase are treated as a rebate or discount and are not taxable to the consumer. The exceptions are where the money is: promotional and sign-up rewards given without a purchase, business-earned points used personally, and rewards given to employees, which are usually a taxable benefit. Thresholds and reporting forms vary widely, and cross-border coalition programmes can raise VAT questions that single-market schemes never face.
2. Expiry and fees
Two separate regimes often apply: one for loyalty points, one for gift cards and stored-value instruments. Gift card rules are typically stricter. In the US, Regulation E's gift card provisions restrict expiry and dormancy fees and require disclosure, while loyalty and promotional instruments can be excluded from those protections if correctly designated. In the EU and UK, minimum validity periods vary by member state. The common thread everywhere is disclosure: whatever your expiry rule, it must be clear before enrolment.
3. Licensing and float thresholds
This is where programmes get caught out. Once unredeemed value accumulates beyond a threshold, or once points become spendable across unrelated merchants, regulators start treating the balance as stored value rather than marketing liability. That can trigger authorisation requirements, minimum capital, safeguarding of customer funds and periodic reporting. Thresholds differ sharply by market and are revised, so confirm the current figure rather than designing to a number from an article.
4. Data privacy and consent
Loyalty programmes are among the richest consumer datasets a brand holds, which places them squarely inside GDPR and its equivalents. The recurring requirements: explicit consent for enrolment that is not bundled with the main contract, data minimisation so you collect only what the programme needs, the right to withdraw consent without forfeiting already-earned rewards, and a clear explanation plus opt-out where automated profiling drives personalised offers.
5. Consumer protection and advertising
Programmes must honour what they advertise. Earning and redemption rates cannot be misrepresented, material changes must be communicated clearly and in advance, and benefits promised must be deliverable. Several regulators now also apply a fair-value test, particularly where loyalty sits alongside financial services, and expect outcomes for vulnerable customers to be considered explicitly.
6. AML and payment-like behaviour
The more your points behave like money, the more anti-money-laundering rules apply. Transferability between members, convertibility to cash or cash equivalents, and high stored balances are the three features that attract attention. Closed-loop programmes below the relevant reporting thresholds are generally out of scope; open-loop and transferable programmes frequently are not.
One programme, several regimes
Market-specific rules, consent management and float reporting, configured rather than forked.
Book a demoTrusted by 5,000+ companies
Why programme structure beats programme size
- Transferability is the trigger: The moment points can move between members, you have created something that behaves like a bearer instrument. That single feature drives AML, tax and licensing questions at once.
- Cash convertibility is the line: Rewards redeemable only for goods and services sit in a different regime from anything convertible to cash or loadable to a bank account.
- Partner count changes the category: One brand is closed loop. A selected set is semi-closed. Open redemption is a payment instrument in all but name.
- Float is a liability, not a buffer: Unredeemed value sitting on the balance sheet is exactly what licensing thresholds are written about.
- Cross-border multiplies, it does not average: A coalition across five markets complies with five regimes simultaneously, not with the strictest one.
Governance practices for a multi-market programme
- Write the terms before the campaign: Earning rates, expiry, change rights and termination handling, published and versioned. Most consumer-protection findings trace back to terms that were vague or changed quietly.
- Keep tax treatment per reward type: Separate purchase-linked rewards from promotional and employee rewards in your own records, because they are taxed differently and auditors will ask.
- Monitor the float against the threshold: Track unredeemed value per market and alert before you approach an authorisation trigger, not after.
- Treat consent as a per-market configuration: Enrolment consent, profiling consent and marketing consent are distinct, and the lawful basis differs by jurisdiction.
- Give members a clean exit: Withdrawal of consent must not retrospectively void rewards already earned, and the data you keep afterwards must be justified.
- Log every rule change: Who changed the earn rate, when, and what members were told. This is the evidence base when a regulator or a member disputes a change.
- Review annually, per market: Thresholds and guidance move. A programme designed to one year's rules is not compliant by default the next.
Employee, partner and B2B rewards are a separate problem
Programmes that reward staff, channel partners or business buyers sit under different rules from consumer loyalty, and the differences are not cosmetic.
- Employee rewards are usually taxable benefits: Often with low or zero de minimis thresholds, and reporting duties on the employer rather than the recipient.
- Partner incentives raise anti-bribery questions: Particularly where the partner serves public-sector or regulated customers. The FCPA, the UK Bribery Act and local equivalents all apply.
- Business-earned points used personally: A recurring audit finding. The value is generally taxable to the individual, and the programme design should make the distinction traceable.
- B2B value transfer can look like a rebate: Which has its own accounting and tax treatment, separate from consumer loyalty entirely.
Our global employer gift tax guide covers the employee side in detail.
Build compliant, scalable programmes with Loyalife
Compliance in a multi-market programme is mostly a configuration problem. The platform either lets you set different rules per market and evidence them, or it does not.
01 · Rules
Market-specific earn and redeem rules
Configure expiry, earning rates and redemption limits per market, so one programme can satisfy several regimes without forking the product.
02 · Consent
Consent and preference management
Separate enrolment, profiling and marketing consent per member, with withdrawal that does not void earned rewards.
03 · Controls
Maker-checker and audit logs
Every rule and balance change approved by a second person and logged immutably, which is what an audit actually asks for.
04 · Visibility
Liability and float reporting
Unredeemed value tracked per market, so you see a licensing threshold approaching rather than discovering you crossed it.
05 · Structure
Closed, coalition and partner models
Support for single-brand, multi-partner and coalition structures, so the commercial model is a choice rather than a constraint.
06 · Data
Minimisation by design
Collect what the programme needs and no more, with retention rules you can defend.
You can also explore the Loyalife platform and multi-brand and coalition loyalty.
The single most useful habit: decide the programme structure deliberately, then re-ask the six questions above every time you add a partner, a market or a way to move points. Those are the moments that change your regulatory position, and they rarely feel like legal decisions when they are made.
Book your Loyalife demo
Frequently asked questions
Usually not for the consumer when they are earned against a purchase, because most jurisdictions treat those rewards as a rebate or discount rather than income. The exceptions are where tax tends to apply: promotional and sign-up rewards given without a purchase, business-earned points used personally, and rewards given to employees, which are commonly a taxable benefit. Thresholds and reporting duties vary by country.
It depends on structure rather than size. A closed-loop programme redeemable only with the issuing brand generally does not. Once points are spendable across unrelated merchants, transferable between members, or convertible to cash, the balance starts to look like stored value and can trigger payments authorisation, minimum capital and safeguarding requirements. Unredeemed float crossing a threshold is a common trigger.
Closed loop means points are earned and redeemed only with the issuing brand, which keeps the programme in the lightest regulatory category. Semi-closed loop extends redemption to a selected set of partners and attracts licensing, reporting and privacy scrutiny. Open loop means value is spendable broadly and behaves close to a payment instrument, typically requiring a licence and carrying AML obligations.
In most markets yes, provided the rule is disclosed clearly before enrolment and material changes are communicated in advance. Note that two regimes often apply: loyalty points and gift cards or stored-value instruments are treated separately, and gift card rules are usually stricter on expiry and dormancy fees. Minimum validity periods differ by country and by instrument type.
Loyalty data sits squarely inside GDPR and equivalent regimes. The recurring requirements are explicit enrolment consent that is not bundled with the main contract, data minimisation so you collect only what the programme needs, the right to withdraw consent without forfeiting already-earned rewards, and a clear explanation plus opt-out where automated profiling drives personalised offers.
The more your points behave like money, the more they apply. Three features attract attention: transferability between members, convertibility to cash or cash equivalents, and high stored balances. Closed-loop programmes below the relevant reporting thresholds are generally out of scope, while open-loop and transferable programmes frequently are not.
As the most complex category. A coalition connects unrelated brands and often operates across borders, which means complying with every participating jurisdiction in parallel rather than with the strictest one. That brings inter-jurisdictional tax questions, data-sharing agreements between participants, and potentially VAT treatment that single-market programmes never encounter.
Yes, and the differences are substantial. Employee rewards are usually taxable benefits with low or zero de minimis thresholds and reporting duties on the employer. Partner incentives raise anti-bribery questions under the FCPA, the UK Bribery Act and local equivalents, particularly where the partner serves public-sector customers. Business-earned points used personally are a frequent audit finding.
![Diversity and Inclusion in the Workplace: Why It Drives Success [Activities + Survey Tips]](/Blog-cover-light/inclusion-and-diversity-in-the-workplace.avif?dpl=dpl_8fJikYxuCmYv3RQT1yaE4Git6nzR)
![How to Run an Effective Employee Commitment Survey [+ Sample Questions]](/Blog-cover-light/employee-commitment-survey.avif?dpl=dpl_8fJikYxuCmYv3RQT1yaE4Git6nzR)
