I'm sure whatever product you worked on had all of the features you've described. I'm skeptical that the primary purpose of those features was fraud prevention rather than data mining. I'm quite certain none of those features are required by law.
I don't remember any data mining projects that weren't explicitly anti-fraud, but that was years ago and things may have changed since. One project I recall was able to proactively reach out to banks and inform them of compromised accounts based on things we learned from other banks. Pretty cool stuff; kinda wish I had stayed there longer.