Lightning as it is right now is pretty private, but businesses will likely be told to run OFAC compliance nodes like this, at which point noncompliance comes in to play. 

https://www.nobsbitcoin.com/amboss-launches-reflex/