The regulations that matter, explained simply.

A risk-based EU framework for organisations that provide, deploy, import or distribute AI systems.

The EU cybersecurity directive covering risk management, governance and incident reporting across critical sectors.

The EU framework for protecting personal data and governing how organisations process it.

US federal privacy, security and breach-notification rules for covered entities and business associates handling protected health information.

EU rules for intermediary services, online platforms, content processes, transparency and systemic risks.

EU rules for in-scope companies to address human-rights and environmental impacts in their chains of activities.

EU rules for standardised corporate sustainability reporting, assurance and digital disclosure.

EU due-diligence rules for specified commodities and products associated with deforestation and forest degradation.

UK legislation that includes transparency-in-supply-chains reporting for organisations meeting the statutory conditions.

EU minimum rules intended to strengthen equal pay through transparency and enforcement mechanisms.

An international requirements standard for managing environmental responsibilities through a management system.

The EU single-rulebook, directive and authority package for anti-money-laundering and counter-terrorist-financing controls.

The EU operational-resilience framework for in-scope financial entities and their ICT risk.

EU rules for crypto-asset issuers and service providers, including authorisation and conduct requirements.

EU rules for investment firms and trading venues, market structure, conduct and investor protection.

EU rules for payment services, account access, customer protection and strong customer authentication.

EU minimum standards for reporting channels, follow-up and protection of people reporting specified breaches.

An international requirements standard for occupational health and safety management systems.

An international requirements standard for establishing and improving an information security management system.

An industry security standard for organisations that store, process or transmit payment-card account data.

An independent attestation framework for controls at service organisations against selected Trust Services Criteria.

An international requirements standard for quality management systems and consistent delivery.

The EU classification system for determining when economic activities qualify as environmentally sustainable.

EU disclosure rules for how financial-market participants and advisers address sustainability risks and impacts.