https://saga-compliance.com/learn Saga Compliance compliance guides 2026-08-16T00:00:00Z Saga editorial team https://saga-compliance.com/learn/eu-ai-act/article-50-transparency AI Act Article 50 transparency in practice 2026-08-16T00:00:00Z 2026-08-16T00:00:00Z A decision path for human interaction notices, synthetic-content marking, deepfakes, emotion recognition, and public-interest text. https://saga-compliance.com/learn/gdpr/controller-or-processor Controller or processor? Decide per processing activity 2026-08-16T00:00:00Z 2026-08-16T00:00:00Z How to classify data-protection roles from actual decision-making rather than labels in a contract. https://saga-compliance.com/learn/csddd Corporate Sustainability Due Diligence Directive 2026-07-31T00:00:00Z 2026-08-16T00:00:00Z EU rules for in-scope companies to address human-rights and environmental impacts in their chains of activities. https://saga-compliance.com/learn/csrd Corporate Sustainability Reporting Directive 2026-07-31T00:00:00Z 2026-08-16T00:00:00Z EU rules for standardised corporate sustainability reporting, assurance and digital disclosure. https://saga-compliance.com/learn/compare/csrd-vs-eu-taxonomy CSRD vs EU Taxonomy — narrative reporting or activity alignment? 2026-08-16T00:00:00Z 2026-08-16T00:00:00Z How ESRS sustainability reporting relates to taxonomy eligibility, alignment, safeguards, and KPIs. https://saga-compliance.com/learn/compare/csrd-vs-sfdr CSRD vs SFDR — company report or financial-product disclosure? 2026-08-16T00:00:00Z 2026-08-16T00:00:00Z Compare corporate sustainability reporting with disclosures made by financial-market participants and advisers. https://saga-compliance.com/learn/compare/dora-vs-iso-27001 DORA vs ISO 27001 — regulation or management system? 2026-08-16T00:00:00Z 2026-08-16T00:00:00Z How a voluntary information-security management system supports—but cannot replace—DORA compliance. https://saga-compliance.com/learn/dora/ict-incident-clock DORA’s ICT incident reporting clock 2026-08-16T00:00:00Z 2026-08-16T00:00:00Z Build classification, initial notification, intermediate reporting, and final reporting as one owned operational path. https://saga-compliance.com/learn/compare/dsa-vs-gdpr DSA vs GDPR — platform accountability or data protection? 2026-08-16T00:00:00Z 2026-08-16T00:00:00Z Compare online intermediary duties with personal-data duties across moderation, advertising, recommendations, and user rights. https://saga-compliance.com/learn/compare/eu-aml-vs-mica EU AML rules vs MiCA — financial crime or market authorisation? 2026-08-16T00:00:00Z 2026-08-16T00:00:00Z Compare crypto authorisation and customer protection with anti-money-laundering risk, customer due diligence, and reporting. https://saga-compliance.com/learn/eudr EU Deforestation Regulation 2026-07-31T00:00:00Z 2026-08-16T00:00:00Z EU due-diligence rules for specified commodities and products associated with deforestation and forest degradation. https://saga-compliance.com/learn/compare/eudr-vs-csddd EUDR vs CSDDD — commodity traceability or broad due diligence? 2026-08-16T00:00:00Z 2026-08-16T00:00:00Z Compare product-specific deforestation due diligence with broader human-rights and environmental due diligence. https://saga-compliance.com/learn/compare/gdpr-vs-nis2 GDPR vs NIS2 — privacy incident or cyber incident? 2026-08-16T00:00:00Z 2026-08-16T00:00:00Z Compare protected interests, incident triggers, clocks, recipients, and the events that require both reports. https://saga-compliance.com/learn/compare/gdpr-vs-ai-act GDPR vs the EU AI Act — data protection or AI governance? 2026-08-16T00:00:00Z 2026-08-16T00:00:00Z Compare personal-data duties with role- and risk-based AI duties, and see why one AI system can owe both. https://saga-compliance.com/learn/gdpr General Data Protection Regulation 2026-07-31T00:00:00Z 2026-08-16T00:00:00Z The EU framework for protecting personal data and governing how organisations process it. https://saga-compliance.com/learn/eu-ai-act/high-risk-employment High-risk employment AI: evidence before deployment 2026-08-16T00:00:00Z 2026-08-16T00:00:00Z How employment use changes AI Act classification, deployer duties, human oversight, monitoring, and worker information. https://saga-compliance.com/learn/compare/iso-9001-vs-iso-27001 ISO 9001 vs ISO 27001 — quality system or security system? 2026-08-16T00:00:00Z 2026-08-16T00:00:00Z Compare quality and information-security management systems, their risks, controls, audits, and opportunities for one integrated system. https://saga-compliance.com/learn/eu-ai-act/role-mapping Map the AI Act role before the risk class 2026-08-16T00:00:00Z 2026-08-16T00:00:00Z Provider, deployer, importer, distributor, product manufacturer, and GPAI provider duties begin with role. https://saga-compliance.com/learn/compare/mica-vs-mifid-ii MiCA vs MiFID II — crypto-asset or financial instrument? 2026-08-16T00:00:00Z 2026-08-16T00:00:00Z Why classification comes first when a token or service may sit under crypto or traditional securities law. https://saga-compliance.com/learn/nis2/scope-per-legal-entity NIS2 scope belongs to the legal entity 2026-08-16T00:00:00Z 2026-08-16T00:00:00Z A repeatable scope assessment across sector, establishment, size, special cases, national law, and group structure. https://saga-compliance.com/learn/compare/nis2-vs-dora NIS2 vs DORA — which cybersecurity regime governs you? 2026-07-31T00:00:00Z 2026-08-16T00:00:00Z How the EU’s two cybersecurity regimes divide the territory: who each covers, whose incident clocks apply, and what happens when a group falls under both. https://saga-compliance.com/learn/compare/nis2-vs-iso-27001 NIS2 vs ISO 27001 — statutory measures or certification? 2026-08-16T00:00:00Z 2026-08-16T00:00:00Z Compare NIS2’s statutory cyber duties with an ISO 27001 management system and certification boundary. https://saga-compliance.com/learn/nis2/incident-reporting-sequence NIS2’s 24-hour, 72-hour, and one-month sequence 2026-08-16T00:00:00Z 2026-08-16T00:00:00Z Turn the directive’s staged reporting into an incident workflow that works outside office hours. https://saga-compliance.com/learn/dora/register-of-information The DORA register of information as a live control 2026-08-16T00:00:00Z 2026-08-16T00:00:00Z What the ICT third-party register needs to connect, and why a procurement spreadsheet is rarely enough. https://saga-compliance.com/learn/gdpr/72-hour-breach-assessment The GDPR 72-hour breach assessment 2026-08-16T00:00:00Z 2026-08-16T00:00:00Z A practical, source-led way to separate detection, awareness, risk assessment, notification, documentation, and communication. https://saga-compliance.com/learn/dora/threat-led-penetration-testing Threat-led penetration testing under DORA 2026-08-16T00:00:00Z 2026-08-16T00:00:00Z Separate ordinary resilience testing from the advanced TLPT duty for designated financial entities. https://saga-compliance.com/learn/nis2/management-accountability What NIS2 management accountability requires 2026-08-16T00:00:00Z 2026-08-16T00:00:00Z Move management approval and training from a signature to an evidenced oversight cycle. https://saga-compliance.com/learn/gdpr/data-protection-impact-assessment When a DPIA becomes operating evidence 2026-08-16T00:00:00Z 2026-08-16T00:00:00Z A DPIA is a living decision record for high-risk personal-data processing, not a launch checklist. https://saga-compliance.com/learn/compare/whistleblowing-vs-gdpr Whistleblowing vs GDPR — confidentiality and data protection together 2026-08-16T00:00:00Z 2026-08-16T00:00:00Z Reconcile protected reporting, restricted case access, investigation, retention, notices, and data-subject rights. https://saga-compliance.com/learn/cbam CBAM — Carbon Border Adjustment Mechanism 2026-08-15T00:00:00Z 2026-08-15T00:00:00Z A source-led guide to CBAM scope, the 50-tonne threshold, authorised declarants, emissions, certificates, and the definitive regime. https://saga-compliance.com/learn/eu-battery-regulation EU Battery Regulation: 2026 compliance guide 2026-08-15T00:00:00Z 2026-08-15T00:00:00Z A practical guide to EU Battery Regulation scope, carbon-footprint rules, recycled content, due diligence, battery passports, producer duties, and deadlines. https://saga-compliance.com/learn/eu-cra EU Cyber Resilience Act (CRA) 2026-08-15T00:00:00Z 2026-08-15T00:00:00Z A practical 2026 briefing on CRA scope, SaaS and remote processing, reporting deadlines, support periods, and the 2027 compliance date. https://saga-compliance.com/learn/eu-data-act EU Data Act: cloud switching and SaaS obligations 2026-08-15T00:00:00Z 2026-08-15T00:00:00Z A practical 2026 guide to EU Data Act cloud-switching duties for SaaS, contract terms, export rules, fees, exemptions, and key dates. https://saga-compliance.com/learn/eu-accessibility-act European Accessibility Act: scope and digital-service duties 2026-08-15T00:00:00Z 2026-08-15T00:00:00Z A practical guide to European Accessibility Act scope, e-commerce duties, microenterprise relief, Swedish enforcement, and transition rules. https://saga-compliance.com/learn/compare/csrd-vs-csddd CSRD vs CSDDD — reporting duty or conduct duty? 2026-07-31T00:00:00Z 2026-07-31T00:00:00Z CSRD requires audited sustainability reporting; CSDDD requires action on human-rights and environmental impacts. Compare their scope, duties and dates. https://saga-compliance.com/learn/dora Digital Operational Resilience Act 2026-07-31T00:00:00Z 2026-07-31T00:00:00Z The EU operational-resilience framework for in-scope financial entities and their ICT risk. https://saga-compliance.com/learn/dsa Digital Services Act 2026-07-31T00:00:00Z 2026-07-31T00:00:00Z EU rules for intermediary services, online platforms, content processes, transparency and systemic risks. https://saga-compliance.com/learn/eu-aml EU Anti-Money-Laundering Package 2026-07-31T00:00:00Z 2026-07-31T00:00:00Z The EU single-rulebook, directive and authority package for anti-money-laundering and counter-terrorist-financing controls. https://saga-compliance.com/learn/eu-ai-act EU Artificial Intelligence Act 2026-07-31T00:00:00Z 2026-07-31T00:00:00Z A risk-based EU framework for organisations that provide, deploy, import or distribute AI systems. https://saga-compliance.com/learn/eu-pay-transparency EU Pay Transparency Directive 2026-07-31T00:00:00Z 2026-07-31T00:00:00Z EU minimum rules intended to strengthen equal pay through transparency and enforcement mechanisms. https://saga-compliance.com/learn/eu-taxonomy EU Taxonomy Regulation 2026-07-31T00:00:00Z 2026-07-31T00:00:00Z The EU classification system for determining when economic activities qualify as environmentally sustainable. https://saga-compliance.com/learn/eu-whistleblower-directive EU Whistleblower Protection Directive 2026-07-31T00:00:00Z 2026-07-31T00:00:00Z EU minimum standards for reporting channels, follow-up and protection of people reporting specified breaches. https://saga-compliance.com/learn/hipaa Health Insurance Portability and Accountability Act 2026-07-31T00:00:00Z 2026-07-31T00:00:00Z US federal privacy, security and breach-notification rules for covered entities and business associates handling protected health information. https://saga-compliance.com/learn/iso-14001 ISO 14001 — Environmental Management 2026-07-31T00:00:00Z 2026-07-31T00:00:00Z An international requirements standard for managing environmental responsibilities through a management system. https://saga-compliance.com/learn/compare/iso-27001-vs-soc-2 ISO 27001 vs SOC 2 — certificate or attestation? 2026-07-31T00:00:00Z 2026-07-31T00:00:00Z Compare ISO 27001 certification with SOC 2 attestation: what each proves, who requests it, audit cadence, and how one control set can support both. https://saga-compliance.com/learn/iso-45001 ISO 45001 — Occupational Health and Safety Management 2026-07-31T00:00:00Z 2026-07-31T00:00:00Z An international requirements standard for occupational health and safety management systems. https://saga-compliance.com/learn/iso-9001 ISO 9001 — Quality Management 2026-07-31T00:00:00Z 2026-07-31T00:00:00Z An international requirements standard for quality management systems and consistent delivery. https://saga-compliance.com/learn/iso-27001 ISO/IEC 27001 — Information Security Management 2026-07-31T00:00:00Z 2026-07-31T00:00:00Z An international requirements standard for establishing and improving an information security management system. https://saga-compliance.com/learn/mica Markets in Crypto-Assets Regulation 2026-07-31T00:00:00Z 2026-07-31T00:00:00Z EU rules for crypto-asset issuers and service providers, including authorisation and conduct requirements. https://saga-compliance.com/learn/mifid-ii Markets in Financial Instruments Directive II 2026-07-31T00:00:00Z 2026-07-31T00:00:00Z EU rules for investment firms and trading venues, market structure, conduct and investor protection. https://saga-compliance.com/learn/nis2 Network and Information Systems Directive 2026-07-31T00:00:00Z 2026-07-31T00:00:00Z The EU cybersecurity directive covering risk management, governance and incident reporting across critical sectors. https://saga-compliance.com/learn/pci-dss Payment Card Industry Data Security Standard 2026-07-31T00:00:00Z 2026-07-31T00:00:00Z An industry security standard for organisations that store, process or transmit payment-card account data. https://saga-compliance.com/learn/psd2 Revised Payment Services Directive 2026-07-31T00:00:00Z 2026-07-31T00:00:00Z EU rules for payment services, account access, customer protection and strong customer authentication. https://saga-compliance.com/learn/soc-2 SOC 2 — System and Organization Controls 2026-07-31T00:00:00Z 2026-07-31T00:00:00Z An independent attestation framework for controls at service organisations against selected Trust Services Criteria. https://saga-compliance.com/learn/sfdr Sustainable Finance Disclosure Regulation 2026-07-31T00:00:00Z 2026-07-31T00:00:00Z EU disclosure rules for how financial-market participants and advisers address sustainability risks and impacts. https://saga-compliance.com/learn/uk-modern-slavery-act UK Modern Slavery Act 2015 2026-07-31T00:00:00Z 2026-07-31T00:00:00Z UK legislation that includes transparency-in-supply-chains reporting for organisations meeting the statutory conditions.