<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel>
<title>Saga Compliance guidance</title>
<link>https://saga-compliance.com/learn</link>
<description>Source-led EU compliance guidance and updates.</description>
<lastBuildDate>Sun, 16 Aug 2026 00:00:00 GMT</lastBuildDate>
<atom:link href="https://saga-compliance.com/learn/rss.xml" rel="self" type="application/rss+xml"/>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/eu-ai-act/article-50-transparency</guid><link>https://saga-compliance.com/learn/eu-ai-act/article-50-transparency</link><title>AI Act Article 50 transparency in practice</title><description>A decision path for human interaction notices, synthetic-content marking, deepfakes, emotion recognition, and public-interest text.</description><pubDate>Sun, 16 Aug 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/gdpr/controller-or-processor</guid><link>https://saga-compliance.com/learn/gdpr/controller-or-processor</link><title>Controller or processor? Decide per processing activity</title><description>How to classify data-protection roles from actual decision-making rather than labels in a contract.</description><pubDate>Sun, 16 Aug 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/csddd</guid><link>https://saga-compliance.com/learn/csddd</link><title>Corporate Sustainability Due Diligence Directive</title><description>EU rules for in-scope companies to address human-rights and environmental impacts in their chains of activities.</description><pubDate>Sun, 16 Aug 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/csrd</guid><link>https://saga-compliance.com/learn/csrd</link><title>Corporate Sustainability Reporting Directive</title><description>EU rules for standardised corporate sustainability reporting, assurance and digital disclosure.</description><pubDate>Sun, 16 Aug 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/compare/csrd-vs-eu-taxonomy</guid><link>https://saga-compliance.com/learn/compare/csrd-vs-eu-taxonomy</link><title>CSRD vs EU Taxonomy — narrative reporting or activity alignment?</title><description>How ESRS sustainability reporting relates to taxonomy eligibility, alignment, safeguards, and KPIs.</description><pubDate>Sun, 16 Aug 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/compare/csrd-vs-sfdr</guid><link>https://saga-compliance.com/learn/compare/csrd-vs-sfdr</link><title>CSRD vs SFDR — company report or financial-product disclosure?</title><description>Compare corporate sustainability reporting with disclosures made by financial-market participants and advisers.</description><pubDate>Sun, 16 Aug 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/compare/dora-vs-iso-27001</guid><link>https://saga-compliance.com/learn/compare/dora-vs-iso-27001</link><title>DORA vs ISO 27001 — regulation or management system?</title><description>How a voluntary information-security management system supports—but cannot replace—DORA compliance.</description><pubDate>Sun, 16 Aug 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/dora/ict-incident-clock</guid><link>https://saga-compliance.com/learn/dora/ict-incident-clock</link><title>DORA’s ICT incident reporting clock</title><description>Build classification, initial notification, intermediate reporting, and final reporting as one owned operational path.</description><pubDate>Sun, 16 Aug 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/compare/dsa-vs-gdpr</guid><link>https://saga-compliance.com/learn/compare/dsa-vs-gdpr</link><title>DSA vs GDPR — platform accountability or data protection?</title><description>Compare online intermediary duties with personal-data duties across moderation, advertising, recommendations, and user rights.</description><pubDate>Sun, 16 Aug 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/compare/eu-aml-vs-mica</guid><link>https://saga-compliance.com/learn/compare/eu-aml-vs-mica</link><title>EU AML rules vs MiCA — financial crime or market authorisation?</title><description>Compare crypto authorisation and customer protection with anti-money-laundering risk, customer due diligence, and reporting.</description><pubDate>Sun, 16 Aug 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/eudr</guid><link>https://saga-compliance.com/learn/eudr</link><title>EU Deforestation Regulation</title><description>EU due-diligence rules for specified commodities and products associated with deforestation and forest degradation.</description><pubDate>Sun, 16 Aug 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/compare/eudr-vs-csddd</guid><link>https://saga-compliance.com/learn/compare/eudr-vs-csddd</link><title>EUDR vs CSDDD — commodity traceability or broad due diligence?</title><description>Compare product-specific deforestation due diligence with broader human-rights and environmental due diligence.</description><pubDate>Sun, 16 Aug 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/compare/gdpr-vs-nis2</guid><link>https://saga-compliance.com/learn/compare/gdpr-vs-nis2</link><title>GDPR vs NIS2 — privacy incident or cyber incident?</title><description>Compare protected interests, incident triggers, clocks, recipients, and the events that require both reports.</description><pubDate>Sun, 16 Aug 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/compare/gdpr-vs-ai-act</guid><link>https://saga-compliance.com/learn/compare/gdpr-vs-ai-act</link><title>GDPR vs the EU AI Act — data protection or AI governance?</title><description>Compare personal-data duties with role- and risk-based AI duties, and see why one AI system can owe both.</description><pubDate>Sun, 16 Aug 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/gdpr</guid><link>https://saga-compliance.com/learn/gdpr</link><title>General Data Protection Regulation</title><description>The EU framework for protecting personal data and governing how organisations process it.</description><pubDate>Sun, 16 Aug 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/eu-ai-act/high-risk-employment</guid><link>https://saga-compliance.com/learn/eu-ai-act/high-risk-employment</link><title>High-risk employment AI: evidence before deployment</title><description>How employment use changes AI Act classification, deployer duties, human oversight, monitoring, and worker information.</description><pubDate>Sun, 16 Aug 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/compare/iso-9001-vs-iso-27001</guid><link>https://saga-compliance.com/learn/compare/iso-9001-vs-iso-27001</link><title>ISO 9001 vs ISO 27001 — quality system or security system?</title><description>Compare quality and information-security management systems, their risks, controls, audits, and opportunities for one integrated system.</description><pubDate>Sun, 16 Aug 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/eu-ai-act/role-mapping</guid><link>https://saga-compliance.com/learn/eu-ai-act/role-mapping</link><title>Map the AI Act role before the risk class</title><description>Provider, deployer, importer, distributor, product manufacturer, and GPAI provider duties begin with role.</description><pubDate>Sun, 16 Aug 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/compare/mica-vs-mifid-ii</guid><link>https://saga-compliance.com/learn/compare/mica-vs-mifid-ii</link><title>MiCA vs MiFID II — crypto-asset or financial instrument?</title><description>Why classification comes first when a token or service may sit under crypto or traditional securities law.</description><pubDate>Sun, 16 Aug 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/nis2/scope-per-legal-entity</guid><link>https://saga-compliance.com/learn/nis2/scope-per-legal-entity</link><title>NIS2 scope belongs to the legal entity</title><description>A repeatable scope assessment across sector, establishment, size, special cases, national law, and group structure.</description><pubDate>Sun, 16 Aug 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/compare/nis2-vs-dora</guid><link>https://saga-compliance.com/learn/compare/nis2-vs-dora</link><title>NIS2 vs DORA — which cybersecurity regime governs you?</title><description>How the EU’s two cybersecurity regimes divide the territory: who each covers, whose incident clocks apply, and what happens when a group falls under both.</description><pubDate>Sun, 16 Aug 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/compare/nis2-vs-iso-27001</guid><link>https://saga-compliance.com/learn/compare/nis2-vs-iso-27001</link><title>NIS2 vs ISO 27001 — statutory measures or certification?</title><description>Compare NIS2’s statutory cyber duties with an ISO 27001 management system and certification boundary.</description><pubDate>Sun, 16 Aug 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/nis2/incident-reporting-sequence</guid><link>https://saga-compliance.com/learn/nis2/incident-reporting-sequence</link><title>NIS2’s 24-hour, 72-hour, and one-month sequence</title><description>Turn the directive’s staged reporting into an incident workflow that works outside office hours.</description><pubDate>Sun, 16 Aug 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/dora/register-of-information</guid><link>https://saga-compliance.com/learn/dora/register-of-information</link><title>The DORA register of information as a live control</title><description>What the ICT third-party register needs to connect, and why a procurement spreadsheet is rarely enough.</description><pubDate>Sun, 16 Aug 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/gdpr/72-hour-breach-assessment</guid><link>https://saga-compliance.com/learn/gdpr/72-hour-breach-assessment</link><title>The GDPR 72-hour breach assessment</title><description>A practical, source-led way to separate detection, awareness, risk assessment, notification, documentation, and communication.</description><pubDate>Sun, 16 Aug 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/dora/threat-led-penetration-testing</guid><link>https://saga-compliance.com/learn/dora/threat-led-penetration-testing</link><title>Threat-led penetration testing under DORA</title><description>Separate ordinary resilience testing from the advanced TLPT duty for designated financial entities.</description><pubDate>Sun, 16 Aug 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/nis2/management-accountability</guid><link>https://saga-compliance.com/learn/nis2/management-accountability</link><title>What NIS2 management accountability requires</title><description>Move management approval and training from a signature to an evidenced oversight cycle.</description><pubDate>Sun, 16 Aug 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/gdpr/data-protection-impact-assessment</guid><link>https://saga-compliance.com/learn/gdpr/data-protection-impact-assessment</link><title>When a DPIA becomes operating evidence</title><description>A DPIA is a living decision record for high-risk personal-data processing, not a launch checklist.</description><pubDate>Sun, 16 Aug 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/compare/whistleblowing-vs-gdpr</guid><link>https://saga-compliance.com/learn/compare/whistleblowing-vs-gdpr</link><title>Whistleblowing vs GDPR — confidentiality and data protection together</title><description>Reconcile protected reporting, restricted case access, investigation, retention, notices, and data-subject rights.</description><pubDate>Sun, 16 Aug 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/cbam</guid><link>https://saga-compliance.com/learn/cbam</link><title>CBAM — Carbon Border Adjustment Mechanism</title><description>A source-led guide to CBAM scope, the 50-tonne threshold, authorised declarants, emissions, certificates, and the definitive regime.</description><pubDate>Sat, 15 Aug 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/eu-battery-regulation</guid><link>https://saga-compliance.com/learn/eu-battery-regulation</link><title>EU Battery Regulation: 2026 compliance guide</title><description>A practical guide to EU Battery Regulation scope, carbon-footprint rules, recycled content, due diligence, battery passports, producer duties, and deadlines.</description><pubDate>Sat, 15 Aug 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/eu-cra</guid><link>https://saga-compliance.com/learn/eu-cra</link><title>EU Cyber Resilience Act (CRA)</title><description>A practical 2026 briefing on CRA scope, SaaS and remote processing, reporting deadlines, support periods, and the 2027 compliance date.</description><pubDate>Sat, 15 Aug 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/eu-data-act</guid><link>https://saga-compliance.com/learn/eu-data-act</link><title>EU Data Act: cloud switching and SaaS obligations</title><description>A practical 2026 guide to EU Data Act cloud-switching duties for SaaS, contract terms, export rules, fees, exemptions, and key dates.</description><pubDate>Sat, 15 Aug 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/eu-accessibility-act</guid><link>https://saga-compliance.com/learn/eu-accessibility-act</link><title>European Accessibility Act: scope and digital-service duties</title><description>A practical guide to European Accessibility Act scope, e-commerce duties, microenterprise relief, Swedish enforcement, and transition rules.</description><pubDate>Sat, 15 Aug 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/compare/csrd-vs-csddd</guid><link>https://saga-compliance.com/learn/compare/csrd-vs-csddd</link><title>CSRD vs CSDDD — reporting duty or conduct duty?</title><description>CSRD requires audited sustainability reporting; CSDDD requires action on human-rights and environmental impacts. Compare their scope, duties and dates.</description><pubDate>Fri, 31 Jul 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/dora</guid><link>https://saga-compliance.com/learn/dora</link><title>Digital Operational Resilience Act</title><description>The EU operational-resilience framework for in-scope financial entities and their ICT risk.</description><pubDate>Fri, 31 Jul 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/dsa</guid><link>https://saga-compliance.com/learn/dsa</link><title>Digital Services Act</title><description>EU rules for intermediary services, online platforms, content processes, transparency and systemic risks.</description><pubDate>Fri, 31 Jul 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/eu-aml</guid><link>https://saga-compliance.com/learn/eu-aml</link><title>EU Anti-Money-Laundering Package</title><description>The EU single-rulebook, directive and authority package for anti-money-laundering and counter-terrorist-financing controls.</description><pubDate>Fri, 31 Jul 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/eu-ai-act</guid><link>https://saga-compliance.com/learn/eu-ai-act</link><title>EU Artificial Intelligence Act</title><description>A risk-based EU framework for organisations that provide, deploy, import or distribute AI systems.</description><pubDate>Fri, 31 Jul 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/eu-pay-transparency</guid><link>https://saga-compliance.com/learn/eu-pay-transparency</link><title>EU Pay Transparency Directive</title><description>EU minimum rules intended to strengthen equal pay through transparency and enforcement mechanisms.</description><pubDate>Fri, 31 Jul 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/eu-taxonomy</guid><link>https://saga-compliance.com/learn/eu-taxonomy</link><title>EU Taxonomy Regulation</title><description>The EU classification system for determining when economic activities qualify as environmentally sustainable.</description><pubDate>Fri, 31 Jul 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/eu-whistleblower-directive</guid><link>https://saga-compliance.com/learn/eu-whistleblower-directive</link><title>EU Whistleblower Protection Directive</title><description>EU minimum standards for reporting channels, follow-up and protection of people reporting specified breaches.</description><pubDate>Fri, 31 Jul 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/hipaa</guid><link>https://saga-compliance.com/learn/hipaa</link><title>Health Insurance Portability and Accountability Act</title><description>US federal privacy, security and breach-notification rules for covered entities and business associates handling protected health information.</description><pubDate>Fri, 31 Jul 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/iso-14001</guid><link>https://saga-compliance.com/learn/iso-14001</link><title>ISO 14001 — Environmental Management</title><description>An international requirements standard for managing environmental responsibilities through a management system.</description><pubDate>Fri, 31 Jul 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/compare/iso-27001-vs-soc-2</guid><link>https://saga-compliance.com/learn/compare/iso-27001-vs-soc-2</link><title>ISO 27001 vs SOC 2 — certificate or attestation?</title><description>Compare ISO 27001 certification with SOC 2 attestation: what each proves, who requests it, audit cadence, and how one control set can support both.</description><pubDate>Fri, 31 Jul 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/iso-45001</guid><link>https://saga-compliance.com/learn/iso-45001</link><title>ISO 45001 — Occupational Health and Safety Management</title><description>An international requirements standard for occupational health and safety management systems.</description><pubDate>Fri, 31 Jul 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/iso-9001</guid><link>https://saga-compliance.com/learn/iso-9001</link><title>ISO 9001 — Quality Management</title><description>An international requirements standard for quality management systems and consistent delivery.</description><pubDate>Fri, 31 Jul 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/iso-27001</guid><link>https://saga-compliance.com/learn/iso-27001</link><title>ISO/IEC 27001 — Information Security Management</title><description>An international requirements standard for establishing and improving an information security management system.</description><pubDate>Fri, 31 Jul 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/mica</guid><link>https://saga-compliance.com/learn/mica</link><title>Markets in Crypto-Assets Regulation</title><description>EU rules for crypto-asset issuers and service providers, including authorisation and conduct requirements.</description><pubDate>Fri, 31 Jul 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/mifid-ii</guid><link>https://saga-compliance.com/learn/mifid-ii</link><title>Markets in Financial Instruments Directive II</title><description>EU rules for investment firms and trading venues, market structure, conduct and investor protection.</description><pubDate>Fri, 31 Jul 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/nis2</guid><link>https://saga-compliance.com/learn/nis2</link><title>Network and Information Systems Directive</title><description>The EU cybersecurity directive covering risk management, governance and incident reporting across critical sectors.</description><pubDate>Fri, 31 Jul 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/pci-dss</guid><link>https://saga-compliance.com/learn/pci-dss</link><title>Payment Card Industry Data Security Standard</title><description>An industry security standard for organisations that store, process or transmit payment-card account data.</description><pubDate>Fri, 31 Jul 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/psd2</guid><link>https://saga-compliance.com/learn/psd2</link><title>Revised Payment Services Directive</title><description>EU rules for payment services, account access, customer protection and strong customer authentication.</description><pubDate>Fri, 31 Jul 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/soc-2</guid><link>https://saga-compliance.com/learn/soc-2</link><title>SOC 2 — System and Organization Controls</title><description>An independent attestation framework for controls at service organisations against selected Trust Services Criteria.</description><pubDate>Fri, 31 Jul 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/sfdr</guid><link>https://saga-compliance.com/learn/sfdr</link><title>Sustainable Finance Disclosure Regulation</title><description>EU disclosure rules for how financial-market participants and advisers address sustainability risks and impacts.</description><pubDate>Fri, 31 Jul 2026 00:00:00 GMT</pubDate></item>
<item><guid isPermaLink="true">https://saga-compliance.com/learn/uk-modern-slavery-act</guid><link>https://saga-compliance.com/learn/uk-modern-slavery-act</link><title>UK Modern Slavery Act 2015</title><description>UK legislation that includes transparency-in-supply-chains reporting for organisations meeting the statutory conditions.</description><pubDate>Fri, 31 Jul 2026 00:00:00 GMT</pubDate></item>
</channel></rss>
