Most requested laws and regulator requirements
Global & regional laws
International and regional laws with cross-border reach, EU, UK, US and Asia-Pacific data protection, cyber, AI and financial regulation.
- GDPR EU General Data Protection Regulation Law or regulation The EU’s data protection law, which applies to anyone offering goods or services to, or monitoring, people in the EU.
- DORA EU Digital Operational Resilience Act Law or regulation EU regulation on ICT risk and operational resilience for financial entities and their critical ICT providers, applying since January 2025.
- NIS2 EU Network and Information Security Directive Law or regulation The EU’s cybersecurity directive for essential and important entities across 18 sectors.
- EU AI Act EU Artificial Intelligence Act Law or regulation The EU’s risk-based AI law, with obligations phasing in from 2025 and high-risk rules now expected from late 2027.
- HIPAA US Health Insurance Portability and Accountability Act Law or regulation US rules protecting health information, applying to covered entities and their business associates.
- UK GDPR UK GDPR and Data Protection Act 2018 Law or regulation The UK’s data protection regime, closely based on the EU GDPR.
- CCPA / CPRA California Consumer Privacy Act as amended by the CPRA Law or regulation California’s consumer privacy law, the most influential US state privacy law.
- Singapore PDPA Singapore Personal Data Protection Act 2012 Law or regulation Singapore’s data protection law, including mandatory breach notification.
- EU Cyber Resilience Act EU Cyber Resilience Act (Regulation (EU) 2024/2847) Law or regulation Cybersecurity requirements for products with digital elements sold in the EU.
- SOX US Sarbanes-Oxley Act (Sections 302 and 404) Law or regulation Internal control over financial reporting requirements for companies listed in the US.
- EU AML Package EU Anti-Money Laundering Regulation, 6th AML Directive and AMLA Law or regulation The EU’s single AML rulebook and new supervisory authority, phasing in through 2027.
Other regions
Find out where you stand in one call
Tell us which standard or customer requirement you are facing. In a free 30-minute call we will outline the gaps, a realistic timeline and what it will take to be audit-ready.