02 — Capability · BC-140.10
Regulatory Obligations
Maintain the complete list of what the enterprise must comply with, in every jurisdiction it operates in, and update it before the regulator does.
- Obligation Register
- Regulatory Inventory
- Regulatory Change
In scope
- Regulatory obligation inventory by jurisdiction and business
- Regulatory change monitoring and impact assessment
- Privacy and trade obligations alongside sector-specific rules
Out of scope
- Tax law interpretation and filings (see BC-240)
- Industry-specific product regulation (see BC-550)
Decomposes into · 4
- BC-140.10.10Obligation InventoryCatalog each applicable law, regulation and standard, the business it touches and the policy and control that satisfy it.
- BC-140.10.20Regulatory Change MonitoringTrack proposed and enacted changes, assess their impact and assign the work to meet them before they take effect.
- BC-140.10.30Privacy & Data Protection ObligationsInterpret privacy law into the rights, notices, consents and retention rules the enterprise must honor for personal data.
- BC-140.10.40Trade & Sanctions ObligationsDefine the export control, sanctions and anti-corruption requirements that govern who the enterprise may do business with and how.