From AI governance to product safety, payments, telecoms and vehicle regulation. Each domain lists currently covered EU and UK instruments, with related instruments shown separately where they affect adjacent areas of compliance.
AI Governance5 primary instruments, 1 related instrument
Primary instruments:
UK AI Opportunities Action Plan [UK] General Purpose AI Code of Practice [EU] AISI/MEF [UK] UK AI WP [UK] EU AI Act [EU/EEA]
Related instruments:
MHRA Software and AI as Medical Device Guidance [UK]
Accessibility and Equality3 primary instruments, 3 related instruments
Primary instruments:
EAA 2019/882 [EU/EEA] EqA 2010 [GB] WAD 2016/2102 [EU/EEA]
Related instruments:
DSA [EU/EEA] PLD 2024 [EU/EEA] EU AI Act [EU/EEA]
Chemicals and Substances Regulation6 primary instruments, 2 related instruments
Primary instruments:
CLP [EU/EEA] UK CLP [GB] UK REACH [GB] REACH [EU/EEA] EU BPR [EU/EEA] RoHS [EU/EEA]
Related instruments:
PPWR [EU/EEA] Batteries Reg [EU/EEA]
Cloud Computing and Digital Infrastructure3 primary instruments, 1 related instrument
Primary instruments:
NCSC Cloud Security Guidance [UK] Free Flow of Non-Personal Data Regulation (EU) 2018/1807 [EU] NCSC Cloud Security Principles [UK]
Related instruments:
Data Act [EU/EEA]
Consumer Protection, Ecommerce and Redress13 primary instruments, 3 related instruments
Primary instruments:
SOGD [EU/EEA] CCReg [UK] The Consumer Protection from Unfair Trading Regulations 2008 [UK] UCPD [EU/EEA] Sale of Goods Directive (EU) 2019/771 [EU] CRD [EU/EEA] Consumer Rights Act 2015 [UK] Directive (EU) 2019/2161 (Better enforcement and modernisation) [EU/EEA] Unfair Contract Terms Directive 93/13/EEC [EU] Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013 [UK] CCA 1974 [UK] DCD [EU/EEA] PLD 2024 [EU/EEA]
Related instruments:
P2B Reg [EU/EEA] DMCCA [UK] Cross-Border Healthcare Directive 2011/24/EU [EU]
Cybersecurity and Operational Resilience23 primary instruments, 2 related instruments
Primary instruments:
EBA Guidelines on ICT and Security Risk Management (EBA/GL/2019/04 as amended by EBA/GL/2025/02) [EU] Critical Entities Resilience Directive (EU) 2022/2557 [EU] Data Security and Protection Toolkit (NHS) [UK] Electronic Communications (Security Measures) Regulations 2022 [UK] Cyber Solidarity Act [EU/EEA] Cybersecurity Act [EU/EEA] RED CDA [EU/EEA] EU Health Cybersecurity Action Plan [EU] NIS2 [EU/EEA] PRA Supervisory Statement SS2/21 (Outsourcing and Third Party Risk) [UK] Product Security and Telecommunications Infrastructure Regulations 2023 [UK] EU Toolbox on 5G Cybersecurity [EU] Cyber Security and Resilience (Network and Information Systems) Act 2026 [UK] NCSC CAF [UK] NIS Regs 2018 [UK] UK OpRes [UK] PSTI Act [GB] TSA 2021 [UK] DORA [EU/EEA] CRA [EU/EEA] Telecommunications Security Code of Practice [UK] Critical Third Party Regime / DORA (UK and EU) [EU/UK] EBA Outsourcing Guidelines [EU]
Related instruments:
NCSC Cloud Security Principles [UK] NCSC Cloud Security Guidance [UK]
Data Protection, Privacy and Surveillance11 primary instruments, 7 related instruments
Primary instruments:
PECR [UK] IPA 2016 [UK] UK GDPR/DPA [UK] CJEU Case C-311/18 (Schrems II) [EU/UK] ePrivacy Dir [EU/EEA] LED [EU/EEA] e-Evidence Regulation (EU) 2023/1543 [EU] ICO International Transfers Guidance [UK] NHS Information Governance and Data Protection [UK] GDPR [EU/EEA] GDPR Procedural Regulation (EU) 2025/2518 [EU]
Related instruments:
Age Appropriate Design Code (Children's Code) [UK] OSA 2023 [UK] eIDAS 2 [EU/EEA] EHDS EU 2025 327 [EU/EEA] Data (Use and Access) Act 2025 [GB] EUDIW [EU/EEA] EU AI Act [EU/EEA]
Data Sharing and Open Data5 primary instruments, 2 related instruments
Primary instruments:
DEA 2017 [UK] DGA [EU/EEA] Open Data Dir [EU/EEA] Data (Use and Access) Act 2025 [GB] Data Act [EU/EEA]
Related instruments:
Free Flow of Non-Personal Data Regulation (EU) 2018/1807 [EU] EHDS EU 2025 327 [EU/EEA]
Digital Identity and Trust Services6 primary instruments, 1 related instrument
Primary instruments:
EUDIW [EU/EEA] UK eIDAS [EU/EEA | UK] ECA 2000 [EU/EEA | UK] eIDAS 2 [EU/EEA] UK EITSR [UK] eIDAS [EU/EEA]
Related instruments:
Data (Use and Access) Act 2025 [GB]
Digital Markets and Competition4 primary instruments, 2 related instruments
Primary instruments:
CA 1998 [UK] DMA [EU/EEA] P2B Reg [EU/EEA] DMCCA [UK]
Related instruments:
Data Act [EU/EEA] DSA [EU/EEA]
Ecodesign and Energy Efficiency6 primary instruments, 2 related instruments
Primary instruments:
ESOS [UK] EPS Reg [EU/EEA] UK ECOERP [GB] EED [EU/EEA] UK EIR [GB] ESPR [EU/EEA]
Related instruments:
CRA [EU/EEA] PSTI Act [GB]
Financial Markets, Conduct and Financial Crime7 primary instruments, 6 related instruments
Primary instruments:
AML Authority Regulation (EU) 2024/1620 [EU] CSRD [EU/EEA] Financial Services and Markets Act 2000 [UK] Markets in Financial Instruments Directive II (2014/65/EU) [EU] Markets in Crypto-Assets Regulation (EU) 2023/1114 [EU] Money Laundering Regulations 2017 [UK] FCA Handbook [UK]
Related instruments:
DORA [EU/EEA] PRA Supervisory Statement SS2/21 (Outsourcing and Third Party Risk) [UK] EBA Guidelines on ICT and Security Risk Management (EBA/GL/2019/04 as amended by EBA/GL/2025/02) [EU] Critical Third Party Regime / DORA (UK and EU) [EU/UK] UK OpRes [UK] EBA Outsourcing Guidelines [EU]
Health Data, Medical Devices and Life Sciences12 primary instruments, 3 related instruments
Primary instruments:
Cross-Border Healthcare Directive 2011/24/EU [EU] Medical Devices Regulation (EU) 2017/745 [EU] MHRA Software and AI as Medical Device Guidance [UK] Medical Devices Regulations 2002 [UK] MDCG 2023-4 Guidance (Medical Device Coordination Group) [EU] Serious Cross-Border Threats to Health Regulation (EU) 2022/2371 [EU] NHS Messaging Standards [UK] NHS DCB0129 / DCB0160 Clinical Risk Management Standards [UK] In Vitro Diagnostic Medical Devices Regulation (EU) 2017/746 [EU] EHDS EU 2025 327 [EU/EEA] European Medicines Agency Regulation (EU) 2022/123 [EU] Digital Technology Assessment Criteria (NHS) [UK]
Related instruments:
Data (Use and Access) Act 2025 [GB] GDPR [EU/EEA] EU AI Act [EU/EEA]
Media, Copyright and Audiovisual Services4 primary instruments
Primary instruments:
Audiovisual Media Services Directive (consolidated) [EU] EMFA [EU/EEA] DSA [EU/EEA] Copyright Dir [EU/EEA]
Online Safety and Child Protection3 primary instruments, 2 related instruments
Primary instruments:
TERREG [EU/EEA] OSA 2023 [UK] Age Appropriate Design Code (Children's Code) [UK]
Related instruments:
Audiovisual Media Services Directive (consolidated) [EU] DSA [EU/EEA]
Payments Regulation3 primary instruments, 2 related instruments
Primary instruments:
Electronic Money Regulations 2011 [UK] PSR 2017 [UK] PSD2 [EU/EEA]
Related instruments:
Markets in Crypto-Assets Regulation (EU) 2023/1114 [EU] DORA [EU/EEA]
Product Safety, Conformity and Standards11 primary instruments, 6 related instruments
Primary instruments:
Product Regulation and Metrology Act 2025 [UK] Supply of Machinery (Safety) Regulations 2008 [UK] General Product Safety Regulation (EU) 2023/988 [EU] Market Surveillance Regulation (EU) 2019/1020 [EU] Machinery Regulation (EU) 2023/1230 [EU] Toy Safety Regulation [EU] Consumer Protection Act 1987 [UK] EU Blue Guide on EU Product Rules 2022 [EU/UK] ESR EU 1025 2012 [EU] OPSS Product Recalls and Alerts Guidance [UK] Product Safety Notification Guidance [UK]
Related instruments:
Medical Devices Regulation (EU) 2017/745 [EU] CRA [EU/EEA] PSTI Act [GB] Product Security and Telecommunications Infrastructure Regulations 2023 [UK] In Vitro Diagnostic Medical Devices Regulation (EU) 2017/746 [EU] EU AI Act [EU/EEA]
Telecoms and Network Regulation5 primary instruments, 5 related instruments
Primary instruments:
European Electronic Communications Code Directive (EU) 2018/1972 [EU] Ofcom General Conditions of Entitlement [UK] Open Internet Regulation (EU) 2015/2120 [EU] Communications Act 2003 [UK] Roaming Regulation (EU) 2022/612 [EU]
Related instruments:
Electronic Communications (Security Measures) Regulations 2022 [UK] Telecommunications Security Code of Practice [UK] TSA 2021 [UK] EU Toolbox on 5G Cybersecurity [EU] RED CDA [EU/EEA]
Vehicles, Mobility and Charging Infrastructure12 primary instruments, 3 related instruments
Primary instruments:
Automated and Electric Vehicles Act 2018 [UK] Alternative Fuels Infrastructure Regulation (EU) 2023/1804 [EU] Automated Vehicles Code of Practice [UK] Motor Vehicle Type Approval Regulation (EU) 2018/858 [EU] Automated Vehicles Act 2024 [UK] CJEU Case C-693/18 (Defeat Devices, Diesel) [EU/UK] General Safety Regulation (EU) 2019/2144 [EU] CAV Code of Practice for Trialling (UK) [UK] Public Charge Point Regulations 2023 [UK] ADS Regulation (EU) 2022/1426 [EU] Road Vehicles (Approval) Regulations 2020 [UK] Vehicle Safety Defect Reporting Code of Practice [UK]
Related instruments:
Data Act [EU/EEA] CRA [EU/EEA] EU AI Act [EU/EEA]
Waste and Producer Responsibility12 primary instruments, 1 related instrument
Primary instruments:
WEEE Dir [EU/EEA] SUPD EU 2019 904 [EU/EEA] PPWR [EU/EEA] WFD [EU/EEA] UK WBAR [EU/EEA | UK] UK PROPW [UK] Environmental Protection Act 1990 [UK] EU RoHS [UK] Batteries Reg [EU/EEA] End-of-Life Vehicles Directive 2000/53/EC [EU] UK Waste Regs [England and Wales] UK WEEE [UK]
Related instruments:
CRA [EU/EEA]