@ansvar/eu-regulations-mcp 0.1.0 → 0.2.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +190 -21
- package/README.md +159 -26
- package/data/seed/aifmd.json +432 -0
- package/data/seed/applicability/ai-act.json +87 -0
- package/data/seed/applicability/aifmd.json +74 -0
- package/data/seed/applicability/cbam.json +74 -0
- package/data/seed/applicability/cer.json +74 -0
- package/data/seed/applicability/cra.json +77 -0
- package/data/seed/applicability/csddd.json +74 -0
- package/data/seed/applicability/csrd.json +74 -0
- package/data/seed/applicability/cyber_solidarity.json +74 -0
- package/data/seed/applicability/cybersecurity-act.json +69 -0
- package/data/seed/applicability/data-act.json +71 -0
- package/data/seed/applicability/dga.json +74 -0
- package/data/seed/applicability/dma.json +77 -0
- package/data/seed/applicability/dsa.json +71 -0
- package/data/seed/applicability/eecc.json +74 -0
- package/data/seed/applicability/ehds.json +74 -0
- package/data/seed/applicability/eidas2.json +86 -0
- package/data/seed/applicability/eprivacy.json +74 -0
- package/data/seed/applicability/eu_taxonomy.json +74 -0
- package/data/seed/applicability/eucc.json +74 -0
- package/data/seed/applicability/eudr.json +74 -0
- package/data/seed/applicability/gpsr.json +74 -0
- package/data/seed/applicability/ivdr.json +74 -0
- package/data/seed/applicability/led.json +74 -0
- package/data/seed/applicability/machinery.json +74 -0
- package/data/seed/applicability/mdr.json +74 -0
- package/data/seed/applicability/mica.json +74 -0
- package/data/seed/applicability/mifid2.json +74 -0
- package/data/seed/applicability/mifir.json +74 -0
- package/data/seed/applicability/pld.json +74 -0
- package/data/seed/applicability/psd2.json +74 -0
- package/data/seed/applicability/red.json +74 -0
- package/data/seed/applicability/sfdr.json +74 -0
- package/data/seed/applicability/un-r155.json +68 -0
- package/data/seed/applicability/un-r156.json +68 -0
- package/data/seed/cbam.json +397 -0
- package/data/seed/cer.json +233 -0
- package/data/seed/csddd.json +205 -0
- package/data/seed/csrd.json +50 -0
- package/data/seed/cyber_solidarity.json +252 -0
- package/data/seed/data-act.json +517 -0
- package/data/seed/dga.json +342 -0
- package/data/seed/dma.json +499 -0
- package/data/seed/dsa.json +686 -0
- package/data/seed/eecc.json +981 -0
- package/data/seed/ehds.json +638 -0
- package/data/seed/eidas2.json +590 -0
- package/data/seed/eprivacy.json +115 -0
- package/data/seed/eu_taxonomy.json +285 -0
- package/data/seed/eucc.json +386 -0
- package/data/seed/eudr.json +401 -0
- package/data/seed/gpsr.json +462 -0
- package/data/seed/ivdr.json +1036 -0
- package/data/seed/led.json +480 -0
- package/data/seed/machinery.json +513 -0
- package/data/seed/mappings/iso27001-ai-act.json +114 -0
- package/data/seed/mappings/iso27001-aifmd.json +50 -0
- package/data/seed/mappings/iso27001-cbam.json +26 -0
- package/data/seed/mappings/iso27001-cer.json +74 -0
- package/data/seed/mappings/iso27001-cra.json +130 -0
- package/data/seed/mappings/iso27001-csddd.json +50 -0
- package/data/seed/mappings/iso27001-csrd.json +26 -0
- package/data/seed/mappings/iso27001-cyber_solidarity.json +82 -0
- package/data/seed/mappings/iso27001-cybersecurity-act.json +90 -0
- package/data/seed/mappings/iso27001-data-act.json +66 -0
- package/data/seed/mappings/iso27001-dga.json +50 -0
- package/data/seed/mappings/iso27001-dma.json +50 -0
- package/data/seed/mappings/iso27001-dsa.json +58 -0
- package/data/seed/mappings/iso27001-eecc.json +74 -0
- package/data/seed/mappings/iso27001-ehds.json +90 -0
- package/data/seed/mappings/iso27001-eidas2.json +106 -0
- package/data/seed/mappings/iso27001-eprivacy.json +66 -0
- package/data/seed/mappings/iso27001-eu_taxonomy.json +34 -0
- package/data/seed/mappings/iso27001-eucc.json +66 -0
- package/data/seed/mappings/iso27001-eudr.json +34 -0
- package/data/seed/mappings/iso27001-gpsr.json +42 -0
- package/data/seed/mappings/iso27001-ivdr.json +66 -0
- package/data/seed/mappings/iso27001-led.json +74 -0
- package/data/seed/mappings/iso27001-machinery.json +50 -0
- package/data/seed/mappings/iso27001-mdr.json +82 -0
- package/data/seed/mappings/iso27001-mica.json +66 -0
- package/data/seed/mappings/iso27001-mifid2.json +66 -0
- package/data/seed/mappings/iso27001-mifir.json +42 -0
- package/data/seed/mappings/iso27001-pld.json +26 -0
- package/data/seed/mappings/iso27001-psd2.json +82 -0
- package/data/seed/mappings/iso27001-red.json +42 -0
- package/data/seed/mappings/iso27001-sfdr.json +50 -0
- package/data/seed/mappings/iso27001-un-r155.json +130 -0
- package/data/seed/mappings/iso27001-un-r156.json +106 -0
- package/data/seed/mappings/nist-csf-ai-act.json +138 -0
- package/data/seed/mappings/nist-csf-aifmd.json +58 -0
- package/data/seed/mappings/nist-csf-cbam.json +42 -0
- package/data/seed/mappings/nist-csf-cer.json +90 -0
- package/data/seed/mappings/nist-csf-cra.json +130 -0
- package/data/seed/mappings/nist-csf-csddd.json +50 -0
- package/data/seed/mappings/nist-csf-csrd.json +34 -0
- package/data/seed/mappings/nist-csf-cyber_solidarity.json +90 -0
- package/data/seed/mappings/nist-csf-cybersecurity-act.json +90 -0
- package/data/seed/mappings/nist-csf-data-act.json +50 -0
- package/data/seed/mappings/nist-csf-dga.json +58 -0
- package/data/seed/mappings/nist-csf-dma.json +42 -0
- package/data/seed/mappings/nist-csf-dora.json +210 -0
- package/data/seed/mappings/nist-csf-dsa.json +82 -0
- package/data/seed/mappings/nist-csf-eecc.json +90 -0
- package/data/seed/mappings/nist-csf-ehds.json +98 -0
- package/data/seed/mappings/nist-csf-eidas2.json +114 -0
- package/data/seed/mappings/nist-csf-eprivacy.json +58 -0
- package/data/seed/mappings/nist-csf-eu_taxonomy.json +34 -0
- package/data/seed/mappings/nist-csf-eucc.json +66 -0
- package/data/seed/mappings/nist-csf-eudr.json +58 -0
- package/data/seed/mappings/nist-csf-gdpr.json +178 -0
- package/data/seed/mappings/nist-csf-gpsr.json +58 -0
- package/data/seed/mappings/nist-csf-ivdr.json +66 -0
- package/data/seed/mappings/nist-csf-led.json +74 -0
- package/data/seed/mappings/nist-csf-machinery.json +58 -0
- package/data/seed/mappings/nist-csf-mdr.json +66 -0
- package/data/seed/mappings/nist-csf-mica.json +98 -0
- package/data/seed/mappings/nist-csf-mifid2.json +74 -0
- package/data/seed/mappings/nist-csf-mifir.json +50 -0
- package/data/seed/mappings/nist-csf-nis2.json +194 -0
- package/data/seed/mappings/nist-csf-pld.json +34 -0
- package/data/seed/mappings/nist-csf-psd2.json +98 -0
- package/data/seed/mappings/nist-csf-red.json +58 -0
- package/data/seed/mappings/nist-csf-sfdr.json +42 -0
- package/data/seed/mappings/nist-csf-un-r155.json +130 -0
- package/data/seed/mappings/nist-csf-un-r156.json +98 -0
- package/data/seed/mdr.json +1066 -0
- package/data/seed/mica.json +1003 -0
- package/data/seed/mifid2.json +906 -0
- package/data/seed/mifir.json +512 -0
- package/data/seed/pld.json +244 -0
- package/data/seed/psd2.json +827 -0
- package/data/seed/red.json +452 -0
- package/data/seed/sfdr.json +228 -0
- package/data/seed/un-r155.json +166 -0
- package/data/seed/un-r156.json +150 -0
- package/dist/http-server.d.ts +9 -0
- package/dist/http-server.d.ts.map +1 -0
- package/dist/http-server.js +342 -0
- package/dist/http-server.js.map +1 -0
- package/dist/index.js +4 -4
- package/dist/index.js.map +1 -1
- package/dist/tools/map.d.ts +1 -1
- package/dist/tools/map.d.ts.map +1 -1
- package/dist/tools/map.js +3 -3
- package/dist/tools/map.js.map +1 -1
- package/package.json +8 -3
- package/scripts/build-db.ts +20 -8
- package/scripts/check-updates.ts +141 -39
- package/scripts/ingest-eurlex.ts +9 -1
- package/scripts/ingest-unece.ts +368 -0
- package/src/http-server.ts +380 -0
- package/src/index.ts +4 -4
- package/src/tools/map.ts +4 -4
|
@@ -0,0 +1,74 @@
|
|
|
1
|
+
[
|
|
2
|
+
{
|
|
3
|
+
"regulation": "EUCC",
|
|
4
|
+
"sector": "digital_infrastructure",
|
|
5
|
+
"subsector": null,
|
|
6
|
+
"applies": true,
|
|
7
|
+
"confidence": "definite",
|
|
8
|
+
"basis_article": "1",
|
|
9
|
+
"notes": "EUCC establishes cybersecurity certification for ICT products"
|
|
10
|
+
},
|
|
11
|
+
{
|
|
12
|
+
"regulation": "EUCC",
|
|
13
|
+
"sector": "manufacturing",
|
|
14
|
+
"subsector": "ict_products",
|
|
15
|
+
"applies": true,
|
|
16
|
+
"confidence": "definite",
|
|
17
|
+
"basis_article": "1",
|
|
18
|
+
"notes": "Manufacturers of ICT products can seek EUCC certification"
|
|
19
|
+
},
|
|
20
|
+
{
|
|
21
|
+
"regulation": "EUCC",
|
|
22
|
+
"sector": "public_administration",
|
|
23
|
+
"subsector": null,
|
|
24
|
+
"applies": true,
|
|
25
|
+
"confidence": "likely",
|
|
26
|
+
"basis_article": "1",
|
|
27
|
+
"notes": "Public sector may require EUCC certified products in procurement"
|
|
28
|
+
},
|
|
29
|
+
{
|
|
30
|
+
"regulation": "EUCC",
|
|
31
|
+
"sector": "financial",
|
|
32
|
+
"subsector": null,
|
|
33
|
+
"applies": true,
|
|
34
|
+
"confidence": "likely",
|
|
35
|
+
"basis_article": "1",
|
|
36
|
+
"notes": "Financial sector may require certified ICT products under DORA"
|
|
37
|
+
},
|
|
38
|
+
{
|
|
39
|
+
"regulation": "EUCC",
|
|
40
|
+
"sector": "healthcare",
|
|
41
|
+
"subsector": null,
|
|
42
|
+
"applies": true,
|
|
43
|
+
"confidence": "likely",
|
|
44
|
+
"basis_article": "1",
|
|
45
|
+
"notes": "Healthcare may require certified ICT products for sensitive systems"
|
|
46
|
+
},
|
|
47
|
+
{
|
|
48
|
+
"regulation": "EUCC",
|
|
49
|
+
"sector": "energy",
|
|
50
|
+
"subsector": null,
|
|
51
|
+
"applies": true,
|
|
52
|
+
"confidence": "likely",
|
|
53
|
+
"basis_article": "1",
|
|
54
|
+
"notes": "Critical infrastructure may require certified products under NIS2"
|
|
55
|
+
},
|
|
56
|
+
{
|
|
57
|
+
"regulation": "EUCC",
|
|
58
|
+
"sector": "transport",
|
|
59
|
+
"subsector": null,
|
|
60
|
+
"applies": true,
|
|
61
|
+
"confidence": "likely",
|
|
62
|
+
"basis_article": "1",
|
|
63
|
+
"notes": "Transport sector may require certified ICT products"
|
|
64
|
+
},
|
|
65
|
+
{
|
|
66
|
+
"regulation": "EUCC",
|
|
67
|
+
"sector": "other",
|
|
68
|
+
"subsector": "certification_bodies",
|
|
69
|
+
"applies": true,
|
|
70
|
+
"confidence": "definite",
|
|
71
|
+
"basis_article": "5",
|
|
72
|
+
"notes": "Conformity assessment bodies must be accredited to issue EUCC certificates"
|
|
73
|
+
}
|
|
74
|
+
]
|
|
@@ -0,0 +1,74 @@
|
|
|
1
|
+
[
|
|
2
|
+
{
|
|
3
|
+
"regulation": "EUDR",
|
|
4
|
+
"sector": "manufacturing",
|
|
5
|
+
"subsector": "food",
|
|
6
|
+
"applies": true,
|
|
7
|
+
"confidence": "definite",
|
|
8
|
+
"basis_article": "1",
|
|
9
|
+
"notes": "Food manufacturers using relevant commodities must conduct due diligence"
|
|
10
|
+
},
|
|
11
|
+
{
|
|
12
|
+
"regulation": "EUDR",
|
|
13
|
+
"sector": "manufacturing",
|
|
14
|
+
"subsector": "furniture",
|
|
15
|
+
"applies": true,
|
|
16
|
+
"confidence": "definite",
|
|
17
|
+
"basis_article": "1",
|
|
18
|
+
"notes": "Wood-based product manufacturers must comply"
|
|
19
|
+
},
|
|
20
|
+
{
|
|
21
|
+
"regulation": "EUDR",
|
|
22
|
+
"sector": "manufacturing",
|
|
23
|
+
"subsector": "rubber",
|
|
24
|
+
"applies": true,
|
|
25
|
+
"confidence": "definite",
|
|
26
|
+
"basis_article": "1",
|
|
27
|
+
"notes": "Rubber product manufacturers must conduct due diligence"
|
|
28
|
+
},
|
|
29
|
+
{
|
|
30
|
+
"regulation": "EUDR",
|
|
31
|
+
"sector": "other",
|
|
32
|
+
"subsector": "importers",
|
|
33
|
+
"applies": true,
|
|
34
|
+
"confidence": "definite",
|
|
35
|
+
"basis_article": "1",
|
|
36
|
+
"notes": "Importers of cattle, cocoa, coffee, oil palm, rubber, soya, wood must comply"
|
|
37
|
+
},
|
|
38
|
+
{
|
|
39
|
+
"regulation": "EUDR",
|
|
40
|
+
"sector": "other",
|
|
41
|
+
"subsector": "traders",
|
|
42
|
+
"applies": true,
|
|
43
|
+
"confidence": "definite",
|
|
44
|
+
"basis_article": "1",
|
|
45
|
+
"notes": "Traders of covered commodities have due diligence obligations"
|
|
46
|
+
},
|
|
47
|
+
{
|
|
48
|
+
"regulation": "EUDR",
|
|
49
|
+
"sector": "digital_infrastructure",
|
|
50
|
+
"subsector": "online_marketplaces",
|
|
51
|
+
"applies": true,
|
|
52
|
+
"confidence": "likely",
|
|
53
|
+
"basis_article": "1",
|
|
54
|
+
"notes": "Online marketplaces selling covered products may have obligations"
|
|
55
|
+
},
|
|
56
|
+
{
|
|
57
|
+
"regulation": "EUDR",
|
|
58
|
+
"sector": "financial",
|
|
59
|
+
"subsector": null,
|
|
60
|
+
"applies": false,
|
|
61
|
+
"confidence": "definite",
|
|
62
|
+
"basis_article": "1",
|
|
63
|
+
"notes": "Financial sector not directly in scope"
|
|
64
|
+
},
|
|
65
|
+
{
|
|
66
|
+
"regulation": "EUDR",
|
|
67
|
+
"sector": "healthcare",
|
|
68
|
+
"subsector": null,
|
|
69
|
+
"applies": false,
|
|
70
|
+
"confidence": "definite",
|
|
71
|
+
"basis_article": "1",
|
|
72
|
+
"notes": "Healthcare sector not in scope"
|
|
73
|
+
}
|
|
74
|
+
]
|
|
@@ -0,0 +1,74 @@
|
|
|
1
|
+
[
|
|
2
|
+
{
|
|
3
|
+
"regulation": "GPSR",
|
|
4
|
+
"sector": "manufacturing",
|
|
5
|
+
"subsector": null,
|
|
6
|
+
"applies": true,
|
|
7
|
+
"confidence": "definite",
|
|
8
|
+
"basis_article": "1",
|
|
9
|
+
"notes": "GPSR applies to manufacturers of consumer products placed on EU market"
|
|
10
|
+
},
|
|
11
|
+
{
|
|
12
|
+
"regulation": "GPSR",
|
|
13
|
+
"sector": "manufacturing",
|
|
14
|
+
"subsector": "consumer_goods",
|
|
15
|
+
"applies": true,
|
|
16
|
+
"confidence": "definite",
|
|
17
|
+
"basis_article": "2",
|
|
18
|
+
"notes": "All consumer products must meet general safety requirements"
|
|
19
|
+
},
|
|
20
|
+
{
|
|
21
|
+
"regulation": "GPSR",
|
|
22
|
+
"sector": "digital_infrastructure",
|
|
23
|
+
"subsector": "online_marketplaces",
|
|
24
|
+
"applies": true,
|
|
25
|
+
"confidence": "definite",
|
|
26
|
+
"basis_article": "22",
|
|
27
|
+
"notes": "Online marketplaces have specific obligations under GPSR"
|
|
28
|
+
},
|
|
29
|
+
{
|
|
30
|
+
"regulation": "GPSR",
|
|
31
|
+
"sector": "other",
|
|
32
|
+
"subsector": "importers",
|
|
33
|
+
"applies": true,
|
|
34
|
+
"confidence": "definite",
|
|
35
|
+
"basis_article": "11",
|
|
36
|
+
"notes": "Importers have specific verification and documentation obligations"
|
|
37
|
+
},
|
|
38
|
+
{
|
|
39
|
+
"regulation": "GPSR",
|
|
40
|
+
"sector": "other",
|
|
41
|
+
"subsector": "distributors",
|
|
42
|
+
"applies": true,
|
|
43
|
+
"confidence": "definite",
|
|
44
|
+
"basis_article": "12",
|
|
45
|
+
"notes": "Distributors must verify product compliance before making available"
|
|
46
|
+
},
|
|
47
|
+
{
|
|
48
|
+
"regulation": "GPSR",
|
|
49
|
+
"sector": "financial",
|
|
50
|
+
"subsector": null,
|
|
51
|
+
"applies": false,
|
|
52
|
+
"confidence": "definite",
|
|
53
|
+
"basis_article": "1",
|
|
54
|
+
"notes": "Financial services not in scope"
|
|
55
|
+
},
|
|
56
|
+
{
|
|
57
|
+
"regulation": "GPSR",
|
|
58
|
+
"sector": "healthcare",
|
|
59
|
+
"subsector": null,
|
|
60
|
+
"applies": false,
|
|
61
|
+
"confidence": "definite",
|
|
62
|
+
"basis_article": "2",
|
|
63
|
+
"notes": "Medical devices have separate regulation (MDR)"
|
|
64
|
+
},
|
|
65
|
+
{
|
|
66
|
+
"regulation": "GPSR",
|
|
67
|
+
"sector": "public_administration",
|
|
68
|
+
"subsector": null,
|
|
69
|
+
"applies": true,
|
|
70
|
+
"confidence": "definite",
|
|
71
|
+
"basis_article": "26",
|
|
72
|
+
"notes": "Market surveillance authorities enforce GPSR"
|
|
73
|
+
}
|
|
74
|
+
]
|
|
@@ -0,0 +1,74 @@
|
|
|
1
|
+
[
|
|
2
|
+
{
|
|
3
|
+
"regulation": "IVDR",
|
|
4
|
+
"sector": "healthcare",
|
|
5
|
+
"subsector": null,
|
|
6
|
+
"applies": true,
|
|
7
|
+
"confidence": "definite",
|
|
8
|
+
"basis_article": "1",
|
|
9
|
+
"notes": "IVDR regulates in vitro diagnostic medical devices for human use"
|
|
10
|
+
},
|
|
11
|
+
{
|
|
12
|
+
"regulation": "IVDR",
|
|
13
|
+
"sector": "healthcare",
|
|
14
|
+
"subsector": "laboratories",
|
|
15
|
+
"applies": true,
|
|
16
|
+
"confidence": "definite",
|
|
17
|
+
"basis_article": "1",
|
|
18
|
+
"notes": "Clinical laboratories using IVD devices are within scope"
|
|
19
|
+
},
|
|
20
|
+
{
|
|
21
|
+
"regulation": "IVDR",
|
|
22
|
+
"sector": "manufacturing",
|
|
23
|
+
"subsector": "diagnostics",
|
|
24
|
+
"applies": true,
|
|
25
|
+
"confidence": "definite",
|
|
26
|
+
"basis_article": "2",
|
|
27
|
+
"notes": "Manufacturers of IVD devices must obtain CE marking and comply with IVDR"
|
|
28
|
+
},
|
|
29
|
+
{
|
|
30
|
+
"regulation": "IVDR",
|
|
31
|
+
"sector": "digital_infrastructure",
|
|
32
|
+
"subsector": "software",
|
|
33
|
+
"applies": true,
|
|
34
|
+
"confidence": "likely",
|
|
35
|
+
"basis_article": "2",
|
|
36
|
+
"notes": "Software intended for IVD purposes is covered"
|
|
37
|
+
},
|
|
38
|
+
{
|
|
39
|
+
"regulation": "IVDR",
|
|
40
|
+
"sector": "financial",
|
|
41
|
+
"subsector": null,
|
|
42
|
+
"applies": false,
|
|
43
|
+
"confidence": "definite",
|
|
44
|
+
"basis_article": "1",
|
|
45
|
+
"notes": "Financial sector not in scope"
|
|
46
|
+
},
|
|
47
|
+
{
|
|
48
|
+
"regulation": "IVDR",
|
|
49
|
+
"sector": "energy",
|
|
50
|
+
"subsector": null,
|
|
51
|
+
"applies": false,
|
|
52
|
+
"confidence": "definite",
|
|
53
|
+
"basis_article": "1",
|
|
54
|
+
"notes": "Energy sector not in scope"
|
|
55
|
+
},
|
|
56
|
+
{
|
|
57
|
+
"regulation": "IVDR",
|
|
58
|
+
"sector": "other",
|
|
59
|
+
"subsector": "research",
|
|
60
|
+
"applies": false,
|
|
61
|
+
"confidence": "definite",
|
|
62
|
+
"basis_article": "1",
|
|
63
|
+
"notes": "Research-use only products are explicitly excluded from IVDR scope"
|
|
64
|
+
},
|
|
65
|
+
{
|
|
66
|
+
"regulation": "IVDR",
|
|
67
|
+
"sector": "other",
|
|
68
|
+
"subsector": "importers_distributors",
|
|
69
|
+
"applies": true,
|
|
70
|
+
"confidence": "definite",
|
|
71
|
+
"basis_article": "2",
|
|
72
|
+
"notes": "Importers and distributors of IVD devices have specific obligations"
|
|
73
|
+
}
|
|
74
|
+
]
|
|
@@ -0,0 +1,74 @@
|
|
|
1
|
+
[
|
|
2
|
+
{
|
|
3
|
+
"regulation": "LED",
|
|
4
|
+
"sector": "public_administration",
|
|
5
|
+
"subsector": "law_enforcement",
|
|
6
|
+
"applies": true,
|
|
7
|
+
"confidence": "definite",
|
|
8
|
+
"basis_article": "1",
|
|
9
|
+
"notes": "LED applies to competent authorities processing data for law enforcement purposes"
|
|
10
|
+
},
|
|
11
|
+
{
|
|
12
|
+
"regulation": "LED",
|
|
13
|
+
"sector": "public_administration",
|
|
14
|
+
"subsector": "judiciary",
|
|
15
|
+
"applies": true,
|
|
16
|
+
"confidence": "definite",
|
|
17
|
+
"basis_article": "1",
|
|
18
|
+
"notes": "Courts and judicial authorities processing criminal data are covered"
|
|
19
|
+
},
|
|
20
|
+
{
|
|
21
|
+
"regulation": "LED",
|
|
22
|
+
"sector": "financial",
|
|
23
|
+
"subsector": null,
|
|
24
|
+
"applies": false,
|
|
25
|
+
"confidence": "definite",
|
|
26
|
+
"basis_article": "1",
|
|
27
|
+
"notes": "Private sector covered by GDPR, not LED (except when acting for law enforcement)"
|
|
28
|
+
},
|
|
29
|
+
{
|
|
30
|
+
"regulation": "LED",
|
|
31
|
+
"sector": "healthcare",
|
|
32
|
+
"subsector": null,
|
|
33
|
+
"applies": false,
|
|
34
|
+
"confidence": "definite",
|
|
35
|
+
"basis_article": "1",
|
|
36
|
+
"notes": "Healthcare sector covered by GDPR, not LED"
|
|
37
|
+
},
|
|
38
|
+
{
|
|
39
|
+
"regulation": "LED",
|
|
40
|
+
"sector": "digital_infrastructure",
|
|
41
|
+
"subsector": null,
|
|
42
|
+
"applies": false,
|
|
43
|
+
"confidence": "definite",
|
|
44
|
+
"basis_article": "1",
|
|
45
|
+
"notes": "Private digital services covered by GDPR, not LED"
|
|
46
|
+
},
|
|
47
|
+
{
|
|
48
|
+
"regulation": "LED",
|
|
49
|
+
"sector": "energy",
|
|
50
|
+
"subsector": null,
|
|
51
|
+
"applies": false,
|
|
52
|
+
"confidence": "definite",
|
|
53
|
+
"basis_article": "1",
|
|
54
|
+
"notes": "Energy sector covered by GDPR, not LED"
|
|
55
|
+
},
|
|
56
|
+
{
|
|
57
|
+
"regulation": "LED",
|
|
58
|
+
"sector": "transport",
|
|
59
|
+
"subsector": null,
|
|
60
|
+
"applies": false,
|
|
61
|
+
"confidence": "definite",
|
|
62
|
+
"basis_article": "1",
|
|
63
|
+
"notes": "Transport sector covered by GDPR, not LED"
|
|
64
|
+
},
|
|
65
|
+
{
|
|
66
|
+
"regulation": "LED",
|
|
67
|
+
"sector": "other",
|
|
68
|
+
"subsector": "private_security",
|
|
69
|
+
"applies": false,
|
|
70
|
+
"confidence": "likely",
|
|
71
|
+
"basis_article": "1",
|
|
72
|
+
"notes": "Private security firms typically covered by GDPR unless acting for authorities"
|
|
73
|
+
}
|
|
74
|
+
]
|
|
@@ -0,0 +1,74 @@
|
|
|
1
|
+
[
|
|
2
|
+
{
|
|
3
|
+
"regulation": "MACHINERY",
|
|
4
|
+
"sector": "manufacturing",
|
|
5
|
+
"subsector": "machinery",
|
|
6
|
+
"applies": true,
|
|
7
|
+
"confidence": "definite",
|
|
8
|
+
"basis_article": "1",
|
|
9
|
+
"notes": "Machinery Regulation applies to manufacturers of machinery and related products"
|
|
10
|
+
},
|
|
11
|
+
{
|
|
12
|
+
"regulation": "MACHINERY",
|
|
13
|
+
"sector": "manufacturing",
|
|
14
|
+
"subsector": "industrial_equipment",
|
|
15
|
+
"applies": true,
|
|
16
|
+
"confidence": "definite",
|
|
17
|
+
"basis_article": "2",
|
|
18
|
+
"notes": "Industrial equipment manufacturers must ensure CE marking compliance"
|
|
19
|
+
},
|
|
20
|
+
{
|
|
21
|
+
"regulation": "MACHINERY",
|
|
22
|
+
"sector": "digital_infrastructure",
|
|
23
|
+
"subsector": "software",
|
|
24
|
+
"applies": true,
|
|
25
|
+
"confidence": "likely",
|
|
26
|
+
"basis_article": "2",
|
|
27
|
+
"notes": "Safety software for machinery is in scope; AI systems in machinery covered"
|
|
28
|
+
},
|
|
29
|
+
{
|
|
30
|
+
"regulation": "MACHINERY",
|
|
31
|
+
"sector": "transport",
|
|
32
|
+
"subsector": null,
|
|
33
|
+
"applies": true,
|
|
34
|
+
"confidence": "likely",
|
|
35
|
+
"basis_article": "2",
|
|
36
|
+
"notes": "Transport equipment may be covered unless excluded by sector-specific rules"
|
|
37
|
+
},
|
|
38
|
+
{
|
|
39
|
+
"regulation": "MACHINERY",
|
|
40
|
+
"sector": "energy",
|
|
41
|
+
"subsector": null,
|
|
42
|
+
"applies": true,
|
|
43
|
+
"confidence": "likely",
|
|
44
|
+
"basis_article": "2",
|
|
45
|
+
"notes": "Energy generation equipment (turbines, generators) covered"
|
|
46
|
+
},
|
|
47
|
+
{
|
|
48
|
+
"regulation": "MACHINERY",
|
|
49
|
+
"sector": "other",
|
|
50
|
+
"subsector": "importers",
|
|
51
|
+
"applies": true,
|
|
52
|
+
"confidence": "definite",
|
|
53
|
+
"basis_article": "14",
|
|
54
|
+
"notes": "Importers must verify conformity before placing on market"
|
|
55
|
+
},
|
|
56
|
+
{
|
|
57
|
+
"regulation": "MACHINERY",
|
|
58
|
+
"sector": "financial",
|
|
59
|
+
"subsector": null,
|
|
60
|
+
"applies": false,
|
|
61
|
+
"confidence": "definite",
|
|
62
|
+
"basis_article": "1",
|
|
63
|
+
"notes": "Financial sector not in scope"
|
|
64
|
+
},
|
|
65
|
+
{
|
|
66
|
+
"regulation": "MACHINERY",
|
|
67
|
+
"sector": "healthcare",
|
|
68
|
+
"subsector": null,
|
|
69
|
+
"applies": false,
|
|
70
|
+
"confidence": "definite",
|
|
71
|
+
"basis_article": "2",
|
|
72
|
+
"notes": "Medical devices have separate regulation (MDR)"
|
|
73
|
+
}
|
|
74
|
+
]
|
|
@@ -0,0 +1,74 @@
|
|
|
1
|
+
[
|
|
2
|
+
{
|
|
3
|
+
"regulation": "MDR",
|
|
4
|
+
"sector": "healthcare",
|
|
5
|
+
"subsector": null,
|
|
6
|
+
"applies": true,
|
|
7
|
+
"confidence": "definite",
|
|
8
|
+
"basis_article": "1",
|
|
9
|
+
"notes": "MDR regulates medical devices used in healthcare settings"
|
|
10
|
+
},
|
|
11
|
+
{
|
|
12
|
+
"regulation": "MDR",
|
|
13
|
+
"sector": "healthcare",
|
|
14
|
+
"subsector": "hospitals",
|
|
15
|
+
"applies": true,
|
|
16
|
+
"confidence": "definite",
|
|
17
|
+
"basis_article": "5",
|
|
18
|
+
"notes": "Health institutions using medical devices must ensure compliance"
|
|
19
|
+
},
|
|
20
|
+
{
|
|
21
|
+
"regulation": "MDR",
|
|
22
|
+
"sector": "manufacturing",
|
|
23
|
+
"subsector": "medical_devices",
|
|
24
|
+
"applies": true,
|
|
25
|
+
"confidence": "definite",
|
|
26
|
+
"basis_article": "2",
|
|
27
|
+
"notes": "Manufacturers of medical devices must obtain CE marking"
|
|
28
|
+
},
|
|
29
|
+
{
|
|
30
|
+
"regulation": "MDR",
|
|
31
|
+
"sector": "digital_infrastructure",
|
|
32
|
+
"subsector": "software",
|
|
33
|
+
"applies": true,
|
|
34
|
+
"confidence": "likely",
|
|
35
|
+
"basis_article": "2",
|
|
36
|
+
"notes": "Software as a Medical Device (SaMD) falls under MDR"
|
|
37
|
+
},
|
|
38
|
+
{
|
|
39
|
+
"regulation": "MDR",
|
|
40
|
+
"sector": "financial",
|
|
41
|
+
"subsector": null,
|
|
42
|
+
"applies": false,
|
|
43
|
+
"confidence": "definite",
|
|
44
|
+
"basis_article": "1",
|
|
45
|
+
"notes": "Financial sector not in scope of medical device regulation"
|
|
46
|
+
},
|
|
47
|
+
{
|
|
48
|
+
"regulation": "MDR",
|
|
49
|
+
"sector": "energy",
|
|
50
|
+
"subsector": null,
|
|
51
|
+
"applies": false,
|
|
52
|
+
"confidence": "definite",
|
|
53
|
+
"basis_article": "1",
|
|
54
|
+
"notes": "Energy sector not in scope"
|
|
55
|
+
},
|
|
56
|
+
{
|
|
57
|
+
"regulation": "MDR",
|
|
58
|
+
"sector": "transport",
|
|
59
|
+
"subsector": null,
|
|
60
|
+
"applies": false,
|
|
61
|
+
"confidence": "definite",
|
|
62
|
+
"basis_article": "1",
|
|
63
|
+
"notes": "Transport sector not in scope"
|
|
64
|
+
},
|
|
65
|
+
{
|
|
66
|
+
"regulation": "MDR",
|
|
67
|
+
"sector": "other",
|
|
68
|
+
"subsector": "importers_distributors",
|
|
69
|
+
"applies": true,
|
|
70
|
+
"confidence": "definite",
|
|
71
|
+
"basis_article": "2",
|
|
72
|
+
"notes": "Importers and distributors of medical devices have specific obligations"
|
|
73
|
+
}
|
|
74
|
+
]
|
|
@@ -0,0 +1,74 @@
|
|
|
1
|
+
[
|
|
2
|
+
{
|
|
3
|
+
"regulation": "MICA",
|
|
4
|
+
"sector": "financial",
|
|
5
|
+
"subsector": "crypto_assets",
|
|
6
|
+
"applies": true,
|
|
7
|
+
"confidence": "definite",
|
|
8
|
+
"basis_article": "1",
|
|
9
|
+
"notes": "MiCA regulates crypto-asset service providers and issuers"
|
|
10
|
+
},
|
|
11
|
+
{
|
|
12
|
+
"regulation": "MICA",
|
|
13
|
+
"sector": "financial",
|
|
14
|
+
"subsector": "exchanges",
|
|
15
|
+
"applies": true,
|
|
16
|
+
"confidence": "definite",
|
|
17
|
+
"basis_article": "1",
|
|
18
|
+
"notes": "Crypto exchanges must be authorized as CASPs"
|
|
19
|
+
},
|
|
20
|
+
{
|
|
21
|
+
"regulation": "MICA",
|
|
22
|
+
"sector": "financial",
|
|
23
|
+
"subsector": "banks",
|
|
24
|
+
"applies": true,
|
|
25
|
+
"confidence": "definite",
|
|
26
|
+
"basis_article": "1",
|
|
27
|
+
"notes": "Credit institutions can provide crypto-asset services under MiCA"
|
|
28
|
+
},
|
|
29
|
+
{
|
|
30
|
+
"regulation": "MICA",
|
|
31
|
+
"sector": "digital_infrastructure",
|
|
32
|
+
"subsector": "blockchain",
|
|
33
|
+
"applies": true,
|
|
34
|
+
"confidence": "definite",
|
|
35
|
+
"basis_article": "1",
|
|
36
|
+
"notes": "Blockchain/DLT infrastructure providers offering crypto services are in scope"
|
|
37
|
+
},
|
|
38
|
+
{
|
|
39
|
+
"regulation": "MICA",
|
|
40
|
+
"sector": "healthcare",
|
|
41
|
+
"subsector": null,
|
|
42
|
+
"applies": false,
|
|
43
|
+
"confidence": "definite",
|
|
44
|
+
"basis_article": "1",
|
|
45
|
+
"notes": "Healthcare sector not in scope"
|
|
46
|
+
},
|
|
47
|
+
{
|
|
48
|
+
"regulation": "MICA",
|
|
49
|
+
"sector": "energy",
|
|
50
|
+
"subsector": null,
|
|
51
|
+
"applies": false,
|
|
52
|
+
"confidence": "definite",
|
|
53
|
+
"basis_article": "1",
|
|
54
|
+
"notes": "Energy sector not in scope"
|
|
55
|
+
},
|
|
56
|
+
{
|
|
57
|
+
"regulation": "MICA",
|
|
58
|
+
"sector": "manufacturing",
|
|
59
|
+
"subsector": null,
|
|
60
|
+
"applies": false,
|
|
61
|
+
"confidence": "definite",
|
|
62
|
+
"basis_article": "1",
|
|
63
|
+
"notes": "Manufacturing sector not in scope"
|
|
64
|
+
},
|
|
65
|
+
{
|
|
66
|
+
"regulation": "MICA",
|
|
67
|
+
"sector": "other",
|
|
68
|
+
"subsector": "stablecoin_issuers",
|
|
69
|
+
"applies": true,
|
|
70
|
+
"confidence": "definite",
|
|
71
|
+
"basis_article": "16",
|
|
72
|
+
"notes": "Asset-referenced token and e-money token issuers have specific requirements"
|
|
73
|
+
}
|
|
74
|
+
]
|
|
@@ -0,0 +1,74 @@
|
|
|
1
|
+
[
|
|
2
|
+
{
|
|
3
|
+
"regulation": "MIFID2",
|
|
4
|
+
"sector": "financial",
|
|
5
|
+
"subsector": "investment_firms",
|
|
6
|
+
"applies": true,
|
|
7
|
+
"confidence": "definite",
|
|
8
|
+
"basis_article": "1",
|
|
9
|
+
"notes": "MiFID II regulates investment firms and investment services"
|
|
10
|
+
},
|
|
11
|
+
{
|
|
12
|
+
"regulation": "MIFID2",
|
|
13
|
+
"sector": "financial",
|
|
14
|
+
"subsector": "banks",
|
|
15
|
+
"applies": true,
|
|
16
|
+
"confidence": "definite",
|
|
17
|
+
"basis_article": "1",
|
|
18
|
+
"notes": "Credit institutions providing investment services must comply"
|
|
19
|
+
},
|
|
20
|
+
{
|
|
21
|
+
"regulation": "MIFID2",
|
|
22
|
+
"sector": "financial",
|
|
23
|
+
"subsector": "trading_venues",
|
|
24
|
+
"applies": true,
|
|
25
|
+
"confidence": "definite",
|
|
26
|
+
"basis_article": "1",
|
|
27
|
+
"notes": "Regulated markets, MTFs, and OTFs are covered"
|
|
28
|
+
},
|
|
29
|
+
{
|
|
30
|
+
"regulation": "MIFID2",
|
|
31
|
+
"sector": "digital_infrastructure",
|
|
32
|
+
"subsector": "data_providers",
|
|
33
|
+
"applies": true,
|
|
34
|
+
"confidence": "definite",
|
|
35
|
+
"basis_article": "1",
|
|
36
|
+
"notes": "Data reporting services providers are regulated"
|
|
37
|
+
},
|
|
38
|
+
{
|
|
39
|
+
"regulation": "MIFID2",
|
|
40
|
+
"sector": "healthcare",
|
|
41
|
+
"subsector": null,
|
|
42
|
+
"applies": false,
|
|
43
|
+
"confidence": "definite",
|
|
44
|
+
"basis_article": "1",
|
|
45
|
+
"notes": "Healthcare sector not in scope"
|
|
46
|
+
},
|
|
47
|
+
{
|
|
48
|
+
"regulation": "MIFID2",
|
|
49
|
+
"sector": "energy",
|
|
50
|
+
"subsector": "commodity_trading",
|
|
51
|
+
"applies": true,
|
|
52
|
+
"confidence": "likely",
|
|
53
|
+
"basis_article": "1",
|
|
54
|
+
"notes": "Energy firms trading commodity derivatives may be in scope"
|
|
55
|
+
},
|
|
56
|
+
{
|
|
57
|
+
"regulation": "MIFID2",
|
|
58
|
+
"sector": "manufacturing",
|
|
59
|
+
"subsector": null,
|
|
60
|
+
"applies": false,
|
|
61
|
+
"confidence": "definite",
|
|
62
|
+
"basis_article": "1",
|
|
63
|
+
"notes": "Manufacturing sector not in scope unless trading financial instruments"
|
|
64
|
+
},
|
|
65
|
+
{
|
|
66
|
+
"regulation": "MIFID2",
|
|
67
|
+
"sector": "other",
|
|
68
|
+
"subsector": null,
|
|
69
|
+
"applies": false,
|
|
70
|
+
"confidence": "definite",
|
|
71
|
+
"basis_article": "2",
|
|
72
|
+
"notes": "Various exemptions exist for certain entities and activities"
|
|
73
|
+
}
|
|
74
|
+
]
|