The Chief Compliance Officer answers, before the board, for the organisation's response to these regimes. The key EU instruments the Chief Compliance Officer must answer for, and their national transposition.
| Area | EU instrument | National transposition |
|---|---|---|
| Data Protection | GDPR — Regulation (EU) 2016/679 | National laws (PT 58/2019, ES LOPDGDD, DE BDSG) |
| Cybersecurity | NIS2 — Directive (EU) 2022/2555 | National transposition (PT Decree-Law 125/2025) |
| Whistleblowing | Directive (EU) 2019/1937 | National transposition (PT 93/2021, ES 2/2023) |
| Artificial Intelligence | AI Act — Regulation (EU) 2024/1689 | Directly applicable |
| Digital Operational Resilience | DORA — Regulation (EU) 2022/2554 | Directly applicable (financial) |
| Anti-Money Laundering | AML package; Regulation (EU) 2024/1624 | AMLA and national supervisors |
| Sustainability | CSRD — Directive (EU) 2022/2464 | National transposition |
| Pay Transparency | Directive (EU) 2023/970 | Transposition by June 2026 |