Regulatory mapping · The obligations register · Element

The jurisdictions

Where each obligation applies, and why the organisation falls within it.

The part

What it is

Jurisdiction follows where staff are, where data sits, where customers are and where the organisation is established — four separate tests.

Remote working and cloud hosting both create jurisdictional exposure that nobody decided to take on.

The smallest level

The attributes it carries

Each attribute is one of the framework’s shared types. What a date is, and how it is written, is defined once for the whole model — the note here says what it means in this particular place.