Active public standards
Each page explains what the standard is, why it matters, and how Quick Policy helps teams draft and govern policies against it.
Browsing all 404 standards. Search by name, code or plain-English purpose.
UK National Minimum + Living Wage (Hospitality)
The UK National Minimum Wage Act 1998 + National Living Wage (from 2016, age 21+ from April 2024) set statutory minimum hourly rates. Hospitality is HMRC's most-named non-compliant sector. Common pitfalls: unpaid trial shifts, uniform deductions taking pay below minimum, training time + travel time not paid. Annual uprating each April; enforcement via HMRC + employment tribunals.
Jurisdiction: UK
Lifecycle: Active
UK Ofcom Broadcasting Code
The Ofcom Broadcasting Code sets the rules + standards for television + radio broadcasting in the UK under the Communications Act 2003 + Broadcasting Act 1996. Covers 10 sections including protection of under-eighteens, harm + offence, crime + disorder, religion, fairness + privacy, commercial references + sponsorship + due impartiality. Mandatory for licensed broadcasters. Enforced via investigations, sanctions + licence revocation. Companion: BBC Editorial Guidelines + Ofcom Rules on Commercial Communications.
Jurisdiction: UK
Lifecycle: Active
UK Ofcom General Conditions of Entitlement
The General Conditions of Entitlement are the rules every Communications Provider (CP) in the UK must comply with under the Communications Act 2003. Cover network functioning, numbering, must-carry, emergency services, consumer protection (including switching, contract information, customer care, complaints, vulnerable consumers, fraud + scams), end-user interests + access conditions. Periodic Statements of Compliance required.
Jurisdiction: UK
Lifecycle: Active
UK HSE Offshore Safety Regulations
UK Offshore Installations (Offshore Safety Directive) Regulations 2015 (OSDR) implement the EU Offshore Safety Directive + require duty-holders to demonstrate management of major hazards via Safety Cases accepted by the Offshore Major Accident Regulator (OSDR = HSE + BEIS). Companion regimes: Offshore Installations (Prevention of Fire + Explosion + Emergency Response) Regs 1995 (PFEER), Pipeline Safety Regs 1996, OPRC (Oil Pollution Preparedness, Response + Cooperation). Operators of higher-risk facilities must obtain Safety Case + Consent to Operate.
Jurisdiction: UK
Lifecycle: Active
UK Ofgem Licence Framework
The Office of Gas and Electricity Markets (Ofgem) is the GB energy regulator. Licences (supply, generation, distribution, transmission) impose conditions covering market conduct, consumer protection, financial resilience, network operation + sustainability. Licence Modifications + Statutory Consultations evolve standards continuously. Significant Code Reviews + RIIO price controls (electricity + gas distribution + transmission) drive utility operating models. Enforcement via Provisional Orders, financial penalties + licence revocation.
Jurisdiction: UK
Lifecycle: Active
UK Office for Students Regulatory Framework
The Office for Students (OfS) is the regulator of higher education in England. The Regulatory Framework sets the conditions for registration — covering access + participation, quality + standards, student protection, financial viability + sustainability, management + governance + accountability for public funding. Conditions C1-C4 (consumer protection), B1-B11 (quality + standards including the 2024 strengthened conditions), E1-E6 (management + governance) drive most registered-provider compliance work. Sanctions include monetary penalties, specific ongoing conditions, suspension + de-registration.
Jurisdiction: UK
Lifecycle: Active
UK Ofsted Education Inspection Framework (EIF)
The Ofsted Education Inspection Framework (EIF) is the structure under which Ofsted inspects schools, FE + skills, early years + initial teacher training in England. Judges four key areas: Quality of Education, Behaviour + Attitudes, Personal Development + Leadership + Management — plus an overall effectiveness judgement (Outstanding / Good / Requires Improvement / Inadequate). Safeguarding is graded separately as Met / Not Met + Not Met means an overall Inadequate. Statutory under the Education Act 2005.
Jurisdiction: UK
Lifecycle: Active
UK Office for Nuclear Regulation (ONR) Site Licence + SAPs
The Office for Nuclear Regulation regulates the safety + security + safeguards at UK nuclear installations. Nuclear Site Licence (NSL) issued under Nuclear Installations Act 1965 with 36 licence conditions. Safety Assessment Principles (SAPs) + Technical Assessment Guides (TAGs) provide the technical basis for safety judgements. Security regulated through NISR 2003 + Security Assessment Principles (SyAPs). Site Licence holders must produce + maintain pre-construction safety reports, periodic safety reviews + emergency plans. World-leading regulator engagement model.
Jurisdiction: UK
Lifecycle: Active
UK Office of Rail and Road (ORR) Regulations
The Office of Rail and Road (ORR) is the independent safety + economic regulator for Britain's railways. Health + safety regulator for rail under Health and Safety at Work etc Act 1974 + Railways and Other Guided Transport Systems (Safety) Regulations 2006 (ROGS). Approves Safety Management Systems for infrastructure managers + railway undertakings. Economic regulator for Network Rail + monitor of HS1 + Channel Tunnel. Enforcement via Improvement / Prohibition Notices + prosecution.
Jurisdiction: UK
Lifecycle: Active
UK Online Safety Act 2023
The Online Safety Act 2023 imposes duties on providers of "user-to-user" services + search services with links to the UK to protect users (especially children) from illegal + harmful content. Categorised services (Category 1 + 2A + 2B) face additional duties. Risk assessments, safety duties, transparency reporting + Ofcom enforcement via fines up to £18m or 10% global turnover. Senior manager personal liability for systematic failures. Phased Ofcom Codes of Practice.
Jurisdiction: UK
Lifecycle: Active
UK Building Regs Part P — Electrical Safety in Dwellings
Approved Document P is the practical guidance under the Building Regulations 2010 covering electrical installation work in dwellings (England). Most electrical work in dwellings must comply with BS 7671 (Wiring Regulations). Notifiable work must be self-certified by a Competent Person Scheme member (NICEIC, NAPIT, ELECSA, STROMA) or formally inspected. Non-notifiable work still requires BS 7671 compliance.
Jurisdiction: UK
Lifecycle: Active
UK Party Wall etc. Act 1996
The Party Wall etc. Act 1996 provides a framework for preventing + resolving disputes in relation to party walls, party fence walls + excavations near neighbouring buildings in England + Wales. Building Owners proposing work falling within the Act must serve notice on Adjoining Owners + obtain consent or appoint surveyors to settle an Award. Failure to follow the Act is a frequent source of construction disputes + litigation.
Jurisdiction: UK
Lifecycle: Active
UK PAS 5305 — Online Safety for Schools
PAS 5305:2023 is the British Standards Institution publicly-available specification on online safety for educational institutions. Provides a framework for governance, risk assessment, filtering + monitoring, education + training + incident response covering online safety. Complements KCSIE + DfE Filtering + Monitoring Standards by offering a more structured + auditable approach. Adopted by schools, MATs, FE + HE seeking demonstrable best practice + by EdTech serving the sector.
Jurisdiction: UK
Lifecycle: Active
UK Pricing Practices Guide (CMA)
The UK CMA Pricing Practices Guide explains how the Consumer Protection from Unfair Trading Regulations 2008 (CPRs) apply to pricing practices, including reference pricing, headline pricing, drip pricing + bundle pricing. Specifies that "was/now" pricing must reflect a genuine prior price. Enforced by CMA + Trading Standards. Companion: ASA CAP Code + Pricing in Context Guidance.
Jurisdiction: UK
Lifecycle: Active
UK Press Self-Regulation (IPSO + IMPRESS)
UK newspaper + magazine + online news content is regulated through voluntary self-regulatory bodies — primarily the Independent Press Standards Organisation (IPSO, the larger body with most national newspapers) + IMPRESS (state-recognised under Royal Charter). Both administer their own Editors' Code of Practice covering accuracy, privacy, harassment, opportunity to reply + reporting of crime. Companion: BBC Editorial Guidelines + Defamation Act 2013 + Editors' Code (IPSO).
Jurisdiction: UK
Lifecycle: Active
UK Prevent Duty (CTSA 2015 §26)
Section 26 of the Counter-Terrorism and Security Act 2015 places a duty on specified authorities — including schools, FE colleges + universities — to have due regard to the need to prevent people from being drawn into terrorism. Operationalised through staff training, IT filtering, risk assessment + referral to Channel where concerns arise. Inspected by Ofsted (schools + FE) + OfS (HE). The 2023 guidance update strengthens the focus on online radicalisation + extremism.
Jurisdiction: UK
Lifecycle: Active
UK PUWER 1998 — Provision and Use of Work Equipment Regulations
The Provision and Use of Work Equipment Regulations 1998 (PUWER) place duties on Employers + the self-employed regarding equipment used at work. Equipment must be: suitable for use, safe for use, maintained in a safe condition + inspected to ensure it remains so. Used by those who have received adequate information + training. Used with appropriate safety measures (e.g. guards, emergency stops, controls, warnings). Frequent overlap with LOLER + WAH; commonly cited HSE enforcement subject in construction.
Jurisdiction: UK
Lifecycle: Active
UK Red Tractor Farm Assurance
UK farm assurance scheme covering food safety, animal welfare, environmental protection + responsible sourcing. Recognised by major UK retailers + food service. Sector standards: Beef + Lamb, Dairy, Pigs, Poultry, Combinable Crops + Sugar Beet, Fresh Produce.
Jurisdiction: UK
Lifecycle: Active
UK Real Estate Investment Trust (REIT) Regime
UK tax regime for Real Estate Investment Trusts established under Corporation Tax Act 2010 Part 12. Provides tax-efficient vehicle for property investment subject to qualifying conditions on income, distribution + listing.
Jurisdiction: UK
Lifecycle: Active
UK RIDDOR 2013 — Reporting of Injuries, Diseases and Dangerous Occurrences
The Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013 (RIDDOR) require Responsible Persons to report specified workplace incidents to HSE (or local authority). Reportable categories: deaths, specified injuries, over-7-day incapacitation, occupational diseases, dangerous occurrences + gas incidents. Reporting via online portal within prescribed timeframes (typically 10 or 15 days from incident, or shorter for deaths + specified injuries). Records must be kept for 3 years. Underpins HSE intervention + statistics; failure to report is itself an offence.
Jurisdiction: UK
Lifecycle: Active
UK Relationships, Sex + Health Education (RSHE) Statutory
Relationships, Sex and Health Education (RSHE) is statutory in all schools in England since September 2020. Relationships Education in primary; Relationships + Sex Education in secondary; Health Education at both. Schools must publish a written RSHE policy, consult with parents + reflect community values within statutory guidance. 2024 RSHE review tightened age-appropriateness + safeguarding linkages.
Jurisdiction: UK
Lifecycle: Active
UK SRA Accounts Rules
The SRA Accounts Rules govern the handling of client money + assets by SRA-regulated firms in England + Wales. Mandatory annual Accountant's Report by Reporting Accountant. Strict separation of client + office money + immediate banking + 5-week withdrawal limits + immediate notification of any breach to the COFA. Among the most heavily enforced areas of SRA regulation.
Jurisdiction: UK
Lifecycle: Active
UK Streamlined Energy + Carbon Reporting (SECR)
The UK Streamlined Energy and Carbon Reporting Regulations 2018 (in force April 2019) require large UK companies + LLPs to disclose energy use, GHG emissions + energy efficiency action in their annual reports. In scope: quoted companies + large unquoted companies + large LLPs (turnover >£36m + balance sheet >£18m + >250 employees). Companion: TCFD reporting for premium-listed companies + Sustainability Disclosure Standards being developed.
Jurisdiction: UK
Lifecycle: Active
UK SEND Code of Practice 0-25
The Special Educational Needs and Disability (SEND) Code of Practice 0-25 is the statutory guidance on the legal duties of LAs, schools, FE + early years providers + NHS bodies in respect of children + young people with SEND, under the Children + Families Act 2014. Covers identification, assessment + the EHC plan process, Local Offer, mediation + appeals. SENCO required in mainstream schools. Inspected by Ofsted + CQC joint inspection.
Jurisdiction: UK
Lifecycle: Active
UK Charity Commission Serious Incident Reporting
Charity Commission guidance requires trustees of registered charities in England + Wales to report serious incidents to the Commission promptly. Reportable matters include significant financial loss, criminal investigation involving the charity, large data breaches, safeguarding incidents, terrorism / extremism links + media-attracting incidents. Failure to report itself a serious matter; reporting demonstrates trustees discharging duty under CC3.
Jurisdiction: UK
Lifecycle: Active
UK Supply of Machinery (Safety) Regulations 2008
The Supply of Machinery (Safety) Regulations 2008 are the UK domestic implementation of the Machinery Directive 2006/42/EC, retained post-Brexit. Set essential health + safety requirements for machinery placed on the GB market. UKCA marking required for GB market (CE recognised until further notice); Technical File + Declaration of Conformity. Notified body involvement for Annex IV high-risk machinery. UK Office for Product Safety and Standards (OPSS) enforces.
Jurisdiction: UK
Lifecycle: Active
UK Charities SORP — Statement of Recommended Practice
The Charities SORP provides the recommended practice for the preparation of accounts + the Trustees' Annual Report for charities in the UK + Republic of Ireland. Issued by SORP-making body (Charity Commission, OSCR, CCNI + Charity Regulatory Authority of Ireland). Based on FRS 102 with charity-specific adaptations. Following SORP is required by Charities Regulations + provides a true + fair view evidence base.
Jurisdiction: UK
Lifecycle: Active
UK SRA Standards and Regulations
The Solicitors Regulation Authority Standards + Regulations comprise the SRA Principles (7 high-level professional standards), the Code of Conduct for Solicitors + Code of Conduct for Firms, the SRA Accounts Rules, Authorisation Rules, the Application of Standards + Regulations to In-House Solicitors + the Overseas + Cross-Border Practice Rules. Regulator of solicitors + law firms in England + Wales. Independent enforcement + sanctions including fines + suspension + strike-off.
Jurisdiction: UK
Lifecycle: Active
UK SRA Firm-wide AML Risk Assessment + Policies
The SRA requires regulated firms carrying out relevant activity under MLR 2017 to have a firm-wide AML Risk Assessment, written policies, controls + procedures + a nominated officer (Money Laundering Reporting Officer — MLRO). Annual review + practice-level evidence required. SRA Thematic Review activity has highlighted significant weaknesses in many firms' practical implementation; enforcement increasingly material.
Jurisdiction: UK
Lifecycle: Active
UK SRA Continuing Competence
The SRA Continuing Competence regime (since 2016) replaced prescriptive CPD hours with an outcomes-based requirement on individuals to reflect on their practice, identify learning + development needs, take appropriate action + record this annually. Firms must support staff competence. Compliance is verified at practising-certificate renewal.
Jurisdiction: UK
Lifecycle: Active
UK SRA Professional Indemnity Insurance
SRA-regulated firms must maintain Professional Indemnity Insurance (PII) at not less than the Minimum Terms + Conditions specified by the SRA (currently £2m / £3m for LLPs + companies). Annual renewal in October. Extended Policy Period + Run-off cover on firm closure. The PII market is a frequent source of practice stress + a significant practice cost.
Jurisdiction: UK
Lifecycle: Active
UK Teachers' Standards
The Teachers' Standards set the minimum level of practice for trainees + teachers in maintained schools + non-maintained special schools in England. Apply to qualified teachers regardless of career stage. Two parts: Teaching (8 standards covering planning, subject knowledge, behaviour, assessment + more) + Personal + Professional Conduct (uphold public trust). Used for appraisal, induction (ECT), QTS award + capability proceedings.
Jurisdiction: UK
Lifecycle: Active
UK Tenant Fees Act 2019
UK Act banning most letting fees charged to tenants in England, capping security deposits + restricting holding deposits. Enforced by trading standards + the First-tier Tribunal. Failure to comply can result in fines + repayment orders.
Jurisdiction: UK
Lifecycle: Active
UK Employment (Allocation of Tips) Act 2023
The Employment (Allocation of Tips) Act 2023 (UK) requires employers to pass on 100% of tips, gratuities + service charges to workers without deduction (other than for tax) + to allocate them fairly. Statutory Code of Practice provides guidance. Tronc systems remain permitted. Records retained 3 years; workers can request access.
Jurisdiction: UK
Lifecycle: Active
UK Property Ombudsman + Redress Scheme Codes
UK ADR redress schemes for estate + letting agents — The Property Ombudsman (TPO) + Property Redress Scheme (PRS). Membership mandatory under the Enterprise + Regulatory Reform Act 2013. Codes cover sales, lettings + commercial agency.
Jurisdiction: UK
Lifecycle: Active
UK Telecommunications (Security) Act 2021
The UK Telecommunications (Security) Act 2021 + Telecommunications Security Code of Practice 2022 + Electronic Communications (Security Measures) Regulations 2022 impose extensive security duties on UK telecoms providers. Cover supply chain (with high-risk vendor designations such as Huawei restrictions), network access controls, sensitive functions, security testing + business continuity. Tier 1 (largest) + Tier 2 + Tier 3 providers face graduated obligations. Enforced by Ofcom + DSIT with fines up to 10% turnover.
Jurisdiction: UK
Lifecycle: Active
UK Video-Sharing Platform Rules + EU AVMSD VSP
UK + EU video-sharing platform (VSP) rules (originally implemented under AVMSD 2018 + now subsumed into UK Online Safety Act + EU DSA) require VSPs to take appropriate measures to protect users from harmful content, restricted content for minors, hate speech + incitement to violence + terrorism content. Measures include reporting + flagging mechanisms, age verification + age-rating systems, parental controls + accessible terms + conditions. Notified to Ofcom (UK) or national regulator (EU).
Jurisdiction: UK
Lifecycle: Active
UK Working at Height Regulations 2005
The Work at Height Regulations 2005 (WAHR) place duties on employers + self-employed regarding work at height in Great Britain. Hierarchy: avoid work at height; use existing safe places (e.g. permanent edge protection); use collective protection (e.g. guard rails, scaffolding); use personal protection (e.g. harness systems) only as last resort. Planning, organisation, competence + risk assessment required. Equipment for work at height must be inspected. Underpins LOLER + scaffolding inspection regime. Falls remain the largest single source of construction fatalities + the most-cited HSE enforcement subject.
Jurisdiction: UK
Lifecycle: Active
UK Water Industry Act 1991 + Ofwat
The Water Industry Act 1991 governs water + wastewater services in England + Wales. Ofwat (Water Services Regulation Authority) is the economic regulator + sets price controls (PR Periodic Reviews — currently PR24 for 2025-2030). Drinking Water Inspectorate (DWI) regulates water quality. Environment Agency regulates abstraction + discharge. Companies hold licences + appointments; statutory duties on water companies for supply, quality + sewerage. Customer Service Standards + leakage targets.
Jurisdiction: UK
Lifecycle: Active
UK Working Together to Safeguard Children
Working Together to Safeguard Children is the UK statutory guidance setting out how organisations + agencies must work together to safeguard children + promote their welfare under the Children Acts 1989 + 2004. Applies to schools, local authorities, NHS, police + everyone working with children + families. Defines the multi-agency safeguarding partnership arrangements (police + LA + ICB), child protection enquiries (s17, s47), child protection plans + reviews.
Jurisdiction: UK
Lifecycle: Active
UNECE R155/R156 Profile
UNECE Regulations R155 and R156 set the cybersecurity (R155) and software-update (R156) management-system obligations for vehicle type approval in 64 contracting parties — including the EU, UK, Japan, and Korea. Without a valid CSMS and SUMS certificate from an approval authority, an OEM cannot sell new vehicle types in those markets. Recent enforcement has focused on aftersales software updates, secure update mechanisms, and demonstrable governance of cybersecurity decisions throughout the vehicle lifecycle — not just at type-approval submission.
Jurisdiction: GLOBAL
Lifecycle: Active
URAC Accreditation Programs
URAC (Utilisation Review Accreditation Commission) accredits health-care organisations across 30+ programs covering utilisation management, case management, pharmacy benefit management, telehealth, health website, specialty pharmacy + others. Standards cover governance, quality management, network composition, consumer protection, regulatory compliance + program-specific content. URAC accreditation is often a state-level requirement for UM + PBM operations + a market differentiator for specialty pharmacy + telehealth.
Jurisdiction: US
Lifecycle: Active
US 340B Drug Pricing Program
The 340B Drug Pricing Program requires drug manufacturers participating in Medicaid to provide discounted outpatient drugs to eligible health care organisations (covered entities) — DSH hospitals, Children's hospitals, FQHCs, Ryan White clinics + others. HRSA administers the program with audit authority. Compliance requires patient definition, GPO prohibition, duplicate discount prohibition, registration + recertification, contract pharmacy management + data integrity. Manufacturer recoveries on findings are material; HRSA + manufacturer audit findings increasingly involve contract-pharmacy + Medicaid duplicates.
Jurisdiction: US
Lifecycle: Active
US IRS §501(c)(3) Tax-Exempt Status
IRS §501(c)(3) provides federal tax-exempt status for organisations operated exclusively for religious, charitable, scientific, testing for public safety, literary or educational purposes, fostering amateur sports + preventing cruelty to children or animals. No private inurement; political campaign prohibition; limited lobbying. Form 1023 / 1023-EZ application + Form 990 annual reporting. Loss of exemption is catastrophic; intermediate sanctions for excess benefit transactions under §4958.
Jurisdiction: US
Lifecycle: Active
US ABA Model Rules of Professional Conduct
The American Bar Association Model Rules of Professional Conduct are the model ethics rules adopted (with state-specific variations) by all 50 US state bars. Cover the lawyer-client relationship (competence, scope, fees, confidentiality, conflicts), advocate duties (candour + fairness), transactions with non-clients, law firms + associations (supervisory + subordinate lawyer duties), public service + the integrity of the profession. State bar discipline includes private reprimand, public censure, suspension + disbarment.
Jurisdiction: US
Lifecycle: Active
US ABA Voluntary Good Practices Guidance + Treasury Risk Assessment
US law firms are not directly subject to FinCEN BSA regulations like banks, but face increasing AML expectations through the ABA Voluntary Good Practices Guidance for Lawyers + the 2024 Treasury National Money Laundering Risk Assessment which highlighted lawyer-facilitated money laundering. FinCEN has proposed rules + Geographic Targeting Orders for certain real estate transactions involve lawyers. State bar rules (e.g. NY 1.15) impose trust account integrity. Increasing enforcement risk via FATF mutual-evaluation pressure.
Jurisdiction: US
Lifecycle: Active
US Attorney-Client Privilege + Work Product Doctrine
US attorney-client privilege + work-product doctrine protect lawyer-client communications + materials prepared in anticipation of litigation. Federal Rule of Evidence 502 governs inadvertent disclosure + waiver. State law also applies + may differ in scope. Loss of privilege through waiver, crime-fraud exception, subject-matter waiver or compelled disclosure is significant litigation exposure.
Jurisdiction: US
Lifecycle: Active
US ADA Title III — Public Accommodations
US Americans with Disabilities Act Title III prohibits discrimination on the basis of disability in places of public accommodation, including commercial real estate, hotels, retail, restaurants + leasing offices. Requires reasonable accommodations + accessible design.
Jurisdiction: US
Lifecycle: Active
US ADA Title III — Public Accommodations
Title III of the Americans with Disabilities Act prohibits discrimination on the basis of disability in places of public accommodation — including restaurants, bars, hotels + entertainment venues. 2010 ADA Standards for Accessible Design set physical accessibility standards. Reasonable modifications + auxiliary aids + service animals all covered. Private right of action + DOJ enforcement.
Jurisdiction: US
Lifecycle: Active
US Anti-Kickback Statute + Stark Law
The US Anti-Kickback Statute (AKS, 42 USC §1320a-7b) is a criminal statute prohibiting the knowing + wilful offer, payment, solicitation or receipt of remuneration to induce or reward referrals for items or services payable by a federal health care program. The Stark Law (42 USC §1395nn) is a civil strict-liability statute prohibiting physician referrals to entities with which the physician has a financial relationship, with limited exceptions. Together they shape virtually every commercial healthcare arrangement — joint ventures, employment, leases, medical-director agreements, marketing programmes. Enforced by DOJ + HHS-OIG + CMS. Routine source of False Claims Act liability + civil money penalties + exclusion from federal programs.
Jurisdiction: US
Lifecycle: Active
US TTB + State Alcohol Licensing
US alcohol regulation combines federal oversight by the Alcohol and Tobacco Tax and Trade Bureau (TTB — labelling, formulation, advertising, federal excise) with state-by-state Alcoholic Beverage Control (ABC) licensing of retail + on-premises sales. Tied house laws prevent producer-retailer ownership in many states. Drinking age 21 nationally (NMDAA 1984). ID acceptance + age verification at point of sale.
Jurisdiction: US
Lifecycle: Active
US EPA Clean Air Act
The Clean Air Act (42 USC §7401+) is the federal law regulating air emissions from stationary + mobile sources. Title V operating permits required for major sources; NESHAP (40 CFR §63) sets hazardous air pollutant standards; PSD + NSR for new + modified sources. State Implementation Plans implement NAAQS. EPA + state enforcement.
Jurisdiction: US
Lifecycle: Active
US CALEA + Law Enforcement Access
The Communications Assistance for Law Enforcement Act (CALEA) requires telecommunications carriers + manufacturers to ensure their equipment + facilities + services have built-in surveillance capabilities to allow lawful interception by law enforcement. FCC + DOJ + FBI implementation. Applies to traditional telecoms + interconnected VoIP + broadband Internet access providers (since 2007 FCC interpretation). Implementation costs + privacy considerations significant.
Jurisdiction: US
Lifecycle: Active
US CCPA + CPRA — California Consumer Privacy
The California Consumer Privacy Act (CCPA) + California Privacy Rights Act (CPRA) provide California residents with rights regarding the collection + use of their personal information. CPRA established the California Privacy Protection Agency (CPPA) + extends to "sensitive personal information" + adds rights to correct + limit use. Companion state laws: Virginia VCDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA + 20+ others. Heavy retail + e-commerce exposure.
Jurisdiction: US
Lifecycle: Active
US CIPA — Children's Internet Protection Act
CIPA (47 USC §254(h)) requires K-12 schools + libraries receiving E-Rate discounts (USAC E-Rate program) to implement technology protection measures (filters) to block visual depictions of obscenity, child pornography + material harmful to minors. Internet Safety Policy required including monitoring, education on appropriate online behaviour, cyberbullying awareness + social network safety. Annual certification of compliance to USAC. Audited by USAC + FCC. Penalty: loss of E-Rate funding.
Jurisdiction: US
Lifecycle: Active
US CISA Critical Infrastructure Cybersecurity
The Cybersecurity and Infrastructure Security Agency (CISA) coordinates critical-infrastructure protection across the 16 designated sectors in the US — including Energy, Water + Wastewater. Issues binding operational directives (BODs) + emergency directives (EDs) for federal civilian executive branch + Cybersecurity Performance Goals (CPGs) for critical-infrastructure sectors. Voluntary participation in CISA programs (KEV catalog, Vulnerability Disclosure Policy, Information Sharing).
Jurisdiction: US
Lifecycle: Active
US State Bar CLE (Continuing Legal Education)
Most US state bars require lawyers to complete a minimum number of Continuing Legal Education hours per reporting cycle (typically 12-15 per year or 24-45 per 3-year cycle). Categories often include ethics, technology, diversity / elimination of bias + substance abuse. CLE providers must be state-approved or accredited via MCLE.
Jurisdiction: US
Lifecycle: Active
US Clery Act + Campus Security Reporting
The Jeanne Clery Disclosure of Campus Security Policy + Campus Crime Statistics Act (20 USC §1092(f)) requires colleges + universities that participate in federal financial aid programs to disclose campus crime statistics + security policies. Includes the Annual Security Report (ASR), daily crime log, timely warnings + emergency notifications. VAWA 2013 amendments added dating violence, domestic violence + stalking. Audited by Department of Education; civil penalties + Title IV funding implications for non-compliance.
Jurisdiction: US
Lifecycle: Active
US COPPA — Children's Online Privacy Protection Act
COPPA (15 USC §§6501-6506) + the FTC COPPA Rule (16 CFR Part 312) protect the online privacy of children under 13 in the US. Apply to operators of commercial websites + online services + EdTech directed to children under 13 or with actual knowledge they collect from such children. Require posted privacy notices, verifiable parental consent before collecting / using / disclosing personal information, parental access + deletion rights, data minimisation + security. 2025 amendments tightened consent + data-retention rules. Enforced by FTC + state AGs; civil penalties up to $51,744 per violation.
Jurisdiction: US
Lifecycle: Active
US CPSC + Consumer Product Safety Act
The Consumer Product Safety Commission (CPSC) regulates consumer products under the Consumer Product Safety Act (15 USC §§2051-2089) + CPSIA 2008 + specific product statutes (FHSA, FFA, PPPA). Mandatory + voluntary safety standards (ASTM, ANSI), GCC / CPC certification + Section 15(b) substantial product hazard reporting (within 24 hours). Enforced via recalls, civil penalties + criminal prosecution. saferproducts.gov public-facing database.
Jurisdiction: US
Lifecycle: Active