Back to Frameworks
EU SFDR (Sustainable Finance Disclosure Regulation)
European Union
vRegulation (EU) 2019/2088, Delegated Regulation (EU) 2022/1288 as amended by Delegated Regulation (EU) 2023/363 (effective 1 January 2024)
19 domains
47 controls
Regulation (EU) 2019/2088 on sustainability‑related disclosures in the financial services sector. It requires financial market participants and financial advisers to disclose how sustainability risks are integrated into investment decisions, how principal adverse impacts are considered, and to provide detailed information on taxonomy alignment, ESG product characteristics, and periodic reporting. The accompanying Regulatory Technical Standards (Delegated Regulation (EU) 2022/1288, amended by Delegated Regulation (EU) 2023/363) specify the templates and disclosure formats.
Unverified
Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (19)
Assurance
1 controls
| Code | Title |
|---|---|
| SFDR-INTERNAL-AUDIT | Internal Audit of SFDR Reporting |
Benchmarks
2 controls
| Code | Title |
|---|---|
| SFDR-BENCHMARK | Reference Benchmark Designation |
| SFDR-EU-PAB-CTB | EU PAB and CTB Benchmark Use for Article 9 |
Change Management
1 controls
| Code | Title |
|---|---|
| SFDR-PRODUCT-CHANGE | Product Classification Changes Notification |
DNSH
1 controls
| Code | Title |
|---|---|
| SFDR-DNSH | Do No Significant Harm Assessment |
Data Management
1 controls
| Code | Title |
|---|---|
| SFDR-DATA-LINEAGE | ESG Data Lineage and Quality Controls |
Entity Disclosures
3 controls
| Code | Title |
|---|---|
| SFDR-A3 | Sustainability Risk Policy on Website |
| SFDR-A4-PAI | Principal Adverse Impacts Statement |
| SFDR-A5-REM | Remuneration Policy Sustainability Alignment |
Entity-Level Disclosures
3 controls
Articles 3-5: Disclosure obligations at the level of financial market participants
| Code | Title |
|---|---|
| SFDR-ART3 | Sustainability Risk Policies |
| SFDR-ART4 | Principal Adverse Impacts Statement |
| SFDR-ART5 | Remuneration Policies |
Investee Governance
1 controls
| Code | Title |
|---|---|
| SFDR-GOVERNANCE | Good Governance Practices Check |
Marketing
1 controls
| Code | Title |
|---|---|
| SFDR-A13-MARKETING | Marketing Communications Consistency |
PAI Indicators
3 controls
| Code | Title |
|---|---|
| SFDR-PAI-ADDITIONAL | Additional PAI Indicators Selection |
| SFDR-PAI-CLIMATE | Mandatory Climate PAI Indicators |
| SFDR-PAI-SOCIAL | Mandatory Social PAI Indicators |
PAI Indicators - Climate and Environment
9 controls
Table 1 of Annex I: Mandatory climate and environment-related PAI indicators for investee companies
| Code | Title |
|---|---|
| SFDR-PAI-1 | GHG Emissions (Scope 1, 2, 3 and Total) |
| SFDR-PAI-2 | Carbon Footprint |
| SFDR-PAI-3 | GHG Intensity of Investee Companies |
| SFDR-PAI-4 | Exposure to Fossil Fuel Companies |
| SFDR-PAI-5 | Non-Renewable Energy Share |
| SFDR-PAI-6 | Energy Consumption Intensity |
| SFDR-PAI-7 | Biodiversity-Sensitive Areas |
| SFDR-PAI-8 | Emissions to Water |
| SFDR-PAI-9 | Hazardous Waste and Radioactive Waste |
PAI Indicators - Social and Governance
5 controls
Table 1 of Annex I: Mandatory social and governance PAI indicators
| Code | Title |
|---|---|
| SFDR-PAI-10 | UNGC and OECD Guidelines Violations |
| SFDR-PAI-11 | UNGC/OECD Compliance Monitoring Processes |
| SFDR-PAI-12 | Unadjusted Gender Pay Gap |
| SFDR-PAI-13 | Board Gender Diversity |
| SFDR-PAI-14 | Controversial Weapons Exposure |
PAI Indicators - Sovereigns and Real Estate
4 controls
Table 1 of Annex I: Mandatory PAI indicators for investments in sovereigns/supranationals and real estate assets
| Code | Title |
|---|---|
| SFDR-PAI-15 | GHG Intensity of Sovereigns |
| SFDR-PAI-16 | Investee Countries Social Violations |
| SFDR-PAI-17 | Real Estate Fossil Fuels Exposure |
| SFDR-PAI-18 | Real Estate Energy Inefficiency |
Periodic Reporting
1 controls
| Code | Title |
|---|---|
| SFDR-A11-PERIODIC | Periodic Reports for Article 8 and 9 Products |
Product Classification
3 controls
| Code | Title |
|---|---|
| SFDR-A6-PROD | Article 6 Product Pre-Contractual Disclosures |
| SFDR-A8-PROMOTE | Article 8 Light Green Product Disclosures |
| SFDR-A9-OBJECTIVE | Article 9 Dark Green Sustainable Investment Objective |
Product Disclosures
1 controls
| Code | Title |
|---|---|
| SFDR-A10-WEB | Website Product Disclosures |
Product-Level Disclosures
5 controls
Articles 6-11: Product classification and disclosure requirements
| Code | Title |
|---|---|
| SFDR-ART10 | Website Disclosures for Art 8/9 Products |
| SFDR-ART11 | Periodic Reports for Art 8/9 Products |
| SFDR-ART6 | Article 6 Products - Sustainability Risk Integration |
| SFDR-ART8 | Article 8 Products - Environmental/Social Characteristics |
| SFDR-ART9 | Article 9 Products - Sustainable Investment Objective |
Stewardship
1 controls
| Code | Title |
|---|---|
| SFDR-ENGAGEMENT | Engagement and Stewardship Evidence |
Taxonomy Integration
1 controls
| Code | Title |
|---|---|
| SFDR-TAXONOMY-ALIGN | Taxonomy Alignment Disclosure for Products |
Your Compliance Coverage
If you comply with EU SFDR (Sustainable Finance Disclosure Regulation), you already cover:
NIST AI Risk Management Framework (AI RMF 1.0)
17%
8 controls mapped
Compare →NIST AI 600-1: Generative AI Profile
17%
8 controls mapped
Compare →EU Taxonomy Regulation (Regulation 2020/852)
17%
8 controls mapped
Compare →+ 211 more: SASB Standards (ISSB Integrated) (15%), SASB Standards (15%)
See all 214 mapped frameworks ↓Maps to 214 other frameworks
47 total controls
NIST AI Risk Management Framework (AI RMF 1.0)
8 source controls mapped|5 target controls covered
17%
NIST AI 600-1: Generative AI Profile
8 source controls mapped|6 target controls covered
17%
EU Taxonomy Regulation (Regulation 2020/852)
8 source controls mapped|7 target controls covered
17%
SASB Standards (ISSB Integrated)
7 source controls mapped|5 target controls covered
15%
SASB Standards
7 source controls mapped|4 target controls covered
15%
EU Taxonomy Regulation
7 source controls mapped|6 target controls covered
15%
BREEAM - Building Research Establishment Environmental Assessment Method
6 source controls mapped|6 target controls covered
13%
OECD Guidelines for Multinational Enterprises on Responsible Business Conduct (2023 Update)
6 source controls mapped|3 target controls covered
13%
CDP (formerly Carbon Disclosure Project)
6 source controls mapped|6 target controls covered
13%
ISO 26000:2010
6 source controls mapped|3 target controls covered
13%
CDP Climate Change Questionnaire (Corporate Disclosure)
6 source controls mapped|5 target controls covered
13%
ICMM Mining Principles (2024 Update)
6 source controls mapped|2 target controls covered
13%
ISO 14001
5 source controls mapped|5 target controls covered
11%
CSRD
5 source controls mapped|5 target controls covered
11%
ISSB Standards
5 source controls mapped|5 target controls covered
11%
GRI Standards
5 source controls mapped|5 target controls covered
11%
TCFD Recommendations
5 source controls mapped|5 target controls covered
11%
LEED v4.1 - Green Building Rating System (US Green Building Council)
4 source controls mapped|3 target controls covered
9%
OECD AI Principles
4 source controls mapped|2 target controls covered
9%
GHG Protocol
4 source controls mapped|4 target controls covered
9%
IEC 60601-1 - Medical Electrical Equipment Safety
4 source controls mapped|2 target controls covered
9%
ISO 20400:2017 - Sustainable Procurement
3 source controls mapped|3 target controls covered
6%
ISO 37000:2021 - Governance of Organizations
3 source controls mapped|2 target controls covered
6%
Critical Raw Materials Act (Proposed Regulation COM(2023) 192)
3 source controls mapped|1 target controls covered
6%
OECD Recommendation on Artificial Intelligence (2024 Update)
3 source controls mapped|2 target controls covered
6%
ISO/IEC 38500:2024 - Governance of IT
3 source controls mapped|1 target controls covered
6%
GLOBALG.A.P. Integrated Farm Assurance (IFA) Standard v6
3 source controls mapped|1 target controls covered
6%
TNFD Recommendations
3 source controls mapped|1 target controls covered
6%
UNESCO Recommendation on the Ethics of AI
3 source controls mapped|3 target controls covered
6%
ITU Radio Regulations and Space Security Standards
3 source controls mapped|1 target controls covered
6%
Science Based Targets initiative (SBTi) Corporate Standard
3 source controls mapped|3 target controls covered
6%
ISO 14064 - Greenhouse Gas Accounting and Verification (Parts 1-3)
3 source controls mapped|3 target controls covered
6%
Science Based Targets Initiative (SBTi) - Net-Zero Standard
3 source controls mapped|3 target controls covered
6%
Law 1581 of 2012 - Statutory Framework for the Protection of Personal Data
2 source controls mapped|2 target controls covered
4%
FATF 40 Recommendations
2 source controls mapped|4 target controls covered
4%
EU AI Act
2 source controls mapped|4 target controls covered
4%
EU Machinery Regulation (Regulation (EU) 2023/1230)
2 source controls mapped|2 target controls covered
4%
UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities
1 source controls mapped|3 target controls covered
2%
Security of Critical Infrastructure Act 2018 (SOCI)
1 source controls mapped|1 target controls covered
2%
ISO 56002
1 source controls mapped|3 target controls covered
2%
ISO 41001:2018 - Facility Management Systems
1 source controls mapped|3 target controls covered
2%
ISO 39001:2012 - Road Traffic Safety Management
1 source controls mapped|3 target controls covered
2%
ISO 37002:2021 - Whistleblowing Management Systems
1 source controls mapped|3 target controls covered
2%
ISO 50001:2018 - Energy Management Systems
1 source controls mapped|3 target controls covered
2%
ISO 22313:2020 - Guidance on Business Continuity Management Systems
1 source controls mapped|3 target controls covered
2%
IEC 62351 - Power Systems Communication Security
1 source controls mapped|1 target controls covered
2%
NABERS - National Australian Built Environment Rating System
1 source controls mapped|3 target controls covered
2%
Iceland DPA
1 source controls mapped|1 target controls covered
2%
Kentucky Consumer Data Protection Act
1 source controls mapped|1 target controls covered
2%
MTCS - Multi-Tier Cloud Security (Singapore)
1 source controls mapped|1 target controls covered
2%
Montana Consumer Data Privacy Act
1 source controls mapped|1 target controls covered
2%
NIST Special Publication 800-34 Revision 1, Contingency Planning Guide for Federal Information Systems
1 source controls mapped|1 target controls covered
2%
Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1
1 source controls mapped|1 target controls covered
2%
Turkey KVKK
1 source controls mapped|1 target controls covered
2%
Qatar DPL
1 source controls mapped|1 target controls covered
2%
COPPA
1 source controls mapped|1 target controls covered
2%
EU Medical Devices Regulation (MDR 2017/745)
1 source controls mapped|3 target controls covered
2%
Chile DPL
1 source controls mapped|1 target controls covered
2%
Rwanda DPL
1 source controls mapped|1 target controls covered
2%
Mexico LFPDPPP
1 source controls mapped|1 target controls covered
2%
NIST SP 800-144
1 source controls mapped|1 target controls covered
2%
ISMAP (Japan)
1 source controls mapped|1 target controls covered
2%
NIST SP 800-145
1 source controls mapped|1 target controls covered
2%
NIST SP 800-146
1 source controls mapped|1 target controls covered
2%
Regulation on the European Health Data Space (EHDS)
1 source controls mapped|1 target controls covered
2%
China PIPL
1 source controls mapped|1 target controls covered
2%
Indonesia PDP Law
1 source controls mapped|1 target controls covered
2%
PDPA Singapore
1 source controls mapped|1 target controls covered
2%
Malaysia PDPA 2010
1 source controls mapped|1 target controls covered
2%
NIST SP 800-190
1 source controls mapped|1 target controls covered
2%
Minnesota Consumer Data Privacy Act
1 source controls mapped|1 target controls covered
2%
Mauritius DPA
1 source controls mapped|1 target controls covered
2%
Philippines DPA
1 source controls mapped|1 target controls covered
2%
ISO 22000
1 source controls mapped|1 target controls covered
2%
PDPA Thailand
1 source controls mapped|1 target controls covered
2%
TEFCA - Trusted Exchange Framework and Common Agreement
1 source controls mapped|1 target controls covered
2%
Philippines Data Privacy Act (RA 10173)
1 source controls mapped|1 target controls covered
2%
PIPEDA
1 source controls mapped|1 target controls covered
2%
Oregon Consumer Privacy Act
1 source controls mapped|1 target controls covered
2%
US Gramm-Leach-Bliley Act (GLBA) - Higher Education Safeguards Rule
1 source controls mapped|1 target controls covered
2%
GLI-33 - Gaming Laboratories International Event Wagering Systems
1 source controls mapped|1 target controls covered
2%
POPIA
1 source controls mapped|1 target controls covered
2%
NIST Privacy Framework 1.0
1 source controls mapped|1 target controls covered
2%
New Jersey Data Privacy Act
1 source controls mapped|1 target controls covered
2%
Nebraska Data Privacy Act
1 source controls mapped|1 target controls covered
2%
ISO 27018
1 source controls mapped|1 target controls covered
2%
Switzerland FADP
1 source controls mapped|1 target controls covered
2%
EDM Council CDMC - Cloud Data Management Capability Framework
1 source controls mapped|1 target controls covered
2%
Ley Orgánica de Protección de Datos Personales (LOPDP)
1 source controls mapped|1 target controls covered
2%
AWS Well-Architected Security Pillar
1 source controls mapped|1 target controls covered
2%
Liechtenstein DPA
1 source controls mapped|1 target controls covered
2%
FERPA
1 source controls mapped|1 target controls covered
2%
Indiana Consumer Data Protection Act
1 source controls mapped|1 target controls covered
2%
CTDPA (Connecticut Data Privacy Act)
1 source controls mapped|1 target controls covered
2%
Colorado Privacy Act
1 source controls mapped|1 target controls covered
2%
Iowa Consumer Data Protection Act
1 source controls mapped|1 target controls covered
2%
Law No. 172-13 on the Protection of Personal Data
1 source controls mapped|1 target controls covered
2%
ESRB Privacy Certified
1 source controls mapped|1 target controls covered
2%
FedRAMP High
1 source controls mapped|1 target controls covered
2%
NIST SP 800-53 Revision 5.1 HIGH
1 source controls mapped|1 target controls covered
2%
IRS Publication 1075
1 source controls mapped|1 target controls covered
2%
FedRAMP Moderate
1 source controls mapped|1 target controls covered
2%
NIST SP 800-53 Rev 5 MODERATE
1 source controls mapped|1 target controls covered
2%
NIST SP 800-53 Rev 5 LOW
1 source controls mapped|1 target controls covered
2%
Jamaica DPA
1 source controls mapped|1 target controls covered
2%
Azure Security Benchmark
1 source controls mapped|1 target controls covered
2%
Bahrain PDPL
1 source controls mapped|1 target controls covered
2%
Personal Data Act (personopplysningsloven)
1 source controls mapped|1 target controls covered
2%
Saudi Arabia PDPL
1 source controls mapped|1 target controls covered
2%
New Zealand Information Security Manual (NZISM)
1 source controls mapped|1 target controls covered
2%
ISO 45001
1 source controls mapped|1 target controls covered
2%
MTCS (Singapore)
1 source controls mapped|1 target controls covered
2%
New Hampshire Data Privacy Act
1 source controls mapped|1 target controls covered
2%
South Korea PIPA
1 source controls mapped|1 target controls covered
2%
Privacy Act 2020
1 source controls mapped|1 target controls covered
2%
Delaware Online Privacy and Protection Act (proposed)
1 source controls mapped|1 target controls covered
2%
Maryland Online Data Privacy Act of 2024
1 source controls mapped|1 target controls covered
2%
Kenya DPA
1 source controls mapped|1 target controls covered
2%
Kenya Data Protection Act
1 source controls mapped|1 target controls covered
2%
ISO 27017
1 source controls mapped|1 target controls covered
2%
Global Cross-Border Privacy Rules (Global CBPR) Forum
1 source controls mapped|1 target controls covered
2%
Japan AI Guidelines
1 source controls mapped|1 target controls covered
2%
EDM Council DCAM - Data Management Capability Assessment Model
1 source controls mapped|1 target controls covered
2%
NRF Cybersecurity and Data Privacy Framework (National Retail Federation)
1 source controls mapped|1 target controls covered
2%
Oman National Cybersecurity Framework
1 source controls mapped|1 target controls covered
2%
OWASP DevSecOps Maturity Model (DSOMM)
1 source controls mapped|1 target controls covered
2%
Nigeria Data Protection Regulation (NDPR)
1 source controls mapped|1 target controls covered
2%
LGPD
1 source controls mapped|1 target controls covered
2%
Vietnam PDPD
1 source controls mapped|1 target controls covered
2%
India DPDP Act
1 source controls mapped|1 target controls covered
2%
Privacy Act 1988 (Australia)
1 source controls mapped|1 target controls covered
2%
NIST SP 800-122
1 source controls mapped|1 target controls covered
2%
IEEE 7000
1 source controls mapped|1 target controls covered
2%
Peru DPL
1 source controls mapped|1 target controls covered
2%
UK AI Regulation Framework
1 source controls mapped|1 target controls covered
2%
UK Data Protection Act 2018
1 source controls mapped|1 target controls covered
2%
Utah Consumer Privacy Act
1 source controls mapped|1 target controls covered
2%
Singapore AI Governance Framework
1 source controls mapped|1 target controls covered
2%
Tennessee IPA
1 source controls mapped|1 target controls covered
2%
UAE PDPL
1 source controls mapped|1 target controls covered
2%
Taiwan PDPA
1 source controls mapped|1 target controls covered
2%
Virginia CDPA
1 source controls mapped|1 target controls covered
2%
Uruguay DPL
1 source controls mapped|1 target controls covered
2%
Texas Data Privacy Act
1 source controls mapped|1 target controls covered
2%
Pakistan Personal Data Protection Bill 2023
1 source controls mapped|1 target controls covered
2%
EAR - Export Administration Regulations
1 source controls mapped|1 target controls covered
2%
Japan Act on Specified Commercial Transactions (ASCT) - Digital Services
1 source controls mapped|1 target controls covered
2%
Spain Organic Law 3/2018 on Data Protection and Digital Rights (LOPDGDD)
1 source controls mapped|1 target controls covered
2%
Greece Law 4624/2019 - Hellenic Data Protection Authority (HDPA) Implementation Act
1 source controls mapped|2 target controls covered
2%
NIST SP 800-53 Rev 5
1 source controls mapped|1 target controls covered
2%
ITAR - International Traffic in Arms Regulations
1 source controls mapped|3 target controls covered
2%
SQF Code Edition 9 - Safe Quality Food
1 source controls mapped|1 target controls covered
2%
US OFAC Sanctions Compliance Framework
1 source controls mapped|4 target controls covered
2%
UAE Virtual Asset Regulatory Authority (VARA) Regulations
1 source controls mapped|2 target controls covered
2%
Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL)
1 source controls mapped|1 target controls covered
2%
Saudi PDPL
1 source controls mapped|1 target controls covered
2%
Korea PIPA
1 source controls mapped|1 target controls covered
2%
Japan APPI
1 source controls mapped|1 target controls covered
2%
NIS2 Directive
1 source controls mapped|1 target controls covered
2%
DORA
1 source controls mapped|2 target controls covered
2%
Kuwait Data Privacy Protection Regulation (KDPPR, 2021 - CMA Directive)
1 source controls mapped|1 target controls covered
2%
US Automated Commercial Environment (ACE) - CBP Trade Data Requirements
1 source controls mapped|1 target controls covered
2%
Italy Personal Data Protection Code (Legislative Decree No. 196/2003, amended 2018)
1 source controls mapped|1 target controls covered
2%
Digital Services Act (DSA) - Regulation (EU) 2022/2065
1 source controls mapped|1 target controls covered
2%
Digital Services Act (Regulation (EU) 2022/2065 of the European Parliament and of the Council of 6 July 2022)
1 source controls mapped|2 target controls covered
2%
EU In Vitro Diagnostic Medical Devices Regulation (IVDR)
1 source controls mapped|1 target controls covered
2%
EU Network Code on Cybersecurity for the Electricity Sector
1 source controls mapped|2 target controls covered
2%
Equator Principles (EP4, 2020)
1 source controls mapped|1 target controls covered
2%
eIDAS 2.0 - EU Digital Identity Regulation
1 source controls mapped|3 target controls covered
2%
MiFID II / MiFIR
1 source controls mapped|3 target controls covered
2%
Egypt Personal Data Protection Law (Law No. 151 of 2020)
1 source controls mapped|2 target controls covered
2%
Chile Personal Data Protection Law (Law No. 21.719)
1 source controls mapped|1 target controls covered
2%
Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGP
1 source controls mapped|1 target controls covered
2%
Turkey Personal Data Protection Law (KVKK - Law No. 6698)
1 source controls mapped|2 target controls covered
2%
Ukraine Law on Personal Data Protection (Law No. 2297-VI)
1 source controls mapped|1 target controls covered
2%
Ethiopia Personal Data Protection Proclamation (No. 1321/2024)
1 source controls mapped|1 target controls covered
2%
Uzbekistan Law on Personal Data (No. ZRU-547)
1 source controls mapped|2 target controls covered
2%
Portugal Law No. 58/2019 - Data Protection Implementation Act
1 source controls mapped|2 target controls covered
2%
Malta Data Protection Act (Cap. 586, 2018)
1 source controls mapped|1 target controls covered
2%
Qatar Personal Data Privacy Protection Law (Law No. 13 of 2016)
1 source controls mapped|2 target controls covered
2%
South Korea Credit Information Act
1 source controls mapped|1 target controls covered
2%
Singapore Payment Services Act 2019 (PSA) - Digital Payment Token Provisions
1 source controls mapped|2 target controls covered
2%
EU NIS2 Directive - Transport Sector Requirements
1 source controls mapped|2 target controls covered
2%
Albania Law on Protection of Personal Data (Law No. 9887, 2008, amended 2014)
1 source controls mapped|1 target controls covered
2%
EU Carbon Border Adjustment Mechanism (CBAM)
1 source controls mapped|1 target controls covered
2%
EU Cyber Solidarity Act (Regulation (EU) 2025/38)
1 source controls mapped|1 target controls covered
2%
EU Energy Performance of Buildings Directive (EPBD Recast) - Draft Directive (2023/0317 COD)
1 source controls mapped|1 target controls covered
2%
EU European Media Freedom Act (EMFA)
1 source controls mapped|1 target controls covered
2%
Directive (EU) 2023/970 on pay transparency
1 source controls mapped|1 target controls covered
2%
Proposal for a Directive on improving working conditions in platform work (COM(2023) 491)
1 source controls mapped|1 target controls covered
2%
EU Product Liability Directive (Directive (EU) 2023/2845)
1 source controls mapped|1 target controls covered
2%
EU Seveso III Directive (Directive 2012/18/EU)
1 source controls mapped|1 target controls covered
2%
EU Taxonomy for Sustainable Activities (Regulation 2020/852)
1 source controls mapped|1 target controls covered
2%
Peru Personal Data Protection Law (Law No. 29733)
1 source controls mapped|1 target controls covered
2%
Senegal Law on Personal Data Protection (Law No. 2008-12)
1 source controls mapped|1 target controls covered
2%
Georgia Law on Personal Data Protection (2012)
1 source controls mapped|1 target controls covered
2%
Colombia Data Protection Law (Law 1581 of 2012)
1 source controls mapped|1 target controls covered
2%
Panama Law on Personal Data Protection (Law No. 81 of 2019)
1 source controls mapped|1 target controls covered
2%
Serbia Law on Personal Data Protection (2018)
1 source controls mapped|1 target controls covered
2%
Montenegro Law on Personal Data Protection (2023)
1 source controls mapped|1 target controls covered
2%
Law on Personal Data Protection (Official Gazette No. 42/2020)
1 source controls mapped|1 target controls covered
2%
Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018)
1 source controls mapped|1 target controls covered
2%
Uruguay Personal Data Protection Act (Law No. 18.331)
1 source controls mapped|2 target controls covered
2%
Oman Personal Data Protection Law (Royal Decree 6/2022)
1 source controls mapped|1 target controls covered
2%
FATF Recommendation 16 - Virtual Asset Travel Rule
1 source controls mapped|1 target controls covered
2%
French Sapin II Law (Law No. 2016-1691)
1 source controls mapped|1 target controls covered
2%
ISO/IEC 29147:2018
1 source controls mapped|1 target controls covered
2%
Defence Industry Security Program (DISP)
1 source controls mapped|1 target controls covered
2%
China Data Security Law (DSL)
1 source controls mapped|1 target controls covered
2%
IAIS Insurance Core Principles (ICPs)
1 source controls mapped|1 target controls covered
2%
US ITAR and EAR - Export Control and Data Security
1 source controls mapped|1 target controls covered
2%
ILO Tripartite Declaration of Principles concerning Multinational Enterprises (MNE Declaration)
1 source controls mapped|3 target controls covered
2%
Uganda Data Protection and Privacy Act (2019)
1 source controls mapped|1 target controls covered
2%
Sweden Data Protection Act (Dataskyddslag, 2018:218)
1 source controls mapped|1 target controls covered
2%
Frequently Asked Questions
What is EU SFDR (Sustainable Finance Disclosure Regulation)?
EU SFDR (Sustainable Finance Disclosure Regulation) is a compliance framework from European Union with 19 domains and 47 controls. Regulation (EU) 2019/2088 on sustainability‑related disclosures in the financial services sector. It requires financial market participants and financial advisers to disclose how sustainability risks are integrated into investment decisions, how principal adverse impacts are considered, and to provide detailed information on taxonomy alignment, ESG product characteristics, and periodic reporting. The accompanying Regulatory Technical Standards (Delegated Regulation (EU) 2022/1288, amended by Delegated Regulation (EU) 2023/363) specify the templates and disclosure formats. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
How many controls does EU SFDR (Sustainable Finance Disclosure Regulation) have?
EU SFDR (Sustainable Finance Disclosure Regulation) has 47 controls organised across 19 domains. The largest domains are PAI Indicators - Climate and Environment (9 controls), PAI Indicators - Social and Governance (5 controls), Product-Level Disclosures (5 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
What frameworks does EU SFDR (Sustainable Finance Disclosure Regulation) map to?
EU SFDR (Sustainable Finance Disclosure Regulation) maps to 214 other compliance frameworks. The top mapping partners are NIST AI Risk Management Framework (AI RMF 1.0) (17% coverage), NIST AI 600-1: Generative AI Profile (17% coverage), EU Taxonomy Regulation (Regulation 2020/852) (17% coverage). Use our comparison tool to explore control-level mappings between frameworks.
How do I get started with EU SFDR (Sustainable Finance Disclosure Regulation) compliance?
Start your EU SFDR (Sustainable Finance Disclosure Regulation) compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about EU SFDR (Sustainable Finance Disclosure Regulation) requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 47 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 706 frameworks.
Get Started Free →Free forever — no credit card required