EU SFDR (Sustainable Finance Disclosure Regulation)

European Union

v2019 (RTS 2022)

5 domains

26 controls

Regulation (EU) 2019/2088 on sustainability-related disclosures in the financial services sector. Requires financial market participants and financial advisers to disclose sustainability risks and adverse impacts of investment decisions. Supplemented by Delegated Regulation (EU) 2022/1288 establishing Regulatory Technical Standards including mandatory Principal Adverse Impact (PAI) indicators.

Verified

Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (5)

Entity-Level Disclosures

3 controls

Articles 3-5: Disclosure obligations at the level of financial market participants

Controls in the Entity-Level Disclosures domain of EU SFDR (Sustainable Finance Disclosure Regulation) — 3 controls
Code	Title	Description
SFDR-ART3	Sustainability Risk Policies	Financial market participants and financial advisers shall publish on their websites information about their policies on...
SFDR-ART4	Principal Adverse Impacts Statement	Financial market participants shall publish and maintain on their websites a statement on their due diligence policies w...
SFDR-ART5	Remuneration Policies	Financial market participants and advisers shall include in their remuneration policies information on how those policie...

PAI Indicators - Climate and Environment

9 controls

Table 1 of Annex I: Mandatory climate and environment-related PAI indicators for investee companies

Controls in the PAI Indicators - Climate and Environment domain of EU SFDR (Sustainable Finance Disclosure Regulation) — 9 controls
Code	Title	Description
SFDR-PAI-1	GHG Emissions (Scope 1, 2, 3 and Total)	Mandatory PAI Indicator 1: Scope 1, Scope 2, Scope 3 and total GHG emissions of investee companies.
SFDR-PAI-2	Carbon Footprint	Mandatory PAI Indicator 2: Carbon footprint of the portfolio (total GHG emissions per million EUR invested).
SFDR-PAI-3	GHG Intensity of Investee Companies	Mandatory PAI Indicator 3: GHG intensity of investee companies (total GHG emissions per million EUR revenue).
SFDR-PAI-4	Exposure to Fossil Fuel Companies	Mandatory PAI Indicator 4: Share of investments in companies active in the fossil fuel sector.
SFDR-PAI-5	Non-Renewable Energy Share	Mandatory PAI Indicator 5: Share of non-renewable energy consumption and non-renewable energy production of investee com...
SFDR-PAI-6	Energy Consumption Intensity	Mandatory PAI Indicator 6: Energy consumption intensity per high impact climate sector.
SFDR-PAI-7	Biodiversity-Sensitive Areas	Mandatory PAI Indicator 7: Activities negatively affecting biodiversity-sensitive areas.
SFDR-PAI-8	Emissions to Water	Mandatory PAI Indicator 8: Tonnes of emissions to water generated by investee companies.
SFDR-PAI-9	Hazardous Waste and Radioactive Waste	Mandatory PAI Indicator 9: Tonnes of hazardous waste and radioactive waste generated by investee companies.

PAI Indicators - Social and Governance

5 controls

Table 1 of Annex I: Mandatory social and governance PAI indicators

Controls in the PAI Indicators - Social and Governance domain of EU SFDR (Sustainable Finance Disclosure Regulation) — 5 controls
Code	Title	Description
SFDR-PAI-10	UNGC and OECD Guidelines Violations	Mandatory PAI Indicator 10: Share of investments in investee companies that have been involved in violations of the UNGC...
SFDR-PAI-11	UNGC/OECD Compliance Monitoring Processes	Mandatory PAI Indicator 11: Share of investments in investee companies without policies to monitor compliance with UNGC...
SFDR-PAI-12	Unadjusted Gender Pay Gap	Mandatory PAI Indicator 12: Average unadjusted gender pay gap of investee companies.
SFDR-PAI-13	Board Gender Diversity	Mandatory PAI Indicator 13: Average ratio of female to male board members in investee companies.
SFDR-PAI-14	Controversial Weapons Exposure	Mandatory PAI Indicator 14: Share of investments in investee companies involved in the manufacture or selling of controv...

PAI Indicators - Sovereigns and Real Estate

4 controls

Table 1 of Annex I: Mandatory PAI indicators for investments in sovereigns/supranationals and real estate assets

Controls in the PAI Indicators - Sovereigns and Real Estate domain of EU SFDR (Sustainable Finance Disclosure Regulation) — 4 controls
Code	Title	Description
SFDR-PAI-15	GHG Intensity of Sovereigns	Mandatory PAI Indicator 15: GHG intensity of investee countries (production and consumption-based).
SFDR-PAI-16	Investee Countries Social Violations	Mandatory PAI Indicator 16: Number of investee countries subject to social violations (based on international treaties,...
SFDR-PAI-17	Real Estate Fossil Fuels Exposure	Mandatory PAI Indicator 17: Share of investments in real estate assets involved in the extraction, storage, transport, o...
SFDR-PAI-18	Real Estate Energy Inefficiency	Mandatory PAI Indicator 18: Share of investments in energy-inefficient real estate assets.

Product-Level Disclosures

5 controls

Articles 6-11: Product classification and disclosure requirements

Controls in the Product-Level Disclosures domain of EU SFDR (Sustainable Finance Disclosure Regulation) — 5 controls
Code	Title	Description
SFDR-ART10	Website Disclosures for Art 8/9 Products	For Article 8 and 9 products, publish on the website: description of environmental/social characteristics or sustainable...
SFDR-ART11	Periodic Reports for Art 8/9 Products	Periodic reports for Article 8 and 9 products shall include the extent to which environmental/social characteristics are...
SFDR-ART6	Article 6 Products - Sustainability Risk Integration	Pre-contractual disclosures shall include descriptions of the manner in which sustainability risks are integrated into i...
SFDR-ART8	Article 8 Products - Environmental/Social Characteristics	Products promoting environmental or social characteristics shall disclose how those characteristics are met, the indices...
SFDR-ART9	Article 9 Products - Sustainable Investment Objective	Products with a sustainable investment objective shall disclose the objective, the index used as a reference benchmark,...

Maps to 238 other frameworks

26 total controls

NIST AI Risk Management Framework (AI RMF 1.0)

8 source controls mapped|5 target controls covered

31%

NIST AI 600-1 Generative AI Profile

8 source controls mapped|6 target controls covered

31%

EU Taxonomy Regulation (Regulation 2020/852)

8 source controls mapped|7 target controls covered

31%

SASB Standards (ISSB Integrated)

7 source controls mapped|5 target controls covered

27%

SASB Standards

7 source controls mapped|4 target controls covered

27%

EU Taxonomy Regulation

7 source controls mapped|6 target controls covered

27%

BREEAM — Building Research Establishment Environmental Assessment Method

6 source controls mapped|6 target controls covered

23%

OECD Guidelines for Multinational Enterprises on Responsible Business Conduct (2023 Update)

6 source controls mapped|3 target controls covered

23%

CDP (formerly Carbon Disclosure Project)

6 source controls mapped|6 target controls covered

23%

ISO 26000:2010

6 source controls mapped|3 target controls covered

23%

CDP Corporate Questionnaire

6 source controls mapped|5 target controls covered

23%

ICMM Mining Principles (2024 Update)

6 source controls mapped|2 target controls covered

23%

ISO 14001

5 source controls mapped|5 target controls covered

19%

CSRD

5 source controls mapped|5 target controls covered

19%

ISSB Standards

5 source controls mapped|5 target controls covered

19%

GRI Standards

5 source controls mapped|5 target controls covered

19%

TCFD Recommendations

5 source controls mapped|5 target controls covered

19%

LEED v4.1 — Green Building Rating System (US Green Building Council)

4 source controls mapped|3 target controls covered

15%

GHG Protocol

4 source controls mapped|4 target controls covered

15%

IEC 60601-1 — Medical Electrical Equipment Safety

4 source controls mapped|2 target controls covered

15%

ISO 20400:2017 — Sustainable Procurement

3 source controls mapped|3 target controls covered

12%

ISO 37000:2021 — Governance of Organizations

3 source controls mapped|2 target controls covered

12%

EU Critical Raw Materials Act (Regulation (EU) 2024/1252)

3 source controls mapped|1 target controls covered

12%

OECD AI Principles (2024 Update)

3 source controls mapped|2 target controls covered

12%

ISO/IEC 38500:2024 — Governance of IT

3 source controls mapped|1 target controls covered

12%

AICPA Privacy Management Framework (PMF)

3 source controls mapped|1 target controls covered

12%

GLOBALG.A.P. Integrated Farm Assurance (IFA) Standard v6

3 source controls mapped|1 target controls covered

12%

EU GMP Annex 11 — Computerised Systems

3 source controls mapped|1 target controls covered

12%

TNFD Recommendations

3 source controls mapped|1 target controls covered

12%

UNESCO Recommendation on the Ethics of AI

3 source controls mapped|3 target controls covered

12%

ITU Radio Regulations and Space Security Standards

3 source controls mapped|1 target controls covered

12%

Science Based Targets initiative (SBTi) Corporate Standard

3 source controls mapped|3 target controls covered

12%

ISO 14064 — Greenhouse Gas Accounting and Verification (Parts 1-3)

3 source controls mapped|3 target controls covered

12%

Science Based Targets Initiative (SBTi) — Net-Zero Standard

3 source controls mapped|3 target controls covered

12%

Notifiable Data Breaches Scheme (Australia)

2 source controls mapped|4 target controls covered

EU Digital Markets Act

2 source controls mapped|4 target controls covered

FTC Health Breach Notification Rule

2 source controls mapped|4 target controls covered

UK Product Security and Telecommunications Infrastructure Act (PSTI)

2 source controls mapped|4 target controls covered

EAR — Export Administration Regulations

2 source controls mapped|5 target controls covered

European Accessibility Act (Directive (EU) 2019/882)

2 source controls mapped|4 target controls covered

EU Deforestation-Free Products Regulation (EUDR)

2 source controls mapped|4 target controls covered

Ontario Accessibility for Ontarians with Disabilities Act (AODA) — IASR Web Standard

2 source controls mapped|4 target controls covered

EU NIS2 Directive — Energy Sector Cybersecurity Requirements (Directive 2022/2555)

2 source controls mapped|4 target controls covered

US ITAR and EAR — Export Control and Data Security

2 source controls mapped|5 target controls covered

US SEC Digital Assets and Crypto Regulatory Framework

2 source controls mapped|4 target controls covered

Australia Consumer Data Right — Banking (CDR)

2 source controls mapped|4 target controls covered

Australia eSafety Commissioner — Online Safety Expectations for Industry

2 source controls mapped|4 target controls covered

FATF 40 Recommendations

2 source controls mapped|4 target controls covered

EU Machinery Regulation (Regulation (EU) 2023/1230)

2 source controls mapped|2 target controls covered

UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities

1 source controls mapped|3 target controls covered

Security of Critical Infrastructure Act 2018 (SOCI)

1 source controls mapped|1 target controls covered

ISO 56002

1 source controls mapped|3 target controls covered

ISO 41001:2018 — Facility Management Systems

1 source controls mapped|3 target controls covered

ISO 39001:2012 — Road Traffic Safety Management

1 source controls mapped|3 target controls covered

ISO 37002:2021 — Whistleblowing Management Systems

1 source controls mapped|3 target controls covered

ISO 50001:2018 — Energy Management Systems

1 source controls mapped|3 target controls covered

ISO 22313:2020 — Guidance on Business Continuity Management Systems

1 source controls mapped|3 target controls covered

IEC 62351 — Power Systems Communication Security

1 source controls mapped|1 target controls covered

NABERS — National Australian Built Environment Rating System

1 source controls mapped|3 target controls covered

Iceland DPA

1 source controls mapped|1 target controls covered

Kentucky Consumer Data Protection Act

1 source controls mapped|1 target controls covered

MTCS — Multi-Tier Cloud Security (Singapore)

1 source controls mapped|1 target controls covered

Montana Consumer Data Privacy Act

1 source controls mapped|1 target controls covered

NIST SP 800-34 Rev 1 — Contingency Planning Guide

1 source controls mapped|1 target controls covered

C5 (Germany)

1 source controls mapped|1 target controls covered

CSA CCM v4

1 source controls mapped|1 target controls covered

CAIQ (CSA)

1 source controls mapped|1 target controls covered

ISO 42001

1 source controls mapped|1 target controls covered

Colombia Habeas Data Law

1 source controls mapped|1 target controls covered

Turkey KVKK

1 source controls mapped|1 target controls covered

Qatar DPL

1 source controls mapped|1 target controls covered

COPPA

1 source controls mapped|1 target controls covered

EU Medical Devices Regulation (MDR 2017/745)

1 source controls mapped|3 target controls covered

Chile DPL

1 source controls mapped|1 target controls covered

Rwanda DPL

1 source controls mapped|1 target controls covered

Mexico LFPDPPP

1 source controls mapped|1 target controls covered

NIST SP 800-144

1 source controls mapped|1 target controls covered

ISMAP (Japan)

1 source controls mapped|1 target controls covered

Australia AI Ethics Framework

1 source controls mapped|1 target controls covered

NIST SP 800-145

1 source controls mapped|1 target controls covered

NIST SP 800-146

1 source controls mapped|1 target controls covered

EU European Health Data Space (EHDS)

1 source controls mapped|1 target controls covered

China PIPL

1 source controls mapped|1 target controls covered

Indonesia PDP Law

1 source controls mapped|1 target controls covered

PDPA Singapore

1 source controls mapped|1 target controls covered

Malaysia PDPA 2010

1 source controls mapped|1 target controls covered

NIST SP 800-190

1 source controls mapped|1 target controls covered

Minnesota Consumer Data Privacy Act

1 source controls mapped|1 target controls covered

Mauritius DPA

1 source controls mapped|1 target controls covered

Brazil AI Framework

1 source controls mapped|1 target controls covered

Philippines DPA

1 source controls mapped|1 target controls covered

ISO 22000

1 source controls mapped|1 target controls covered

Argentina PDPA

1 source controls mapped|1 target controls covered

PDPA Thailand

1 source controls mapped|1 target controls covered

TEFCA — Trusted Exchange Framework and Common Agreement

1 source controls mapped|1 target controls covered

Philippines Data Privacy Act (RA 10173)

1 source controls mapped|1 target controls covered

PIPEDA

1 source controls mapped|1 target controls covered

Oregon Consumer Privacy Act

1 source controls mapped|1 target controls covered

US Gramm-Leach-Bliley Act (GLBA) — Higher Education Safeguards Rule

1 source controls mapped|1 target controls covered

GLI-33 — Gaming Laboratories International Event Wagering Systems

1 source controls mapped|1 target controls covered

POPIA

1 source controls mapped|1 target controls covered

NIST Privacy Framework 1.0

1 source controls mapped|1 target controls covered

New Jersey Data Privacy Act

1 source controls mapped|1 target controls covered

Nebraska Data Privacy Act

1 source controls mapped|1 target controls covered

ISO 27018

1 source controls mapped|1 target controls covered

Switzerland FADP

1 source controls mapped|1 target controls covered

EDM Council CDMC — Cloud Data Management Capabilities Framework

1 source controls mapped|1 target controls covered

Ecuador LOPDP

1 source controls mapped|1 target controls covered

APEC Cross-Border Privacy Rules (CBPR) System

1 source controls mapped|1 target controls covered

AWS Well-Architected Security Pillar

1 source controls mapped|1 target controls covered

Liechtenstein DPA

1 source controls mapped|1 target controls covered

FERPA

1 source controls mapped|1 target controls covered

China AI Regulations

1 source controls mapped|1 target controls covered

APPI

1 source controls mapped|1 target controls covered

Indiana Consumer Data Protection Act

1 source controls mapped|1 target controls covered

Connecticut DPA

1 source controls mapped|1 target controls covered

Colorado Privacy Act

1 source controls mapped|1 target controls covered

Iowa Consumer Data Protection Act

1 source controls mapped|1 target controls covered

Dominican Republic DPL

1 source controls mapped|1 target controls covered

ESRB Privacy Certified Programme

1 source controls mapped|1 target controls covered

Jamaica DPA

1 source controls mapped|1 target controls covered

Azure Security Benchmark

1 source controls mapped|1 target controls covered

Bahrain PDPL

1 source controls mapped|1 target controls covered

Norway PDPA

1 source controls mapped|1 target controls covered

Saudi Arabia PDPL

1 source controls mapped|1 target controls covered

New Zealand Information Security Manual (NZISM)

1 source controls mapped|1 target controls covered

ISO 45001

1 source controls mapped|1 target controls covered

EU AI Act

1 source controls mapped|1 target controls covered

ISO 27701

1 source controls mapped|1 target controls covered

MTCS (Singapore)

1 source controls mapped|1 target controls covered

OECD AI Principles

1 source controls mapped|1 target controls covered

New Hampshire Privacy Act

1 source controls mapped|1 target controls covered

South Korea PIPA

1 source controls mapped|1 target controls covered

New Zealand Privacy Act

1 source controls mapped|1 target controls covered

Delaware Personal Data Privacy Act

1 source controls mapped|1 target controls covered

Maryland Online Data Privacy Act

1 source controls mapped|1 target controls covered

Kenya DPA

1 source controls mapped|1 target controls covered

ISO 27017

1 source controls mapped|1 target controls covered

Global Cross-Border Privacy Rules (Global CBPR) Forum

1 source controls mapped|1 target controls covered

Japan AI Guidelines

1 source controls mapped|1 target controls covered

EDM Council DCAM — Data Management Capability Assessment Model

1 source controls mapped|1 target controls covered

CCPA/CPRA

1 source controls mapped|1 target controls covered

NRF Cybersecurity and Data Privacy Framework (National Retail Federation)

1 source controls mapped|1 target controls covered

Oman National Cybersecurity Framework

1 source controls mapped|1 target controls covered

OWASP DevSecOps Maturity Model (DSOMM)

1 source controls mapped|1 target controls covered

Nigeria NDPR

1 source controls mapped|1 target controls covered

LGPD

1 source controls mapped|1 target controls covered

Vietnam PDPD

1 source controls mapped|1 target controls covered

India DPDP Act

1 source controls mapped|1 target controls covered

Privacy Act 1988 (Australia)

1 source controls mapped|1 target controls covered

NIST SP 800-122

1 source controls mapped|1 target controls covered

IEEE 7000

1 source controls mapped|1 target controls covered

Peru DPL

1 source controls mapped|1 target controls covered

UK AI Regulation Framework

1 source controls mapped|1 target controls covered

UK Data Protection Act 2018

1 source controls mapped|1 target controls covered

Utah Consumer Privacy Act

1 source controls mapped|1 target controls covered

Singapore AI Governance Framework

1 source controls mapped|1 target controls covered

Tennessee IPA

1 source controls mapped|1 target controls covered

UAE PDPL

1 source controls mapped|1 target controls covered

Taiwan PDPA

1 source controls mapped|1 target controls covered

Virginia CDPA

1 source controls mapped|1 target controls covered

Uruguay DPL

1 source controls mapped|1 target controls covered

Texas Data Privacy Act

1 source controls mapped|1 target controls covered

Pakistan Personal Data Protection Bill 2023

1 source controls mapped|1 target controls covered

Angola Personal Data Protection Law (Law No. 22/11)

1 source controls mapped|1 target controls covered

Japan Act on Specified Commercial Transactions (ASCT) — Digital Services

1 source controls mapped|1 target controls covered

Spain Organic Law 3/2018 on Data Protection and Digital Rights (LOPDGDD)

1 source controls mapped|1 target controls covered

Greece Law 4624/2019 — Hellenic Data Protection Authority (HDPA) Implementation Act

1 source controls mapped|2 target controls covered

NIST SP 800-53 Rev 5

1 source controls mapped|1 target controls covered

ITAR — International Traffic in Arms Regulations

1 source controls mapped|3 target controls covered

SQF Code Edition 9 — Safe Quality Food

1 source controls mapped|1 target controls covered

US OFAC Sanctions Compliance Framework

1 source controls mapped|4 target controls covered

UAE Virtual Asset Regulatory Authority (VARA) Regulations

1 source controls mapped|2 target controls covered

Kuwait Data Privacy Protection Regulation (KDPPR, 2021 — CMA Directive)

1 source controls mapped|1 target controls covered

Bosnia and Herzegovina Law on Protection of Personal Data (2006, amended 2011)

1 source controls mapped|2 target controls covered

US Automated Commercial Environment (ACE) — CBP Trade Data Requirements

1 source controls mapped|1 target controls covered

Italy Personal Data Protection Code (Legislative Decree No. 196/2003, amended 2018)

1 source controls mapped|1 target controls covered

EU Digital Services Act — Minors Protection Provisions (Regulation 2022/2065)

1 source controls mapped|1 target controls covered

EU Digital Services Act — Online Gaming Platform Requirements

1 source controls mapped|2 target controls covered

EU In Vitro Diagnostic Medical Devices Regulation (IVDR)

1 source controls mapped|1 target controls covered

EU Network Code on Cybersecurity for the Electricity Sector

1 source controls mapped|2 target controls covered

Equator Principles (EP4, 2020)

1 source controls mapped|1 target controls covered

eIDAS 2.0 — EU Digital Identity Regulation

1 source controls mapped|3 target controls covered

African Union Malabo Convention

1 source controls mapped|1 target controls covered

Myanmar Cybersecurity Law (2023)

1 source controls mapped|1 target controls covered

MiFID II / MiFIR

1 source controls mapped|3 target controls covered

Egypt Personal Data Protection Law (Law No. 151 of 2020)

1 source controls mapped|2 target controls covered

Chile Personal Data Protection Law (Law No. 21.719)

1 source controls mapped|1 target controls covered

Costa Rica Personal Data Protection Law (Law No. 8968)

1 source controls mapped|1 target controls covered

Turkey Personal Data Protection Law (KVKK — Law No. 6698)

1 source controls mapped|2 target controls covered

Ukraine Law on Personal Data Protection (Law No. 2297-VI)

1 source controls mapped|1 target controls covered

Ethiopia Personal Data Protection Proclamation (No. 1321/2024)

1 source controls mapped|1 target controls covered

Uzbekistan Law on Personal Data (No. ZRU-547)

1 source controls mapped|2 target controls covered

Portugal Law No. 58/2019 — Data Protection Implementation Act

1 source controls mapped|2 target controls covered

Malta Data Protection Act (Cap. 586, 2018)

1 source controls mapped|1 target controls covered

Qatar Personal Data Privacy Protection Law (Law No. 13 of 2016)

1 source controls mapped|2 target controls covered

South Korea Credit Information Act

1 source controls mapped|1 target controls covered

Singapore Payment Services Act 2019 (PSA) — Digital Payment Token Provisions

1 source controls mapped|2 target controls covered

EU NIS2 Directive — Transport Sector Requirements

1 source controls mapped|2 target controls covered

Albania Law on Protection of Personal Data (Law No. 9887, 2008, amended 2014)

1 source controls mapped|1 target controls covered

EU Carbon Border Adjustment Mechanism (CBAM)

1 source controls mapped|1 target controls covered

EU Cyber Solidarity Act (Regulation (EU) 2025/38)

1 source controls mapped|1 target controls covered

EU Energy Performance of Buildings Directive (EPBD Recast, Directive 2024/1275)

1 source controls mapped|1 target controls covered

EU European Media Freedom Act (EMFA)

1 source controls mapped|1 target controls covered

EU Pay Transparency Directive (Directive 2023/970)

1 source controls mapped|1 target controls covered

EU Platform Work Directive (Directive 2024/2831)

1 source controls mapped|1 target controls covered

EU Product Liability Directive (Directive (EU) 2024/2853)

1 source controls mapped|1 target controls covered

EU Seveso III Directive (Directive 2012/18/EU)

1 source controls mapped|1 target controls covered

EU Taxonomy for Sustainable Activities (Regulation 2020/852)

1 source controls mapped|1 target controls covered

Rwanda Law No. 058/2021 Relating to the Protection of Personal Data

1 source controls mapped|1 target controls covered

GDPR

1 source controls mapped|1 target controls covered

Peru Personal Data Protection Law (Law No. 29733)

1 source controls mapped|1 target controls covered

Senegal Law on Personal Data Protection (Law No. 2008-12)

1 source controls mapped|1 target controls covered

Georgia Law on Personal Data Protection (2012)

1 source controls mapped|1 target controls covered

Colombia Data Protection Law (Law 1581 of 2012 — SIC Oversight)

1 source controls mapped|1 target controls covered

Panama Law on Personal Data Protection (Law No. 81 of 2019)

1 source controls mapped|1 target controls covered

Serbia Law on Personal Data Protection (2018)

1 source controls mapped|1 target controls covered

Montenegro Law on Personal Data Protection (2023)

1 source controls mapped|1 target controls covered

North Macedonia Law on Personal Data Protection (2020)

1 source controls mapped|1 target controls covered

Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018)

1 source controls mapped|1 target controls covered

Uruguay Personal Data Protection Act (Law No. 18.331)

1 source controls mapped|2 target controls covered

Oman Personal Data Protection Law (Royal Decree 6/2022)

1 source controls mapped|1 target controls covered

Cambodia Sub-Decree on Personal Data Protection (Sub-Decree No. 134)

1 source controls mapped|1 target controls covered

FATF Recommendation 16 — Virtual Asset Travel Rule

1 source controls mapped|2 target controls covered

Belgium Data Protection Act (Wet van 30 juli 2018, Loi du 30 juillet 2018)

1 source controls mapped|1 target controls covered

ILO Nursing Personnel Convention C149 (1977)

1 source controls mapped|1 target controls covered

EU Anti-Money Laundering Directive (AMLD6 / Directive 2018/1673)

1 source controls mapped|1 target controls covered

ISO 8000 — Data Quality

1 source controls mapped|1 target controls covered

Privacy by Design (PbD) — Seven Foundational Principles

1 source controls mapped|1 target controls covered

BS 65000:2014 — Guidance on Organizational Resilience

1 source controls mapped|1 target controls covered

French Sapin II Law (Law No. 2016-1691)

1 source controls mapped|1 target controls covered

ISO/IEC 29147:2018

1 source controls mapped|1 target controls covered

Defence Industry Security Program (DISP)

1 source controls mapped|1 target controls covered

China Data Security Law (DSL)

1 source controls mapped|1 target controls covered

IAIS Insurance Core Principles (ICPs)

1 source controls mapped|1 target controls covered

ILO Tripartite Declaration of Principles concerning Multinational Enterprises (MNE Declaration)

1 source controls mapped|3 target controls covered

Uganda Data Protection and Privacy Act (2019)

1 source controls mapped|1 target controls covered

Sweden Data Protection Act (Dataskyddslag, 2018:218)

1 source controls mapped|1 target controls covered

Compare EU SFDR (Sustainable Finance Disclosure Regulation) with NIST AI Risk Management Framework (AI RMF 1.0)

Frequently Asked Questions

What is EU SFDR (Sustainable Finance Disclosure Regulation)?

EU SFDR (Sustainable Finance Disclosure Regulation) is a compliance framework from European Union with 5 domains and 26 controls. Regulation (EU) 2019/2088 on sustainability-related disclosures in the financial services sector. Requires financial market participants and financial advisers to disclose sustainability risks and adverse impacts of investment decisions. Supplemented by Delegated Regulation (EU) 2022/1288 establishing Regulatory Technical Standards including mandatory Principal Adverse Impact (PAI) indicators. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

How many controls does EU SFDR (Sustainable Finance Disclosure Regulation) have?

EU SFDR (Sustainable Finance Disclosure Regulation) has 26 controls organised across 5 domains. The largest domains are PAI Indicators - Climate and Environment (9 controls), PAI Indicators - Social and Governance (5 controls), Product-Level Disclosures (5 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

What frameworks does EU SFDR (Sustainable Finance Disclosure Regulation) map to?

EU SFDR (Sustainable Finance Disclosure Regulation) maps to 238 other compliance frameworks. The top mapping partners are NIST AI Risk Management Framework (AI RMF 1.0) (31% coverage), NIST AI 600-1 Generative AI Profile (31% coverage), EU Taxonomy Regulation (Regulation 2020/852) (31% coverage). Use our comparison tool to explore control-level mappings between frameworks.

How do I get started with EU SFDR (Sustainable Finance Disclosure Regulation) compliance?

Start your EU SFDR (Sustainable Finance Disclosure Regulation) compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about EU SFDR (Sustainable Finance Disclosure Regulation) requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 26 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 692 frameworks.

Get Started Free →

Free forever — no credit card required