Back to Frameworks

Extractive Industries Transparency Initiative (EITI) Standard (2023)

International (EITI)
v2023
17 domains
51 controls

The Extractive Industries Transparency Initiative (EITI) Standard (2023 edition) is the global standard for the good governance of oil, gas, and mineral resources. 57 implementing countries. The EITI requires disclosure of information along the extractive industry value chain: from contracts and licences, to production, revenue collection, revenue allocation, and social/economic spending. Multi-stakeholder governance with government, industry, and civil society representation. Countries undergo validation to assess compliance with the EITI Standard. The EITI Board oversees global implementation.

Unverified

Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (17)

Assurance

1 controls
Controls in the Assurance domain of Extractive Industries Transparency Initiative (EITI) Standard (2023)1 controls
CodeTitle
EITI.4.9Data Quality and Assurance

Beneficial Ownership

1 controls
Controls in the Beneficial Ownership domain of Extractive Industries Transparency Initiative (EITI) Standard (2023)1 controls
CodeTitle
EITI.2.5Beneficial Ownership

Environment

1 controls
Controls in the Environment domain of Extractive Industries Transparency Initiative (EITI) Standard (2023)1 controls
CodeTitle
EITI.6.3Environmental Reporting

Exploration and Production

3 controls
Controls in the Exploration and Production domain of Extractive Industries Transparency Initiative (EITI) Standard (2023)3 controls
CodeTitle
EITI-3.1Exploration Data
EITI-3.2Production Data
EITI-3.3Export Data

Legal and Fiscal

5 controls
Controls in the Legal and Fiscal domain of Extractive Industries Transparency Initiative (EITI) Standard (2023)5 controls
CodeTitle
EITI.2.1Legal Framework
EITI.2.2Contract and Licence Allocations
EITI.2.3Register of Licences
EITI.2.4Contract Disclosure
EITI.2.6State Participation

Legal and Institutional Framework

6 controls
Controls in the Legal and Institutional Framework domain of Extractive Industries Transparency Initiative (EITI) Standard (2023)6 controls
CodeTitle
EITI-2.1Legal Framework and Fiscal Regime
EITI-2.2Contract and License Allocations
EITI-2.3Register of Licenses
EITI-2.4Contract Transparency
EITI-2.5Beneficial Ownership
EITI-2.6State Participation

Operations

2 controls
Controls in the Operations domain of Extractive Industries Transparency Initiative (EITI) Standard (2023)2 controls
CodeTitle
EITI.3.2Production Data
EITI.3.3Export Data

Outcomes

1 controls
Controls in the Outcomes domain of Extractive Industries Transparency Initiative (EITI) Standard (2023)1 controls
CodeTitle
EITI.7.1Public Access to Data

Outcomes and Impact

4 controls
Controls in the Outcomes and Impact domain of Extractive Industries Transparency Initiative (EITI) Standard (2023)4 controls
CodeTitle
EITI-7.1Public Debate
EITI-7.2Data Accessibility and Open Data
EITI-7.3Follow Up on Recommendations
EITI-7.4Outcomes and Impact of Implementation

Oversight

5 controls
Controls in the Oversight domain of Extractive Industries Transparency Initiative (EITI) Standard (2023)5 controls
CodeTitle
EITI.1.1Government Commitment
EITI.1.2Company Engagement
EITI.1.3Civil Society Engagement
EITI.1.4Multi-Stakeholder Group
EITI.1.5Workplan

Oversight and Governance

4 controls
Controls in the Oversight and Governance domain of Extractive Industries Transparency Initiative (EITI) Standard (2023)4 controls
CodeTitle
EITI-1.1Government Engagement
EITI-1.2Industry Engagement
EITI-1.3Civil Society Engagement
EITI-1.4Multi-Stakeholder Group

Revenue Allocation

3 controls
Controls in the Revenue Allocation domain of Extractive Industries Transparency Initiative (EITI) Standard (2023)3 controls
CodeTitle
EITI-5.1Distribution of Extractive Industry Revenues
EITI-5.2Subnational Transfers
EITI-5.3Revenue Management and Expenditures

Revenue Collection

3 controls
Controls in the Revenue Collection domain of Extractive Industries Transparency Initiative (EITI) Standard (2023)3 controls
CodeTitle
EITI-4.1Comprehensive Disclosure of Taxes and Revenues
EITI-4.2Sale of the State's Share of Production
EITI-4.3Infrastructure and Barter Arrangements

Revenue Management

2 controls
Controls in the Revenue Management domain of Extractive Industries Transparency Initiative (EITI) Standard (2023)2 controls
CodeTitle
EITI.5.1Distribution of Revenues
EITI.5.2Subnational Transfers

Revenues

6 controls
Controls in the Revenues domain of Extractive Industries Transparency Initiative (EITI) Standard (2023)6 controls
CodeTitle
EITI.4.1Comprehensive Revenue Disclosure
EITI.4.2Sale of State Share
EITI.4.3Infrastructure and Barter
EITI.4.4Transportation Revenues
EITI.4.5SOE Transactions
EITI.4.6Subnational Payments

Social

1 controls
Controls in the Social domain of Extractive Industries Transparency Initiative (EITI) Standard (2023)1 controls
CodeTitle
EITI.6.1Social and Environmental Expenditure

Social and Economic Spending

3 controls
Controls in the Social and Economic Spending domain of Extractive Industries Transparency Initiative (EITI) Standard (2023)3 controls
CodeTitle
EITI-6.1Social and Environmental Expenditures
EITI-6.2Quasi-Fiscal Expenditures by SOEs
EITI-6.3Economic Contribution

Your Compliance Coverage

If you comply with Extractive Industries Transparency Initiative (EITI) Standard (2023), you already cover:

Maps to 89 other frameworks

51 total controls
US Section 508 - ICT Accessibility Standards (Revised 2017)
1 source controls mapped|2 target controls covered
2%
Azure Security Benchmark
1 source controls mapped|1 target controls covered
2%
Law No. 172-13 on the Protection of Personal Data
1 source controls mapped|1 target controls covered
2%
Washington My Health My Data Act (MHMD)
1 source controls mapped|2 target controls covered
2%
Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA)
1 source controls mapped|1 target controls covered
2%
Wisconsin Data Privacy Act (SB 670)
1 source controls mapped|1 target controls covered
2%
Tennessee Information Protection Act (TIPA)
1 source controls mapped|1 target controls covered
2%
Florida Digital Bill of Rights (FDBR)
1 source controls mapped|1 target controls covered
2%
Vermont Artificial Intelligence and Consumer Data Act (AICDA)
1 source controls mapped|1 target controls covered
2%
Switzerland FADP
1 source controls mapped|1 target controls covered
2%
DAMA-DMBOK2 - Data Management Body of Knowledge (2nd Edition)
1 source controls mapped|1 target controls covered
2%
India Account Aggregator Framework (RBI)
1 source controls mapped|1 target controls covered
2%
US Consumer Product Safety Commission (CPSC) - Connected Product Safety
1 source controls mapped|1 target controls covered
2%
Law No. 2013-450 of 19 June 2013 on the Protection of Personal Data
1 source controls mapped|1 target controls covered
2%
Pakistan Personal Data Protection Bill 2023
1 source controls mapped|1 target controls covered
2%
Bahrain PDPL
1 source controls mapped|1 target controls covered
2%
India DPDP Act
1 source controls mapped|1 target controls covered
2%
South Korea Credit Information Act
1 source controls mapped|2 target controls covered
2%
Privacy Act 1988 (Australia)
1 source controls mapped|1 target controls covered
2%
APPI
1 source controls mapped|1 target controls covered
2%
Barbados Data Protection Act 2019
1 source controls mapped|1 target controls covered
2%
Ley Orgánica de Protección de Datos Personales (LOPDP)
1 source controls mapped|1 target controls covered
2%
Section 508 - ICT Accessibility (Revised)
1 source controls mapped|1 target controls covered
2%
Uruguay DPL
1 source controls mapped|1 target controls covered
2%
Taiwan PDPA
1 source controls mapped|1 target controls covered
2%
UK Open Banking Standard
1 source controls mapped|1 target controls covered
2%
Indonesia PDP Law
1 source controls mapped|1 target controls covered
2%
NIST SP 800-122
1 source controls mapped|1 target controls covered
2%
Nigeria Data Protection Regulation (NDPR)
1 source controls mapped|1 target controls covered
2%
NRF Cybersecurity and Data Privacy Framework (National Retail Federation)
1 source controls mapped|1 target controls covered
2%
Philippines Data Privacy Act (RA 10173)
1 source controls mapped|2 target controls covered
2%
Tennessee IPA
1 source controls mapped|1 target controls covered
2%
Iceland DPA
1 source controls mapped|1 target controls covered
2%
Malaysia PDPA 2010
1 source controls mapped|1 target controls covered
2%
UK Data Protection Act 2018
1 source controls mapped|1 target controls covered
2%
Kentucky Consumer Data Protection Act
1 source controls mapped|1 target controls covered
2%
WHO Global Strategy on Digital Health 2020-2025
1 source controls mapped|2 target controls covered
2%
Indiana Consumer Data Protection Act
1 source controls mapped|1 target controls covered
2%
HITECH Act
1 source controls mapped|2 target controls covered
2%
Jamaica DPA
1 source controls mapped|1 target controls covered
2%
Minnesota Consumer Data Privacy Act
1 source controls mapped|1 target controls covered
2%
Maryland Online Data Privacy Act of 2024
1 source controls mapped|1 target controls covered
2%
Mauritius DPA
1 source controls mapped|1 target controls covered
2%
Texas Data Privacy Act
1 source controls mapped|1 target controls covered
2%
Switzerland New Federal Act on Data Protection (nFADP/nDSG, 2023)
1 source controls mapped|1 target controls covered
2%
Authorised Economic Operator (AEO) Programmes - Global Standards
1 source controls mapped|1 target controls covered
2%
FERPA
1 source controls mapped|1 target controls covered
2%
Rwanda Law No. 058/2021 Relating to the Protection of Personal Data
1 source controls mapped|1 target controls covered
2%
GDPR
1 source controls mapped|1 target controls covered
2%
Turkey KVKK
1 source controls mapped|1 target controls covered
2%
Turkey Personal Data Protection Law (KVKK - Law No. 6698)
1 source controls mapped|1 target controls covered
2%
Mexico LFPDPPP
1 source controls mapped|1 target controls covered
2%
Ghana Data Protection Act 2012 (Act 843)
1 source controls mapped|1 target controls covered
2%
Jamaica Data Protection Act 2020
1 source controls mapped|1 target controls covered
2%
Finland Data Protection Act (Tietosuojalaki, 1050/2018)
1 source controls mapped|1 target controls covered
2%
Singapore Government Instruction Manual on ICT&SS Management (IM8)
1 source controls mapped|1 target controls covered
2%
Saudi Arabia PDPL
1 source controls mapped|1 target controls covered
2%
PDPA Thailand
1 source controls mapped|1 target controls covered
2%
POPIA
1 source controls mapped|1 target controls covered
2%
Personal Data Act (personopplysningsloven)
1 source controls mapped|1 target controls covered
2%
ISO 22739:2024 - Blockchain and Distributed Ledger Technologies Vocabulary
1 source controls mapped|1 target controls covered
2%
Virginia CDPA
1 source controls mapped|1 target controls covered
2%
Rwanda DPL
1 source controls mapped|1 target controls covered
2%
PDPA Singapore
1 source controls mapped|1 target controls covered
2%
Privacy Act 2020
1 source controls mapped|1 target controls covered
2%
UK GDPR (UK General Data Protection Regulation)
1 source controls mapped|1 target controls covered
2%
Nebraska Data Privacy Act
1 source controls mapped|1 target controls covered
2%
NIST Privacy Framework 1.0
1 source controls mapped|1 target controls covered
2%
LGPD
1 source controls mapped|1 target controls covered
2%
New Hampshire Data Privacy Act
1 source controls mapped|1 target controls covered
2%
Liechtenstein DPA
1 source controls mapped|1 target controls covered
2%
Oregon Consumer Privacy Act
1 source controls mapped|1 target controls covered
2%
UK Concordat on Open Research Data (UKRI)
1 source controls mapped|2 target controls covered
2%
COSO Internal Control - Integrated Framework (2013)
1 source controls mapped|2 target controls covered
2%
UAE PDPL
1 source controls mapped|1 target controls covered
2%
Peru DPL
1 source controls mapped|1 target controls covered
2%
Qatar DPL
1 source controls mapped|1 target controls covered
2%
Utah Consumer Privacy Act
1 source controls mapped|1 target controls covered
2%
New Jersey Data Privacy Act
1 source controls mapped|1 target controls covered
2%
Iowa Consumer Data Protection Act
1 source controls mapped|1 target controls covered
2%
ISO 8000 - Data Quality
1 source controls mapped|1 target controls covered
2%
South Korea PIPA
1 source controls mapped|1 target controls covered
2%
TEFCA - Trusted Exchange Framework and Common Agreement
1 source controls mapped|1 target controls covered
2%
Montana Consumer Data Privacy Act
1 source controls mapped|1 target controls covered
2%
UK Age Appropriate Design Code (Children's Code)
1 source controls mapped|1 target controls covered
2%
Vietnam PDPD
1 source controls mapped|1 target controls covered
2%
Philippines DPA
1 source controls mapped|1 target controls covered
2%
Kenya DPA
1 source controls mapped|1 target controls covered
2%

Frequently Asked Questions

What is Extractive Industries Transparency Initiative (EITI) Standard (2023)?

Extractive Industries Transparency Initiative (EITI) Standard (2023) is a compliance framework from International (EITI) with 17 domains and 51 controls. The Extractive Industries Transparency Initiative (EITI) Standard (2023 edition) is the global standard for the good governance of oil, gas, and mineral resources. 57 implementing countries. The EITI requires disclosure of information along the extractive industry value chain: from contracts and licences, to production, revenue collection, revenue allocation, and social/economic spending. Multi-stakeholder governance with government, industry, and civil society representation. Countries undergo validation to assess compliance with the EITI Standard. The EITI Board oversees global implementation. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

How many controls does Extractive Industries Transparency Initiative (EITI) Standard (2023) have?

Extractive Industries Transparency Initiative (EITI) Standard (2023) has 51 controls organised across 17 domains. The largest domains are Legal and Institutional Framework (6 controls), Revenues (6 controls), Legal and Fiscal (5 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

What frameworks does Extractive Industries Transparency Initiative (EITI) Standard (2023) map to?

Extractive Industries Transparency Initiative (EITI) Standard (2023) maps to 89 other compliance frameworks. The top mapping partners are US Section 508 - ICT Accessibility Standards (Revised 2017) (2% coverage), Azure Security Benchmark (2% coverage), Law No. 172-13 on the Protection of Personal Data (2% coverage). Use our comparison tool to explore control-level mappings between frameworks.

How do I get started with Extractive Industries Transparency Initiative (EITI) Standard (2023) compliance?

Start your Extractive Industries Transparency Initiative (EITI) Standard (2023) compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about Extractive Industries Transparency Initiative (EITI) Standard (2023) requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 51 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 700 frameworks.

Get Started Free →

Free forever — no credit card required