Regulatory glossary
Key terms from the EU AI Act, DORA, NIS2, CSRD, MiCA and GDPR, explained in plain language.
All terms
A
C
- Conformity assessmentThe process that shows a high-risk AI system meets EU AI Act requirements.EU AI Act
- Cross-border data transferMoving personal data from the EEA to a third country, which needs GDPR safeguards.GDPR
- Crypto-asset service provider (CASP)A legal entity that provides crypto-asset services professionally under MiCA.MiCA
D
- Data controllerThe entity that decides why and how personal data is processed.GDPR
- Data processorThe entity that processes personal data on a controller’s behalf, following documented instructions.GDPR
- Data protection impact assessment (DPIA)A structured assessment for high-risk processing of personal data.GDPR
- Data subject rightsIndividual rights under GDPR, including access, rectification, erasure and portability.GDPR
- Digital operational resilienceA financial entity’s ability to keep operations and ICT security intact.DORA
- Double materialityReporting both how sustainability issues affect the company and how the company affects people and the environment.CSRD / ESG
E
- ESG reportingEnvironmental, social and governance disclosure required under CSRD.CSRD / ESG
- Essential entityAn organisation in a critical sector with the strictest NIS2 cybersecurity obligations.NIS2
- EU Taxonomy alignmentHow far an economic activity meets the EU’s environmental sustainability criteria.CSRD / ESG
F
H
I
- ICT risk managementPolicies and controls to identify and protect against ICT risks.DORA
- ICT third-party risk managementThe DORA framework for risks from dependence on ICT service providers.DORA
- Important entityAn organisation covered by NIS2 with lighter cybersecurity supervision.NIS2
- Incident reportingThe DORA and NIS2 duty to report significant incidents to the authorities.DORA
L
M
R
S
T
Start with your most complex regulatory problem
- 01Initial meeting
- 02Demonstration on your case
- 03Deployment in weeks