Global compliance research
Manufacture of cocoa, chocolate and sugar confectionery: compliance research
Browse potential licenses, permits and compliance topics for ISIC Rev.5 1073: Manufacture of cocoa, chocolate and sugar confectionery. Activity mappings need local verification.
ISIC Rev.5 class: 1073
Coverage status: unreviewed. This is an activity classification, not a legal determination or a complete license inventory. Local activity codes and licensing categories may differ.
- Regulationdraft
Australian Privacy Act compliance
Australian privacy law; covered entities, exemptions and amendments require verification.
AU · Office of the Australian Information Commissioner
Compare this requirement - Product approvaldraft
BIS product certification
Indian product conformity schemes; the specific product and applicable scheme must be identified.
IN · Bureau of Indian Standards
Compare this requirement - Regulationdraft
California Consumer Privacy Act, as amended by CPRA
California privacy obligations; thresholds, exemptions and current regulations require verification.
US-CA · California Privacy Protection Agency
Compare this requirement - Product approvaldraft
CE marking and EU product conformity
Product-specific EU conformity assessment and marking requirements.
EU · European Commission / relevant market surveillance authorities
Compare this requirement - CertificationOverview verified
Cyber Essentials certification
UK cybersecurity certification scheme covering five technical control areas and two assurance levels.
GB · National Cyber Security Centre / IASME
Compare this requirement - Certificationdraft
Cybersecurity Maturity Model Certification (CMMC)
US defense supplier cybersecurity program; contractual applicability and assessment level require review.
US · US Department of Defense
Compare this requirement - Business licensedraft
DIFC commercial licensing
Commercial establishment and registration in the DIFC special jurisdiction.
AE-DU-DIFC · Dubai International Financial Centre Registrar of Companies
Compare this requirement - Regulationdraft
Digital Personal Data Protection Act compliance
Indian digital personal data protection framework; commencement, rules and phased obligations require current review.
IN · Ministry of Electronics and Information Technology
Compare this requirement - Business licensedraft
Dubai mainland business licensing
Dubai mainland business setup and licensing; free-zone permissions are separate.
AE-DU · Dubai Department of Economy and Tourism
Compare this requirement - Permitdraft
Environmental permitting in England
Environmental permits in England; activity and site determine the relevant regulator.
GB-ENG · Environment Agency / relevant local authority
Compare this requirement - Frameworkdraft
Essential Eight mitigation strategies
Australian cyber security mitigation guidance and maturity model.
AU · Australian Signals Directorate
Compare this requirement - Regulationdraft
EU Artificial Intelligence Act
AI regulation with role, risk and implementation-date distinctions requiring review.
EU · European Union / European AI Office
Compare this requirement - Registrationdraft
FDA medical device establishment registration and listing
US medical device establishment registration and listing. Registration is distinct from product clearance or approval.
US · US Food and Drug Administration
Compare this requirement - Registrationdraft
Food business registration in England, Wales and Northern Ireland
Food business registration guidance; local authority and activity-specific approvals require checking.
GB-ENG, GB-WLS, GB-NIR · Food Standards Agency / relevant local authority
Compare this requirement - Business licensedraft
FSSAI food business licensing and registration
Indian food business licensing and registration routes through FoSCoS.
IN · Food Safety and Standards Authority of India
Compare this requirement - Regulationdraft
General Data Protection Regulation (GDPR)
EU personal data protection regulation; territorial scope can include organizations outside the EU.
EU · European Union / national supervisory authorities
Compare this requirement - Registrationdraft
Gewerbeanmeldung (German trade registration)
German trade registration research entry; competent local office and exemptions require confirmation.
DE · Relevant municipal trade office / federal service portal
Compare this requirement - Registrationdraft
Goods and Services Tax registration (India)
Indian GST registration; turnover, supplies, exceptions and state registrations require review.
IN · Goods and Services Tax authorities
Compare this requirement - Certificationdraft
HITRUST assessment and certification
Assessment and certification routes under the HITRUST assurance program.
WORLD · HITRUST
Compare this requirement - Registrationdraft
Importer Exporter Code (India)
Indian importer/exporter identification and associated DGFT processes.
IN · Directorate General of Foreign Trade
Compare this requirement - Certificationdraft
ISO 13485 medical device quality management certification
Quality management system requirements associated with medical devices.
WORLD · International Organization for Standardization
Compare this requirement - Certificationdraft
ISO 14001 environmental management certification
Environmental management system standard; edition and transition arrangements require review.
WORLD · International Organization for Standardization
Compare this requirement - Certificationdraft
ISO 22000 food safety management certification
Food safety management system standard for organizations in the food chain.
WORLD · International Organization for Standardization
Compare this requirement - Certificationdraft
ISO 22301 business continuity certification
Business continuity management system standard.
WORLD · International Organization for Standardization
Compare this requirement - Certificationdraft
ISO 45001 occupational health and safety certification
Occupational health and safety management system certification.
WORLD · International Organization for Standardization
Compare this requirement - CertificationOverview verified
ISO 9001 quality management certification
Quality management system certification: current edition, scope, independent assessment and transition questions.
WORLD · International Organization for Standardization
Compare this requirement - Certificationsuperseded
ISO 9001:2015 — superseded edition
Historical edition record. ISO lists ISO 9001:2026 as the replacement; certificate transition arrangements require separate confirmation.
WORLD · International Organization for Standardization
Compare this requirement - Certificationdraft
ISO/IEC 27001 certification
Information security management system certification; scope and certification body must be established.
WORLD · International Organization for Standardization
Compare this requirement - Certificationdraft
ISO/IEC 42001 certification
Management system standard for artificial intelligence governance.
WORLD · International Organization for Standardization
Compare this requirement - Regulationdraft
Lei Geral de Proteção de Dados Pessoais (LGPD)
Brazilian personal data protection law and ANPD guidance.
BR · Autoridade Nacional de Proteção de Dados
Compare this requirement - Permitdraft
Licenciamento ambiental federal (Brazil)
Brazilian federal environmental licensing; state and municipal competence require separate review.
BR · Instituto Brasileiro do Meio Ambiente e dos Recursos Naturais Renováveis
Compare this requirement - Permitdraft
National Pollutant Discharge Elimination System permit
US water discharge permitting under NPDES; delegated authority and permit type require review.
US · US Environmental Protection Agency / authorized state agencies
Compare this requirement - Regulationdraft
NIS2 Directive
EU cybersecurity directive; national implementation and entity classification require local review.
EU · European Union / national competent authorities
Compare this requirement - FrameworkOverview verified
NIST Cybersecurity Framework 2.0
A framework for organizing cybersecurity risk outcomes, profiles and improvement priorities.
WORLD · National Institute of Standards and Technology
Compare this requirement - Frameworkdraft
NIST SP 800-171 controlled unclassified information protection
Security requirements for protecting controlled unclassified information; contract requirements and revisions need review.
US · National Institute of Standards and Technology
Compare this requirement - Frameworkdraft
PCI DSS compliance
Payment card security standard; validation depends on the relevant payment ecosystem.
WORLD · PCI Security Standards Council
Compare this requirement - Regulationdraft
Personal Data Protection Act (Singapore)
Singapore personal data protection obligations.
SG · Personal Data Protection Commission
Compare this requirement - Regulationdraft
Personal Information Protection and Electronic Documents Act (PIPEDA)
Canadian federal private-sector privacy law; provincial laws may also be relevant.
CA · Office of the Privacy Commissioner of Canada
Compare this requirement - Regulationdraft
Sarbanes–Oxley Act internal control obligations
US issuer reporting and internal control obligations; issuer category and applicability require review.
US · US Securities and Exchange Commission
Compare this requirement - Registrationdraft
Singapore business registration
Singapore business registration routes; entity form and exemptions require review.
SG · Accounting and Corporate Regulatory Authority
Compare this requirement - Attestationdraft
SOC 2 examination
An assurance examination concerning controls at a service organization.
WORLD · American Institute of Certified Public Accountants
Compare this requirement - Regulationdraft
UAE federal personal data protection law
UAE federal data protection framework; free-zone regimes require separate consideration.
AE · UAE Government / UAE Data Office
Compare this requirement - Registrationdraft
UK company incorporation
Company incorporation is distinct from permissions to perform regulated activities.
GB · Companies House
Compare this requirement - Regulationdraft
UK GDPR and Data Protection Act compliance
UK personal data protection obligations; amendments and territorial scope require review.
GB · Information Commissioner's Office
Compare this requirement - Business licensedraft
US export licensing under the Export Administration Regulations
US export controls; classification, destination, end user and end use require assessment.
US · Bureau of Industry and Security
Compare this requirement - Regulationdraft
US workplace safety compliance
US occupational safety obligations; industry-specific rules and state plans require assessment.
US · Occupational Safety and Health Administration / state plans
Compare this requirement