Global compliance research

Wholesale and retail trade: compliance research

Browse potential licenses, permits and compliance topics for ISIC Rev.5 G: Wholesale and retail trade. Activity mappings need local verification.

ISIC Rev.5 section: G

Coverage status: unreviewed. This is an activity classification, not a legal determination or a complete license inventory. Local activity codes and licensing categories may differ.

Official UN classification source

More specific activities

Filter this activity by location

Regulationdraft
Australian Privacy Act compliance
Australian privacy law; covered entities, exemptions and amendments require verification.
AU · Office of the Australian Information Commissioner
Compare this requirement
Product approvaldraft
BIS product certification
Indian product conformity schemes; the specific product and applicable scheme must be identified.
IN · Bureau of Indian Standards
Compare this requirement
Business licensedraft
California alcoholic beverage license
California alcohol licensing; license class depends on the proposed business activity.
US-CA · California Department of Alcoholic Beverage Control
Compare this requirement
Regulationdraft
California Consumer Privacy Act, as amended by CPRA
California privacy obligations; thresholds, exemptions and current regulations require verification.
US-CA · California Privacy Protection Agency
Compare this requirement
Product approvaldraft
CE marking and EU product conformity
Product-specific EU conformity assessment and marking requirements.
EU · European Commission / relevant market surveillance authorities
Compare this requirement
CertificationOverview verified
Cyber Essentials certification
UK cybersecurity certification scheme covering five technical control areas and two assurance levels.
GB · National Cyber Security Centre / IASME
Compare this requirement
Certificationdraft
Cybersecurity Maturity Model Certification (CMMC)
US defense supplier cybersecurity program; contractual applicability and assessment level require review.
US · US Department of Defense
Compare this requirement
Business licensedraft
DIFC commercial licensing
Commercial establishment and registration in the DIFC special jurisdiction.
AE-DU-DIFC · Dubai International Financial Centre Registrar of Companies
Compare this requirement
Regulationdraft
Digital Personal Data Protection Act compliance
Indian digital personal data protection framework; commencement, rules and phased obligations require current review.
IN · Ministry of Electronics and Information Technology
Compare this requirement
Business licensedraft
Dubai mainland business licensing
Dubai mainland business setup and licensing; free-zone permissions are separate.
AE-DU · Dubai Department of Economy and Tourism
Compare this requirement
Frameworkdraft
Essential Eight mitigation strategies
Australian cyber security mitigation guidance and maturity model.
AU · Australian Signals Directorate
Compare this requirement
Regulationdraft
EU Artificial Intelligence Act
AI regulation with role, risk and implementation-date distinctions requiring review.
EU · European Union / European AI Office
Compare this requirement
Registrationdraft
FDA medical device establishment registration and listing
US medical device establishment registration and listing. Registration is distinct from product clearance or approval.
US · US Food and Drug Administration
Compare this requirement
Registrationdraft
Food business registration in England, Wales and Northern Ireland
Food business registration guidance; local authority and activity-specific approvals require checking.
GB-ENG, GB-WLS, GB-NIR · Food Standards Agency / relevant local authority
Compare this requirement
Business licensedraft
FSSAI food business licensing and registration
Indian food business licensing and registration routes through FoSCoS.
IN · Food Safety and Standards Authority of India
Compare this requirement
Regulationdraft
General Data Protection Regulation (GDPR)
EU personal data protection regulation; territorial scope can include organizations outside the EU.
EU · European Union / national supervisory authorities
Compare this requirement
Registrationdraft
Gewerbeanmeldung (German trade registration)
German trade registration research entry; competent local office and exemptions require confirmation.
DE · Relevant municipal trade office / federal service portal
Compare this requirement
Registrationdraft
Goods and Services Tax registration (India)
Indian GST registration; turnover, supplies, exceptions and state registrations require review.
IN · Goods and Services Tax authorities
Compare this requirement
Certificationdraft
HITRUST assessment and certification
Assessment and certification routes under the HITRUST assurance program.
WORLD · HITRUST
Compare this requirement
Registrationdraft
Importer Exporter Code (India)
Indian importer/exporter identification and associated DGFT processes.
IN · Directorate General of Foreign Trade
Compare this requirement
Certificationdraft
ISO 14001 environmental management certification
Environmental management system standard; edition and transition arrangements require review.
WORLD · International Organization for Standardization
Compare this requirement
Certificationdraft
ISO 22000 food safety management certification
Food safety management system standard for organizations in the food chain.
WORLD · International Organization for Standardization
Compare this requirement
Certificationdraft
ISO 22301 business continuity certification
Business continuity management system standard.
WORLD · International Organization for Standardization
Compare this requirement
Certificationdraft
ISO 45001 occupational health and safety certification
Occupational health and safety management system certification.
WORLD · International Organization for Standardization
Compare this requirement
CertificationOverview verified
ISO 9001 quality management certification
Quality management system certification: current edition, scope, independent assessment and transition questions.
WORLD · International Organization for Standardization
Compare this requirement
Certificationsuperseded
ISO 9001:2015 — superseded edition
Historical edition record. ISO lists ISO 9001:2026 as the replacement; certificate transition arrangements require separate confirmation.
WORLD · International Organization for Standardization
Compare this requirement
Certificationdraft
ISO/IEC 27001 certification
Information security management system certification; scope and certification body must be established.
WORLD · International Organization for Standardization
Compare this requirement
Certificationdraft
ISO/IEC 42001 certification
Management system standard for artificial intelligence governance.
WORLD · International Organization for Standardization
Compare this requirement
Regulationdraft
Lei Geral de Proteção de Dados Pessoais (LGPD)
Brazilian personal data protection law and ANPD guidance.
BR · Autoridade Nacional de Proteção de Dados
Compare this requirement
Regulationdraft
NIS2 Directive
EU cybersecurity directive; national implementation and entity classification require local review.
EU · European Union / national competent authorities
Compare this requirement
FrameworkOverview verified
NIST Cybersecurity Framework 2.0
A framework for organizing cybersecurity risk outcomes, profiles and improvement priorities.
WORLD · National Institute of Standards and Technology
Compare this requirement
Frameworkdraft
NIST SP 800-171 controlled unclassified information protection
Security requirements for protecting controlled unclassified information; contract requirements and revisions need review.
US · National Institute of Standards and Technology
Compare this requirement
Frameworkdraft
PCI DSS compliance
Payment card security standard; validation depends on the relevant payment ecosystem.
WORLD · PCI Security Standards Council
Compare this requirement
Regulationdraft
Personal Data Protection Act (Singapore)
Singapore personal data protection obligations.
SG · Personal Data Protection Commission
Compare this requirement
Regulationdraft
Personal Information Protection and Electronic Documents Act (PIPEDA)
Canadian federal private-sector privacy law; provincial laws may also be relevant.
CA · Office of the Privacy Commissioner of Canada
Compare this requirement
Regulationdraft
Sarbanes–Oxley Act internal control obligations
US issuer reporting and internal control obligations; issuer category and applicability require review.
US · US Securities and Exchange Commission
Compare this requirement
Registrationdraft
Singapore business registration
Singapore business registration routes; entity form and exemptions require review.
SG · Accounting and Corporate Regulatory Authority
Compare this requirement
Attestationdraft
SOC 2 examination
An assurance examination concerning controls at a service organization.
WORLD · American Institute of Certified Public Accountants
Compare this requirement
Regulationdraft
UAE federal personal data protection law
UAE federal data protection framework; free-zone regimes require separate consideration.
AE · UAE Government / UAE Data Office
Compare this requirement
Registrationdraft
UK company incorporation
Company incorporation is distinct from permissions to perform regulated activities.
GB · Companies House
Compare this requirement
Regulationdraft
UK GDPR and Data Protection Act compliance
UK personal data protection obligations; amendments and territorial scope require review.
GB · Information Commissioner's Office
Compare this requirement
Business licensedraft
US export licensing under the Export Administration Regulations
US export controls; classification, destination, end user and end use require assessment.
US · Bureau of Industry and Security
Compare this requirement
Permitdraft
US plant and plant product import permits
US plant import permissions; commodity and origin-specific requirements need verification.
US · USDA Animal and Plant Health Inspection Service
Compare this requirement
Regulationdraft
US workplace safety compliance
US occupational safety obligations; industry-specific rules and state plans require assessment.
US · Occupational Safety and Health Administration / state plans
Compare this requirement