Watchtower/Law library
As last captured

Knowledge base · 8 sources

Law library

Every captured law, guidance document and register. Interpreted sources show a one-line summary and their impact per customer vertical; the rest can still be read in full.

ⓘ
How to read this. The coloured strip shows how strongly each law affects each customer vertical (darker = stronger obligation). Open a source for its summary, key obligations, parts and the full text of every provision.

Themes across laws are not available yet; they are generated once every watched source is interpreted.

SourceIn one lineImpact by verticalProvisions
Regulation (EU) 2016/679 (UK GDPR)
legislation
UK GDPR establishes mandatory data protection principles and subject rights binding controllers under Art. 5 and Art. 6, and binds controllers and processors to contract and security duties under Art. 28 and Art. 32.
trbfpseuipsvmemccm
tr 3 (transportation) bf 3 (banking_finance) ps 3 (public_sector_health) eu 3 (energy_utility_telco) ip 3 (insurance_pensions) sv 3 (services) me 3 (media_entertainment) mc 3 (manufacturing_construction) cm 3 (commerce)
140
Financial sanctions general guidance
govuk
OFSI Financial Sanctions Guidance sets out asset freezing duties and mandatory reporting for UK entities under uk financial sanctions general guidance 3 what financial sanctions restrict 3 1 2 what you must do and uk financial sanctions general guidance 5 reporting to ofsi 5 1 1 reporting obligations for relevant firms.
trbfpseuipsvmemccm
tr 2 (transportation) bf 3 (banking_finance) ps 2 (public_sector_health) eu 2 (energy_utility_telco) ip 3 (insurance_pensions) sv 3 (services) me 1 (media_entertainment) mc 2 (manufacturing_construction) cm 2 (commerce)
114
Immigration, Asylum and Nationality Act 2006
legislation
Immigration, Asylum and Nationality Act 2006 imposes employer penalties and statutory excuse mechanisms under s. 15, criminal sanctions under s. 21, and border passenger reporting duties under s. 31 on employers and carriers.
trbfpseuipsvmemccm
tr 3 (transportation) bf 3 (banking_finance) ps 3 (public_sector_health) eu 3 (energy_utility_telco) ip 3 (insurance_pensions) sv 3 (services) me 3 (media_entertainment) mc 3 (manufacturing_construction) cm 3 (commerce)
88
Data (Use and Access) Act 2025
legislation
Data (Use and Access) Act 2025 establishes the DVS register under s. 32, governs underground asset data duties for undertakers under s. 56, and binds controllers to handle subject complaints under s. 103.
trbfpseuipsvmemccm
tr 2 (transportation) bf 2 (banking_finance) ps 2 (public_sector_health) eu 2 (energy_utility_telco) ip 2 (insurance_pensions) sv 2 (services) me 2 (media_entertainment) mc 2 (manufacturing_construction) cm 2 (commerce)
313
Electronic Commerce (EC Directive) Regulations 2002
legislation
Electronic Commerce Regulations 2002 requires service providers to provide statutory disclosures, storable contract terms, and order acknowledgments under reg. 6, reg. 9, and reg. 11, with liability exemptions under reg. 17, reg. 18, and reg. 19.
trbfpseuipsvmemccm
tr 1 (transportation) bf 1 (banking_finance) ps 1 (public_sector_health) eu 2 (energy_utility_telco) ip 1 (insurance_pensions) sv 2 (services) me 2 (media_entertainment) mc 1 (manufacturing_construction) cm 2 (commerce)
27
Privacy and Electronic Communications (EC Directive) Regulations 2003
legislation
PECR requires communications providers to safeguard security and report breaches under reg. 5A, restricts terminal storage under reg. 6, and binds direct marketers regarding unsolicited calls and electronic mail under reg. 21 and reg. 22.
trbfpseuipsvmemccm
tr 1 (transportation) bf 2 (banking_finance) ps 1 (public_sector_health) eu 3 (energy_utility_telco) ip 2 (insurance_pensions) sv 2 (services) me 1 (media_entertainment) mc 1 (manufacturing_construction) cm 2 (commerce)
92
Immigration (Restrictions on Employment) Order 2007
legislation
Immigration (Restrictions on Employment) Order 2007 establishes statutory excuses against illegal employment penalties via document verification under Art. 3, IDVT checks under Art. 3A, and online checks under Art. 4B, binding employers and IDVT identity service providers under Art. 6A.
trbfpseuipsvmemccm
tr 2 (transportation) bf 2 (banking_finance) ps 2 (public_sector_health) eu 2 (energy_utility_telco) ip 2 (insurance_pensions) sv 3 (services) me 2 (media_entertainment) mc 2 (manufacturing_construction) cm 2 (commerce)
45
Network and Information Systems Regulations 2018
legislation
Network and Information Systems Regulations 2018 requires relevant digital service providers to manage network security and report incidents under reg. 12, submit registration details under reg. 14, and nominate UK representatives under reg. 14A.
trbfpseuipsvmemccm
tr 2 (transportation) bf 1 (banking_finance) ps 2 (public_sector_health) eu 2 (energy_utility_telco) ip 0 (insurance_pensions) sv 1 (services) me 1 (media_entertainment) mc 0 (manufacturing_construction) cm 2 (commerce)
40
Vertical impact: 0 none1 awareness2 conditional3 mandatory tr transport · bf banking · ps public/health · eu energy/telco · ip insurance/pensions · sv services · me media · mc manufacturing · cm commerce