Regulation Coverage

345+ obligations. 11 regulations & 5 standards.
We did the reading.

Every obligation is mapped from source legal text — structured with severity, category, implementation guidance, and full citation chain.

Our pilot focuses on children's safety & online protection. More regulatory domains are on the roadmap.

345+
Obligations
11
Binding Laws
5
Standards
9
Jurisdictions

Binding Regulations

Enforceable laws across 9 jurisdictions. Each obligation is traced to specific articles, with severity ratings, trigger conditions, and implementation guidance.

🇬🇧
UK AADC·ICO

Age Appropriate Design Code

27 obligationsEffective Sep 2021
🇪🇺
EU DSA·European Commission

Digital Services Act

28 obligationsEffective Feb 2024
🇺🇸
CAADCA·CPPA

CA Age-Appropriate Design Code Act

27 obligationsEffective Jul 2024
🇺🇸
COPPA·FTC

Children's Online Privacy Protection Act

24 obligationsEffective Apr 2000
🇬🇧
UK OSA·Ofcom

Online Safety Act 2023

23 obligationsEffective Oct 2023
🇪🇺
EU AI Act·European Commission

Artificial Intelligence Act

20 obligationsEffective Aug 2024
🇦🇺
AU OSA·eSafety Commissioner

Online Safety Act 2021

20 obligationsEffective Jan 2022
🇧🇷
LGPD·ANPD

Lei Geral de Proteção de Dados

20 obligationsEffective Sep 2020
🇮🇪
IE OSC·Coimisiún na Meán

Online Safety Code

20 obligationsEffective Feb 2024
🇸🇬
SG PDPA·PDPC

Personal Data Protection Act

18 obligationsEffective Jul 2014
🇪🇺
EU GDPR Art. 8·DPAs

GDPR Children's Provisions

18 obligationsEffective May 2018

Technical Standards

Industry standards and frameworks. Not legally binding on their own, but increasingly referenced by regulators as benchmarks for compliance.

NIST CSF

Cybersecurity Framework 2.0

25 obligations
W3C WCAG

Web Content Accessibility Guidelines 2.2

24 obligations
NIST PF

Privacy Framework 1.0

23 obligations
IEEE 2089

Age Appropriate Digital Services Framework

15 obligations
ISO 27566

Age Assurance Framework

13 obligations

How we structure every obligation

Every obligation is broken down into canonical fields so interpretations are consistent, comparable, and auditable — not left as vague legal prose.

Source & Citation

  • Full legal text from source
  • Article/section reference
  • Jurisdiction & enforcement status
  • Effective and sunset dates

Interpretation

  • Plain-language summary
  • Canonical requirement
  • Confidence level with notes
  • Implementation guidance

Metadata

  • Severity (Critical → Low)
  • Estimated effort (T-shirt sizing)
  • Obligation type & category
  • Trigger conditions for applicability

16 Obligation Categories

Data CollectionData ProcessingData RetentionData SharingConsentTransparencyProfilingAlgorithmic ProfilingAutomated DecisionsAge VerificationAge AssuranceParental ControlsDesign DefaultsRisk AssessmentGovernanceUser Rights

Tell us about your product.
We’ll tell you what applies.

Answer a few questions about your service, audience, and data practices. Landfall surfaces the specific obligations that apply — and turns them into engineering tickets.