Skip to content

The chart

421 obligations. 12 regulations & 6 standards.
We did the reading.

Landfall is a compliance-to-engineering tool for public bodies, banks and product teams. Every obligation below is mapped from source legal text — structured with severity, category, implementation guidance, and a full citation chain.

You pick a use case when you create a project — an EU AI Act pre-scan, a privacy or DPIA screening, child online safety, accessibility, or a NIST security and privacy framework — and Landfall pre-selects the frameworks that follow from it.

Run your cursor across the chart — the links light the way

Binding Regulations

Enforceable laws across 7 jurisdictions. Each obligation is traced to specific articles, with severity ratings, trigger conditions, and implementation guidance.

🇬🇧
UK AADC·ICO

Age Appropriate Design Code

27 obligationsEffective Sep 2021
🇪🇺
EU DSA·European Commission

Digital Services Act

28 obligationsEffective Feb 2024
🇺🇸
CAADCA·CPPA

CA Age-Appropriate Design Code Act

27 obligationsEffective Jul 2024
🇺🇸
COPPA·FTC

Children's Online Privacy Protection Act

24 obligationsEffective Apr 2000
🇬🇧
UK OSA·Ofcom

Online Safety Act 2023

23 obligationsEffective Oct 2023
🇪🇺
EU AI Act·European Commission

Artificial Intelligence Act

40 obligationsEffective Aug 2024
🇦🇺
AU OSA·eSafety Commissioner

Online Safety Act 2021

20 obligationsEffective Jan 2022
🇧🇷
LGPD·ANPD

Lei Geral de Proteção de Dados

20 obligationsEffective Sep 2020
🇮🇪
IE OSC·Coimisiún na Meán

Online Safety Code

20 obligationsEffective Feb 2024
🇸🇬
SG PDPA·PDPC

Personal Data Protection Act

18 obligationsEffective Jul 2014
🇪🇺
EU GDPR Art. 8·DPAs

GDPR Children's Provisions

18 obligationsEffective May 2018
🇪🇺
EU GDPR·EDPB / national DPAs

General Data Protection Regulation

5 obligationsEffective May 2018

Technical Standards

Industry standards and frameworks. Not legally binding on their own, but increasingly referenced by regulators as benchmarks for compliance.

NIST CSF

Cybersecurity Framework 2.0

25 obligations
W3C WCAG

Web Content Accessibility Guidelines 2.2

24 obligations
NIST PF

Privacy Framework 1.0

23 obligations
IEEE 2089

Age Appropriate Digital Services Framework

15 obligations
ISO 27566

Age Assurance Framework

13 obligations
AIUC-1Preview

AI Agent Certification Standard

51 obligations

How we structure every obligation

Every obligation is broken down into canonical fields so interpretations are consistent, comparable, and auditable — not left as vague legal prose.

Source & Citation

  • Full legal text from source
  • Article/section reference
  • Jurisdiction & enforcement status
  • Effective and sunset dates

Interpretation

  • Plain-language summary
  • Canonical requirement
  • Confidence level with notes
  • Implementation guidance

Metadata

  • Severity (Critical → Low)
  • Estimated effort (T-shirt sizing)
  • Obligation type & category
  • Trigger conditions for applicability
16 Obligation Categories
Data CollectionData ProcessingData RetentionData SharingConsentTransparencyProfilingAlgorithmic ProfilingAutomated DecisionsAge VerificationAge AssuranceParental ControlsDesign DefaultsRisk AssessmentGovernanceUser Rights
The harbour

Tell us about your product.
We’ll tell you what applies.

Answer a few questions about your service, audience, and data practices. Landfall surfaces the specific obligations that apply — and turns them into engineering tickets.