See which laws, regulations and standards Mynder helps businesses manage – including GDPR, NIS2, DORA, AI Act, ISO 27001 and more.
Laws, regulations and standards – all in one place
Mynder helps businesses with compliance analysis, risk assessments and follow-up across privacy, security, workplace regulations and supply chains. Instead of working in silos, you get one structure to manage the requirements that apply to your business.
Work structured with requirements – not one by one
Most businesses need to comply with multiple regulations simultaneously. Requirements overlap, but the work is often done in separate documents and processes. Mynder brings together requirements, assessments, measures and documentation in one place, so you can work more efficiently with better control.
Standards and frameworks
ISO 27001
International standard for information security management systems.
ISO 27002
Guidance on security controls and best practices for information security.
ISO 27701
Standard for privacy management and processing of personal data.
ISO 42001
International standard for governance of artificial intelligence.
Normen
Norwegian framework for information security and privacy in the health and care sector.
EU regulations and directives
GDPR
Requirements for processing personal data, documentation and internal controls.
AI Act
Requirements for responsible and safe use of artificial intelligence.
NIS2
Requirements for cybersecurity, risk management and governance.
DORA
Requirements for digital operational resilience in the financial sector.
CRA
Cybersecurity requirements for products with digital elements.
ePrivacy
Rules for cookies, electronic communication and privacy online.
CSA CCM
Cloud Security Alliance Cloud Controls Matrix – framework for cloud security.
National laws and requirements
Personopplysningsloven
Norwegian implementation of GDPR and rules for processing personal data.
Arbeidsmiljøloven
Requirements for the working environment, employer responsibility and systematic follow-up.
Bokføringsloven
Requirements for bookkeeping, documentation and retention.
Bokføringsforskriften
Detailed rules for how bookkeeping must be carried out.
Åpenhetsloven
Requirements for due diligence and transparency around supply chains and human rights.
Hvitvaskingsloven
Requirements for measures against money laundering and terrorist financing.
NSMs grunnprinsipper
Recommended security principles from the Norwegian National Security Authority.
Sikkerhetsloven
Requirements for protecting national security and critical infrastructure.
Pasientjournalloven
Rules for processing and handling patient records.
Helseregisterloven
Requirements for processing health information and health registries.
Etiske retningslinjer for KI
Norwegian national ethical guidelines for the development and use of artificial intelligence.
Dataskyddslagen
Swedish implementation of GDPR and rules for processing personal data.
Dataskyddsförordningen
Supplementary Swedish regulation related to GDPR.
Säkerhetsskyddslagen
Swedish Protective Security Act.
Patientdatalagen
Act on processing and handling of patient data.
Cybersäkerhetslag
Swedish implementation of the NIS2 directive.
Bokföringslagen
Swedish Act on bookkeeping and accounting control.
Diskrimineringslagen
Act against discrimination in working life and society.
Visselblåsarlagen
Act on protection of whistleblowers.
FFFS 2024:20
Regulations from the Swedish Financial Supervisory Authority on operational risk and IT security.
LEK
Act on electronic communication in Sweden.
OSL
Public Access to Information and Secrecy Act.
Uitvoeringswet AVG (UAVG)
Dutch implementation of GDPR and rules for processing personal data.
Cyberbeveiligingswet (Cbw)
Dutch implementation of the NIS2 directive.
Wet ter voorkoming van witwassen (Wwft)
Act on measures against money laundering and terrorist financing.
Wet bescherming klokkenluiders (Wbk)
Arbeidsomstandighedenwet (Arbowet)
Dutch Working Conditions Act.
Wet op het financieel toezicht (Wft)
Act on financial supervision and regulation of the financial sector.
Wet op de geneeskundige behandelingsovereenkomst (WGBO)
Act on medical treatment and patient rights.
Baseline Informatiebeveiliging Overheid 2 (BIO2)
Baseline standard for information security in the public sector.
Privacy Act 1988 + 13 APPs
Australian privacy law with 13 Australian Privacy Principles.
NDB Scheme
Notifiable Data Breaches Scheme – obligations to notify on data breaches.
Essential Eight
ASD maturity model with eight baseline security mitigations.
SOCI Act 2018
Security of Critical Infrastructure Act – protection of critical infrastructure.
Modern Slavery Act 2018
Requirements for transparency on modern slavery in supply chains.
Cyber Security Act 2024
New Australian Act on cyber security and reporting obligations.
APRA CPS 234
Information security requirements for regulated financial entities.
APRA CPS 230
Operational risk management for the financial sector.
ISM
Australian Government Information Security Manual.
Telecommunications Act 1997
Australian act on electronic communications.
Telecommunications (Interception and Access) Act 1979
Act on lawful interception and access to communications.
UK GDPR
UK version of GDPR following Brexit.
Data Protection Act 2018
UK privacy act supplementing UK GDPR.
Cyber Essentials
UK certification scheme for baseline cyber security.