Compliance means acting in line with the rules. In a company, it is about following the rules that apply. These can be national and EU laws, demands from customers, and the company's own policies.
Following the rules is not enough. You must also be able to show it, if an authority, an auditor, or a customer asks.
Examples of compliance
- Personal data: You follow GDPR and protect the data of customers and staff.
- AI: You follow the AI Act when you use AI at work.
- IT security: You manage risks and follow NIS2, if it covers you.
- Health and safety: You assess the risks at work and look after the physical and mental work environment.
- Finance: You follow the rules against money laundering and the rules on accounts, for example.
Who is responsible?
Management is responsible. Large companies often have a compliance team or a compliance officer who keeps track of the rules. In smaller companies, the task often sits with HR, IT, or finance.
But it is the employees who follow the rules in daily work. That is why training is a big part of compliance. Read more about compliance training, or see which rules require it in employee training: what does the law require?