Regulatory — Cross-Jurisdiction Tracker

Regulatory — Cross-Jurisdiction Tracker

Purpose

Multinational clients face a fragmented regulatory landscape: the same business activity (data processing, AML, financial services, AI deployment) is regulated differently across jurisdictions, often on different timelines. This workflow maintains a living comparative table that tracks regulatory developments across the client's relevant jurisdictions, assesses impact, and recommends implementation sequencing.

Inputs

Tracker Structure

Comparative Regulatory Table

The core output. Rows = regulatory domains or specific requirements. Columns = jurisdictions.

For each cell: current status (In force / Draft / Consultation / Not yet adopted) + effective date + key obligation summary.

Delta Log (weekly update)

Track changes since last report:

## Weekly Regulatory Delta — [Date Range]

### NEW DEVELOPMENTS

**UAE — VARA Virtual Asset Regulation Update**
- Summary: VARA issued updated marketing regulations for virtual asset service providers
- Effective: 30 days from publication
- Client impact: HIGH if client operates a VASP or promotes virtual asset products
- Action required: Review marketing materials for compliance before deadline

**KSA — SDAIA PDPL Implementing Regulations (Draft)**
- Summary: Draft implementing regulations for consent and data transfer published for consultation
- Comment deadline: [date]
- Client impact: MEDIUM — refines but does not fundamentally change current compliance approach
- Action required: Review draft; submit comment if client has KSA data operations

### UPCOMING DEADLINES

| Jurisdiction | Requirement | Deadline | Client impact |
|---|---|---|---|
| UAE | CBUAE Open Banking Phase 2 | 2025-09-01 | HIGH — licensed bank |
| EU | AI Act high-risk AI systems compliance | 2026-08-02 | MEDIUM — client uses AI in credit scoring |
| KSA | PDPL — data subject rights operationalization | 2025-03-17 | HIGH — large Saudi customer base |

Impact Assessment per Jurisdiction

For each active regulatory development:

Implementation Timeline Recommendations

The tracker produces a sequenced implementation schedule per client, accounting for:

• Regulatory deadlines (hard compliance dates)
• Regulator inspection schedules (if known)
• Interdependencies between jurisdictions (e.g., implementing GDPR-compatible policies first makes DIFC DP compliance easier)
• Client's resource constraints

Q1 2025 — Complete
  [x] UAE CBUAE AML update — policy updated, staff trained
  [x] DIFC DP Law — data mapping completed

Q2 2025 — In progress
  [ ] KSA PDPL — data subject rights process (due Q2)
  [ ] UAE VARA — marketing materials review (due before VARA inspection)

Q3 2025 — Planned
  [ ] CBUAE Open Banking Phase 2 — API integration (due Sep 2025)

Q4 2025 — Planned
  [ ] EU AI Act preparation — risk classification of AI systems

Regulatory Intelligence Sources

For each jurisdiction, the tracker pulls from:

MENA-Specific Tracking Notes

• GCC convergence: GCC states coordinate through the GCC Secretariat on financial regulation. A development from SAMA or CBUAE often signals forthcoming similar requirements in other GCC states (3–18 months lag typical).
• Free zone vs. onshore: UAE developments often apply differently to DIFC/ADGM (which have their own regulators) vs. mainland UAE. Track separately; do not conflate.
• Arabic-language sources: Many MENA regulatory developments are published first in Arabic with later English translations. The tracker should process Arabic-language official gazettes directly to avoid delay.
• Regulatory consultation windows: GCC regulators increasingly publish consultation papers. Clients in affected industries should consider submitting comments — it signals engagement and sometimes influences final rules.

Output Formats

• Full tracker (spreadsheet): complete comparative table, all jurisdictions, all domains
• Weekly delta report (email/Slack): new developments + upcoming deadlines only
• Board compliance summary (presentation): quarterly, executive-level view
• Jurisdiction spotlight (PDF): deep dive on a single jurisdiction, triggered by a major development

Related Skills

• [[pa-workflow-regulatory-daily-digest-publisher]]
• [[pa-workflow-regulatory-compliance-gap-matrix]]
• [[pa-workflow-regulatory-client-alert-drafter-firm-voice]]
• [[pa-workflow-regulatory-enforcement-likelihood-scorer]]