Industries

Industry-specific compliance requirements by sector.

Sector Overview

Sector	AI Act	NIS2	GDPR	Other regulations
SaaS / Cloud	Yes	Essential	Yes	—
Healthcare	High-Risk	Essential	Yes+	MDR
Finance / Fintech	High-Risk	Essential	Yes+	PSD2, DORA
Manufacturing	Yes	Important	Yes	Machinery Directive
Public Sector	Yes	Essential	Yes+	Public information systems legislation

Quick Impact Matrix

                        AI Act Impact    NIS2 Impact    GDPR Impact
                        -------------    -----------    -----------
SaaS/Cloud              HIGH             HIGH           HIGH

Healthcare              CRITICAL         CRITICAL       CRITICAL

Finance/Fintech         CRITICAL         CRITICAL       CRITICAL

Manufacturing           MEDIUM           MEDIUM         HIGH

Public Sector           HIGH             CRITICAL       CRITICAL

Common Requirements

Regardless of sector, all organizations must address:

AI Act

AI inventory
Risk classification
Documentation and transparency

NIS2

Scope determination
ISMS implementation (if applicable)
Incident response plan

Data mapping (ROPA)
DSAR workflow
Breach notification procedures
DPA with all vendors

Sector-Specific Extensions

Healthcare

Health data = special category (Art. 9 GDPR)
AI diagnostics = High-Risk (AI Act Annex III)
Medical device certification

Finance

Credit scoring = High-Risk AI
PSD2 compliance for payments
DORA (Digital Operational Resilience Act) — lex specialis for the financial sector

Public Sector

High transparency requirements
Freedom of Information
Enhanced NIS2 obligations

Next Steps

Select your sector for detailed requirements: