Every organization must

• Determine and have access to the requirements and compliance obligations related to its activity (legal requirements, industry standards, permits, authorizations, licenses and agreements with entities, etc.)
• Determine to what extent and in what ways these obligations must be implemented
• Integrate these obligations gradually into its management processes and improvement plans

These obligations can be:

• specific to the activity
• specific to the products
• specific to the industrial sector
• specific to personnel management
• environmental laws and environmental permits
• laws on safety and hygiene in the workplace
• laws on plant safety and prevention of industrial accidents

The complete inventory of obligations applicable to the organization is not a definitive list but is subject to change over time due to the evolution of laws, the updating of standards, the modification of the organization itself (growth, new products, new objectives, etc.) and the evolution of the requests and expectations of the various interested parties.

To this end, the organization must define one or more persons responsible for maintaining and evaluating the new obligations.

They must be provided with legislative and bibliographic sources, external resources, training
All those in the organization who have access to these and other sources collaborate with the person in charge/s to identify, interpret and verify the actual applicability as far as their competence is concerned.
If a conformity is found not to be applicable to the organization, as a result of a critical analysis of the text, then a document is needed that collects the research work done and justifies the non-applicability. In some cases, the law itself requires this document.

Some conformities are permanently integrated into the organization's structure and do not require further action. But it is more common that it is also necessary to define periodic activities such as, verification of compliance with the conformity by competent internal or external personnel, payment of taxes, definition of objectives, communication of final data, communication of final reports.

These activities, if the initiative is within the scope of the organization, must be scheduled and assigned to those responsible for implementation.