Compliance obligations are one of the three pillars of environmental management system (EMS) planning, alongside environmental aspects and risks and opportunities. ISO 14001 requires every organisation to identify the requirements that bind it, keep them up to date through regulatory monitoring, and periodically evaluate its compliance. This article explains what these obligations cover, how to organise monitoring and how to demonstrate compliance during an audit.
What is a compliance obligation?
In ISO 14001 terminology, a compliance obligation covers two categories: the legal requirements the organisation must comply with, and the other requirements it chooses to adopt. The term replaces the former wording "legal and other requirements" of previous versions of the standard, but the logic is the same: capture everything that applies to the organisation regarding the environment.
Legal requirements and other requirements
| Type | Examples |
|---|---|
| Legal requirements | Environmental laws and regulations, operating permits, discharge orders, limit values, reporting obligations |
| Other requirements | Customer and client requirements, voluntary commitments, sector codes of conduct, agreements with local authorities, parent company requirements |
In Morocco, the reference framework is Framework Law No. 99-12 bearing the National Charter for the Environment and Sustainable Development, supplemented by sector-specific texts (waste, air, water, impact assessments). The organisation must identify those that actually apply to its activities and sites.
Regulatory monitoring: identify and keep up to date
An obligation is only valuable if it is known and tracked. Regulatory monitoring means spotting applicable texts, following their changes and integrating new requirements into the EMS. A structured approach includes:
- An initial inventory of applicable requirements, by theme (air, water, waste, noise, soil, chemicals) and by site.
- Reliable sources: official gazettes, authority websites, professional federations, monitoring providers.
- A defined update frequency and a designated owner.
- A register of obligations kept up to date, linking each requirement to the relevant activity and environmental aspect.
Evaluating compliance
ISO 14001 (clause 9.1.2) requires organisations to periodically evaluate compliance with their obligations, determine the frequency of this evaluation, take action if needed and maintain knowledge and understanding of their compliance status. In practice, the organisation plans evaluations (site visits, document reviews, measurements), records the results and addresses gaps through corrective actions.
This is a sensitive point in a certification audit: the auditor checks not only that the register exists, but the evidence that compliance has actually been evaluated and that gaps are being addressed.
The link with aspects and context
Compliance obligations do not exist in isolation. They stem from environmental aspects (a water discharge triggers a discharge requirement), from the organisation's context and from the needs of interested parties. In turn, they feed risks and opportunities, objectives and operational control. This chaining is the mark of a coherent EMS.
Common mistakes to avoid
- A generic register, copied from a template, with no real link to activities and sites.
- Frozen monitoring that fails to integrate regulatory changes.
- Confusing inventory and evaluation: listing texts does not prove compliance.
- Forgetting other requirements (customers, group) in favour of legal requirements alone.
Going further
Compliance obligations are part of the overall EMS logic. For the full framework, read our pillar article Environmental management system: definition, benefits and ISO 14001, and for the changes in the current edition, ISO 14001:2026: what is changing.
The move to the 2026 edition is a separate exercise: our ISO 14001 transition guide sets out the gaps to close and the order to take them in.
A regulatory watch does not replace a standards watch: where the ISO revisions stand tracks the editions about to change your internal requirements.
Need to structure your regulatory monitoring and compliance evaluation? HEMC consultants support you, from listing the texts to demonstrating compliance during the audit.
Sources and references
- ISO 14001:2026, Environmental management systems (official ISO page, ISO/TC 207/SC 1).
- Framework Law No. 99-12 bearing the National Charter for the Environment and Sustainable Development (UNEP Law and Environment Assistance Platform).
