Compliance obligations in ISO 14001: how to stay on top of them

If there's one part of ISO 14001 that tends to keep whoever manages the system up at night, it's this one: staying on top of the environmental compliance obligations that apply to your company. The standard doesn't ask you to be a lawyer — but it does ask you to have a method, not just wing it.

Note: this section was called "Legal requirements and other requirements" in ISO 14001:2015. With the publication of ISO 14001:2026 it's now called "Compliance obligations" — a name change, not a substance change: what the standard requires is the same.

What the standard actually requires

ISO 14001 requires the organization to determine and have access to the compliance obligations related to its environmental aspects — both legal and of other kinds — to take them into account when planning the system, and to periodically evaluate compliance with them. In short: know what regulations apply to you, have them on file, and check from time to time that you're meeting them.

What kind of regulations typically apply

• National regulations — laws and regulations on waste, emissions, water, noise, etc. (BOE, Spain's official state gazette).
• Regional regulations — each Spanish region can have additional or stricter obligations (regional official gazettes).
• Municipal regulations — local ordinances, especially around waste or noise.
• Sector-specific requirements — environmental permits, activity licenses, limits specific to your sector.
• Other "non-legal" compliance obligations — voluntary commitments your company has taken on with customers or additional certifications.

How to keep it up to date without losing your mind

1. Start from a categorized list, rather than hunting for specific laws from scratch. It's more manageable to start from typical categories (hazardous waste, air emissions, discharges, noise...) and decide which apply to your activity, than to try to track all of Spanish environmental legislation at once.
2. Record the obligation, not just the law. It's not enough to note "Waste Law" — write down exactly what obligation applies to you (for example, "keep a record of hazardous waste and authorized waste managers").
3. Review periodically, not just before the audit. Environmental regulations change fairly often, and discovering a change months after it took effect is exactly what this section is meant to prevent.
4. Actively evaluate compliance. Having the list isn't enough — for each obligation, you need to check whether you're genuinely meeting it, and record that evaluation.

What happens if you don't manage this well

Beyond anything a certification auditor might flag, failing to comply with applicable environmental regulations has real legal consequences independent of ISO certification — administrative penalties, civil liability, or even criminal liability in serious cases. ISO 14001 certification doesn't replace legal compliance: what it does is force you to have a serious method for keeping track of it.