Building Your ISO 14001 Legal Register and Compliance Obligations Log

A legal register is the environmental management system’s roadmap of regulatory requirements. It says: here is everything that applies to us; here is what we must do; here is who is responsible; here is how we verify compliance. Without an accurate legal register, an organization operates blindfolded—knowing it must comply with “environmental law” but not knowing what specific obligations that encompasses or how to test compliance.

Clause 6.2 requires that organizations determine and retain documented information of applicable legal requirements and other obligations. This is not optional. Yet many organizations maintain registers that are incomplete, outdated, poorly organized, or disconnected from actual compliance testing. This guide shows how to build and maintain a register that actually works.

What Are Compliance Obligations? The Definition

Building Your ISO 14001 Legal Register and Compliance Obligations Log — illustration 1

Clause 6.2 requires attention to “applicable legal requirements and other obligations.” This is broader than legislation alone.

Building Your ISO 14001 Legal Register and Compliance Obligations Log — illustration 2

Environmental laws that apply to your operations:

National level (Australia):
– Environmental Protection and Biodiversity Conservation Act 1999 (EPBC Act)
– National Environmental Protection Measure (NEPM) for air quality, water quality, waste
– Hazardous Substances Act (various states)
– Environmental Offenders Law (criminal liability for pollution)

State level (varies by state: NSW, Victoria, Queensland, etc.):
– Environmental Protection Act (state-specific)
– Water Act or Water Resources Act
– Air pollution control legislation
– Waste management regulations
– Coastal protection laws (where relevant)
– Aboriginal heritage laws (where relevant)

Local/council level:
– Local planning laws affecting development, land use
– Noise control ordinances
– Discharge/drainage bylaws
– Hazardous substance storage bylaws

Industry-specific (if applicable):
– Mining regulations
– Agricultural pollution control
– Chemical management standards

Other Obligations

Building Your ISO 14001 Legal Register and Compliance Obligations Log — illustration 3

Beyond law, organizations voluntarily commit to:

  • Permit and licence conditions: If your operation requires an environmental licence or permit, the conditions in that permit are obligations
  • Customer requirements: If a major customer requires ISO 14001 certification or specific environmental performance (e.g., carbon-neutral deliveries), these are obligations
  • Industry or voluntary standards: If your industry has a code of conduct or voluntary environmental standard, adherence may be an obligation
  • Corporate policy or commitment: If your organization has committed to achieving carbon neutrality, that is an obligation
  • Voluntary agreements with regulators: If you have agreed to achieve 20% waste diversion by 2030, that is an obligation
Type Origin Consequence of Non-Compliance Example
Legal Government legislation, regulation Regulatory fine, prosecution, injunction, criminal liability EPA limit on water discharge; must not exceed 50 mg/L BOD
Permit/Licence Regulatory authority; condition of operation Loss of permit/licence; operational shutdown Condition 3.2 of discharge licence: monthly monitoring and reporting of discharge BOD
Customer requirement Commercial contract Contract breach; loss of customer; financial penalty Contract: “Products must be delivered carbon-neutral by 2025”
Voluntary commitment Corporate decision Reputational damage; loss of market position; internal accountability Sustainability policy: “Achieve net-zero emissions by 2050”

All of these are “compliance obligations” under ISO 14001 and belong in your legal register.


A well-structured register has these fields:

Essential Fields

Field Content Example
ID Unique identifier LEG-001, LEG-002
Obligation Title Short name of the requirement “Water Discharge BOD Limit”
Type Legal / Permit / Customer / Corporate Legal
Jurisdiction/Authority Who makes the rule NSW EPA
Full Reference Law, regulation, permit section number Environmental Protection Act 1997 (NSW), Section 120; EPA Discharge Licence L123456, Condition 3.2
Description What must be done (plain language) “All water discharge to river must not exceed 50 mg/L Biochemical Oxygen Demand (BOD)”
Applicability Which areas/operations/locations of the organization does this apply to? Main treatment system discharge; does not apply to stormwater overflow (that goes to Condition 3.3)
Requirement Detail Specific parameters, limits, thresholds Limit: 50 mg/L BOD; monthly sampling required; results reported to EPA quarterly
Compliance Responsibility Who is responsible for compliance? Site Manager (primary); EHS Coordinator (secondary); external lab provides results
How Compliance is Achieved Operational procedures, controls, monitoring Procedure WW-001 (Wastewater Management); sampling by accredited external lab; monthly internal review
Frequency of Compliance How often must compliance be tested/reported? Monthly monitoring; quarterly EPA report; annual licence review
Next Deadline When is next compliance action or report due? 30 April 2026 (quarterly EPA report)
Status Compliant / Non-Compliant / At Risk / Unknown Compliant (last 3 months <50 mg/L)
Date Assessed When was compliance last verified? 28 March 2026
Review Date When will this obligation be revisited/updated? 31 March 2027 (annual review)
Notes Additional context, changes, risks New permit condition effective 1 January 2026; procedure WW-001 updated January 2026 to reflect new limit

Simplified Register (for smaller organizations)

If a full register is too detailed, simplify while retaining essentials:

Obligation Type Applies To Requirement Responsible How Verified Status
Water BOD limit Legal Discharge <50 mg/L Site Mgr Monthly sampling Compliant
Hazardous waste storage Legal Workshop Secondary containment required Ops Lead Quarterly inspection Compliant
Staff EMS training Corporate All EHS staff Annual refresher EHS Coord Training records On track
Permit reporting Permit Discharge system Quarterly report to EPA Site Mgr Submit by deadline On track

Worked Example: Building a Register for a Manufacturing Facility

Facility: Metal fabrication plant (60 employees; water discharge; hazardous waste generation; air emissions)
Location: NSW, Australia
Scope: On-site manufacturing only (not distribution, not customer sites)

ID Obligation Type Authority Description Applicability Requirement Responsibility Compliance Test Status Review
LEG-001 Water discharge limits Legal NSW EPA Discharge to river must not exceed stated BOD, suspended solids, pH Main treatment system discharge point BOD <50 mg/L; SS <30 mg/L; pH 6.5–8.5 (monthly sampling) Site Manager Monthly lab analysis; results vs. permit limits; quarterly report to EPA Compliant 31 Mar 2027
LEG-002 Hazardous waste storage Legal EPA (national) & NSW state Secondary containment for hazardous substances; labelling; segregation Hazardous chemical storage area; workshop spill kits All hazardous containers in bunded area; 110% of largest container; correct labels; MSDS on file Ops Lead + EHS Quarterly inspection checklist; photographic evidence; storage area audit Compliant 31 Mar 2027
LEG-003 Air emissions – metal dust Legal NSW EPA Dust emissions from grinding/cutting limited; fugitive emissions controlled Metal fabrication area (grinding, cutting, welding) Dust suppression system operational; weekly inspection; maintain enclosed areas; no visible dust escape Workshop Mgr Weekly visual inspection; quarterly particulate monitoring (EPA method); maintenance records Compliant 31 Mar 2027
LEG-004 Noise limits Legal Local council Industrial noise <75 dB(A) at property boundary All production areas Hearing protection for staff; equipment silencing; work time restrictions if needed Workshop Mgr Annual noise survey (3-day monitoring); comparison to 75 dB(A) limit; EPA report Compliant (75.2 dB last survey) 30 April 2027
LEG-005 Fuel and oil storage Legal EPA & local council Bunds and secondary containment required; spill kits; labelling Fuel tank (5,000L diesel); engine oil storage; machinery lubricants Bunded area 110% of largest container; absorbent pads; spill kit within 50m Facilities Mgr Quarterly inspection; bund integrity test (annually); drains clear Compliant 30 June 2027
LEG-006 Waste manifest & disposal Legal EPA waste tracking Hazardous waste tracked from generation to disposal; disposal certificate required All hazardous waste streams (metal fines, used oils, contaminated rags, solvents) Waste contractor audited annually; manifests retained 5 years; disposal receipts on file EHS Coord Quarterly waste audit; manifests cross-checked with contractor records; disposal certificates reviewed Compliant 30 June 2027
LEG-007 Environmental incidents Legal EPA/council Environmental spills >2L must be reported to EPA within 24 hours All areas (chemical storage, fuel tank, discharge system) Spill response procedure WW-001; incident log; notification within 24 hours; containment <24 hours Site Manager Incident log reviewed monthly; response records; notification copies on file Compliant (0 reportable incidents in 2025) 30 June 2027
LEG-008 Discharge permit compliance Permit NSW EPA Quarterly discharge sampling and EPA reporting; annual permit review Main treatment system discharge Sampling per permit schedule; results submitted on time; plant operating within permit conditions Site Manager Monthly internal review; EPA quarterly submission tracking; permit renewal tracking (expires 30 June 2027) Compliant 30 June 2027
CUST-001 Carbon-neutral operations target Customer Major customer A Deliveries must be carbon-neutral by 2027 Product shipping/transport Evaluate renewable energy transition; measure Scope 1+2 emissions; implement reduction plan Ops Manager & EHS Annual carbon footprint assessment; renewable energy % tracking; target vs. actual comparison At Risk (on track but requires Q3 2026 investment decision) 31 Dec 2026
CORP-001 Net-zero emissions by 2050 Corporate Board commitment Long-term strategic commitment All operations Interim targets: 25% reduction by 2030 vs. 2020 baseline; transition to renewable energy; electrification of transport EHS Director Annual GHG assessment; progress toward interim target; strategic plan update On track (2025 actual: 18% reduction vs. 2020) 31 Dec 2027

Identifying Applicable Legislation: Australian Environmental Law Context

For an Australian organization, applicable law typically includes:

National Level

Law Relevance to EMS Example Obligations
EPBC Act 1999 Protects matters of national environmental significance (endangered species, wetlands, Ramsar sites, etc.) If your facility is near protected habitat, you may need approval for activities; must assess impact on protected species
NEPM for Water Quality National standard for water discharge quality If you discharge to waterway, you must meet quality standards (BOD, suspended solids, nutrients, metals, pH)
NEPM for Air Quality National standard for air emissions Must not exceed air quality standards for particulates, NOx, SO₂, ozone, etc. (varies by region)
National Waste Policy Sets waste management hierarchy; aims for 80% resource recovery Align waste management strategy with waste hierarchy (avoid, reuse, recycle, recover, disposal)
Hazardous Substances Act (various) Regulates import, manufacture, use, storage of hazardous chemicals Chemical safety data, labelling, storage, employee exposure limits

State Level (Example: NSW)

Law Relevance Example Obligations
Environmental Protection Act 1997 Primary environmental protection law Duty of care for waste; obligation to minimize pollution; general environmental duty
Water Act 1912 & Water Management Act 2000 Regulates water use and discharge License required for water extraction and discharge; must monitor and report discharge quality
Air Quality and Reduction of Emissions (AQRE) Policy Controls industrial air emissions Facility with potential air emissions may need license; must comply with emission limits; must conduct monitoring
Waste Avoidance and Resource Recovery (WARR) Act 2001 Waste management hierarchy; contaminated land liability Contractor licensing for waste; duty of care for hazardous waste disposal; contaminated land notification
Local Government Act 1993 Empowers councils to make bylaws Council bylaws on noise, dust, discharge to stormwater, hazardous substance storage

Local Level (Council)

Obligation Relevance Example
Development approval conditions If your facility received council approval, conditions apply Condition 2.3: “Maximum operational noise at property boundary 75 dB(A)”
Noise Control Ordinance Limits on noise during operating hours Must not exceed 70 dB(A) day, 55 dB(A) night (typically)
Discharge to stormwater or sewer If you discharge to council stormwater or sewer system Must pre-treat discharge; must not discharge hazardous substances; fees apply
Hazardous substance storage bylaws Local regulations on chemical storage Bunding requirement, setback from property boundary, labelling

Industry-Specific (if applicable)

  • Mining: Mining Act 1992; operation requires environmental approval and annual compliance monitoring
  • Waste management: EPA Waste Classification Guidelines; waste contractor licensing
  • Chemicals: Australian Hazardous Substances Code; chemical labelling and safety data sheets
  • Food processing: Food Standards Australia New Zealand (FSANZ); water quality and discharge standards

Staying Current: Monitoring for Regulatory Changes

A legal register becomes obsolete if it is not updated when laws change. Establish a process:

Process 1: Subscriptions and Alerts

Service Coverage Frequency Cost Example
Government legislative alerts Federal/state legislation Real-time when published Free Australian Government legislation website; state government email alerts
EPA e-news EPA policy and requirement changes Weekly or monthly Free NSW EPA website; subscription to updates
Industry association updates Industry-specific regulations Quarterly or as needed Member fee Manufacturing Association, Food & Beverage Association, etc.
Legal firm alerts Curated summary of environmental law changes Monthly $500–2,000/year Specialized environmental law firms provide summaries and analysis
Compliance software Automated tracking of legislative changes Real-time $50–500/month Ensures24, LexisNexis, Westlaw, or industry-specific compliance tools

Recommendation: For most small-medium organizations, a combination of free government alerts + industry association updates + periodic legal review is sufficient. For large organizations or those in heavily regulated industries, subscription to compliance software is justified.

Conduct a formal legal review annually (or after significant regulatory change):

  1. External legal review: Engage an environmental law specialist to review your register and confirm all applicable laws are captured (cost: $2,000–$5,000; frequency: annually or every 2 years)
  2. Internal review: EHS manager reviews government websites quarterly to check for new laws, amendments, or policy changes
  3. Regulatory body engagement: Subscribe to EPA newsletters, council notifications, regulator updates
  4. Management review: Legal register status is a mandatory input to management review (Clause 9.3, Input 5)

Process 3: Regulatory Change Management

When a new law takes effect or a law is amended:

  1. Assess applicability: Does the new/amended law apply to your organization?
  2. Update register: Add new obligation or revise existing obligation entry
  3. Assess compliance impact: Does your current practice comply with the new requirement? Is there a compliance gap?
  4. Plan corrective action: If gap, when must you be compliant? What changes are needed?
  5. Implement: Update procedures, retrain staff, install controls, etc.
  6. Verify: Confirm compliance through testing or audit
  7. Document: Retain evidence of compliance

Example: New Legislative Change
– Event: July 2026, new national Carbon Reduction Scheme takes effect; facilities >1,000 tonnes CO₂e annually must report annual emissions
– Applicability assessment: Your facility = 650 tonnes CO₂e; NOT subject to mandatory reporting under new scheme
– Action: Monitor; if operations expand and exceed threshold in future, register obligation and prepare for reporting
– Document: In register notes: “As of July 2026, facility not subject to mandatory emissions reporting (below 1,000-tonne threshold). Monitor future growth. If operations scale above threshold, activate emissions reporting obligation by Q4 [that year].”


Compliance Evaluation: Testing Actual Compliance, Not Just Listing Laws

Having a register is not enough. Clause 9.1.2 requires that organizations evaluate compliance with registered obligations. Evaluation means testing whether you actually meet the requirement, not just confirming the procedure exists.

Good Compliance Evaluation

Obligation Poor Evaluation Good Evaluation
“Water discharge BOD limit <50 mg/L” “We have a discharge procedure; we are compliant” Monthly lab analysis of discharge BOD; results reviewed against permit limit; results <50 mg/L for past 12 months = compliant; one month at 52 mg/L triggers investigation and corrective action
“Hazardous waste properly stored” “We have hazardous waste storage area; we trained staff” Quarterly inspection using checklist: (1) All containers in bunded area? (2) Bund intact? (3) Containers properly labelled? (4) MSDS available for each substance? (5) No spill risks? (6) Monthly verification of secondary containment integrity. Result: compliant or non-compliant based on checklist results.
“Annual EMS training for all relevant staff” “We provide training” Training records reviewed; compare trained staff list to “relevant staff” list; identify gaps; send training reminder for overdue staff. Result: X% compliant (e.g., 92 of 95 relevant staff trained = 97% compliant).

Compliance Evaluation Schedule

Evaluation frequency should match risk and requirement:

Obligation Characteristics Evaluation Frequency
Permit requirement; directly regulated; high risk (e.g., discharge limits) Monthly or per-permit requirement
Legal requirement; moderate risk; non-permit (e.g., hazardous waste storage) Quarterly
Legal requirement; lower risk; procedural (e.g., staff training) Quarterly or annual
Voluntary commitment; strategic importance (e.g., carbon reduction target) Quarterly or annual

Compliance Evaluation Record Template

Obligation Evaluation Date Method Result Evidence Non-Compliance Found? Corrective Action Required Due Date
Water BOD limit (50 mg/L) 28 March 2026 Monthly lab analysis BOD 42 mg/L Lab report; comparison to permit No N/A –
Hazardous waste storage 15 March 2026 Quarterly inspection checklist 5 of 5 items compliant Inspection checklist + photos No N/A –
Staff EMS training 31 January 2026 Training records review 45 of 48 relevant staff trained (94%) Training register Yes (4% gap) Complete overdue training by 28 Feb 28 Feb 2026
Discharge permit conditions (all) 31 March 2026 Review permit; verify operations within conditions All 8 conditions being met Condition-by-condition verification document No N/A –

Documented Information Requirements

Your legal register must be documented information. It should:

  1. Be in writing (electronic or paper): Spreadsheet or database is acceptable
  2. Be accessible to relevant staff: EHS team, operations managers, compliance staff should be able to find it
  3. Be maintained and controlled: Version control; dated revisions; approval signature
  4. Be retained: Retain current version permanently; retain superseded versions for audit trail
  5. Be reviewed periodically: At least annually; more frequently if regulatory environment is volatile

Register maintenance checklist:
– [ ] Register reviewed and updated annually (minimum) or when laws change
– [ ] New obligations added within 1 month of law taking effect
– [ ] Obsolete obligations archived (marked as superseded; retained for historical record)
– [ ] Register version-controlled (version date, changes documented)
– [ ] Compliance evaluation frequency met (e.g., quarterly evaluations completed quarterly)
– [ ] Non-compliances tracked and corrective actions managed
– [ ] Register summary presented to management review annually
– [ ] Register is accessible to staff who need it (EHS team, operations, management)


Integration with Other EMS Elements

The legal register connects to multiple other EMS components:

Connection Link
Clause 6.1 (Aspects) Legal obligations often relate to significant aspects. Example: If water discharge is a legal obligation, water is likely a significant environmental aspect.
Clause 6.3 (Objectives) Objectives should address significant compliance obligations. Example: If you have a discharge limit obligation, set an objective to maintain compliance (e.g., “zero permit exceedances”).
Clause 8.1 (Operational Controls) Controls are designed to ensure compliance with legal obligations. Example: Procedure for hazardous waste handling exists to comply with storage regulations.
Clause 9.1.1 (Monitoring) Monitoring for compliance is specified in operational controls. Example: Monthly discharge sampling monitors compliance with discharge limit.
Clause 9.1.2 (Compliance Evaluation) Formal evaluation of each registered obligation per schedule. Example: Quarterly review of training records to verify 100% of relevant staff trained.
Clause 9.3 (Management Review) Compliance status is mandatory input; new regulations discussed; resource needs identified.
Clause 10.2 (Corrective Action) Non-compliance findings trigger corrective action. Example: If evaluation finds staff not trained, corrective action: complete training + root cause analysis + preventive measure.

Clause 6.2 FAQ

Q1: How detailed should the legal register be?
It should be detailed enough that someone unfamiliar with your operation can understand: what the obligation is, why it applies, what you must do to comply, and how you verify compliance. 10–15 rows is typical for a small organization; 30–50 rows for a medium organization.

Q2: Do we need a lawyer to build our legal register?
Not always. A competent EHS professional can build an initial register. Have a lawyer review it annually. For new industries or complex regulations, legal review is valuable upfront.

Q3: What if we operate in multiple jurisdictions (e.g., multiple states)?
Maintain a consolidated register with a “jurisdiction” column. Filter by jurisdiction to determine which obligations apply to each location. This prevents duplicating registers while allowing location-specific views.

Q4: How do we handle obligations that are ambiguous or unclear?
Document the ambiguity and how you interpreted it. Example: “NEPM water quality standard for nutrient X is unclear for our discharge type; we have interpreted it conservatively as <5 mg/L and are auditing to this standard. Will seek EPA clarification by [date].” This demonstrates due diligence and good faith.

Q5: What if a new law passes but we don’t have financial resources to comply immediately?
Acknowledge the obligation. Document the gap. Develop a compliance timeline and plan. Work with the regulator if needed (some provide compliance timeframes for major changes). Document your good-faith effort to comply.

Q6: Do customer requirements belong in the legal register?
Yes, if they are significant obligations that drive EMS planning. A contract to supply carbon-neutral products is a compliance obligation. A customer’s request for a sustainability report may be important but is not a legal/compliance obligation (it is a business requirement).

Q7: How do we handle conflicting obligations (e.g., state law vs. local bylaw)?
In Australia, higher-order law typically prevails. Commonwealth law overrides state law; state law overrides local bylaws. Register the obligation at the highest level and note any additional requirements at lower levels. Example: “National NEPM specifies BOD limit 50 mg/L; local discharge licence specifies 40 mg/L (more stringent); comply with 40 mg/L to meet both.”

Q8: How long should we keep superseded entries in the register?
Archive indefinitely for audit trail. Mark clearly as “Superseded” with date of supersession. This allows auditors to see the full history and understand how you have managed regulatory changes.


Common Register Gaps

Auditors often find these gaps:

Gap Red Flag Correction
Incomplete legislation Register lists only federal law; misses state and local regulations Conduct comprehensive legal review; ensure state/local laws are captured
Permit conditions not captured Facility has discharge licence but conditions are not in register Review permit and add all applicable conditions to register
Outdated register Register dated 3+ years ago; no recent updates Establish annual review process; update when laws change; note when reviewed
No evaluation records Register exists but no evidence of compliance evaluation Establish evaluation schedule; document results (compliant/non-compliant/unknown); retain records
Vague descriptions “Must comply with water laws” (too vague) Specify: “NSW Water Act requires discharge BOD <50 mg/L; monitor monthly; report quarterly to EPA”
No responsibility assigned No owner for each obligation Assign primary and secondary responsibility; names and titles
No link to procedures Register doesn’t reference the procedure that ensures compliance Link: Obligation LEG-001 (Water BOD) → Procedure WW-001 (Wastewater Management)
Customer obligations missing Register captures legal requirements but not customer contracts or voluntary commitments Add customer/corporate/voluntary obligations; treat with same rigor as legal obligations

Register Maintenance Template

Use this to track register maintenance activities:

Activity Frequency Owner Last Completed Next Due Evidence
Register review (check for completeness) Annual EHS Mgr 31 Jan 2026 31 Jan 2027 Management review minutes
External legal review Every 2 years EHS Mgr + Legal counsel 15 March 2025 15 March 2027 Legal review letter
Compliance evaluation (per obligation schedule) Varies per obligation (monthly/quarterly/annual) Site Mgr, Ops Lead, etc. Ongoing (tracked individually) – Compliance evaluation records
Regulatory change scan Quarterly EHS Mgr 31 March 2026 30 June 2026 Email alerts, government website review notes
Register update (new laws, amendments) As laws change EHS Mgr When new law effective – Register revision history
Management review presentation Annual EHS Director 15 Feb 2026 15 Feb 2027 Management review minutes

Conclusion: The Living Register

A legal register is not a static document. It is a living tool that reflects the current regulatory environment and your organization’s compliance obligations. Build it with care, maintain it with discipline, use it to guide operational decisions, and update it when the regulatory environment changes. A well-maintained legal register is the foundation of a mature environmental management system.


Key Takeaway: Your legal register is your organization’s formal acknowledgement of what compliance means. It says: “Here is everything we must do to comply with environmental law and our voluntary commitments. Here is how we test compliance. Here is who is responsible.” A register that is comprehensive, well-maintained, and actively used becomes the compass for environmental compliance. A register that sits on a shelf, never updated and never used to guide decisions, is worse than useless—it creates a false sense of compliance.