The Draft Proposed Annex establishes scope, objectives and key definitions for the regulatory framework, specifying covered activities, entities and excluded matters. It sets out mandatory obligations on regulated parties including governance, record‑keeping, reporting and notification requirements, alongside prescribed timelines for implementation and transitional arrangements. The Annex delineates roles and responsibilities of competent authorities, reporting formats, data protection considerations and interfaces with existing legislative instruments.

Enforcement and compliance mechanisms are described, including supervisory powers, inspection and audit rights, sanctions and corrective measures. The Annex requires periodic review and evaluation, mandates publication of certain information and specifies consultation and stakeholder engagement procedures for future amendments, together with provisions on entry into force and legal application dates.