The Draft Proposed Article establishes a legal framework setting out definitions, scope and core obligations for regulated entities, including duties of care, data handling requirements and governance arrangements. It prescribes responsibilities for persons in control, standards for risk management, conditions for delegation and operational criteria for exempted activities, and specifies the role of supervisory authorities and reporting thresholds.

Enforcement provisions include administrative sanctions, civil liability and criminal offences for breaches, together with inspection and audit powers, mandatory reporting and record‑keeping obligations, and co‑operation duties with regulators. Transitional and savings provisions set implementation timelines, review mechanisms and powers for amendment, and specify documentation and compliance milestones for affected organisations.