The Draft Proposed Article sets out a regulatory provision establishing scope, definitions and the classes of person and activity to which it will apply. It prescribes baseline obligations including risk management, record‑keeping and the implementation of specified controls and safeguards, together with duties to notify competent authorities and affected parties in prescribed circumstances.

The Article establishes supervisory and enforcement mechanisms, including powers of inspection, information‑gathering, administrative sanctions and civil remedies. It contains transitional provisions, compliance timelines, reporting and cooperation requirements, and a review clause enabling evaluative reporting to the regulator and the making of secondary instruments to specify technical details.