The draft proposed article sets out its objectives, scope and key definitions, and establishes substantive obligations for regulated persons and organisations. It prescribes duties of governance, transparency, risk management and reporting, details procedural requirements for authorisation and ongoing compliance, and delineates responsibilities between regulated entities and competent authorities.

The draft specifies supervisory and enforcement powers, administrative sanctions and remedial measures, and preserves rights of appeal and review. It includes requirements for record‑keeping, timelines for implementation, transitional provisions, and provisions on publication, consultation and the article's entry into force.