Evaluating Compliance in ISO 14001 and ISO 50001 — Earlier-Edition Guidance

ISO 14001:2004 sets out the following approach:

Legal and other requirements

The organisation establishes, implements and maintains procedures to:

1. Identify and obtain access to applicable legal requirements and other commitments relating to its environmental aspects.

2. Determine how those requirements apply to its environmental aspects.

Applicable legal requirements and other commitments are taken into account when establishing, implementing and maintaining the environmental management system.

Evaluation of compliance

1. Consistent with its commitment to compliance, the organisation establishes, implements and maintains procedures to periodically evaluate compliance with applicable legal requirements.

Records of the results of periodic evaluations are retained.

2. Compliance with other commitments is also evaluated. This may be combined with the evaluation of legal compliance or addressed through separate procedures.

Records of the results of periodic evaluations are retained.

ISO 50001:2011 sets out the following approach:

Legal and other requirements

The organisation identifies, implements and maintains appropriate access to applicable legal and other requirements related to its energy use, consumption and efficiency.

It determines how these requirements apply to energy use, consumption and efficiency, and takes them into account when establishing, implementing and maintaining its energy management system .

Legal and other requirements are reviewed at defined intervals.

Evaluation of compliance with legal and other requirements

At planned intervals, the organisation evaluates compliance with applicable legal and other requirements concerning energy use and consumption.

Records of compliance-evaluation results are maintained.

Practical implementation: common weaknesses

Understanding and implementing these requirements can be challenging because ISO standards are designed for different types of organisation and do not prescribe every implementation detail. Legal and other requirements are closely connected to the environmental management system (EMS) and energy management system (EnMS): identifying and updating obligations, assessing how new requirements affect the systems, setting evaluation criteria and objectives, and providing input to management review. Practical experience highlights the following weaknesses.

Weak arrangements for updating requirements

ISO 14001 and ISO 50001 require organisations to keep relevant requirements up to date and consider them when implementing, maintaining and improving their systems. Incomplete or infrequent updates can leave several parts of the EMS or EnMS out of alignment. Organisations commonly obtain updates through:

• Official gazettes.
• Relevant websites.
• Communication with consultants.
• Competent regulatory authorities.
• Legal advisers.

Even when information sources are clearly identified, the process may be ineffective if responsibility for monitoring and reporting is unclear. Industrial-park management boards may notify businesses of new documents, but organisations outside those networks may receive less complete information, especially when many instruments are issued together. To improve the process, organisations can:

• Regularly check official legal databases and the websites of the competent environmental and energy authorities. Confirm the current authority and website instead of relying on an old directory.
• Periodically ask the competent local authorities about newly issued requirements relevant to the organisation.

The responsible person should report whether new requirements have been identified. The environmental management representative or assigned ISO team then reviews each requirement, assesses its effects on the EMS or EnMS and determines necessary changes. A regularly updated requirements register provides a useful record.

Incomplete assessment of the effects of new requirements :

New legal requirements may affect the systems already in operation. Review their implications for:

• Environmental aspects and significant environmental aspects, as well as the organisation’s energy use, consumption and efficiency.
• Objectives, targets and environmental and energy management programmes.
• Monitoring and measurement of environmental and energy indicators.
• Evaluation of compliance with legal and other requirements.
• Management-review reporting.

Comparing existing arrangements with new requirements helps identify gaps. Review the five areas above and take appropriate corrective or preventive action to maintain and improve the system. Retain the assessment of these effects as part of the compliance-evaluation records.

Unclear objectives and criteria for compliance evaluation

The organisation needs an evaluation method that produces a clear conclusion against each applicable obligation. Additional internal criteria can help prioritise weaknesses and identify areas of the EMS or EnMS that need attention. An internal rating does not change a legal obligation or excuse non-compliance.

One internal reporting method uses four assessment levels and a separate ‘not applicable’ status:

• Compliant: all applicable legal and other requirements under review have been met.
• Almost compliant: limited gaps remain and require correction within the applicable timeframe. This rating does not mean the legal requirement has been fully met.
• Substantially non-compliant: serious gaps remain in meeting essential applicable requirements and require substantial corrective action.
• Non-compliant: the basic requirements have not been implemented.
• Not applicable: the requirement is outside the organisation’s applicable legal or operational scope; document the reason.

Retain the evaluation criteria, supporting evidence and conclusions about compliance status.

Evaluation frequency and management review

The frequency of compliance evaluation under ISO 50001 is established through planned intervals. The suitable interval depends on applicable obligations, the business cycle, the extent of energy use and consumption, and the availability of monitoring data for comparison with the energy baseline. A twelve-month cycle is an example, not a universal ISO requirement. Shorter intervals or additional reviews may be needed when requirements or activities change.

Finally, the results of evaluating legal and other requirements are provided as input to management review.

References

ISO 14001:2026 — information about the new edition

ISO 50001:2018 — standard information