Global Risk Management Survey
In an era defined by rapid policy shifts and mounting geopolitical complexity, regulatory and legislative change continues to be a critical risk for businesses worldwide. Ranked as the fourth biggest risk in our Global Risk Management Survey, regulatory changes reshape the economic landscape along with operational decisions, investment strategies and risk management.
Businesses face a delicate balancing act: leveraging new technologies to drive efficiency and agility1 while simultaneously managing evolving regulatory demands2 and minimizing exposure. This complexity places regulatory risk firmly among the top 10 concerns for global enterprises.
Global Risk Management Survey
Despite geopolitical volatility, sustainability commitments remain a priority for many organizations.3 However, regulatory frameworks are shifting in response to market realities.
For example, the EU has adjusted interim deadlines for carbon neutrality to accommodate sectors like automotive,4 which is grappling with slowed demand for electric vehicles.5 These abrupt shifts create uncertainty around where and how to invest, underscoring the need for agile regulatory strategies.
Data privacy and cyber security continue to dominate regulatory agendas, especially as artificial intelligence (AI) and advanced analytics reshape business models.
The EU’s 2024 Artificial Intelligence Act,6 effective in 2025, imposes stringent requirements on high-risk AI systems, with penalties reaching up to 7 percent of global revenue for non-compliant companies.
Meanwhile, US states are advancing their own data privacy laws,7 and China’s data governance policies continue to raise cross-border concerns over implications for data restrictions, data regulation and internet sovereignty.8
These developments demand vigilant monitoring and proactive risk management.
Pay transparency laws, requiring organizations to disclose salary information and address pay equity, continue to be adopted in many countries. However, many companies are not ready to comply.
Indeed, Aon’s 2025 Global Pay Transparency Study9 highlights that only 19 percent of organizations consider themselves ready for compliance.
The EU’s Pay Transparency Directive, coming into force in June 2026, also applies to companies that are based outside the EU but have employees in the EU. The directive has provisions to drive greater pay equity for the same work or work of equal value. Employers with more than 100 people in any individual EU member state will be required to report their pay gaps publicly and take action where a gap of more than 5 percent exists. Aon’s study also revealed that only 26 percent of companies surveyed had conducted a pay equity analysis in the past 12 to 18 months — with 12 percent having never conducted an independent pay equity analysis.
Failure to act risks regulatory penalties, reputational damage and greater challenges in attracting and retaining talent.
Regulatory change is a fast-moving risk with wide-ranging implications. Nearly a third of respondents experienced losses, yet fewer than half have formal plans in place — and only 12% have quantified the risk.
of respondents suffered a loss from this risk in the 12 months prior to the survey.
of respondents stated their organizations had set up a plan to respond to this risk.
The pace and complexity of regulatory change continues to accelerate. By adopting best practices, organizations can mitigate risk and capitalize on emerging opportunities.
Regulatory risk has risen one rank compared to our previous survey.
Case Study
In response to the new EU directive, a multinational pharmaceutical company needed to review its grade structure and job families to define work of equal value across multiple countries.
Aon helped address this challenge by conducting a workshop to explain the directive and understand the client’s job architecture. Using our analytical and gender-neutral job evaluation tool, we categorized jobs and evaluated anchor roles. We reviewed job family data against Aon’s taxonomy and offered recommendations on job families and groupings compared with market standards.
Aon’s Pay Equity Analysis identified factors influencing pay and potential risk factors, benchmarking findings against wider trends in fair pay audits. We provided insights into explainable versus unexplained pay gaps relative to the EU threshold and assessed whether jobs of equal value were compensated equally.
Navigating regulatory and legislative changes is key to effective risk management. Organizations that invest in intelligence, expert counsel, advocacy, workforce readiness and comprehensive risk transfer will not only mitigate risk but also capitalize on emerging opportunities in a shifting global landscape.
1 John Ferguson
and Melanie Noronha, “The US has ushered in a new era of globalization. How are businesses adjusting?”
World Economic Forum, February 21, 2025
2 “Global economic outlook uncertain as growth slows, inflationary pressures persist and trade
policies cloud outlook,”
OECD, March 17, 2025; Trade and development foresights 2025 Under pressure: Uncertainty reshapes global economic
prospects, UN Trade and
Development, April 16, 2025
3 “Is
sustainability in trade stalling?,” Economist Impact, 2025
4 Ajit Niranjan, “EU gives carmakers ‘breathing space’ on pollution target as EV sales slump,” The
Guardian, March 3,
2025
5 Benjamin Zhang, Shubhangi Goel and Tom Carter, “From price hikes to boosting US production,
heres how automakers are
responding to Trump's tariffs,” Business Insider, May 12, 2025; “Nissan lays off
15%
of its global work force amid slipping sales worldwide,” CBS News, May 14, 2025; Robert S. Miller, “Stellantis Scraps Maserati’s
Electrification Plans,” Mopar Insiders, March 2, 2025; Yuri Kageyama, “Honda pulls back on EV
strategy for now and will push hybrid sales,” Associated Press, May 20, 2025
6 The EU
Artificial Intelligence Act"
7 Theo Burman, “How Trump AI Law Could Spark a Constitutional Crisis,” Newsweek, May 27, 2025;
Angus Loten, “GOP Defends Ban on State AI Laws Over
Data-Privacy Concerns,” Wall Street Journal, May 21, 2025; Sam Schechner and
Stacy Meichtry, “Vance Warns U.S. Allies to Keep AI Regulation Light,” Wall Street Journal, February 11,
2025
8 Cristina Vanberghen, “How Beijing’s Digital Strategy Is Reshaping Global Rules – And What Europe
Should Do About It,”
Modern Diplomacy, May 25, 2025; Andrew Silver, “China’s data protection rules prompt pause from major European research
funders,” Reuters, April 25,
2025
9 2025 Global Pay
Transparency Study; Brit Morse,
“Exclusive: A wave of new pay transparency regulations is coming and 75% of US employers are unprepared,”
Fortune,
December 5, 2024
General Disclaimer
This document is not intended to address any specific situation or to provide legal, regulatory, financial, or other advice. While care has been taken in the production of this document, Aon does not warrant, represent or guarantee the accuracy, adequacy, completeness or fitness for any purpose of the document or any part of it and can accept no liability for any loss incurred in any way by any person who may rely on it. Any recipient shall be responsible for the use to which it puts this document. This document has been compiled using information available to us up to its date of publication and is subject to any qualifications made in the document.
Terms of Use
The contents herein may not be reproduced, reused, reprinted or redistributed without the expressed written consent of Aon, unless otherwise authorized by Aon. To use information contained herein, please write to our team.
Turn insights into action: explore related capabilities to help you manage risk and support your people.