Hacker News Reader

It is a derivative of what is called the "Risk Based Approach" in compliance, and is widely adopted.

As for companies and accounting you can look into the directive 2013/34/EU that established micro, small, and medium sized companies based on their size. These types of companies have different reporting requirements.

In the US, some laws specifically exclude small companies. For example, the Equal Employment Opportunity Act of 1972 requires 15 employees, and the Immigration Reform and Control Act of 1986 requires 4 employees.

in my part of Europe there are tons: companies over a certain size might have different rules for layoffs, have to have union representatives, must pay for safety courses for the employees, must employ a certain percentage of people with disabilities...

You could try to find some analogies but you probably won't succeed since this is clearly just targeting American big Tech

G-SIB banks for example