Please include changes to legal requirements.
This International Standard specifies requirements for a quality management system where an organization
a) needs to demonstrate its ability to consistently provide product that meets customer and applicable statutory and regulatory requirements,...
This is what is said in 1.1 a) of the ISO9001:2008
There is no need to get too legal about other stuff. There are processes beyond the QMS which looks at these, and mostly these are not included within the QMS operation.
1.1 at Note 2 it is also said :
NOTE 2 Statutory and regulatory requirements can be expressed as legal requirements.