diff --git a/docs/compliance/gdpr-audit.md b/docs/compliance/gdpr-audit.md index dbf8c04..0e37141 100644 --- a/docs/compliance/gdpr-audit.md +++ b/docs/compliance/gdpr-audit.md @@ -1 +1,34 @@ -# gdpr-audit +# \# GDPR Adequacy Checklist + +# + +# \## Governance \& Breach Protocols + +# \- DPO appointed and documented + +# \- 72-hour breach notification process defined + +# + +# \## Consent \& Data Collection + +# \- No pre-ticked marketing consent boxes + +# \- Explicit consent required for birthday listings + +# + +# \## Sensitive Data Handling + +# \- Medical data restricted to "unwell" status + +# \- Dietary data shared only with explicit consent + +# + +# \## International Data Transfers + +# \- Photo/video sharing audited for adequacy mechanisms + +# +