Benjamin Admin
2b4ff9f422
1. VVT-Verknüpfung: Dropdown "Verknüpfte VVT-Aktivität" in Step 1, lädt Aktivitäten via API, auto-fills Verarbeitungstätigkeit bei Auswahl 2. Residual Risk: Neuer Step 5 im Wizard — Bewertung des Restrisikos nach Maßnahmen. Bei hoch/kritisch → Art. 36 Vorabkonsultation Warnung 3. Bundesland-Blacklists (Art. 35 Abs. 4): 16 Landesbehörden mit DSK-Muss-Liste (10 gemeinsame Kriterien) + länderspezifische Ergänzungen (Bayern: Whistleblower/Drohnen, NRW: Social-Media- Monitoring, Berlin: Mieterbonitätsprüfung). Automatische Prüfung gegen Scope-Antworten. Blacklist-Matches im DSFA-Banner angezeigt. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
270 lines
13 KiB
TypeScript
270 lines
13 KiB
TypeScript
'use client'
|
|
|
|
import React, { useState } from 'react'
|
|
import type { DSFA } from './DSFACard'
|
|
import type { DSFAPrefillResult } from '@/lib/sdk/dsfa/prefill-from-scope'
|
|
|
|
interface GeneratorWizardProps {
|
|
onClose: () => void
|
|
onSubmit: (data: Partial<DSFA>) => Promise<void>
|
|
prefill?: DSFAPrefillResult | null
|
|
}
|
|
|
|
export function GeneratorWizard({ onClose, onSubmit, prefill }: GeneratorWizardProps) {
|
|
const [step, setStep] = useState(1)
|
|
const [saving, setSaving] = useState(false)
|
|
const [title, setTitle] = useState(prefill?.title || '')
|
|
const [description, setDescription] = useState(prefill?.description || '')
|
|
const [processingActivity, setProcessingActivity] = useState(prefill?.processingActivity || '')
|
|
const [selectedCategories, setSelectedCategories] = useState<string[]>(prefill?.dataCategories || [])
|
|
const riskMap2: Record<string, 'low' | 'medium' | 'high' | 'critical'> = { niedrig: 'low', mittel: 'medium', hoch: 'high', kritisch: 'critical' }
|
|
const [riskLevel, setRiskLevel] = useState<'low' | 'medium' | 'high' | 'critical'>(riskMap2[prefill?.riskLevel || ''] || 'low')
|
|
const [residualRisk, setResidualRisk] = useState<'low' | 'medium' | 'high' | 'critical'>('low')
|
|
const [selectedMeasures, setSelectedMeasures] = useState<string[]>(prefill?.measures || [])
|
|
const [linkedVvtId, setLinkedVvtId] = useState('')
|
|
const [vvtActivities, setVvtActivities] = useState<Array<{ id: string; name: string }>>([])
|
|
|
|
// Load VVT activities for linking
|
|
React.useEffect(() => {
|
|
fetch('/api/sdk/v1/compliance/vvt')
|
|
.then(r => r.ok ? r.json() : [])
|
|
.then(data => {
|
|
const items = Array.isArray(data) ? data : data.activities || []
|
|
setVvtActivities(items.map((a: any) => ({ id: a.id, name: a.name || a.processing_name || a.title || 'Unbenannt' })))
|
|
})
|
|
.catch(() => {})
|
|
}, [])
|
|
|
|
const riskMap: Record<string, 'low' | 'medium' | 'high' | 'critical'> = {
|
|
Niedrig: 'low', Mittel: 'medium', Hoch: 'high', Kritisch: 'critical',
|
|
}
|
|
|
|
const handleSubmit = async () => {
|
|
setSaving(true)
|
|
try {
|
|
await onSubmit({
|
|
title,
|
|
description,
|
|
processingActivity,
|
|
dataCategories: selectedCategories,
|
|
riskLevel,
|
|
measures: selectedMeasures,
|
|
status: 'draft',
|
|
...(prefill?.federalState ? { federal_state: prefill.federalState } : {}),
|
|
...(prefill?.involvesAi ? { involves_ai: true } : {}),
|
|
...(prefill?.legalBasis ? { legal_basis: prefill.legalBasis } : {}),
|
|
...(linkedVvtId ? { linked_vvt_id: linkedVvtId } : {}),
|
|
...(residualRisk !== 'low' ? { residual_risk_level: residualRisk } : {}),
|
|
} as Partial<DSFA>)
|
|
onClose()
|
|
} finally {
|
|
setSaving(false)
|
|
}
|
|
}
|
|
|
|
return (
|
|
<div className="bg-white rounded-xl border border-gray-200 p-6">
|
|
<div className="flex items-center justify-between mb-6">
|
|
<h3 className="text-lg font-semibold text-gray-900">Neue DSFA erstellen</h3>
|
|
<button onClick={onClose} className="text-gray-400 hover:text-gray-600">
|
|
<svg className="w-6 h-6" fill="none" stroke="currentColor" viewBox="0 0 24 24">
|
|
<path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2} d="M6 18L18 6M6 6l12 12" />
|
|
</svg>
|
|
</button>
|
|
</div>
|
|
|
|
{/* Progress Steps */}
|
|
<div className="flex items-center gap-2 mb-6">
|
|
{[1, 2, 3, 4, 5].map(s => (
|
|
<React.Fragment key={s}>
|
|
<div className={`w-8 h-8 rounded-full flex items-center justify-center text-sm font-medium ${
|
|
s < step ? 'bg-green-500 text-white' :
|
|
s === step ? 'bg-purple-600 text-white' : 'bg-gray-200 text-gray-500'
|
|
}`}>
|
|
{s < step ? (
|
|
<svg className="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24">
|
|
<path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2} d="M5 13l4 4L19 7" />
|
|
</svg>
|
|
) : s}
|
|
</div>
|
|
{s < 5 && <div className={`flex-1 h-1 ${s < step ? 'bg-green-500' : 'bg-gray-200'}`} />}
|
|
</React.Fragment>
|
|
))}
|
|
</div>
|
|
|
|
{/* Step Content */}
|
|
<div className="min-h-48">
|
|
{step === 1 && (
|
|
<div className="space-y-4">
|
|
<div>
|
|
<label className="block text-sm font-medium text-gray-700 mb-1">Titel der DSFA</label>
|
|
<input
|
|
type="text"
|
|
value={title}
|
|
onChange={e => setTitle(e.target.value)}
|
|
placeholder="z.B. DSFA - Mitarbeiter-Monitoring"
|
|
className="w-full px-4 py-2 border border-gray-300 rounded-lg focus:ring-2 focus:ring-purple-500"
|
|
/>
|
|
</div>
|
|
<div>
|
|
<label className="block text-sm font-medium text-gray-700 mb-1">Beschreibung der Verarbeitung</label>
|
|
<textarea
|
|
rows={3}
|
|
value={description}
|
|
onChange={e => setDescription(e.target.value)}
|
|
placeholder="Beschreiben Sie die geplante Datenverarbeitung..."
|
|
className="w-full px-4 py-2 border border-gray-300 rounded-lg focus:ring-2 focus:ring-purple-500"
|
|
/>
|
|
</div>
|
|
{vvtActivities.length > 0 && (
|
|
<div>
|
|
<label className="block text-sm font-medium text-gray-700 mb-1">Verknuepfte VVT-Aktivitaet (Art. 30)</label>
|
|
<select value={linkedVvtId} onChange={e => {
|
|
setLinkedVvtId(e.target.value)
|
|
const selected = vvtActivities.find(a => a.id === e.target.value)
|
|
if (selected && !processingActivity) setProcessingActivity(selected.name)
|
|
}} className="w-full px-4 py-2 border border-gray-300 rounded-lg focus:ring-2 focus:ring-purple-500 bg-white">
|
|
<option value="">— Keine Verknuepfung —</option>
|
|
{vvtActivities.map(a => <option key={a.id} value={a.id}>{a.name}</option>)}
|
|
</select>
|
|
<p className="text-xs text-gray-400 mt-1">Ordnen Sie diese DSFA einer VVT-Verarbeitungstaetigkeit zu.</p>
|
|
</div>
|
|
)}
|
|
<div>
|
|
<label className="block text-sm font-medium text-gray-700 mb-1">Verarbeitungstaetigkeit</label>
|
|
<input
|
|
type="text"
|
|
value={processingActivity}
|
|
onChange={e => setProcessingActivity(e.target.value)}
|
|
placeholder="z.B. Automatisierte Auswertung von Kundendaten"
|
|
className="w-full px-4 py-2 border border-gray-300 rounded-lg focus:ring-2 focus:ring-purple-500"
|
|
/>
|
|
</div>
|
|
</div>
|
|
)}
|
|
{step === 2 && (
|
|
<div className="space-y-4">
|
|
<div>
|
|
<label className="block text-sm font-medium text-gray-700 mb-2">Datenkategorien</label>
|
|
<div className="grid grid-cols-2 gap-2">
|
|
{['Kontaktdaten', 'Identifikationsdaten', 'Finanzdaten', 'Gesundheitsdaten', 'Standortdaten', 'Nutzungsdaten'].map(cat => (
|
|
<label key={cat} className="flex items-center gap-2 p-2 border rounded-lg hover:bg-gray-50">
|
|
<input
|
|
type="checkbox"
|
|
className="w-4 h-4 text-purple-600"
|
|
checked={selectedCategories.includes(cat)}
|
|
onChange={e => setSelectedCategories(prev =>
|
|
e.target.checked ? [...prev, cat] : prev.filter(c => c !== cat)
|
|
)}
|
|
/>
|
|
<span className="text-sm">{cat}</span>
|
|
</label>
|
|
))}
|
|
</div>
|
|
</div>
|
|
</div>
|
|
)}
|
|
{step === 3 && (
|
|
<div className="space-y-4">
|
|
<div>
|
|
<label className="block text-sm font-medium text-gray-700 mb-2">Risikobewertung</label>
|
|
<p className="text-sm text-gray-500 mb-4">Bewerten Sie die Risiken fuer die Rechte und Freiheiten der Betroffenen.</p>
|
|
<div className="space-y-2">
|
|
{(['Niedrig', 'Mittel', 'Hoch', 'Kritisch'] as const).map(level => (
|
|
<label key={level} className="flex items-center gap-3 p-3 border rounded-lg hover:bg-gray-50 cursor-pointer">
|
|
<input
|
|
type="radio"
|
|
name="risk"
|
|
className="w-4 h-4 text-purple-600"
|
|
checked={riskLevel === riskMap[level]}
|
|
onChange={() => setRiskLevel(riskMap[level])}
|
|
/>
|
|
<span className="text-sm font-medium">{level}</span>
|
|
</label>
|
|
))}
|
|
</div>
|
|
</div>
|
|
</div>
|
|
)}
|
|
{step === 4 && (
|
|
<div className="space-y-4">
|
|
<div>
|
|
<label className="block text-sm font-medium text-gray-700 mb-2">Schutzmassnahmen</label>
|
|
<div className="grid grid-cols-2 gap-2">
|
|
{['Verschluesselung', 'Pseudonymisierung', 'Zugriffskontrolle', 'Loeschkonzept', 'Schulungen', 'Menschliche Pruefung'].map(m => (
|
|
<label key={m} className="flex items-center gap-2 p-2 border rounded-lg hover:bg-gray-50">
|
|
<input
|
|
type="checkbox"
|
|
className="w-4 h-4 text-purple-600"
|
|
checked={selectedMeasures.includes(m)}
|
|
onChange={e => setSelectedMeasures(prev =>
|
|
e.target.checked ? [...prev, m] : prev.filter(x => x !== m)
|
|
)}
|
|
/>
|
|
<span className="text-sm">{m}</span>
|
|
</label>
|
|
))}
|
|
</div>
|
|
</div>
|
|
</div>
|
|
)}
|
|
|
|
{step === 5 && (
|
|
<div className="space-y-4">
|
|
<label className="block text-sm font-medium text-gray-700 mb-2">Restrisiko nach Massnahmen</label>
|
|
<p className="text-xs text-gray-500 mb-3">
|
|
Bewerten Sie das verbleibende Risiko NACH Umsetzung der Schutzmassnahmen.
|
|
Bei hohem Restrisiko → Art. 36 Vorabkonsultation der Aufsichtsbehoerde.
|
|
</p>
|
|
<div className="grid grid-cols-2 gap-2">
|
|
{[
|
|
{ value: 'low' as const, label: 'Niedrig', desc: 'Risiko ausreichend gemindert', color: 'border-green-300 bg-green-50' },
|
|
{ value: 'medium' as const, label: 'Mittel', desc: 'Akzeptables Restrisiko', color: 'border-yellow-300 bg-yellow-50' },
|
|
{ value: 'high' as const, label: 'Hoch', desc: 'Art. 36 Konsultation pruefen', color: 'border-orange-300 bg-orange-50' },
|
|
{ value: 'critical' as const, label: 'Kritisch', desc: 'Art. 36 Konsultation PFLICHT', color: 'border-red-300 bg-red-50' },
|
|
].map(r => (
|
|
<label key={r.value} className={`flex items-start gap-2 p-3 border-2 rounded-lg cursor-pointer ${
|
|
residualRisk === r.value ? r.color : 'border-gray-200 hover:border-gray-300'
|
|
}`}>
|
|
<input type="radio" name="residualRisk" value={r.value} checked={residualRisk === r.value}
|
|
onChange={() => setResidualRisk(r.value)} className="mt-0.5" />
|
|
<div>
|
|
<span className="text-sm font-medium">{r.label}</span>
|
|
<p className="text-xs text-gray-500">{r.desc}</p>
|
|
</div>
|
|
</label>
|
|
))}
|
|
</div>
|
|
{(residualRisk === 'high' || residualRisk === 'critical') && (
|
|
<div className="bg-red-50 border border-red-200 rounded-lg p-3">
|
|
<p className="text-sm text-red-700 font-medium">Vorabkonsultation erforderlich (Art. 36 DSGVO)</p>
|
|
<p className="text-xs text-red-600 mt-1">
|
|
Bei hohem Restrisiko muss die Aufsichtsbehoerde VOR Beginn der Verarbeitung konsultiert werden.
|
|
</p>
|
|
</div>
|
|
)}
|
|
</div>
|
|
)}
|
|
</div>
|
|
|
|
{/* Navigation */}
|
|
<div className="flex items-center justify-between mt-6 pt-4 border-t border-gray-200">
|
|
<button
|
|
onClick={() => step > 1 ? setStep(step - 1) : onClose()}
|
|
className="px-4 py-2 text-gray-600 hover:bg-gray-100 rounded-lg transition-colors"
|
|
disabled={saving}
|
|
>
|
|
{step === 1 ? 'Abbrechen' : 'Zurueck'}
|
|
</button>
|
|
<button
|
|
onClick={() => step < 5 ? setStep(step + 1) : handleSubmit()}
|
|
disabled={saving || (step === 1 && !title.trim())}
|
|
className="px-6 py-2 bg-purple-600 text-white rounded-lg hover:bg-purple-700 transition-colors disabled:opacity-50"
|
|
>
|
|
{step === 5 ? (saving ? 'Wird erstellt...' : 'DSFA erstellen') : 'Weiter'}
|
|
</button>
|
|
</div>
|
|
</div>
|
|
)
|
|
}
|