Files
breakpilot-compliance/ai-compliance-sdk/policies/obligations/v2/_manifest.json
Benjamin Admin 824b1be6a4 feat: FISA 702 / Drittlandrisiko — YAML-Regeln + DSGVO Obligations
1. YAML Policy: 3 neue Regeln (Kategorie J. Drittlandrisiko)
   - R-FISA-001: US-Cloud-Provider = FISA 702 Exposure (+20 Risk, DSFA empfohlen)
   - R-FISA-002: PII bei US-Provider ohne E2EE (+15 Risk)
   - R-FISA-003: Art. 9 Daten bei US-Provider (+25 Risk, CONDITIONAL)
   - Erkennt: aws, azure, google, microsoft, amazon, openai, anthropic, oracle

2. DSGVO Obligations: 4 neue Drittland-Pflichten (OBL-081 bis OBL-084)
   - Art. 44-49: Drittlanduebermittlung nur mit Garantien
   - Transfer Impact Assessment (TIA) bei US-Anbietern (Schrems II)
   - Zusaetzliche technische Massnahmen (EDPB Recommendations 01/2020)
   - Informationspflicht bei Drittlanduebermittlung (Art. 13)

370 Obligations total (war 366)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-15 00:39:30 +02:00

73 lines
1.3 KiB
JSON

{
"schema_version": "2.0",
"regulations": [
{
"id": "dsgvo",
"file": "dsgvo_v2.json",
"version": "1.0",
"count": 84
},
{
"id": "ai_act",
"file": "ai_act_v2.json",
"version": "1.0",
"count": 81
},
{
"id": "nis2",
"file": "nis2_v2.json",
"version": "1.0",
"count": 40
},
{
"id": "bdsg",
"file": "bdsg_v2.json",
"version": "1.0",
"count": 30
},
{
"id": "ttdsg",
"file": "ttdsg_v2.json",
"version": "1.0",
"count": 20
},
{
"id": "dsa",
"file": "dsa_v2.json",
"version": "1.0",
"count": 35
},
{
"id": "data_act",
"file": "data_act_v2.json",
"version": "1.0",
"count": 25
},
{
"id": "eu_machinery",
"file": "eu_machinery_v2.json",
"version": "1.0",
"count": 15
},
{
"id": "dora",
"file": "dora_v2.json",
"version": "1.0",
"count": 20
},
{
"id": "betrvg",
"file": "betrvg_v2.json",
"version": "1.0",
"count": 12
},
{
"id": "agg",
"file": "agg_v2.json",
"version": "1.0",
"count": 8
}
],
"tom_mapping_file": "_tom_mapping.json",
"total_obligations": 370
}