1. YAML Policy: 3 neue Regeln (Kategorie J. Drittlandrisiko) - R-FISA-001: US-Cloud-Provider = FISA 702 Exposure (+20 Risk, DSFA empfohlen) - R-FISA-002: PII bei US-Provider ohne E2EE (+15 Risk) - R-FISA-003: Art. 9 Daten bei US-Provider (+25 Risk, CONDITIONAL) - Erkennt: aws, azure, google, microsoft, amazon, openai, anthropic, oracle 2. DSGVO Obligations: 4 neue Drittland-Pflichten (OBL-081 bis OBL-084) - Art. 44-49: Drittlanduebermittlung nur mit Garantien - Transfer Impact Assessment (TIA) bei US-Anbietern (Schrems II) - Zusaetzliche technische Massnahmen (EDPB Recommendations 01/2020) - Informationspflicht bei Drittlanduebermittlung (Art. 13) 370 Obligations total (war 366) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
73 lines
1.3 KiB
JSON
73 lines
1.3 KiB
JSON
{
|
|
"schema_version": "2.0",
|
|
"regulations": [
|
|
{
|
|
"id": "dsgvo",
|
|
"file": "dsgvo_v2.json",
|
|
"version": "1.0",
|
|
"count": 84
|
|
},
|
|
{
|
|
"id": "ai_act",
|
|
"file": "ai_act_v2.json",
|
|
"version": "1.0",
|
|
"count": 81
|
|
},
|
|
{
|
|
"id": "nis2",
|
|
"file": "nis2_v2.json",
|
|
"version": "1.0",
|
|
"count": 40
|
|
},
|
|
{
|
|
"id": "bdsg",
|
|
"file": "bdsg_v2.json",
|
|
"version": "1.0",
|
|
"count": 30
|
|
},
|
|
{
|
|
"id": "ttdsg",
|
|
"file": "ttdsg_v2.json",
|
|
"version": "1.0",
|
|
"count": 20
|
|
},
|
|
{
|
|
"id": "dsa",
|
|
"file": "dsa_v2.json",
|
|
"version": "1.0",
|
|
"count": 35
|
|
},
|
|
{
|
|
"id": "data_act",
|
|
"file": "data_act_v2.json",
|
|
"version": "1.0",
|
|
"count": 25
|
|
},
|
|
{
|
|
"id": "eu_machinery",
|
|
"file": "eu_machinery_v2.json",
|
|
"version": "1.0",
|
|
"count": 15
|
|
},
|
|
{
|
|
"id": "dora",
|
|
"file": "dora_v2.json",
|
|
"version": "1.0",
|
|
"count": 20
|
|
},
|
|
{
|
|
"id": "betrvg",
|
|
"file": "betrvg_v2.json",
|
|
"version": "1.0",
|
|
"count": 12
|
|
},
|
|
{
|
|
"id": "agg",
|
|
"file": "agg_v2.json",
|
|
"version": "1.0",
|
|
"count": 8
|
|
}
|
|
],
|
|
"tom_mapping_file": "_tom_mapping.json",
|
|
"total_obligations": 370
|
|
} |