1e84df9769
All checks were successful
CI / go-lint (push) Has been skipped
CI / python-lint (push) Has been skipped
CI / nodejs-lint (push) Has been skipped
CI / test-go-ai-compliance (push) Successful in 32s
CI / test-python-backend-compliance (push) Successful in 30s
CI / test-python-document-crawler (push) Successful in 21s
CI / test-python-dsms-gateway (push) Successful in 18s
6-Phasen-Implementation fuer cloud-faehiges, mandantenfaehiges Compliance SDK:
Phase 1: Multi-Tenancy Fix
- Shared tenant_utils.py Dependency (UUID-Validierung, kein "default" mehr)
- VVT tenant_id Column + tenant-scoped Queries
- DSFA/Vendor DEFAULT_TENANT_ID von "default" auf UUID migriert
- Migration 035
Phase 2: Stammdaten-Erweiterung
- Company Profile um JSONB-Felder erweitert (processing_systems, ai_systems, technical_contacts)
- Regulierungs-Flags (NIS2, AI Act, ISO 27001)
- GET /template-context Endpoint
- Migration 036
Phase 3: Dokument-Versionierung
- 5 Versions-Tabellen (DSFA, VVT, TOM, Loeschfristen, Obligations)
- Shared versioning_utils.py Helper
- /{id}/versions Endpoints auf allen 5 Dokumenttypen
- Migration 037
Phase 4: Change-Request System
- Zentrale CR-Inbox mit CRUD + Accept/Reject/Edit Workflow
- Regelbasierte CR-Engine (VVT DPIA → DSFA CR, Datenkategorien → Loeschfristen CR)
- Audit-Trail
- Migration 038
Phase 5: Dokumentengenerierung
- 5 Template-Generatoren (DSFA, VVT, TOM, Loeschfristen, Obligations)
- Preview + Apply Endpoints (erzeugt CRs, keine direkten Dokumente)
Phase 6: Frontend-Integration
- Change-Request Inbox Page mit Stats, Filtern, Modals
- VersionHistory Timeline-Komponente
- SDKSidebar CR-Badge (60s Polling)
- Company Profile: 2 neue Wizard-Steps + "Dokumente generieren" CTA
Docs: 5 neue MkDocs-Seiten, CLAUDE.md aktualisiert
Tests: 97 neue Tests (alle bestanden)
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
50 lines
2.2 KiB
Python
50 lines
2.2 KiB
Python
"""Loeschfristen template generator — creates retention policies per data category."""
|
|
|
|
# Standard DSGVO retention periods
|
|
_STANDARD_PERIODS = {
|
|
"Bankdaten": {"duration": "10 Jahre", "legal_basis": "§ 257 HGB, § 147 AO"},
|
|
"Steuer-ID": {"duration": "10 Jahre", "legal_basis": "§ 147 AO"},
|
|
"Bewerbungsunterlagen": {"duration": "6 Monate", "legal_basis": "§ 15 AGG"},
|
|
"Lohnabrechnungen": {"duration": "6 Jahre", "legal_basis": "§ 257 HGB"},
|
|
"Gesundheitsdaten": {"duration": "10 Jahre", "legal_basis": "§ 630f BGB"},
|
|
"Kundendaten": {"duration": "3 Jahre", "legal_basis": "§ 195 BGB (Verjährung)"},
|
|
"Vertragsdaten": {"duration": "10 Jahre", "legal_basis": "§ 257 HGB"},
|
|
"Kommunikationsdaten": {"duration": "6 Monate", "legal_basis": "Art. 5 Abs. 1e DSGVO"},
|
|
"Zugriffsprotokolle": {"duration": "12 Monate", "legal_basis": "Art. 5 Abs. 1e DSGVO"},
|
|
"Mitarbeiterdaten": {"duration": "3 Jahre nach Austritt", "legal_basis": "§ 195 BGB"},
|
|
}
|
|
|
|
|
|
def generate_loeschfristen_drafts(ctx: dict) -> list[dict]:
|
|
"""Generate retention policy drafts based on processing systems.
|
|
|
|
Args:
|
|
ctx: Flat dict from company-profile/template-context
|
|
|
|
Returns:
|
|
List of Loeschfristen dicts ready for creation
|
|
"""
|
|
# Collect all data categories from processing systems
|
|
all_categories = set()
|
|
for system in ctx.get("processing_systems", []):
|
|
for cat in system.get("personal_data_categories", []):
|
|
all_categories.add(cat)
|
|
|
|
policies = []
|
|
for i, category in enumerate(sorted(all_categories), 1):
|
|
standard = _STANDARD_PERIODS.get(category, {})
|
|
policy = {
|
|
"policy_id": f"LF-AUTO-{i:03d}",
|
|
"data_category": category,
|
|
"retention_period": standard.get("duration", "Noch festzulegen"),
|
|
"legal_basis": standard.get("legal_basis", "Zu prüfen"),
|
|
"deletion_method": "Automatische Löschung nach Ablauf",
|
|
"responsible": ctx.get("dpo_name", "DSB"),
|
|
"status": "draft",
|
|
"review_cycle_months": ctx.get("review_cycle_months", 12),
|
|
"notes": f"Automatisch generiert aus Stammdaten. Bitte prüfen und anpassen.",
|
|
}
|
|
policies.append(policy)
|
|
|
|
return policies
|