19855efacc
Some checks failed
Tests / Go Tests (push) Has been cancelled
Tests / Python Tests (push) Has been cancelled
Tests / Integration Tests (push) Has been cancelled
Tests / Go Lint (push) Has been cancelled
Tests / Python Lint (push) Has been cancelled
Tests / Security Scan (push) Has been cancelled
Tests / All Checks Passed (push) Has been cancelled
Security Scanning / Secret Scanning (push) Has been cancelled
Security Scanning / Dependency Vulnerability Scan (push) Has been cancelled
Security Scanning / Go Security Scan (push) Has been cancelled
Security Scanning / Python Security Scan (push) Has been cancelled
Security Scanning / Node.js Security Scan (push) Has been cancelled
Security Scanning / Docker Image Security (push) Has been cancelled
Security Scanning / Security Summary (push) Has been cancelled
CI/CD Pipeline / Go Tests (push) Has been cancelled
CI/CD Pipeline / Python Tests (push) Has been cancelled
CI/CD Pipeline / Website Tests (push) Has been cancelled
CI/CD Pipeline / Linting (push) Has been cancelled
CI/CD Pipeline / Security Scan (push) Has been cancelled
CI/CD Pipeline / Docker Build & Push (push) Has been cancelled
CI/CD Pipeline / Integration Tests (push) Has been cancelled
CI/CD Pipeline / Deploy to Staging (push) Has been cancelled
CI/CD Pipeline / Deploy to Production (push) Has been cancelled
CI/CD Pipeline / CI Summary (push) Has been cancelled
ci/woodpecker/manual/build-ci-image Pipeline was successful
ci/woodpecker/manual/main Pipeline failed
All services: admin-v2, studio-v2, website, ai-compliance-sdk, consent-service, klausur-service, voice-service, and infrastructure. Large PDFs and compiled binaries excluded via .gitignore.
92 lines
2.6 KiB
TypeScript
92 lines
2.6 KiB
TypeScript
/**
|
|
* DSFA Draft Prompt - Datenschutz-Folgenabschaetzung (Art. 35 DSGVO)
|
|
*/
|
|
|
|
import type { DraftContext } from '../types'
|
|
|
|
export interface DSFADraftInput {
|
|
context: DraftContext
|
|
processingDescription?: string
|
|
instructions?: string
|
|
}
|
|
|
|
export function buildDSFADraftPrompt(input: DSFADraftInput): string {
|
|
const { context, processingDescription, instructions } = input
|
|
const level = context.decisions.level
|
|
const depthItems = context.constraints.depthRequirements.detailItems
|
|
const hardTriggers = context.decisions.hardTriggers
|
|
|
|
return `## Aufgabe: DSFA entwerfen (Art. 35 DSGVO)
|
|
|
|
### Unternehmensprofil
|
|
- Name: ${context.companyProfile.name}
|
|
- Branche: ${context.companyProfile.industry}
|
|
- Mitarbeiter: ${context.companyProfile.employeeCount}
|
|
|
|
### Compliance-Level: ${level}
|
|
Tiefe: ${context.constraints.depthRequirements.depth}
|
|
|
|
### Hard Triggers (Gruende fuer DSFA-Pflicht):
|
|
${hardTriggers.length > 0
|
|
? hardTriggers.map(t => `- ${t.id}: ${t.label} (${t.legalReference})`).join('\n')
|
|
: '- Keine Hard Triggers (DSFA auf Wunsch)'}
|
|
|
|
### Erforderliche Inhalte:
|
|
${depthItems.map((item, i) => `${i + 1}. ${item}`).join('\n')}
|
|
|
|
${processingDescription ? `### Beschreibung der Verarbeitung: ${processingDescription}` : ''}
|
|
${instructions ? `### Zusaetzliche Anweisungen: ${instructions}` : ''}
|
|
|
|
### Antwort-Format
|
|
Antworte als JSON:
|
|
{
|
|
"sections": [
|
|
{
|
|
"id": "beschreibung",
|
|
"title": "Systematische Beschreibung der Verarbeitung",
|
|
"content": "...",
|
|
"schemaField": "processingDescription"
|
|
},
|
|
{
|
|
"id": "notwendigkeit",
|
|
"title": "Notwendigkeit und Verhaeltnismaessigkeit",
|
|
"content": "...",
|
|
"schemaField": "necessityAssessment"
|
|
},
|
|
{
|
|
"id": "risikobewertung",
|
|
"title": "Bewertung der Risiken fuer die Rechte und Freiheiten",
|
|
"content": "...",
|
|
"schemaField": "riskAssessment"
|
|
},
|
|
{
|
|
"id": "massnahmen",
|
|
"title": "Massnahmen zur Eindaemmung der Risiken",
|
|
"content": "...",
|
|
"schemaField": "mitigationMeasures"
|
|
},
|
|
{
|
|
"id": "stellungnahme_dsb",
|
|
"title": "Stellungnahme des Datenschutzbeauftragten",
|
|
"content": "...",
|
|
"schemaField": "dpoOpinion"
|
|
},
|
|
{
|
|
"id": "standpunkt_betroffene",
|
|
"title": "Standpunkt der betroffenen Personen",
|
|
"content": "...",
|
|
"schemaField": "dataSubjectView"
|
|
},
|
|
{
|
|
"id": "ergebnis",
|
|
"title": "Ergebnis und Empfehlung",
|
|
"content": "...",
|
|
"schemaField": "conclusion"
|
|
}
|
|
]
|
|
}
|
|
|
|
Halte die Tiefe exakt auf Level ${level}.
|
|
Nutze WP248-Kriterien als Leitfaden fuer die Risikobewertung.`
|
|
}
|