GDPR, HIPAA & Multi-Framework Developer Matrix
Track 34 engineering controls, assign owners and deadlines, and compare your saved work in Review brief. Statuses are self-reported planning records, not an automated audit. Matrix reviews run locally in your browser; optional network features are disclosed separately.
Review queue
Checking saved owners and due dates…
Review brief What changed, and what needs attention?
Compare a previous full workspace backup with today's Matrix. The file is read locally and does not replace your saved work. Preview free; export a Markdown handoff with Pro.
Matrix statuses, owners, deadlines and notes only. DPDP records, vendor records and scanner observations are excluded. Statuses are self-reported; a note is not verified evidence.
Use a full version 3 backup from Export → Backup Entire Workspace. Without a baseline, review current work. The baseline and password are not saved; leaving this page clears the comparison.
Changed controls
Actions, owners and deadlines
Owner names and deadlines are always included. Review before sharing. Refresh after editing or syncing; exports read your latest saved Matrix. Save a new backup after each review for next time.
Consent Management
Right to Erasure
Data Portability
Data Protection Officer
Breach Notification
Privacy by Design
Access Controls
Transmission Sec.
Activity Audit Logs
Business Associates
Data Backup Plan
Workforce Training
Access Control & Role-Based Permissions
Encryption of Data in Transit (TLS 1.3)
Automated Vulnerability Management
Access Control Policy & Terminal Idle Logouts
Use of Cryptography & Key Management
Data Leakage Prevention (DLP)
Prohibited AI Practice Guard (Unacceptable Risk)
High-Risk AI System Conformance & Screening
Article 50 Transparency & Synthetic Watermarking
Minimal Risk AI Inventory & Shadow AI Discovery
Notice & Consent Architecture
Right to Erasure & Grievance Routine
Reasonable Security Safeguards & Encryption
72-Hour Breach Notification to DPB
Verifiable Parental Consent Mechanism
Automated Data Purge Routine
Consumer Opt-Out Mechanism
Data Minimization & Purpose Limitation
Consumer Health Data Protection
Global Privacy Control (GPC) Signal Recognition
Data Broker Registration
Children's Privacy Protection
This control is tracked in depth in the dedicated DPDP Workspace.
Open DPDP Workspace →Architecture & Methodology
Framework coverage overview supporting the regulatory matrix capabilities.
GDPR
EU General Data Protection Regulation. Data subject rights, consent management, DPO requirements, and cross-border transfer safeguards.
HIPAA
US Health Insurance Portability and Accountability Act. Administrative, physical, and technical safeguards for protected health information.
India DPDP Act
India Digital Personal Data Protection Act. Data principal rights, consent notice requirements, and Data Fiduciary obligations.
EU AI Act & Shadow AI
European AI Regulation. AI system risk classification, transparency obligations, and shadow AI detection controls.
SOC 2 Type II
Service Organization Controls. Trust service criteria for security, availability, processing integrity, confidentiality, and privacy.
ISO 27001
Information Security Management System. Risk assessment, statement of applicability, and continuous improvement cycles.
US State Privacy
US State privacy laws (CCPA/CPRA, MODPA, MHMDA). Consumer rights, data broker registration, and health data protections.
Need formal auditor presentation proofs?
Explore related tools. Some optional scans send queries to external services.