Class GdprOrganizationalRules

java.lang.Object

com.cloudforgeci.api.core.rules.GdprOrganizationalRules

All Implemented Interfaces:

FrameworkRules<SystemContext>

@ComplianceFramework(value="GDPR-Organizational",
                     priority=35,
                     displayName="GDPR Organizational Requirements",
                     description="Validates GDPR organizational and data protection requirements")
public class GdprOrganizationalRules
extends Object
implements FrameworkRules<SystemContext>

GDPR organizational and data protection validation rules.

These rules enforce GDPR requirements beyond infrastructure security:

• Lawfulness of Processing - Article 6
• Data Subject Rights - Articles 15-22
• Data Protection Impact Assessment - Article 35
• International Data Transfers - Articles 44-50

Controls Implemented

• Legal basis documentation
• Consent mechanism validation
• Data subject rights procedures
• Data retention policies
• International transfer safeguards

Usage

// Install GDPR organizational validation
GdprOrganizationalRules.install(ctx);

Important Note

These controls require organizational policies and legal procedures that cannot be fully automated. Infrastructure validation ensures technical readiness, but organizations must maintain separate legal documentation and processes.

Constructor Summary

Constructors

Constructor	Description
GdprOrganizationalRules()

Method Summary

Modifier and Type	Method	Description
Set<String>	claimedControls()	Controls checked across every validate* method above -- see FrameworkRules.claimedControls().
void	install(SystemContext ctx)	Install GDPR organizational validation rules.

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface FrameworkRules

alwaysLoad, description, displayName, frameworkId, getRequiredConfiguration, priority

Constructor Details

GdprOrganizationalRules

public GdprOrganizationalRules()

Method Details

install

public void install(SystemContext ctx)

Install GDPR organizational validation rules. Only applies when GDPR framework is selected.

Specified by:

install in interface FrameworkRules<SystemContext>

Parameters:

ctx - System context

claimedControls

public Set<String> claimedControls()

Controls checked across every validate* method above -- see FrameworkRules.claimedControls(). "GDPR-Organizational" is not a ComplianceMatrix column, so this declaration is for documentation only, not enforced by the sync test. Every check in this class reads a manually-attested deployment-context flag (legal basis, consent, DPIA, retention policy, ROPA, etc.) rather than any infrastructure state a ComplianceMatrix.SecurityControl describes, so no control names are claimed.

Specified by:

claimedControls in interface FrameworkRules<SystemContext>

Returns:

the control identifiers this framework's install() validates; empty if undeclared