Regulatory Mapping · GDPR

GDPR Compliance Mapping

Regulation (EU) 2016/679 — General Data Protection Regulation. Live evidence mapping for AI systems processing personal data of EU residents.

GDPR scope: Applies to all organisations processing personal data of EU residents regardless of location. AI systems are directly in scope — particularly for automated decision-making (Art.22), DPIA requirements (Art.35), and data protection by design (Art.25). TrustLayers provides continuous processing records and immutable audit trails required under Art.30 and Art.5(2) accountability principle.
Art.5 — Principles
Lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity
Art.22 — Automated Decisions
Right not to be subject to solely automated decision-making including profiling
Art.25 — Privacy by Design
Data protection by design and by default — embedded into AI architecture
Art.30 — Records
Records of processing activities — continuous documentation requirement
Art.32 — Security
Security of processing — appropriate technical and organisational measures
Art.35 — DPIA
Data Protection Impact Assessment for high-risk AI processing
Art.44 — Transfers
Transfers of personal data to third countries — data localisation
Art.83 — Penalties
Up to €20M or 4% global turnover for violations
Agent Category Events Error rate Violations Personal Data Drift Encrypted Human Review GDPR Criteria Status
TransparencyAgent
-ransparency-gent-297b…
Governance 1,156 0% 0 0 0 20% 0
7/8
COMPLIANT
ClaraAI-Assistant
-lara-ssistant-a8ad…
Support 200 0% 0 0 0 3% 0
6/8
PARTIAL
HumanOversightAgent
-uman-versight-gent-01…
Governance 58 0% 0 0 0 0% 0
7/8
COMPLIANT
ComplianceAlignment
-ompliance-lignment-08…
Governance 30 0% 0 0 0 0% 0
7/8
COMPLIANT
AuditabilityAgent
-uditability-gent-aa78…
Governance 7 0% 0 0 0 0% 0
7/8
COMPLIANT
ClaraAI-Voice
-lara-oice-7b52…
Support 6 0% 0 0 0 0% 0
6/8
PARTIAL
ClaraAI-Emergency
-lara-mergency-326e…
Support 4 0% 0 4 0 0% 0
6/8
PARTIAL
ClaraAI-Tracking
-lara-racking-c8c2…
Support 1 0% 0 0 0 0% 0
6/8
PARTIAL
DataGovernanceAgent
gov-datagovernance-005…
Governance 1 0% 0 0 0 0% 0
7/8
COMPLIANT
SecurityAgent
gov-security-008…
Governance 1 0% 0 0 0 0% 0
7/8
COMPLIANT
DocumentationAgent
gov-documentation-011…
Governance 1 0% 0 0 0 0% 0
7/8
COMPLIANT
Generated 09/09/2026 11:23 · TrustLayers.eu · GDPR Regulation (EU) 2016/679 · Data in Europe 🇪🇺 · trustlayer@danidanwin.eu