← Packages← Package view

Findings · EEP-DONOR-ZA-001 · v1.0.0

Status DRAFT · Knowledge basis KS-2d4a1d596a27c2e1

Read-mostly. Today the console holds SELECT only, per the grants in 001_packages_and_console.sql and the VAL-CHER-PLANE-001 boundary test.

Holds no authority. It decides nothing, records no approval outcome, and writes nothing to governance, evidence or audit.

Verdict at a glance

▲ BLOCKED - 2 gates blocked by 6 findings

Each blocked gate is listed below with every finding raised against it. Nothing here is summarised away.

  • 5 CRITICAL
  • 1 MEDIUM

Blocks gate · GATE-GEO-001

Production processing geography

PRE_DISPATCH · blockingBLOCKED5 findings

Every foreign processing path for personal information rests on an established section 72(1) ground with accepted supporting evidence.

  • SEM-GEO-001severity CRITICALRISK_CONDITION

    personal information in 'DA-DONOR-PROFILE' is processed in DE with no established transfer ground under POPIA s72(1)

    Subject
    XB-DONOR-001
    Location
    privacyRegulatoryContract/XB-DONOR-001
  • SEM-GEO-001severity CRITICALRISK_CONDITION

    personal information in 'DA-GIFT-TRANSACTION' is processed in DE with no established transfer ground under POPIA s72(1)

    Subject
    XB-DONOR-002
    Location
    privacyRegulatoryContract/XB-DONOR-002
  • SEM-GEO-001severity CRITICALRISK_CONDITION

    personal information in 'DA-CONSENT-PREFERENCE' is processed in DE with no established transfer ground under POPIA s72(1)

    Subject
    XB-DONOR-003
    Location
    privacyRegulatoryContract/XB-DONOR-003
  • SEM-GEO-001severity CRITICALRISK_CONDITION

    personal information in 'DA-AUDIT-EVENT' is processed in DE with no established transfer ground under POPIA s72(1)

    Subject
    XB-DONOR-004
    Location
    privacyRegulatoryContract/XB-DONOR-004
  • SEM-GEO-002severity CRITICALNON_CONFORMANCE

    personal-information asset is processed in US via 'subprocessor:Transactional email provider' (home jurisdiction ZA) with no cross-border transfer record at all

    Subject
    DA-DONOR-PROFILE
    Location
    dataContract/DA-DONOR-PROFILE/processingGeography/subprocessor:Transactional email provider

Blocks gate · GATE-CTX-001

Context readiness

PRE_DISPATCH · blockingBLOCKED1 finding

No decision-changing assumption remains unconfirmed.

  • SEM-ASM-001severity MEDIUMNON_CONFORMANCE

    decision-changing assumption is unconfirmed while package status is DRAFT

    Subject
    ASM-DONOR-001
    Location
    solutionContextProfile/assumptions/ASM-DONOR-001