Findings · EEP-DONOR-ZA-001 · v1.0.0
Status DRAFT · Knowledge basis KS-2d4a1d596a27c2e1
Read-mostly. Today the console holds SELECT only, per the grants in 001_packages_and_console.sql and the VAL-CHER-PLANE-001 boundary test.
Holds no authority. It decides nothing, records no approval outcome, and writes nothing to governance, evidence or audit.
Verdict at a glance
▲ BLOCKED - 2 gates blocked by 6 findings
Each blocked gate is listed below with every finding raised against it. Nothing here is summarised away.
- 5 CRITICAL
- 1 MEDIUM
Blocks gate · GATE-GEO-001
Production processing geography
Every foreign processing path for personal information rests on an established section 72(1) ground with accepted supporting evidence.
- SEM-GEO-001severity CRITICALRISK_CONDITION
personal information in 'DA-DONOR-PROFILE' is processed in DE with no established transfer ground under POPIA s72(1)
- Subject
- XB-DONOR-001
- Location
- privacyRegulatoryContract/XB-DONOR-001
- SEM-GEO-001severity CRITICALRISK_CONDITION
personal information in 'DA-GIFT-TRANSACTION' is processed in DE with no established transfer ground under POPIA s72(1)
- Subject
- XB-DONOR-002
- Location
- privacyRegulatoryContract/XB-DONOR-002
- SEM-GEO-001severity CRITICALRISK_CONDITION
personal information in 'DA-CONSENT-PREFERENCE' is processed in DE with no established transfer ground under POPIA s72(1)
- Subject
- XB-DONOR-003
- Location
- privacyRegulatoryContract/XB-DONOR-003
- SEM-GEO-001severity CRITICALRISK_CONDITION
personal information in 'DA-AUDIT-EVENT' is processed in DE with no established transfer ground under POPIA s72(1)
- Subject
- XB-DONOR-004
- Location
- privacyRegulatoryContract/XB-DONOR-004
- SEM-GEO-002severity CRITICALNON_CONFORMANCE
personal-information asset is processed in US via 'subprocessor:Transactional email provider' (home jurisdiction ZA) with no cross-border transfer record at all
- Subject
- DA-DONOR-PROFILE
- Location
- dataContract/DA-DONOR-PROFILE/processingGeography/subprocessor:Transactional email provider
Blocks gate · GATE-CTX-001
Context readiness
No decision-changing assumption remains unconfirmed.
- SEM-ASM-001severity MEDIUMNON_CONFORMANCE
decision-changing assumption is unconfirmed while package status is DRAFT
- Subject
- ASM-DONOR-001
- Location
- solutionContextProfile/assumptions/ASM-DONOR-001