Regulatory register #

Objective #

The Regulatory menu brings together GDPR, AIPD processing, data breaches, legal/contractual obligations and exemptions.

Screen and fields #

Filter by register, type, status and manager. Common information is title, evidence, maturity and expiration; each type imposes its details, for example purpose, legal basis, conservation, risks, measures, source or notification decision.

Exemptions and approval #

A waiver documents risk and compensation, has an expiration date, and must be approved by someone separate from the controller. The deletion respects the history and the tenant.

Best practices #

Do not replace legal analysis with the registry. Attach the source, schedule reviews, and relate discrepancies to their actions when action is required.

Types and expected information #

Type	Main information
GDPR processing	purpose, legal basis, data, people, conservation and measures
AIPD	context, necessity, risks, measures and decision
Violation	facts, impacts, people and notification
Obligation	source or contract, requirement, responsible, deadline and proof
Exemption	risk, compensation, approver and expiration

Create and educate #

Select the exact type, give an explicit title, choose a person responsible then complete the corresponding diagram. Reference evidence without exposing unnecessary data and set a deadline or expiration.

An exemption remains temporary: it specifies the requirement waived, the risk and the compensation. The requester and approver must be different. When expired, return to compliance, renew the decision, or complete processing.

Violations and notifications #

Document timeline, data categories, affected persons, consequences, actions and notification decision. RiskPilot retains the proof but does not calculate legal deadlines or replace the DPO.

Filters, checks and errors #

Filter by type, status and manager. Prioritize approaching deadlines and expiring waivers. An approver identical to the requester is rejected. Before deletion, check retention, audit and relationships; prefer closure if the history must remain demonstrable.

Example #

An exemption temporarily authorizes an old protocol. It documents compensatory segmentation, monitoring, accountability, replacement date and expiration, then receives approval from a separate person.