Rule set sha256:2dd04f614be2
The rules behind one rule set digest
Digest 2dd04f614be27ad02c913058bc1c1818342ff069ca53753b390042a3b2cdc95d: the SHA-256 of every rule file that was loaded, test files excluded. An audit record whose rule_set.digest is this value was decided by these 136 rules, 73 of them approved by a named reviewer.
A rule that is not approved still decided; a reader should not treat its provision as checked.
| Rule | Provision | Approval |
|---|---|---|
| CCPA_CPRA_OPT_OUT_001 | California Civil Code section 1798.120 | Not approved |
| COPPA_CHILD_INPUT_001 | 15 U.S.C. 6502 (COPPA) | Not approved |
| ECPA_ELECTRONIC_SURVEILLANCE_001 | 18 U.S.C. 2511 (ECPA) | Not approved |
| EU_AI_ACT_ART10_DATA_GOVERNANCE_001 | Regulation (EU) 2024/1689, Article 10 | Not approved |
| EU_AI_ACT_ART12_RECORD_KEEPING_001 | Regulation (EU) 2024/1689, Article 12 | Not approved |
| EU_AI_ACT_ART13_TRANSPARENCY_001 | Regulation (EU) 2024/1689, Article 13 | Not approved |
| EU_AI_ACT_ART14_HUMAN_OVERSIGHT_001 | Regulation (EU) 2024/1689, Article 14 | Not approved |
| EU_AI_ACT_ART15_ACCURACY_ROBUSTNESS_001 | Regulation (EU) 2024/1689, Article 15 | Not approved |
| EU_AI_ACT_ART16_PROVIDER_OBLIGATIONS_001 | Regulation (EU) 2024/1689, Article 16 | Not approved |
| EU_AI_ACT_ART26_DEPLOYER_OBLIGATIONS_001 | Regulation (EU) 2024/1689, Article 26(1) | Not approved |
| EU_AI_ACT_ART27_FRIA_001 | Regulation (EU) 2024/1689, Article 27(1) | Not approved |
| EU_AI_ACT_ART4_AI_LITERACY_001 | Regulation (EU) 2024/1689, Article 4 | Not approved |
| EU_AI_ACT_ART50_CHATBOT_DISCLOSURE_001 | Regulation (EU) 2024/1689, Article 50(1) | Not approved |
| EU_AI_ACT_ART50_DEEPFAKE_DISCLOSURE_001 | Regulation (EU) 2024/1689, Article 50(4) | Not approved |
| EU_AI_ACT_ART50_EMOTION_RECOGNITION_TRANSPARENCY_001 | Regulation (EU) 2024/1689, Article 50(3) | Not approved |
| EU_AI_ACT_ART50_GPAI_CONTENT_DISCLOSURE_001 | Regulation (EU) 2024/1689, Article 50(2) | Not approved |
| EU_AI_ACT_ART50_SYNTHETIC_MEDIA_WATERMARK_001 | Regulation (EU) 2024/1689, Article 50(2) | Not approved |
| EU_AI_ACT_ART53_GPAI_TRAINING_SUMMARY_001 | Regulation (EU) 2024/1689, Article 53(1)(d) | Not approved |
| EU_AI_ACT_ART5_BIOMETRIC_001 | Regulation (EU) 2024/1689, Article 5(1)(g) | Not approved |
| EU_AI_ACT_ART5_EMOTION_RECOGNITION_001 | Regulation (EU) 2024/1689, Article 5(1)(f) | Not approved |
| EU_AI_ACT_ART5_FACIAL_SCRAPING_001 | Regulation (EU) 2024/1689, Article 5(1)(e) | Not approved |
| EU_AI_ACT_ART5_PREDICTIVE_POLICING_001 | Regulation (EU) 2024/1689, Article 5(1)(d) | Not approved |
| EU_AI_ACT_ART5_REALTIME_BIOMETRIC_001 | Regulation (EU) 2024/1689, Article 5(1)(h) | Not approved |
| EU_AI_ACT_ART5_SOCIAL_SCORING_001 | Regulation (EU) 2024/1689, Article 5(1)(c) | Not approved |
| EU_AI_ACT_ART5_SUBLIMINAL_001 | Regulation (EU) 2024/1689, Article 5(1)(a) | Not approved |
| EU_AI_ACT_ART5_VULNERABILITY_001 | Regulation (EU) 2024/1689, Article 5(1)(b) | Not approved |
| EU_AI_ACT_ART6_HIGH_RISK_CLASSIFICATION_001 | Regulation (EU) 2024/1689, Article 6 | Not approved |
| EU_AI_ACT_ART9_RISK_MANAGEMENT_001 | Regulation (EU) 2024/1689, Article 9 | Not approved |
| EU_AI_ACT_GPAI_COPYRIGHT_TRANSPARENCY_001 | Regulation (EU) 2024/1689, Article 53(1)(c) | Not approved |
| EU_AI_ACT_GPAI_DOWNSTREAM_OBLIGATIONS_001 | Regulation (EU) 2024/1689, Article 53(1)(b) | Not approved |
| EU_AI_ACT_GPAI_MODEL_CLASSIFICATION_001 | Regulation (EU) 2024/1689, Article 51 | Not approved |
| EU_AI_ACT_GPAI_SYSTEMIC_RISK_001 | Regulation (EU) 2024/1689, Article 55 | Not approved |
| EU_AI_ACT_GPAI_TECHNICAL_DOCUMENTATION_001 | Regulation (EU) 2024/1689, Article 53(1), points (a) and (b) | Not approved |
| GDPR_BREACH_NOTIFICATION_001 | Regulation (EU) 2016/679, Article 33(1) | Not approved |
| GDPR_CONSENT_001 | Regulation (EU) 2016/679, Article 6(1)(a) and Article 7 | Not approved |
| GDPR_CROSS_BORDER_TRANSFER_001 | Regulation (EU) 2016/679, Articles 44 to 49 | Not approved |
| GDPR_DATA_MINIMIZATION_001 | Regulation (EU) 2016/679, Article 5(1)(c) | Not approved |
| GDPR_DPIA_001 | Regulation (EU) 2016/679, Article 35(1) | Not approved |
| GDPR_RIGHT_TO_ERASURE_001 | Regulation (EU) 2016/679, Article 17(1) | Not approved |
| HIPAA_MINIMUM_NECESSARY_001 | 45 CFR 164.502(b) (HIPAA Privacy Rule, minimum necessary) | Not approved |
| HIPAA_PHI_DISCLOSURE_001 | 45 CFR 164.502(a) (HIPAA Privacy Rule) | Not approved |
| HIPAA_PHI_INPUT_001 | 45 CFR 164.502(a) (HIPAA Privacy Rule) | Not approved |
| IL_BIPA_BIOMETRIC_001 | 740 ILCS 14/15 (Illinois BIPA) | Not approved |
| NYC_LL144_AEDT_001 | NYC Administrative Code section 20-870 et seq. (Local Law 144 of 2021) | Not approved |
| PCI_DSS_INPUT_001 | PCI DSS v4.0, Requirement 3.4 (industry standard, not law) | Not approved |
| PROMPT_SECURITY_DIRECT_INJECTION_OVERRIDE_001 | Regulation (EU) 2024/1689, Article 15(5) | Not approved |
| PROMPT_SECURITY_DIRECT_INJECTION_ROLE_HIJACK_001 | Regulation (EU) 2024/1689, Article 15(5) | Not approved |
| PROMPT_SECURITY_DIRECT_INJECTION_SAFETY_DISABLE_001 | Regulation (EU) 2024/1689, Article 15(5) | Not approved |
| PROMPT_SECURITY_EXFIL_MARKDOWN_IMAGE_CHANNEL_001 | Regulation (EU) 2024/1689, Article 15(5) | Not approved |
| PROMPT_SECURITY_EXFIL_SYSTEM_PROMPT_LEAK_001 | Regulation (EU) 2024/1689, Article 15(5) | Not approved |
| PROMPT_SECURITY_EXFIL_TRAINING_DATA_EXTRACTION_001 | Regulation (EU) 2024/1689, Article 15(5) | Not approved |
| PROMPT_SECURITY_INDIRECT_INJECTION_AI_ADDRESSED_DIRECTIVE_001 | Regulation (EU) 2024/1689, Article 15(5) | Not approved |
| PROMPT_SECURITY_INDIRECT_INJECTION_EMBEDDED_INSTRUCTION_001 | Regulation (EU) 2024/1689, Article 15(5) | Not approved |
| PROMPT_SECURITY_INDIRECT_INJECTION_SEPARATOR_HIJACK_001 | Regulation (EU) 2024/1689, Article 15(5) | Not approved |
| PROMPT_SECURITY_TOOL_CALL_HIJACK_001 | Regulation (EU) 2024/1689, Article 15(5) | Not approved |
| SANCTIONS_OFAC_DPRK_PRIMORSKY_JV_001 | 31 CFR Part 510 (North Korea Sanctions Regulations) | Not approved |
| SANCTIONS_OFAC_IR_IRGC_CARVEOUT_001 | 31 CFR Part 560 (Iranian Transactions and Sanctions Regulations) | Not approved |
| SANCTIONS_OFAC_RU_ENERGY_WINDDOWN_001 | 31 CFR Part 587 (Russian Harmful Foreign Activities Sanctions Regulations) | Not approved |
| SOX_HYBRID_MATERIAL_DISCLOSURE_001 | 15 U.S.C. 7241(a)(2) (Sarbanes-Oxley Act of 2002, section 302) | Not approved |
| SOX_SECTION_404_001 | 15 U.S.C. 7262 (Sarbanes-Oxley Act of 2002, section 404) | Not approved |
| SOX_SECTION_802_001 | 18 U.S.C. 1519 (Sarbanes-Oxley Act of 2002, section 802) | Not approved |
| TCPA_SMS_OPTIN_001 | 47 U.S.C. 227 (TCPA) | Not approved |
| UNIVERSAL_PII_INPUT_001 | ComplyEdge detection control (not statutory) | Not approved |
| rego-art10-001 | Regulation (EU) 2024/1689, Article 10 | Approved |
| rego-art11-001 | Regulation (EU) 2024/1689, Article 11 | Approved |
| rego-art12-001 | Regulation (EU) 2024/1689, Article 12 | Approved |
| rego-art13-001 | Regulation (EU) 2024/1689, Article 13 | Approved |
| rego-art14-001 | Regulation (EU) 2024/1689, Article 14 | Approved |
| rego-art15-1-001 | Regulation (EU) 2024/1689, Article 15(1) | Approved |
| rego-art15-4-001 | Regulation (EU) 2024/1689, Article 15(4) | Approved |
| rego-art15-5-001 | Regulation (EU) 2024/1689, Article 15(5) | Approved |
| rego-art15-ipi-001 | Regulation (EU) 2024/1689, Article 15(5) | Approved |
| rego-art15-ipi-002 | Regulation (EU) 2024/1689, Article 15(5) | Approved |
| rego-art15-ipi-003 | Regulation (EU) 2024/1689, Article 15(5) | Approved |
| rego-art15-ipi-004 | Regulation (EU) 2024/1689, Article 15(5) | Approved |
| rego-art15-ipi-005 | Regulation (EU) 2024/1689, Article 15(5) | Approved |
| rego-art15-ipi-006 | Regulation (EU) 2024/1689, Article 15(5) | Approved |
| rego-art15-ipi-007 | Regulation (EU) 2024/1689, Article 15(5) | Approved |
| rego-art15-ipi-008 | Regulation (EU) 2024/1689, Article 15(5) | Approved |
| rego-art15-ipi-009 | Regulation (EU) 2024/1689, Article 15(5) | Approved |
| rego-art15-ipi-010 | Regulation (EU) 2024/1689, Article 15(5) | Approved |
| rego-art16-001 | Regulation (EU) 2024/1689, Article 16 | Approved |
| rego-art26-001 | Regulation (EU) 2024/1689, Article 26 | Approved |
| rego-art27-001 | Regulation (EU) 2024/1689, Article 27 | Approved |
| rego-art4-001 | Regulation (EU) 2024/1689, Article 4 | Approved |
| rego-art5-1a-001 | Regulation (EU) 2024/1689, Article 5(1)(a) | Approved |
| rego-art5-1b-001 | Regulation (EU) 2024/1689, Article 5(1)(b) | Approved |
| rego-art5-1c-001 | Regulation (EU) 2024/1689, Article 5(1)(c) | Approved |
| rego-art5-1d-001 | Regulation (EU) 2024/1689, Article 5(1)(d) | Approved |
| rego-art5-1e-001 | Regulation (EU) 2024/1689, Article 5(1)(e) | Approved |
| rego-art5-1f-001 | Regulation (EU) 2024/1689, Article 5(1)(f) | Approved |
| rego-art5-1g-001 | Regulation (EU) 2024/1689, Article 5(1)(g) | Approved |
| rego-art5-1h-001 | Regulation (EU) 2024/1689, Article 5(1)(h) | Approved |
| rego-art50-1-001 | Regulation (EU) 2024/1689, Article 50(1) | Approved |
| rego-art50-2-001 | Regulation (EU) 2024/1689, Article 50(2) | Approved |
| rego-art50-2-002 | Regulation (EU) 2024/1689, Article 50(2) | Approved |
| rego-art50-3-001 | Regulation (EU) 2024/1689, Article 50(3) | Approved |
| rego-art50-3-002 | Regulation (EU) 2024/1689, Article 50(3) (Article 5(1)(f) exception) | Approved |
| rego-art50-4-001 | Regulation (EU) 2024/1689, Article 50(4) | Approved |
| rego-art50-4-002 | Regulation (EU) 2024/1689, Article 50(4) | Approved |
| rego-art52-001 | Regulation (EU) 2024/1689, Article 52 | Approved |
| rego-art53-1d-001 | Regulation (EU) 2024/1689, Article 53(1)(d) | Approved |
| rego-art55-1a-001 | Regulation (EU) 2024/1689, Article 55(1)(a) | Approved |
| rego-art55-1b-001 | Regulation (EU) 2024/1689, Article 55(1)(b) | Approved |
| rego-art55-1c-001 | Regulation (EU) 2024/1689, Article 55(1)(c) | Approved |
| rego-art55-1d-001 | Regulation (EU) 2024/1689, Article 55(1)(d) | Approved |
| rego-art6-3-001 | Regulation (EU) 2024/1689, Article 6(3) | Approved |
| rego-art6-annex3-1-001 | Regulation (EU) 2024/1689, Article 6(2) and Annex III, point 1 | Approved |
| rego-art6-annex3-2-001 | Regulation (EU) 2024/1689, Article 6(2) and Annex III, point 2 | Approved |
| rego-art6-annex3-3-001 | Regulation (EU) 2024/1689, Article 6(2) and Annex III, point 3 | Approved |
| rego-art6-annex3-4-001 | Regulation (EU) 2024/1689, Article 6(2) and Annex III, point 4 | Approved |
| rego-art6-annex3-5-001 | Regulation (EU) 2024/1689, Article 6(2) and Annex III, point 5 | Approved |
| rego-art6-annex3-5b-001 | Regulation (EU) 2024/1689, Article 6(2) and Annex III, point 5(b) | Approved |
| rego-art6-annex3-5c-001 | Regulation (EU) 2024/1689, Article 6(2) and Annex III, point 5(c) | Approved |
| rego-art6-annex3-6-001 | Regulation (EU) 2024/1689, Article 6(2) and Annex III, point 6 | Approved |
| rego-art6-annex3-7-001 | Regulation (EU) 2024/1689, Article 6(2) and Annex III, point 7 | Approved |
| rego-art6-annex3-8-001 | Regulation (EU) 2024/1689, Article 6(2) and Annex III, point 8 | Approved |
| rego-art9-001 | Regulation (EU) 2024/1689, Article 9 | Approved |
| rego-gdpr32-1-001 | Regulation (EU) 2016/679, Article 32(1) | Approved |
| rego-gdpr32-1-002 | Regulation (EU) 2016/679, Article 32(1) | Approved |
| rego-gdpr5-1c-001 | Regulation (EU) 2016/679, Article 5(1)(c) and (f) | Approved |
| rego-gdpr5-1c-002 | Regulation (EU) 2016/679, Article 5(1)(c) and (f) | Approved |
| rego-gdpr5-1c-003 | Regulation (EU) 2016/679, Article 5(1)(c) and (f) | Approved |
| rego-gdpr5-1c-004 | Regulation (EU) 2016/679, Article 5(1)(c) and (f) | Approved |
| rego-gdpr5-1c-005 | Regulation (EU) 2016/679, Article 5(1)(c) and (f) | Approved |
| rego-gdpr5-1c-006 | Regulation (EU) 2016/679, Article 5(1)(c) and (f) | Approved |
| rego-gdpr5-1c-007 | Regulation (EU) 2016/679, Article 5(1)(c) and (f) | Approved |
| rego-gdpr5-1c-008 | Regulation (EU) 2016/679, Article 5(1)(c) and (f) | Approved |
| rego-gdpr5-1c-009 | Regulation (EU) 2016/679, Article 5(1)(c) and (f) | Approved |
| rego-gpai-51-001 | Regulation (EU) 2024/1689, Article 51 | Approved |
| rego-gpai-53-2-001 | Regulation (EU) 2024/1689, Article 53(2) | Approved |
| rego-gpai-53a-001 | Regulation (EU) 2024/1689, Article 53(1)(a) | Approved |
| rego-gpai-53b-001 | Regulation (EU) 2024/1689, Article 53(1)(b) | Approved |
| rego-gpai-53c-001 | Regulation (EU) 2024/1689, Article 53(1)(c) | Approved |
| rego-gpai-55-001 | Regulation (EU) 2024/1689, Article 55 | Approved |
| rego-sox-302-001 | 15 U.S.C. 7241 (Sarbanes-Oxley Act of 2002, section 302) | Approved |