Rule set sha256:a7e715b79299
The rules behind one rule set digest
Digest a7e715b792994b004a7cc9714100077fad036164172ce42812ed396af0b727f5: the SHA-256 of every rule file that was loaded, test files excluded. An audit record whose rule_set.digest is this value was decided by these 136 rules, 136 of them approved by a named reviewer.
A rule that is not approved still decided; a reader should not treat its provision as checked.
| Rule | Provision | Approval |
|---|---|---|
| CCPA_CPRA_OPT_OUT_001 | California Civil Code section 1798.120 | Approved |
| COPPA_CHILD_INPUT_001 | 16 CFR 312.5(a)(1) (COPPA Rule), implementing 15 U.S.C. 6502 | Approved |
| ECPA_ELECTRONIC_SURVEILLANCE_001 | 18 U.S.C. 2511 (ECPA) | Approved |
| EU_AI_ACT_ART10_DATA_GOVERNANCE_001 | Regulation (EU) 2024/1689, Article 10(2) and (3) | Approved |
| EU_AI_ACT_ART12_RECORD_KEEPING_001 | Regulation (EU) 2024/1689, Article 12 | Approved |
| EU_AI_ACT_ART13_TRANSPARENCY_001 | Regulation (EU) 2024/1689, Article 13(1) and (2) | Approved |
| EU_AI_ACT_ART14_HUMAN_OVERSIGHT_001 | Regulation (EU) 2024/1689, Article 14(1) and (2) | Approved |
| EU_AI_ACT_ART15_ACCURACY_ROBUSTNESS_001 | Regulation (EU) 2024/1689, Article 15(1), (3), (4) and (5) | Approved |
| EU_AI_ACT_ART16_PROVIDER_OBLIGATIONS_001 | Regulation (EU) 2024/1689, Article 16 | Approved |
| EU_AI_ACT_ART26_DEPLOYER_OBLIGATIONS_001 | Regulation (EU) 2024/1689, Article 26 | Approved |
| EU_AI_ACT_ART27_FRIA_001 | Regulation (EU) 2024/1689, Article 27(1) | Approved |
| EU_AI_ACT_ART4_AI_LITERACY_001 | Regulation (EU) 2024/1689, Article 4(1), as replaced by Regulation (EU) 2026/1744 | Approved |
| EU_AI_ACT_ART50_CHATBOT_DISCLOSURE_001 | Regulation (EU) 2024/1689, Article 50(1) | Approved |
| EU_AI_ACT_ART50_DEEPFAKE_DISCLOSURE_001 | Regulation (EU) 2024/1689, Article 50(4), first subparagraph | Approved |
| EU_AI_ACT_ART50_EMOTION_RECOGNITION_TRANSPARENCY_001 | Regulation (EU) 2024/1689, Article 50(3) | Approved |
| EU_AI_ACT_ART50_GPAI_CONTENT_DISCLOSURE_001 | Regulation (EU) 2024/1689, Article 50(2) | Approved |
| EU_AI_ACT_ART50_SYNTHETIC_MEDIA_WATERMARK_001 | Regulation (EU) 2024/1689, Article 50(2) | Approved |
| EU_AI_ACT_ART53_GPAI_TRAINING_SUMMARY_001 | Regulation (EU) 2024/1689, Article 53(1)(d) | Approved |
| EU_AI_ACT_ART5_BIOMETRIC_001 | Regulation (EU) 2024/1689, Article 5(1)(g) | Approved |
| EU_AI_ACT_ART5_EMOTION_RECOGNITION_001 | Regulation (EU) 2024/1689, Article 5(1)(f) | Approved |
| EU_AI_ACT_ART5_FACIAL_SCRAPING_001 | Regulation (EU) 2024/1689, Article 5(1)(e) | Approved |
| EU_AI_ACT_ART5_PREDICTIVE_POLICING_001 | Regulation (EU) 2024/1689, Article 5(1)(d) | Approved |
| EU_AI_ACT_ART5_REALTIME_BIOMETRIC_001 | Regulation (EU) 2024/1689, Article 5(1)(h) | Approved |
| EU_AI_ACT_ART5_SOCIAL_SCORING_001 | Regulation (EU) 2024/1689, Article 5(1)(c) | Approved |
| EU_AI_ACT_ART5_SUBLIMINAL_001 | Regulation (EU) 2024/1689, Article 5(1)(a) | Approved |
| EU_AI_ACT_ART5_VULNERABILITY_001 | Regulation (EU) 2024/1689, Article 5(1)(b) | Approved |
| EU_AI_ACT_ART6_HIGH_RISK_CLASSIFICATION_001 | Regulation (EU) 2024/1689, Article 6(4) | Approved |
| EU_AI_ACT_ART9_RISK_MANAGEMENT_001 | Regulation (EU) 2024/1689, Article 9(1) and (2) | Approved |
| EU_AI_ACT_GPAI_COPYRIGHT_TRANSPARENCY_001 | Regulation (EU) 2024/1689, Article 53(1)(c) | Approved |
| EU_AI_ACT_GPAI_DOWNSTREAM_OBLIGATIONS_001 | Regulation (EU) 2024/1689, Article 53(1)(b) | Approved |
| EU_AI_ACT_GPAI_MODEL_CLASSIFICATION_001 | Regulation (EU) 2024/1689, Article 52(1) | Approved |
| EU_AI_ACT_GPAI_SYSTEMIC_RISK_001 | Regulation (EU) 2024/1689, Article 55(1) | Approved |
| EU_AI_ACT_GPAI_TECHNICAL_DOCUMENTATION_001 | Regulation (EU) 2024/1689, Article 53(1)(a) | Approved |
| GDPR_BREACH_NOTIFICATION_001 | Regulation (EU) 2016/679, Article 33(1) | Approved |
| GDPR_CONSENT_001 | Regulation (EU) 2016/679, Article 6(1)(a) and Article 7 | Approved |
| GDPR_CROSS_BORDER_TRANSFER_001 | Regulation (EU) 2016/679, Articles 44 to 49 | Approved |
| GDPR_DATA_MINIMIZATION_001 | Regulation (EU) 2016/679, Article 5(1)(c) | Approved |
| GDPR_DPIA_001 | Regulation (EU) 2016/679, Article 35(1) and (3) | Approved |
| GDPR_RIGHT_TO_ERASURE_001 | Regulation (EU) 2016/679, Article 17(1) | Approved |
| HIPAA_MINIMUM_NECESSARY_001 | 45 CFR 164.502(b) (HIPAA Privacy Rule, minimum necessary) | Approved |
| HIPAA_PHI_DISCLOSURE_001 | 45 CFR 164.502(a) (HIPAA Privacy Rule) | Approved |
| HIPAA_PHI_INPUT_001 | 45 CFR 164.502(a) (HIPAA Privacy Rule; binds covered entities and business associates only) | Approved |
| IL_BIPA_BIOMETRIC_001 | 740 ILCS 14/15 (Illinois BIPA) | Approved |
| NYC_LL144_AEDT_001 | NYC Administrative Code section 20-871(a) (Local Law 144 of 2021) | Approved |
| PCI_DSS_INPUT_001 | PCI DSS v4.0.1, Requirement 3 (Protect Stored Account Data), industry standard, not law; standard text behind PCI SSC licence not read | Approved |
| PROMPT_SECURITY_DIRECT_INJECTION_OVERRIDE_001 | Regulation (EU) 2024/1689, Article 15(5) | Approved |
| PROMPT_SECURITY_DIRECT_INJECTION_ROLE_HIJACK_001 | Regulation (EU) 2024/1689, Article 15(5) | Approved |
| PROMPT_SECURITY_DIRECT_INJECTION_SAFETY_DISABLE_001 | Regulation (EU) 2024/1689, Article 15(5) | Approved |
| PROMPT_SECURITY_EXFIL_MARKDOWN_IMAGE_CHANNEL_001 | Regulation (EU) 2024/1689, Article 15(5) | Approved |
| PROMPT_SECURITY_EXFIL_SYSTEM_PROMPT_LEAK_001 | Regulation (EU) 2024/1689, Article 15(5) | Approved |
| PROMPT_SECURITY_EXFIL_TRAINING_DATA_EXTRACTION_001 | Regulation (EU) 2024/1689, Article 15(5) | Approved |
| PROMPT_SECURITY_INDIRECT_INJECTION_AI_ADDRESSED_DIRECTIVE_001 | Regulation (EU) 2024/1689, Article 15(5) | Approved |
| PROMPT_SECURITY_INDIRECT_INJECTION_EMBEDDED_INSTRUCTION_001 | Regulation (EU) 2024/1689, Article 15(5) | Approved |
| PROMPT_SECURITY_INDIRECT_INJECTION_SEPARATOR_HIJACK_001 | Regulation (EU) 2024/1689, Article 15(5) | Approved |
| PROMPT_SECURITY_TOOL_CALL_HIJACK_001 | Regulation (EU) 2024/1689, Article 15(5) | Approved |
| SANCTIONS_OFAC_DPRK_PRIMORSKY_JV_001 | 31 CFR 510.206 (North Korea Sanctions Regulations) | Approved |
| SANCTIONS_OFAC_IR_IRGC_CARVEOUT_001 | 31 CFR 560.201 and 560.204 (Iranian Transactions and Sanctions Regulations) | Approved |
| SANCTIONS_OFAC_RU_ENERGY_WINDDOWN_001 | Executive Order 14066, Section 1(a), and 31 CFR 587.201 | Approved |
| SOX_HYBRID_MATERIAL_DISCLOSURE_001 | 17 CFR 243.100(a) (Regulation FD) | Approved |
| SOX_SECTION_404_001 | 15 U.S.C. 7262 (Sarbanes-Oxley Act of 2002, section 404) | Approved |
| SOX_SECTION_802_001 | 18 U.S.C. 1519 (Sarbanes-Oxley Act of 2002, section 802) | Approved |
| TCPA_SMS_OPTIN_001 | 47 U.S.C. 227(b)(1)(A)(iii) (TCPA), as implemented by 47 CFR 64.1200(a)(2) | Approved |
| UNIVERSAL_PII_INPUT_001 | ComplyEdge detection control (not statutory) | Approved |
| rego-art10-001 | Regulation (EU) 2024/1689, Article 10(2) and (3) | Approved |
| rego-art11-001 | Regulation (EU) 2024/1689, Article 11(1) | Approved |
| rego-art12-001 | Regulation (EU) 2024/1689, Article 12(1) | Approved |
| rego-art13-001 | Regulation (EU) 2024/1689, Article 13(2) | Approved |
| rego-art14-001 | Regulation (EU) 2024/1689, Article 14(1) | Approved |
| rego-art15-1-001 | Regulation (EU) 2024/1689, Article 15(3) | Approved |
| rego-art15-4-001 | Regulation (EU) 2024/1689, Article 15(4) | Approved |
| rego-art15-5-001 | Regulation (EU) 2024/1689, Article 15(5) | Approved |
| rego-art15-ipi-001 | Regulation (EU) 2024/1689, Article 15(5) | Approved |
| rego-art15-ipi-002 | Regulation (EU) 2024/1689, Article 15(5) | Approved |
| rego-art15-ipi-003 | Regulation (EU) 2024/1689, Article 15(5) | Approved |
| rego-art15-ipi-004 | Regulation (EU) 2024/1689, Article 15(5) | Approved |
| rego-art15-ipi-005 | Regulation (EU) 2024/1689, Article 15(5) | Approved |
| rego-art15-ipi-006 | Regulation (EU) 2024/1689, Article 15(5) | Approved |
| rego-art15-ipi-007 | Regulation (EU) 2024/1689, Article 15(5) | Approved |
| rego-art15-ipi-008 | Regulation (EU) 2024/1689, Article 15(5) | Approved |
| rego-art15-ipi-009 | Regulation (EU) 2024/1689, Article 15(5) | Approved |
| rego-art15-ipi-010 | Regulation (EU) 2024/1689, Article 15(5) | Approved |
| rego-art16-001 | Regulation (EU) 2024/1689, Article 16, points (f) to (i) | Approved |
| rego-art26-001 | Regulation (EU) 2024/1689, Article 26(1), (2), (5) and (6) | Approved |
| rego-art27-001 | Regulation (EU) 2024/1689, Article 27(1) | Approved |
| rego-art4-001 | Regulation (EU) 2024/1689, Article 4(1), as replaced by Regulation (EU) 2026/1744 | Approved |
| rego-art5-1a-001 | Regulation (EU) 2024/1689, Article 5(1)(a) | Approved |
| rego-art5-1b-001 | Regulation (EU) 2024/1689, Article 5(1)(b) | Approved |
| rego-art5-1c-001 | Regulation (EU) 2024/1689, Article 5(1)(c) | Approved |
| rego-art5-1d-001 | Regulation (EU) 2024/1689, Article 5(1)(d) | Approved |
| rego-art5-1e-001 | Regulation (EU) 2024/1689, Article 5(1)(e) | Approved |
| rego-art5-1f-001 | Regulation (EU) 2024/1689, Article 5(1)(f) | Approved |
| rego-art5-1g-001 | Regulation (EU) 2024/1689, Article 5(1)(g) | Approved |
| rego-art5-1h-001 | Regulation (EU) 2024/1689, Article 5(1)(h) | Approved |
| rego-art50-1-001 | Regulation (EU) 2024/1689, Article 50(1) | Approved |
| rego-art50-2-001 | Regulation (EU) 2024/1689, Article 50(2) | Approved |
| rego-art50-2-002 | Regulation (EU) 2024/1689, Article 50(2) | Approved |
| rego-art50-3-001 | Regulation (EU) 2024/1689, Article 50(3) | Approved |
| rego-art50-3-002 | Regulation (EU) 2024/1689, Article 50(3) | Approved |
| rego-art50-4-001 | Regulation (EU) 2024/1689, Article 50(4), first subparagraph | Approved |
| rego-art50-4-002 | Regulation (EU) 2024/1689, Article 50(4), second subparagraph | Approved |
| rego-art52-001 | Regulation (EU) 2024/1689, Article 52(1) | Approved |
| rego-art53-1d-001 | Regulation (EU) 2024/1689, Article 53(1)(d) | Approved |
| rego-art55-1a-001 | Regulation (EU) 2024/1689, Article 55(1)(a) | Approved |
| rego-art55-1b-001 | Regulation (EU) 2024/1689, Article 55(1)(b) | Approved |
| rego-art55-1c-001 | Regulation (EU) 2024/1689, Article 55(1)(c) | Approved |
| rego-art55-1d-001 | Regulation (EU) 2024/1689, Article 55(1)(d) | Approved |
| rego-art6-3-001 | Regulation (EU) 2024/1689, Article 6(3) | Approved |
| rego-art6-annex3-1-001 | Regulation (EU) 2024/1689, Article 6(2) and Annex III, point 1(a) | Approved |
| rego-art6-annex3-2-001 | Regulation (EU) 2024/1689, Article 6(2) and Annex III, point 2 | Approved |
| rego-art6-annex3-3-001 | Regulation (EU) 2024/1689, Article 6(2) and Annex III, point 3 | Approved |
| rego-art6-annex3-4-001 | Regulation (EU) 2024/1689, Article 6(2) and Annex III, point 4 | Approved |
| rego-art6-annex3-5-001 | Regulation (EU) 2024/1689, Article 6(2) and Annex III, point 5 | Approved |
| rego-art6-annex3-5b-001 | Regulation (EU) 2024/1689, Article 6(2) and Annex III, point 5(b) | Approved |
| rego-art6-annex3-5c-001 | Regulation (EU) 2024/1689, Article 6(2) and Annex III, point 5(c) | Approved |
| rego-art6-annex3-6-001 | Regulation (EU) 2024/1689, Article 6(2) and Annex III, point 6 | Approved |
| rego-art6-annex3-7-001 | Regulation (EU) 2024/1689, Article 6(2) and Annex III, point 7 | Approved |
| rego-art6-annex3-8-001 | Regulation (EU) 2024/1689, Article 6(2) and Annex III, point 8 | Approved |
| rego-art9-001 | Regulation (EU) 2024/1689, Article 9(1) | Approved |
| rego-gdpr32-1-001 | Regulation (EU) 2016/679, Article 32(1)(b) | Approved |
| rego-gdpr32-1-002 | Regulation (EU) 2016/679, Article 32(1)(b) | Approved |
| rego-gdpr5-1c-001 | Regulation (EU) 2016/679, Article 5(1)(c) | Approved |
| rego-gdpr5-1c-002 | Regulation (EU) 2016/679, Article 5(1)(c) | Approved |
| rego-gdpr5-1c-003 | Regulation (EU) 2016/679, Article 5(1)(c) | Approved |
| rego-gdpr5-1c-004 | Regulation (EU) 2016/679, Article 5(1)(c) | Approved |
| rego-gdpr5-1c-005 | Regulation (EU) 2016/679, Article 5(1)(c) | Approved |
| rego-gdpr5-1c-006 | Regulation (EU) 2016/679, Article 5(1)(c) | Approved |
| rego-gdpr5-1c-007 | Regulation (EU) 2016/679, Article 5(1)(c) | Approved |
| rego-gdpr5-1c-008 | Regulation (EU) 2016/679, Article 5(1)(c) | Approved |
| rego-gdpr5-1c-009 | Regulation (EU) 2016/679, Article 5(1)(c) | Approved |
| rego-gpai-51-001 | Regulation (EU) 2024/1689, Article 51(1) and Article 52(1) | Approved |
| rego-gpai-53-2-001 | Regulation (EU) 2024/1689, Article 53(2) | Approved |
| rego-gpai-53a-001 | Regulation (EU) 2024/1689, Article 53(1)(a) | Approved |
| rego-gpai-53b-001 | Regulation (EU) 2024/1689, Article 53(1)(b) | Approved |
| rego-gpai-53c-001 | Regulation (EU) 2024/1689, Article 53(1)(c) | Approved |
| rego-gpai-55-001 | Regulation (EU) 2024/1689, Article 55(1) | Approved |
| rego-sox-302-001 | 17 CFR 243.100(a) (Regulation FD) | Approved |