Contingency priorities
- Most critical mechanism: Mechanism: Region A to Country X (stops 3 items).
- For the scenario: none stops none.
Global Compliance · Expanded Global Compliance
Cross-Border Compliance Mapping
Map obligations across countries, states, regions and local jurisdictions, including overlapping or conflicting requirements and uncertainty about which applies.
Demonstration: Osterley Components GmbH (fictional) · Industrial manufacturing. Fictional data and a scripted answer.
The situation
- Organisation
- Osterley Components GmbH (fictional)
- Who is asking
- Data protection officer
- Industry
- Industrial manufacturing
- What happened
- A change in one country's rules on transferring personal data may affect flows the company set up years ago.
The question asked
If the transfer mechanism for one country stops being valid, which of our data flows and services are affected?
What it reads, and who can see the result
- Data flow map registerFlows of personal data between countries and systems.
- Transfer mechanism register registerWhat lets each flow happen.
- Reads
- The data flow map and the register of transfer mechanisms.
- Does not read
- The personal data itself.
- Permission
- Data protection office access.
- Who sees it
- The data protection officer, IT and the business owners.
Try it
Fail one or more items and see what stops and what only degrades, worked out by following the dependencies.
Choose what loses its transfer mechanism. Hard dependencies stop with it; soft ones carry on, degraded.
- Standard clauses, signed.
- Adequacy decision.
- Employee pay data.Depends on: Mechanism: Region A to Country X (hard)
- Customer contacts.Depends on: Mechanism: Region A to Country Y (hard), Mechanism: Region A to Country X (soft)
- Customer tickets.Depends on: Mechanism: Region A to Country X (hard)
- Needs the HR system.Depends on: HR payroll system (Country X) (hard)
- Needs the CRM.Depends on: CRM (Country Y) (hard)
- Uses the support desk.Depends on: Support desk (Country X) (soft)
- loses its transfer mechanism
- 0
- Stops as a result
- 0
- Degraded
- 0
- Unaffected
- 8
The answer
Simulated answer. Written for this fictional case, not produced by a live model. Only the figures in it are computed, from what you decided above.
If none: 0 item(s) stop and 0 degrade.
Following the data flows, losing none stops none and degrades none [S1][S2]. The most consequential single mechanism in this map is Mechanism: Region A to Country X, which stops 3 other item(s).
A flow with no lawful route has to stop or be re-papered, and the order matters: payroll is dated, marketing analytics is not. The map shows which dependencies force a deadline.
Relies on: S1 · Data flow mapS2 · Transfer mechanism register
Review and approval
The data protection officer decides. Approving fixes the contingency priorities for transfer mechanisms. It does not stop any flow or sign any clause.
Not ready to approve. Fail at least one item first, to see what depends on it.
In the product this is a different person with the right permission. Here you play that role to see the rule.
What it produces
Limits of this example
- Only recorded flows are mapped; an undocumented flow would be missed.
- The legal validity of a mechanism is for counsel; this shows the consequence of a loss.
- This is a scripted demonstration on fictional data. No model was called and no real organisation, person or result is shown.
More in Global Compliance
- The compliance command centreObligations, deadlines and changes are scattered across inboxes and spreadsheets, so something is eventually missed.
- Corporate and financial regulationFilings, tax obligations, licences and entity records are tracked by different people, often on different dates.
- People, sector and international dutiesEmployment, privacy, security, environmental and cross-border duties sit with different teams and are rarely seen together.
- Assurance and evidenceWhen an auditor or an inspector arrives, evidence has to be found in a hurry, and gaps appear for the first time.
- Regulatory Applicability IntelligenceWork out which obligations may apply to this business from its legal entities, activities, industry, locations, workforce and other verified facts, and show each as appl…
- Regulatory Change Impact IntelligenceWatch approved authoritative sources, detect changes that matter, identify the entities, processes, systems and controls they affect, and start a governed review and rem…
- Continuous Control MonitoringEvaluate whether each control is operating: evidence present and current, expirations, exceptions and failures, so assurance is ongoing instead of a one-time checklist.
- Contract Compliance IntelligenceRead customer-authorised contracts for obligations, service commitments, deadlines, renewals, restrictions, responsibilities and compliance risks, with citations to the…
The Global Compliance story · This capability in the full register