HumanOSE Home

Policy & control catalog

The control status documents the review of the evidence — it does not certify conformity.

The control status documents the review of the evidence — it does not certify conformity.
This report serves governance and compliance preparation on an evidence basis. It does not constitute legal advice, certification, or a conformity attestation.

Filter by source: All sources · AI literacy · Audit · EU AI Act · GDPR · Internal policy · Security

Controls4

Sources6

Catalog versionv0.1.0

StatusPreparation

GDPR

ID	Control	Expected evidence	Risk classes	AI functions
`gdpr_lawfulness`	Lawfulness of processing DSGVO Art. 6	Documented legal basis for the processing of personal data.	Near high-risk — mandatory human oversight, external legal review recommended Elevated risk — human review required	All functions (not restricted)
`gdpr_data_minimization`	Data minimization DSGVO Art. 5(1c)	Evidence that only necessary data categories are processed.	Near high-risk — mandatory human oversight, external legal review recommended Elevated risk — human review required	All functions (not restricted)
`gdpr_dpia`	Data protection impact assessment (DPIA) DSGVO Art. 35	DPIA carried out and documented where required.	Near high-risk — mandatory human oversight, external legal review recommended	All functions (not restricted)
`gdpr_data_subject_rights`	Data subject rights DSGVO Art. 12–22	Processes for access, rectification, objection and appeal by affected persons in place.	Near high-risk — mandatory human oversight, external legal review recommended Elevated risk — human review required	All functions (not restricted)