{"catalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","download":{"releaseId":"sha256:4ee7a16e277f261451b503b451e7c94a5183b4d1dd6d8c0868dffbcb115e13f9","slug":"reg-privacy-safeguards-notice-management","url":"/assets/agent_workflow-reg-privacy-safeguards-notice-management-35747fe6.9dba7d7b5fb714d1.json"},"kind":"record","record":{"attributes":{"department":"privacy","domain":"reg","lineOfDefense":"operate"},"canonicalUrl":"https://evidenceflows.com/workflows/all/?w=reg-privacy-safeguards-notice-management","description":"Privacy Safeguards & Notice Management as a decision-aware cycle that runs as a workflow instance attached to the standing \"Privacy Program\" Process item (process_type: business_process, process_owner: the privacy officer) — one archived instance per period is the cycle file. Each run refreshes the privacy requirements inventory, confirms PII-protection accountability over the PII stores (modeled as processing-activity Process items), verifies administrative, technical, and physical safeguards against data volume and sensitivity (the safeguard set is the Control items with control_category administrative|technical|physical and framework gdpr|ccpa|hipaa protecting each store), remediates gaps as tracked Issues, and authors, publishes, and version-retains the privacy notices and registrations (modeled as Policy items) kept accurate to actual processing. In scope: the periodic privacy program cycle over the confirmed PII stores, their safeguard control set, and the published notice and registration population; every run reconciles the affected notices to actual processing — a cycle that skips notice reconciliation is a different workflow. No upstream or downstream workflow feeds or consumes this cycle; its inputs are the organization's own privacy program records, and open remediation, treatment expiries, and deferred drift carry forward as open Issues that seed the next cycle's intake.","details":{"canonicalUrl":"https://evidenceflows.com/workflows/all/?w=reg-privacy-safeguards-notice-management","capabilities":[],"controls":["UC-DATA-05","UC-DATA-13","UC-GOV-25","UC-GOV-26","UC-DATA-04"],"domains":["reg"],"lineOfDefense":"operate","mappingStatus":"mapped","releaseId":"sha256:4ee7a16e277f261451b503b451e7c94a5183b4d1dd6d8c0868dffbcb115e13f9","roleIntegrity":{"activityCount":0,"ermPhases":[],"lineRoles":[],"serviceModes":[],"warnings":[]},"sourceTemplateId":"workflow-library:reg-privacy-safeguards-notice-management","standards":["gdpr","ccpa","hipaa"],"teams":["privacy"]},"download":{"releaseId":"sha256:4ee7a16e277f261451b503b451e7c94a5183b4d1dd6d8c0868dffbcb115e13f9"},"history":{"digest":"3d89c828ed532243e36a37d4878730e4d4cd87705ff4a97bf562e7259bcb6526","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-10-04T21:48:26Z","updatedRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4"},"id":"wf:R11","mapUrl":"https://evidenceflows.com/?v=1&node=wf%3AR11","slug":"reg-privacy-safeguards-notice-management","sourceIds":["ccpa","gdpr","hipaa","iso-27001","nist-800-53","soc2"],"sourceUrl":null,"title":"Privacy Safeguards & Notice Management","type":"workflow"},"relationships":[{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:1827f1bc36ce33f1a9780dee59e37237270664e144f751ebc063fb8b40220d05","properties":{},"sourceDetailPath":"/data/v1/records/wf-r11-a48dfcd0.json","sourceId":"wf:R11","targetDetailPath":"/data/v1/records/uc-uc-data-05-3244ac25.json","targetId":"uc:UC-DATA-05","type":"operates"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:2865d6ac583d94f616703bc2f0c20a1747ead3d85b199ce0bc173599f4f10455","properties":{},"sourceDetailPath":"/data/v1/records/wf-r11-a48dfcd0.json","sourceId":"wf:R11","targetDetailPath":"/data/v1/records/uc-uc-data-13-c09befaf.json","targetId":"uc:UC-DATA-13","type":"operates"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:69027da1dc6fbc3df4a6440fe3909840a5177ed84028a2f2c4fd68a8265315df","properties":{},"sourceDetailPath":"/data/v1/records/wf-r11-a48dfcd0.json","sourceId":"wf:R11","targetDetailPath":"/data/v1/records/uc-uc-data-04-2a08628d.json","targetId":"uc:UC-DATA-04","type":"operates"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:afc210bafbc4d1530c9e939558478b52a5b449cfeec2ec4488740f7eed08977c","properties":{},"sourceDetailPath":"/data/v1/records/wf-r11-a48dfcd0.json","sourceId":"wf:R11","targetDetailPath":"/data/v1/records/uc-uc-gov-26-3952a3ca.json","targetId":"uc:UC-GOV-26","type":"operates"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:e13c69d9475c363547df76ae0fde8b9656075cfc4e5b71d4f8d6c12dbf82380d","properties":{},"sourceDetailPath":"/data/v1/records/wf-r11-a48dfcd0.json","sourceId":"wf:R11","targetDetailPath":"/data/v1/records/uc-uc-gov-25-7960cafc.json","targetId":"uc:UC-GOV-25","type":"operates"}],"schemaVersion":1}