EVIDENCE ARTEFACTS
- Test scope and sample
- Timestamped result with evidence references
- Finding and remediation record
NOTICE-05v1.0
CONTROL RECORD · REVIEWED 2026-08-30
Purpose-change review
Make purpose-change review an inspectable system decision with a named owner, defined trigger and retrievable evidence.
Engineering control
Catalogue status
not legal status
RECORD ANATOMY
What this control needs to be reviewable.
- Objective
- Make purpose-change review an inspectable system decision with a named owner, defined trigger and retrievable evidence.
- Rationale
- Connect itemised data and purposes to the exact collection surface, language, version and route for action.
- Owner model
- Notice content owner · Product or collection-surface owner · Accessibility reviewer
- Review frequency
- Before release and on purpose, data or language change
- Architecture layer
- Notice and purpose
- Version
- 1.0 · 2026-08-30
IMPLEMENTATION SEQUENCE
Move from scope to retrievable evidence.
- 01
Scope the decision: define the decision, owner, trigger, evidence and review path before implementation.
- 02
Record the approved design and its source-status verification boundary.
- 03
Connect implementation events to evidence that a reviewer can retrieve without broad production access.
CONTROL TEST
- Select a recent, in-scope sample for purpose-change review and record why it was chosen.
- Trace the sample from its trigger and owner through the implemented system to the retained evidence.
- Record exceptions, confidence and remediation without converting an unknown into a pass.
ANTI-PATTERNS
Completion labels can hide an evidence gap.
- Treating “purpose-change review” as a policy sentence without an operating owner
- Marking the control complete from self-attestation alone
- Hiding missing, stale or inaccessible evidence behind a pass label
ARCHITECTURE → EVIDENCE DECISION JOURNEY
Follow the dependency, then inspect the proof.
Each connection uses existing catalogue records. Source IDs remain verification pointers—not provision mappings.
Add to a review route- Control pathwayNOTICE-05: Purpose-change review
- 01 · PrerequisiteLanguage/accessibility review
Review NOTICE-04 before testing this dependent record.
Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023 - 02 · Implementation patternVersioned notice registry
Publish the right notice at the right collection surface and keep the rendered version reproducible.
Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025 - 03 · Validation / testSelect a recent, in-scope sample for purpose-change review and record why it was chosen.
Trace the sample from its trigger and owner through the implemented system to the retained evidence. Record exceptions, confidence and remediation without converting an unknown into a pass.
Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023 - 04 · Evidence artefactTest scope and sample
Timestamped result with evidence references · Finding and remediation record
Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023 - 05 · Failure modeTreating “purpose-change review” as a policy sentence without an operating owner
Marking the control complete from self-attestation alone · Hiding missing, stale or inaccessible evidence behind a pass label
Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023 - 06 · Research noteA source model for phased legal commencement
Status should be computed from verified publication metadata and provision groups, while the original source and calculation basis remain visible. Radar context: Policy-as-code for source validation is Adopt.
Editorial analysis · reviewed 2026-08-30 · sources act-commencement-2025, dpdp-rules-2025, rules-corrigendum-2025 - 07 · Specialist propertyScenario learning
Use scenario-led learning to examine how notice choices change with context. This route remains optional if the destination is unavailable.
Contextual external property · no affiliation or availability implied
- 01 · PrerequisiteLanguage/accessibility review
Open semantic relationship table (1pathway)
| Record | Phase | Relationship | Status / boundary | Source pointers |
|---|---|---|---|---|
| NOTICE-05: Purpose-change review | 01 · Prerequisite | Language/accessibility review Review NOTICE-04 before testing this dependent record. | Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023 | dpdp-act-2023 |
| NOTICE-05: Purpose-change review | 02 · Implementation pattern | Versioned notice registry Publish the right notice at the right collection surface and keep the rendered version reproducible. | Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025 | dpdp-act-2023 · dpdp-rules-2025 · act-commencement-2025 |
| NOTICE-05: Purpose-change review | 03 · Validation / test | Select a recent, in-scope sample for purpose-change review and record why it was chosen. Trace the sample from its trigger and owner through the implemented system to the retained evidence. Record exceptions, confidence and remediation without converting an unknown into a pass. | Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023 | dpdp-act-2023 |
| NOTICE-05: Purpose-change review | 04 · Evidence artefact | Test scope and sample Timestamped result with evidence references · Finding and remediation record | Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023 | dpdp-act-2023 |
| NOTICE-05: Purpose-change review | 05 · Failure mode | Treating “purpose-change review” as a policy sentence without an operating owner Marking the control complete from self-attestation alone · Hiding missing, stale or inaccessible evidence behind a pass label | Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023 | dpdp-act-2023 |
| NOTICE-05: Purpose-change review | 06 · Research note | A source model for phased legal commencement Status should be computed from verified publication metadata and provision groups, while the original source and calculation basis remain visible. Radar context: Policy-as-code for source validation is Adopt. | Editorial analysis · reviewed 2026-08-30 · sources act-commencement-2025, dpdp-rules-2025, rules-corrigendum-2025 | act-commencement-2025 · dpdp-rules-2025 · rules-corrigendum-2025 |
| NOTICE-05: Purpose-change review | 07 · Specialist property | Scenario learning Use scenario-led learning to examine how notice choices change with context. This route remains optional if the destination is unavailable. | Contextual external property · no affiliation or availability implied | None · contextual external route |
VERIFY BEFORE MAPPING
GENERIC VERIFICATION POINTER · NOT A PROVISION MAPPING
dpdp-act-2023
Provision-specific applicability must be verified against the primary-text ledger.
Boundary: Operational control pattern; not a standalone legal conclusion.
Open the source ledgerCONNECTED SYSTEM PATTERN
Versioned notice registry
Publish the right notice at the right collection surface and keep the rendered version reproducible.
LOCAL WORKSPACE NOTE
Give this work a next owner.
Nothing is sent anywhere. Avoid names, personal data or confidential incident details.
CHANGE LOG
Version 1.3 — Architecture-to-evidence journey and non-personal review-route relationship added; verification-pointer boundary retained.
Version 1.2 — Official-source status rechecked; command-centre indexing and the non-mapping boundary retained.
Version 1.1 — Engineering fields, source verification pointers and acceptance evidence reviewed.
Version 1.0 — Stable catalogue ID, objective, evidence model, test sequence and verification boundary established.