Independent DPDP educationSWARN is in development · educational, not legal adviceSource status: 30 Aug 2026

CONTROL CATALOGUE · 54 STABLE RECORDS

Find the control behind the claim.

Every record names an objective, owner model, implementation sequence, evidence, test, frequency and failure modes.

These are engineering controls. Generic source fields are verification pointers—not provision mappings or proof of compliance.

Control records

54 records shown
DISC-01

Processing inventory ownership

Make processing inventory ownership an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlDiscovery and ownership
Evidence starts withVersioned structured record
Open record
DISC-02

Data category map

Make data category map an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlDiscovery and ownership
Evidence starts withVersioned structured record
Open record
DISC-03

Purpose-owner assignment

Make purpose-owner assignment an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlDiscovery and ownership
Evidence starts withVersioned decision record
Open record
DISC-04

Collection-surface review

Make collection-surface review an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlDiscovery and ownership
Evidence starts withTest scope and sample
Open record
DISC-05

Processor discovery

Make processor discovery an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlDiscovery and ownership
Evidence starts withVersioned decision record
Open record
DISC-06

Inventory change gate

Make inventory change gate an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlDiscovery and ownership
Evidence starts withVersioned structured record
Open record
NOTICE-01

Itemised data/purpose notice

Make itemised data/purpose notice an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlNotice and purpose
Evidence starts withVersioned decision record
Open record
NOTICE-02

Collection-point notice link

Make collection-point notice link an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlNotice and purpose
Evidence starts withVersioned decision record
Open record
NOTICE-03

Notice-version traceability

Make notice-version traceability an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlNotice and purpose
Evidence starts withVersioned decision record
Open record
NOTICE-04

Language/accessibility review

Make language/accessibility review an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlNotice and purpose
Evidence starts withTest scope and sample
Open record
NOTICE-05

Purpose-change review

Make purpose-change review an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlNotice and purpose
Evidence starts withTest scope and sample
Open record
NOTICE-06

Notice archive

Make notice archive an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlNotice and purpose
Evidence starts withVersioned decision record
Open record
CONSENT-01

Affirmative-action capture

Make affirmative-action capture an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlChoice and consent evidence
Evidence starts withVersioned decision record
Open record
CONSENT-02

Consent event receipt

Make consent event receipt an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlChoice and consent evidence
Evidence starts withVersioned event schema
Open record
CONSENT-03

Purpose-choice separation

Make purpose-choice separation an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlChoice and consent evidence
Evidence starts withVersioned decision record
Open record
CONSENT-04

Withdrawal propagation

Make withdrawal propagation an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlChoice and consent evidence
Evidence starts withVersioned event schema
Open record
CONSENT-05

Preference pathway test

Make preference pathway test an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlChoice and consent evidence
Evidence starts withTest scope and sample
Open record
CONSENT-06

Consent record retrieval

Make consent record retrieval an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlChoice and consent evidence
Evidence starts withVersioned decision record
Open record
RIGHTS-01

Rights intake channel

Make rights intake channel an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlRights and grievance operations
Evidence starts withVersioned decision record
Open record
RIGHTS-02

Request identity/risk procedure

Make request identity/risk procedure an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlRights and grievance operations
Evidence starts withVersioned decision record
Open record
RIGHTS-03

Correction workflow

Make correction workflow an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlRights and grievance operations
Evidence starts withVersioned decision record
Open record
RIGHTS-04

Erasure workflow

Make erasure workflow an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlRights and grievance operations
Evidence starts withVersioned decision record
Open record
RIGHTS-05

Grievance clock and escalation

Make grievance clock and escalation an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlRights and grievance operations
Evidence starts withVersioned decision record
Open record
RIGHTS-06

Request exercise record

Make request exercise record an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlRights and grievance operations
Evidence starts withTest scope and sample
Open record
RET-01

Purpose-completion trigger

Make purpose-completion trigger an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlRetention and deletion
Evidence starts withVersioned event schema
Open record
RET-02

Retention-owner review

Make retention-owner review an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlRetention and deletion
Evidence starts withTest scope and sample
Open record
RET-03

Legal-hold boundary

Make legal-hold boundary an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlRetention and deletion
Evidence starts withVersioned decision record
Open record
RET-04

Backup deletion/expiry evidence

Make backup deletion/expiry evidence an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlRetention and deletion
Evidence starts withVersioned decision record
Open record
RET-05

Deletion verification sample

Make deletion verification sample an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlRetention and deletion
Evidence starts withVersioned decision record
Open record
RET-06

Retention change log

Make retention change log an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlRetention and deletion
Evidence starts withVersioned decision record
Open record
PROC-01

Processor register

Make processor register an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlProcessor and transfer governance
Evidence starts withVersioned structured record
Open record
PROC-02

Processor instruction and contract map

Make processor instruction and contract map an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlProcessor and transfer governance
Evidence starts withVersioned structured record
Open record
PROC-03

Sub-processor review and approval

Make sub-processor review and approval an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlProcessor and transfer governance
Evidence starts withTest scope and sample
Open record
XFER-01

Transfer location map

Make transfer location map an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlProcessor and transfer governance
Evidence starts withVersioned structured record
Open record
XFER-02

Restriction watch

Make restriction watch an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlProcessor and transfer governance
Evidence starts withVersioned decision record
Open record
PROC-04

Vendor exit evidence

Make vendor exit evidence an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlProcessor and transfer governance
Evidence starts withVersioned decision record
Open record
SEC-01

Encryption/masking/tokenisation decision

Make encryption/masking/tokenisation decision an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlSecurity and breach response
Evidence starts withApproved security decision
Open record
SEC-02

Access-control baseline

Make access-control baseline an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlSecurity and breach response
Evidence starts withApproved security decision
Open record
SEC-03

Security safeguards evidence

Make security safeguards evidence an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlSecurity and breach response
Evidence starts withApproved security decision
Open record
SEC-04

Privileged access review

Make privileged access review an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlSecurity and breach response
Evidence starts withTest scope and sample
Open record
SEC-05

Backup recovery exercise

Make backup recovery exercise an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlSecurity and breach response
Evidence starts withTest scope and sample
Open record
SEC-06

Monitoring boundary

Make monitoring boundary an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlSecurity and breach response
Evidence starts withApproved security decision
Open record
SEC-07

Log retention and review

Make log retention and review an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlSecurity and breach response
Evidence starts withTest scope and sample
Open record
BREACH-01

Incident triage facts

Make incident triage facts an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlSecurity and breach response
Evidence starts withVersioned decision record
Open record
BREACH-02

Breach decision record

Make breach decision record an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlSecurity and breach response
Evidence starts withVersioned decision record
Open record
BREACH-03

Notification owner

Make notification owner an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlSecurity and breach response
Evidence starts withVersioned decision record
Open record
BREACH-04

Affected-person communication

Make affected-person communication an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlSecurity and breach response
Evidence starts withApproved message version
Open record
BREACH-05

Board detail package

Make board detail package an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlSecurity and breach response
Evidence starts withVersioned decision record
Open record
CHILD-01

Parent/guardian verification design

Make parent/guardian verification design an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlGovernance and assurance
Evidence starts withVersioned decision record
Open record
SDF-01

Annual DPIA evidence

Make annual dpia evidence an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlGovernance and assurance
Evidence starts withVersioned decision record
Open record
SDF-02

Audit readiness record

Make audit readiness record an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlGovernance and assurance
Evidence starts withTest scope and sample
Open record
SDF-03

Algorithmic due diligence

Make algorithmic due diligence an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlGovernance and assurance
Evidence starts withVersioned decision record
Open record
ASSURE-01

Training evidence

Make training evidence an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlGovernance and assurance
Evidence starts withVersioned decision record
Open record
ASSURE-02

Evidence sampling and control test

Make evidence sampling and control test an inspectable system decision with a named owner, defined trigger and retrievable evidence.

Engineering controlGovernance and assurance
Evidence starts withTest scope and sample
Open record