Template fields
- Purpose and benefit
- Public / internal / confidential / personal data
- Affected person or decision
- Provider, account and retention
- Human verification
- Consequence of error
- Owner and deadline
- Decision and conditions
Three triage levels
- Low: public content, limited impact and straightforward review.
- Medium: internal data or externally used output; conditions and ownership are mandatory.
- High: sensitive data, HR, significant decisions or hard-to-reverse effects; specialised review before use.
Permitted outcomes
- Approved
- Conditionally approved
- More information required
- Not approved
Next step
This matrix supports internal triage; it does not certify a tool or replace legal, DPO, HR or security analysis.
General working material. It is not certification, legal advice or a substitute for legal, DPO, HR or security review appropriate to the organisation.
