Regulatory Reporting Pipelines
Submissions with fixed deadlines, fixed formats, and a regulator who audits the lineage.
Nothing written here yet
This topic is part of the curriculum but has no questions, cards or glossary entries so far. The rest of Regulatory & Data Protection Architecture may still cover what you are looking for.
Neighbouring topics
Regulatory & Data Protection Architecture
General material on designing under legal and regulatory obligation.
No content yetPrivacy by Design
Data minimisation, default protection and purpose binding as structural decisions.
No content yetLawful Basis & Purpose Limitation
Why you may hold the data, and why that forbids the second use somebody proposed.
No content yetData Subject Rights
Access, correction, portability and erasure across systems that never planned for them.
No content yetConsent Architecture
Capturing, versioning and propagating consent to every system that acts on the data.
No content yetData Residency
Keeping data within a jurisdiction, including backups, logs and support access.
No content yetDigital Sovereignty
Control over data, operations and the operator, beyond where the bytes physically sit.
No content yetCross-Border Transfer
The legal mechanism that permits data to leave, and the architecture that respects it.
No content yetPCI-DSS Scoping
Segmentation and tokenisation to shrink what is in scope, because scope is the cost.
No content yetHealthcare Data Protection
PHI handling, minimum necessary access, and audit expectations in clinical systems.
No content yetFinancial Services Regulation
Operational resilience, payment rules and supervisory expectations as design inputs.
No content yetRecords Retention & Legal Hold
Keeping what must be kept, deleting what must go, and freezing both on demand.
No content yetErasure vs Immutability
Deletion obligations against event logs, backups and ledgers designed never to forget.
No content yetPseudonymisation
Separating identity from record, and the re-identification risk that remains.
No content yetPrivacy-Enhancing Technologies
Differential privacy, secure enclaves and federated computation, and what each buys.
No content yetSector Cloud Rules
Regulator expectations for cloud use, exit plans and material outsourcing notification.
No content yetExit & Concentration Risk
Being able to leave a provider, and what the regulator asks when you cannot.
No content yetThird-Party Risk
Assessing, contracting and monitoring the vendors your architecture now depends on.
No content yetGeo-Restriction & Sanctions
Blocking access by jurisdiction, and the accuracy and evasion problems that come with it.
No content yet