Scenario sources and scope
Scores describe this fictional exercise. Switzerland and EU rules are identified separately. US visitors are welcome; US law is outside scope. Reading speed never affects points.
EU · GDPR Arts 5, 6, 9, 13, 35
Complete the data-use assessment for this deployment. Human review cannot replace a lawful basis.
2018-05-25 · 2026-09-16
GDPR Arts 5, 6, 9, 13, 35EU · GDPR Arts 5(1)(c), 25, 32
Limit retrieval to authorised data and purpose.
2018-05-25 · 2026-09-16
GDPR Arts 5(1)(c), 25, 32EU · GDPR Arts 13 to 22, especially 22(1) to (3)
Provide information and a working rights route. For consequential screening, use a meaningful authorised decision; assess Article 22 separately.
2018-05-25 · 2026-09-16
GDPR Arts 13 to 22, especially 22(1) to (3)EU · GDPR Art 5(1)(a); Directive 2000/78/EC Arts 1 to 3; national implementing employment law
Use relevant criteria, test unequal outcomes and obtain local employment-law review. National rules are not resolved by this exercise.
2003-12-02 · 2026-09-16
GDPR Art 5(1)(a); Directive 2000/78/EC Arts 1 to 3; national implementing employment lawCH · FADP Arts 6, 19, 22, 30 to 31
Assess Swiss data-protection principles, notice and impact. Do not import a GDPR checklist as the entire Swiss analysis.
2023-09-01 · 2026-09-16
FADP Arts 6, 19, 22, 30 to 31CH · FADP Arts 6 to 8
Restrict personal information and protect the retrieval path.
2023-09-01 · 2026-09-16
FADP Arts 6 to 8CH · FADP Arts 19, 21, 25
Inform affected people and provide the applicable access and review rights. Meaningful review needs someone able to change the decision.
2023-09-01 · 2026-09-16
FADP Arts 19, 21, 25CH · Code of Obligations Art 328b; Gender Equality Act Art 3
Check job relevance, lawful data and equality under Swiss law. This gate requires local review of the actual discrimination risk.
1996-07-01 · 2026-09-16
Code of Obligations Art 328b; Gender Equality Act Art 3voluntary · Govern, Map, Measure, Manage
Assign owners, test outcomes and manage failures. NIST is voluntary here.
NIST · 2026-09-16
Govern, Map, Measure, Managecompany · Fictional authority, workload and source policy
The exact staffing and routing rules are company policy in this exercise.
2026-09-16 · 2026-09-16