GDPR：AI-FW 控制与组织责任
了解框架义务、AI-FW 技术控制和组织责任。
GDPR：AI-FW 控制与组织责任 · 已生效
本页说明框架与 AI-FW 的关系。产品支持部分运行时控制，但不替代组织的合规或审计责任。
AI-FW 的定位
- 说明：AI-FW can inspect content, mask configured patterns, control destinations and record metadata decisions. It is a technical measure, not a substitute for controller or processor duties.
产品不负责的事项
- 说明：Determining purposes or lawful basis.
- 说明：Performing a DPIA or deciding prior consultation.
- 说明：Handling data-subject requests or breach notifications.
- 说明：Signing processing agreements or deciding transfer legality.
- 说明：Guaranteeing classification in every system.
控制映射
- 说明：Minimisation: 说明：Process only necessary personal data. AI-FW: 说明：Detect and mask configured categories before provider egress.
- 说明：Confidentiality: 说明：Apply appropriate protection measures. AI-FW: 说明：Authentication, identity policies and content inspection.
- 说明：Accountability: 说明：Demonstrate measures and decisions. AI-FW: 说明：Exportable transaction and configuration metadata.
- 说明：Processors: 说明：Know providers and data flows. AI-FW: 说明：Model Inventory lists approved providers and endpoints.
证据预期
- 说明：Inspection rules: 说明：Categories and configured actions.
- 说明：Request attribution: 说明：Identity, model, destination and decision.
- 说明：Logging: 说明：Mode and retention settings.
组织责任
- 说明：Define roles, purposes and lawful bases.
- 说明：Maintain processing records, DPIAs and rights processes.
- 说明：Assess subprocessors and transfers.
- 说明：Manage incidents and notifications.
- 说明：Set classification and retention policies.
常见问题
说明：Does masking automatically detect all personal data?
说明：No. Review configured categories and rules; detection is not legal analysis.
说明：Does AI-FW store prompts for GDPR audits?
说明：Logging can use metadata and truncated previews; review Settings -> Logging.
说明：Does AI-FW decide whether transfers are lawful?
说明：No. The organisation assesses transfer mechanisms and obligations.
一般信息，不构成法律或审计建议。