GDPR PCI Checklist

Sample Request:

{
  "company_type": "fintech"
}

Sample Response:

{
  "company_type": "fintech",
  "framework": "GDPR/PCI-DSS",
  "checklist_items": [
    {
      "id": "gdpr_001",
      "category": "Data Governance",
      "requirement": "Implement Data Protection Impact Assessment (DPIA) for high-risk processing",
      "standard": "GDPR Article 35",
      "status": "pending"
    },
    {
      "id": "pci_001",
      "category": "Network Security",
      "requirement": "Maintain firewall configuration standards and restrict cardholder data access",
      "standard": "PCI-DSS 1.1",
      "status": "pending"
    },
    {
      "id": "gdpr_002",
      "category": "User Rights",
      "requirement": "Establish process for responding to data subject access requests within 30 days",
      "standard": "GDPR Article 15",
      "status": "pending"
    },
    {
      "id": "pci_002",
      "category": "Encryption",
      "requirement": "Encrypt transmission of cardholder data across public networks using TLS 1.2+",
      "standard": "PCI-DSS 4.1",
      "status": "pending"
    }
  ],
  "generated_at": "2024-01-15T09:32:00Z"
}