概述
GDPR 合规审计工作流是一个高级难度的工作流。进行 GDPR 合规审计，识别个人数据、验证同意并确保数据主体权利得到支持。该工作流的目标是：Audit the application for GDPR compliance and identify gaps.
环境准备
执行本工作流需要以下环境：A data inventory or data flow mapping tool；Access to all systems that process personal data；GDPR requirements checklist。请确保在开始前准备好所有必需的工具和资源，以避免中途因环境问题中断。
执行步骤
本工作流包含5个步骤。步骤1：Map personal data——Identify all systems and databases that store personal data of EU residents. 步骤2：Verify consent——Check that consent is properly collected, recorded, and revocable for each data processing activity. 步骤3：Check data subject rights——Verify that data export, correction, and deletion requests can be fulfilled within the required timeframe. 步骤4：Review data retention——Confirm that data retention policies are implemented and enforced for each data type. 步骤5：Document findings——Record compliance gaps and create a remediation plan with priorities and owners.
验证与清理
预期结果：A GDPR compliance audit is completed with documented findings and a remediation plan.。验证方法：Verify that a data deletion request can be fulfilled; confirm consent can be revoked and the data is removed.。清理操作：No cleanup needed; the audit report should be maintained for compliance records.。estimatedMinutes 为 240 分钟。
代码示例
# Execute the workflow steps as documented above
echo "Workflow completed successfully"