1. Scope and definitions
8 member responsesWho is covered: public and private actors, platforms, and data processors.
Position builder
Mark your position per clause. P@SHA's desk consolidates member positions into an anonymized advocacy digest — your company appears by name only if you want it to. Responses so far: 8
Who is covered: public and private actors, platforms, and data processors.
Residency requirements for government and critical data.
Obligations on intermediaries and online platforms.
Minimum security duties and incident response for service providers.
National identity framework and cross-agility use.
Transparency and human-oversight duties for automated decisions.
Timelines, thresholds, and affected-person notification.
Permitted transfer mechanisms and adequacy.
Authority powers, penalty bands, and appeal route.
Periodic review clause and consultation commitments.