> Document Version: 1.0 Document Owner: Acme Inc Next Review Date: 2027-03-19

Acme Inc | Assessment Date: 2026-03-19 | Project: nextjs-saas-example

> One-page compliance overview for executive leadership. This dashboard provides a high-level view of regulatory compliance status, key risks, and upcoming deadlines.

## Regulatory Status

Status | Regulation | Assessment | Summary
--- | --- | --- | ---
🟡 | GDPR | Review Needed | Data processors detected. Assess whether GDPR applies to your user base.
🟡 | CCPA | Action Required | Analytics/advertising services detected. "Do Not Sell" opt-out mechanism required for CA users.
🟡 | EU AI Act | Transparency Required | 1 AI service(s) detected. Transparency obligations apply under Art. 52.
🟡 | PCI DSS | Compliance Required | 2 payment service(s) detected (stripe, stripe-ios). SAQ completion required.
🟢 | HIPAA | Not Applicable | No health data processing indicators detected.

## Quick Stats

Metric | Count
--- | ---
Third-Party Data Processors | 8
Data Categories Collected | 9
Regulations: Action Required | 4
Regulations: Compliant | 1

## Top Risks

# | Risk | Potential Impact | Description
--- | --- | --- | ---
1 | Data Breach Across Multiple Processors | Up to $7,500 per violation (CCPA) | 8 third-party data processors increase attack surface. Each processor represents a potential breach vector.
2 | Non-Compliant AI Deployment | Up to EUR 35M or 7% of global turnover (EU AI Act) | AI services without proper transparency disclosures and risk assessments.
3 | Inadequate Cookie/Tracking Consent | Up to EUR 20M or 4% of turnover (GDPR ePrivacy) | Analytics and advertising trackers detected without verified consent mechanisms.

## Upcoming Deadlines

Date | Regulation | Action Required
--- | --- | ---
2026-06-01 | General | Quarterly privacy policy and terms of service review
2026-08-02 | EU AI Act | Full EU AI Act enforcement begins. Ensure AI transparency and risk classification.
2026-12-31 | PCI DSS | Complete annual Self-Assessment Questionnaire (SAQ)
2027-01-31 | All | Annual compliance review and document refresh

## Recommended Actions

1. Short-term: Review 4 regulation(s) requiring action within 90 days
2. Ongoing: Schedule quarterly compliance reviews with legal counsel
3. Ongoing: Maintain all generated compliance documents as services change

Generated by Codepliant v180.0.0 on 2026-03-19. This document should be reviewed by a qualified professional. See also: Compliance Notes, Risk Register, Compliance Timeline.