# Executive Compliance Dashboard

> **Document Version:** 1.0  
> **Document Owner:** Acme Inc  
> **Next Review Date:** 2027-03-19


**Acme Inc** | Assessment Date: 2026-03-19 | Project: nextjs-saas-example

> One-page compliance overview for executive leadership. This dashboard provides a high-level view of regulatory compliance status, key risks, and upcoming deadlines.

## Regulatory Status

| Status | Regulation | Assessment | Summary |
|--------|-----------|------------|---------|
| 🟡 | **GDPR** | Review Needed | Data processors detected. Assess whether GDPR applies to your user base. |
| 🟡 | **CCPA** | Action Required | Analytics/advertising services detected. "Do Not Sell" opt-out mechanism required for CA users. |
| 🟡 | **EU AI Act** | Transparency Required | 1 AI service(s) detected. Transparency obligations apply under Art. 52. |
| 🟡 | **PCI DSS** | Compliance Required | 2 payment service(s) detected (stripe, stripe-ios). SAQ completion required. |
| 🟢 | **HIPAA** | Not Applicable | No health data processing indicators detected. |

## Quick Stats

| Metric | Count |
|--------|-------|
| Third-Party Data Processors | 8 |
| Data Categories Collected | 9 |
| Regulations: Action Required | 4 |
| Regulations: Compliant | 1 |

## Top Risks

| # | Risk | Potential Impact | Description |
|---|------|-----------------|-------------|
| 1 | **Data Breach Across Multiple Processors** | Up to $7,500 per violation (CCPA) | 8 third-party data processors increase attack surface. Each processor represents a potential breach vector. |
| 2 | **Non-Compliant AI Deployment** | Up to EUR 35M or 7% of global turnover (EU AI Act) | AI services without proper transparency disclosures and risk assessments. |
| 3 | **Inadequate Cookie/Tracking Consent** | Up to EUR 20M or 4% of turnover (GDPR ePrivacy) | Analytics and advertising trackers detected without verified consent mechanisms. |

## Upcoming Deadlines

| Date | Regulation | Action Required |
|------|-----------|-----------------|
| 2026-06-01 | General | Quarterly privacy policy and terms of service review |
| 2026-08-02 | EU AI Act | Full EU AI Act enforcement begins. Ensure AI transparency and risk classification. |
| 2026-12-31 | PCI DSS | Complete annual Self-Assessment Questionnaire (SAQ) |
| 2027-01-31 | All | Annual compliance review and document refresh |

## Recommended Actions

1. **Short-term:** Review 4 regulation(s) requiring action within 90 days
2. **Ongoing:** Schedule quarterly compliance reviews with legal counsel
3. **Ongoing:** Maintain all generated compliance documents as services change

---

*Generated by Codepliant v180.0.0 on 2026-03-19. This document should be reviewed by a qualified professional. See also: [Compliance Notes](COMPLIANCE_NOTES.md), [Risk Register](RISK_REGISTER.md), [Compliance Timeline](COMPLIANCE_TIMELINE.md).*
