Step 4: Compliance & Policy Check
In Progress
What the agent is doing
Checking the 3 new analytics event fields against privacy policy PRIV-011 — consent basis, masking rules, and retention.
Check Progress
Field classification — 3 fields tagged PII in Atlan
Retention — 90-day policy applies, configured
Consent basis — pending privacy team confirmation for one field (device_fingerprint)
Masking — hash-at-ingest configured for 2 fields
Governance Checkpoint
Consent basis for device_fingerprint must be confirmed before launch. Options: confirm existing consent coverage, or remove the field from v2.4 scope.
Evidence
Event schema — checkout_events v2.4
Atlan classification records
Consent platform coverage report
Four Pillars
Meaning: PII per classification tags; consent basis per PRIV-011 definitions
Process: Step 4 of 6 per launch workflow REL-WF-001
Evidence: 3 of 4 checks confirmed
Record: EB-2026-0808-TD-03095-S4 · 10:18:44Z