{"id":"legal-dpa-checklist-against-standard","audience":"legal","category":"legal-compliance","track":"legal","level":"intermediate","technique":"grounding","title":"Check a vendor DPA against the standard, item by item","free":false,"task":"Check the vendor's DPA extract against our six standard items. Write exactly six numbered lines in the standard's order, like: 1. Breach notice - Gap - under 12 words of reason. The status is exactly Met, Gap or Not addressed. Quote or paraphrase the DPA only; do not guess. Then a last line starting Send gaps to counsel: followed by the numbers of the lines that are not Met. Under 150 words.","materialLabel":"Your material (attached to your prompt automatically)","material":"OUR DPA STANDARD (reference)\n1 Breach notice: vendor tells us within 48 hours.\n2 Subprocessors: listed, with 30 days' notice before any change.\n3 Deletion: customer data deleted or returned within 30 days after the contract ends.\n4 Audit: customer may audit once a year.\n5 Data location: stays in the US or EU.\n6 Staff: personnel bound by confidentiality.\n\nVENDOR DPA EXTRACT - Orchid Analytics\nA. Vendor will notify Customer of a personal data breach \"without undue delay\".\nB. Current subprocessors are listed in Annex 2. Vendor may change subprocessors on 10 days' written notice.\nC. On termination Vendor will delete Customer data within 90 days.\nD. Customer may audit Vendor once per year on 30 days' notice.\nE. All Vendor personnel are bound by written confidentiality duties.\nF. (Data location is not mentioned.)","rules":[{"type":"numberedItems","count":6},{"type":"maxWords","max":150}],"promptHints":[{"label":"Six numbered lines","patterns":["six","exactly 6"]},{"label":"Fixed statuses","patterns":["met","gap","not addressed"]},{"label":"DPA only","patterns":["do not guess","only the dpa","only what"]},{"label":"Counsel line","patterns":["send gaps to counsel"]},{"label":"Example line","patterns":["1\\. "]}],"mistakes":[{"title":"Calling vague wording Met","why":"The AI treats 'without undue delay' as meeting 48 hours.","fix":"Say: \"Met only if the DPA matches the standard's number.\"","checks":["r1"]},{"title":"Guessing on silence","why":"The AI assumes data location is fine.","fix":"Say: \"If the DPA is silent, write Not addressed.\"","checks":["r1"]},{"title":"Missing summary line","why":"The AI ends with a general opinion.","fix":"Say: \"Last line: Send gaps to counsel: with the numbers.\"","checks":["r2"]},{"title":"Loose numbering","why":"The AI uses a table or extra items.","fix":"Say: \"Exactly six numbered lines in the standard's order.\"","checks":["numberedItems","r0"]},{"title":"Trusting the AI to count words","why":"AI runs long.","fix":"Say: \"Each reason under 10 words.\"","checks":["maxWords"]}],"hint":"Show one example line, fix the three status words, and ask for the counsel line at the end.","mission":"Check the vendor DPA against our six standard items.","musts":["Six numbered statuses","Silence is Not addressed","Send gaps line"],"rubricLabels":["Exactly six numbered lines in the order of the standard (breach, subprocessors, deletion, audit, location, staff), each with a status of Met, Gap or Not addressed","Statuses are: breach Gap, subprocessors Gap, deletion Gap, audit Met, location Not addressed, staff Met","The final line starts Send gaps to counsel: and lists 1, 2, 3 and 5, and the output makes no legal conclusion about the DPA"]}