@tantainnovative/ndpr-toolkit 3.5.1 → 3.5.5

package/dist/core.d.ts

@@ -137,10 +137,51 @@ export declare interface BreachReport {
     affectedSystems: string[];
     /** Types of data involved in the breach */
     dataTypes: string[];
-    /** Whether sensitive personal data is involved (NDPA Section 27) */
+    /** Whether sensitive personal data is involved (NDPA Section 30) */
     involvesSensitiveData?: boolean;
     /** Estimated number of data subjects affected */
     estimatedAffectedSubjects?: number;
+    /**
+     * Approximate number of personal data RECORDS concerned (distinct from subject count).
+     * Required content under NDPA Section 40(1)(a) and Section 40(2).
+     */
+    approximateRecordCount?: number;
+    /**
+     * Categories of data subjects affected (e.g. customers, employees, minors, patients).
+     * Required content under NDPA Section 40(1)(a) and Section 40(2).
+     */
+    dataSubjectCategories?: string[];
+    /**
+     * Likely consequences of the breach for affected data subjects (e.g. identity theft,
+     * financial loss, reputational damage). Reported to the NDPC and, where applicable,
+     * communicated to data subjects under Section 40(3).
+     */
+    likelyConsequences?: string;
+    /**
+     * Measures taken or proposed to mitigate adverse effects of the breach.
+     * Required content for Section 40(3) communications to data subjects.
+     */
+    mitigationMeasures?: string;
+    /**
+     * Whether this is a phased / interim report submitted before full investigation
+     * is complete. The NDPC permits phased reporting where complete information is
+     * not available within 72 hours.
+     */
+    isPhasedReport?: boolean;
+    /**
+     * ID of the prior phased report this report supplements, if any.
+     */
+    supplementsReportId?: string;
+    /**
+     * Data Protection Officer contact details. The DPO is the named contact point
+     * for the NDPC per NDPA Section 32(3)(c). Required content in the regulatory
+     * report (Section 40(2)).
+     */
+    dpoContact?: {
+        name: string;
+        email: string;
+        phone?: string;
+    };
     /** Whether the breach is ongoing or contained */
     status: 'ongoing' | 'contained' | 'resolved';
     /** Initial actions taken to address the breach */
@@ -796,20 +837,25 @@ export declare interface DsrSubmissionValidationResult {
 }
 
 /**
- * Data Subject Rights types aligned with NDPA 2023 Part IV (Sections 29-36)
+ * Data Subject Rights types aligned with NDPA 2023 Part VI (Sections 34-38)
+ * and the related provisions in Part V (Section 27 — information to the data subject)
+ * and Part X (Section 46 — complaint to the Commission).
+ *
+ * Note: These are guidance labels — not legal advice. Verify with your DPO or counsel.
  */
 /**
- * Types of data subject requests per NDPA Part IV
- * - 'information': Right to be informed (Section 29)
- * - 'access': Right of access (Section 30)
- * - 'rectification': Right to rectification (Section 31)
- * - 'erasure': Right to erasure (Section 32)
- * - 'restriction': Right to restrict processing (Section 33)
- * - 'portability': Right to data portability (Section 34)
- * - 'objection': Right to object (Section 35)
- * - 'automated_decision_making': Rights related to automated decision-making (Section 36)
+ * Types of data subject requests per NDPA Part VI
+ * - 'information': Right to be informed (Section 27 — provision of information; Section 34(1)(a))
+ * - 'access': Right of access / confirmation + data copy (Section 34(1)(a)–(b))
+ * - 'rectification': Right to rectification (Section 34(1)(c))
+ * - 'erasure': Right to erasure (Section 34(1)(d), Section 34(2))
+ * - 'restriction': Right to restrict processing (Section 34(1)(e))
+ * - 'portability': Right to data portability (Section 38)
+ * - 'objection': Right to object (Section 36)
+ * - 'automated_decision_making': Rights re. automated decisions / profiling (Section 37)
+ * - 'withdraw_consent': Right to withdraw consent (Section 35)
  */
-export declare type DSRType = 'information' | 'access' | 'rectification' | 'erasure' | 'restriction' | 'portability' | 'objection' | 'automated_decision_making';
+export declare type DSRType = 'information' | 'access' | 'rectification' | 'erasure' | 'restriction' | 'portability' | 'objection' | 'automated_decision_making' | 'withdraw_consent';
 
 export declare type EffortLevel = 'low' | 'medium' | 'high';
 
@@ -986,11 +1032,13 @@ declare type Industry = 'fintech' | 'healthcare' | 'ecommerce' | 'saas' | 'educa
 
 /**
  * Returns whether NDPC approval is required for a given transfer mechanism.
- * Approval is required for standard contractual clauses (Section 42),
- * binding corporate rules (Section 43), and specific NDPC authorization (Section 44).
+ * Under NDPA Section 42(5), the Commission may approve binding corporate rules,
+ * codes of conduct, certification mechanisms, or similar instruments. Standard
+ * contractual clauses are one of the appropriate safeguards under Section 41(1)(a)
+ * and the Commission may approve them per Section 42(4).
  *
  * @param mechanism The transfer mechanism
- * @returns Whether NDPC approval is required
+ * @returns Whether NDPC approval is typically required
  */
 export declare function isNDPCApprovalRequired(mechanism: TransferMechanism): boolean;
 
@@ -1048,6 +1096,23 @@ export declare interface LawfulBasisValidationResult {
     warnings: string[];
 }
 
+/**
+ * Full disclaimer suitable for PDF/DOCX footers and exported artifacts.
+ */
+export declare const LEGAL_DISCLAIMER_LONG: string;
+
+/**
+ * Short disclaimer suitable for component captions and dashboard footers.
+ * One line, no markdown.
+ */
+export declare const LEGAL_DISCLAIMER_SHORT = "Generated for guidance only. Not legal advice \u2014 verify with your DPO or counsel.";
+
+/**
+ * Returns the long disclaimer wrapped with a leading heading suitable for
+ * embedding at the foot of an exported document.
+ */
+export declare function legalDisclaimerBlock(heading?: string): string;
+
 /**
  * Represents a Legitimate Interest Assessment (LIA)
  * Required when the lawful basis is 'legitimate_interests'
@@ -1697,7 +1762,9 @@ export declare interface RequestType {
     /** Description of what this request type entails */
     description: string;
     /**
-     * NDPA section reference (e.g., "Section 30" for access requests)
+     * NDPA 2023 section reference for this right
+     * (e.g., "Section 34(1)(a)" for access, "Section 38" for portability).
+     * Used for display purposes only — verify the exact subsection with counsel.
      */
     ndpaSection?: string;
     /**
@@ -1815,6 +1882,15 @@ export declare function sanitizeInput(input: string): string;
  */
 export declare type SensitiveDataCondition = 'explicit_consent' | 'employment_law' | 'vital_interests_incapable' | 'nonprofit_legitimate' | 'publicly_available' | 'legal_claims' | 'substantial_public_interest' | 'health_purposes' | 'public_health' | 'archiving_research';
 
+export declare interface StorageAdapter<T = unknown> {
+    /** Load persisted data. Called once on hook mount. */
+    load(): T | null | Promise<T | null>;
+    /** Persist data. Called on every state change. */
+    save(data: T): void | Promise<void>;
+    /** Clear persisted data. Called on reset. */
+    remove(): void | Promise<void>;
+}
+
 /** Full context used to generate an adaptive privacy policy. */
 export declare interface TemplateContext {
     /** Organisation details, extended with industry and size. */
@@ -1894,8 +1970,11 @@ export declare interface TransferImpactAssessment {
 }
 
 /**
- * Cross-Border Data Transfer types aligned with NDPA 2023 Part VI (Sections 41-45)
- * Personal data may only be transferred outside Nigeria under specific conditions
+ * Cross-Border Data Transfer types aligned with NDPA 2023 Part VIII (Sections 41-43).
+ * Personal data may only be transferred outside Nigeria under the bases listed in
+ * Section 41(1), where Section 42 defines adequacy and Section 43 lists derogations.
+ *
+ * Note: These are guidance labels — not legal advice. Verify with your DPO or counsel.
  */
 /**
  * Transfer mechanisms recognized under the NDPA
@@ -2006,7 +2085,7 @@ export declare interface ValidateDsrSubmissionOptions {
     /**
      * Allowed request types. When provided, the payload's `requestType`
      * must be one of these — useful for locking the server to a specific
-     * set of supported NDPA Part IV §29-36 rights.
+     * set of supported NDPA Part VI §34-38 (plus §35, §36, §37) data-subject rights.
      */
     allowedRequestTypes?: string[];
 }

package/dist/core.js

@@ -1,2 +1 @@
-'use strict';var chunkRXL6CZAI_js=require('./chunk-RXL6CZAI.js'),chunk6QPRDQZF_js=require('./chunk-6QPRDQZF.js'),chunkC5QO3SX4_js=require('./chunk-C5QO3SX4.js'),chunkYPKUHSK4_js=require('./chunk-YPKUHSK4.js'),chunkLIM64IV2_js=require('./chunk-LIM64IV2.js'),chunkS4GRSNB4_js=require('./chunk-S4GRSNB4.js'),chunkCPK5D5FY_js=require('./chunk-CPK5D5FY.js'),chunkTDDAYVKK_js=require('./chunk-TDDAYVKK.js'),chunkC4YM4UMI_js=require('./chunk-C4YM4UMI.js'),chunkGOU6FU6Y_js=require('./chunk-GOU6FU6Y.js'),chunkMJGOLP5M_js=require('./chunk-MJGOLP5M.js'),chunkHO5M7M4M_js=require('./chunk-HO5M7M4M.js'),chunkJ5WCPZLW_js=require('./chunk-J5WCPZLW.js'),chunkP42Z5CFE_js=require('./chunk-P42Z5CFE.js'),chunkBKRETVJ6_js=require('./chunk-BKRETVJ6.js'),chunkI54CDQGN_js=require('./chunk-I54CDQGN.js');require('./chunk-MQFZHA2D.js');Object.defineProperty(exports,"NDPRProvider",{enumerable:true,get:function(){return chunkRXL6CZAI_js.a}});Object.defineProperty(exports,"useNDPRConfig",{enumerable:true,get:function(){return chunkRXL6CZAI_js.b}});Object.defineProperty(exports,"useNDPRLocale",{enumerable:true,get:function(){return chunkRXL6CZAI_js.c}});Object.defineProperty(exports,"hausaLocale",{enumerable:true,get:function(){return chunk6QPRDQZF_js.c}});Object.defineProperty(exports,"igboLocale",{enumerable:true,get:function(){return chunk6QPRDQZF_js.b}});Object.defineProperty(exports,"pidginLocale",{enumerable:true,get:function(){return chunk6QPRDQZF_js.d}});Object.defineProperty(exports,"yorubaLocale",{enumerable:true,get:function(){return chunk6QPRDQZF_js.a}});Object.defineProperty(exports,"defaultLocale",{enumerable:true,get:function(){return chunkC5QO3SX4_js.a}});Object.defineProperty(exports,"mergeLocale",{enumerable:true,get:function(){return chunkC5QO3SX4_js.b}});Object.defineProperty(exports,"createDefaultContext",{enumerable:true,get:function(){return chunkYPKUHSK4_js.b}});Object.defineProperty(exports,"evaluatePolicyCompliance",{enumerable:true,get:function(){return chunkYPKUHSK4_js.c}});Object.defineProperty(exports,"DEFAULT_POLICY_SECTIONS",{enumerable:true,get:function(){return chunkLIM64IV2_js.c}});Object.defineProperty(exports,"DEFAULT_POLICY_VARIABLES",{enumerable:true,get:function(){return chunkLIM64IV2_js.d}});Object.defineProperty(exports,"createBusinessPolicyTemplate",{enumerable:true,get:function(){return chunkLIM64IV2_js.e}});Object.defineProperty(exports,"findUnfilledTokens",{enumerable:true,get:function(){return chunkLIM64IV2_js.a}});Object.defineProperty(exports,"generatePolicyText",{enumerable:true,get:function(){return chunkLIM64IV2_js.b}});Object.defineProperty(exports,"getComplianceScore",{enumerable:true,get:function(){return chunkS4GRSNB4_js.a}});Object.defineProperty(exports,"assemblePolicy",{enumerable:true,get:function(){return chunkCPK5D5FY_js.c}});Object.defineProperty(exports,"assessComplianceGaps",{enumerable:true,get:function(){return chunkTDDAYVKK_js.c}});Object.defineProperty(exports,"generateLawfulBasisSummary",{enumerable:true,get:function(){return chunkTDDAYVKK_js.d}});Object.defineProperty(exports,"getLawfulBasisDescription",{enumerable:true,get:function(){return chunkTDDAYVKK_js.b}});Object.defineProperty(exports,"validateProcessingActivity",{enumerable:true,get:function(){return chunkTDDAYVKK_js.a}});Object.defineProperty(exports,"assessTransferRisk",{enumerable:true,get:function(){return chunkC4YM4UMI_js.h}});Object.defineProperty(exports,"getTransferMechanismDescription",{enumerable:true,get:function(){return chunkC4YM4UMI_js.f}});Object.defineProperty(exports,"isNDPCApprovalRequired",{enumerable:true,get:function(){return chunkC4YM4UMI_js.e}});Object.defineProperty(exports,"validateTransfer",{enumerable:true,get:function(){return chunkC4YM4UMI_js.g}});Object.defineProperty(exports,"exportROPAToCSV",{enumerable:true,get:function(){return chunkGOU6FU6Y_js.c}});Object.defineProperty(exports,"generateROPASummary",{enumerable:true,get:function(){return chunkGOU6FU6Y_js.b}});Object.defineProperty(exports,"identifyComplianceGaps",{enumerable:true,get:function(){return chunkGOU6FU6Y_js.d}});Object.defineProperty(exports,"validateProcessingRecord",{enumerable:true,get:function(){return chunkGOU6FU6Y_js.a}});Object.defineProperty(exports,"appendAuditEntry",{enumerable:true,get:function(){return chunkMJGOLP5M_js.c}});Object.defineProperty(exports,"createAuditEntry",{enumerable:true,get:function(){return chunkMJGOLP5M_js.a}});Object.defineProperty(exports,"getAuditLog",{enumerable:true,get:function(){return chunkMJGOLP5M_js.b}});Object.defineProperty(exports,"validateConsent",{enumerable:true,get:function(){return chunkHO5M7M4M_js.a}});Object.defineProperty(exports,"validateConsentOptions",{enumerable:true,get:function(){return chunkHO5M7M4M_js.b}});Object.defineProperty(exports,"formatDSRRequest",{enumerable:true,get:function(){return chunkJ5WCPZLW_js.b}});Object.defineProperty(exports,"validateDsrSubmission",{enumerable:true,get:function(){return chunkJ5WCPZLW_js.a}});Object.defineProperty(exports,"assessDPIARisk",{enumerable:true,get:function(){return chunkP42Z5CFE_js.a}});Object.defineProperty(exports,"calculateBreachSeverity",{enumerable:true,get:function(){return chunkBKRETVJ6_js.a}});Object.defineProperty(exports,"sanitizeInput",{enumerable:true,get:function(){return chunkI54CDQGN_js.a}});//# sourceMappingURL=core.js.map
-//# sourceMappingURL=core.js.map
+'use strict';var chunkUAV7V4EM_js=require('./chunk-UAV7V4EM.js'),chunk4QXTB3L6_js=require('./chunk-4QXTB3L6.js'),chunk7IFSWCQP_js=require('./chunk-7IFSWCQP.js'),chunkLVGT3DLT_js=require('./chunk-LVGT3DLT.js'),chunkQPRYXVH2_js=require('./chunk-QPRYXVH2.js'),chunkQ64735OC_js=require('./chunk-Q64735OC.js'),chunkWZYCBW2R_js=require('./chunk-WZYCBW2R.js'),chunkYFBDJ4FH_js=require('./chunk-YFBDJ4FH.js'),chunk4CVBQC66_js=require('./chunk-4CVBQC66.js'),chunk3IA3KDII_js=require('./chunk-3IA3KDII.js'),chunkB46SJB5V_js=require('./chunk-B46SJB5V.js'),chunkL2BRFMVS_js=require('./chunk-L2BRFMVS.js'),chunkTQZWJGJ2_js=require('./chunk-TQZWJGJ2.js'),chunk3YTAOT5O_js=require('./chunk-3YTAOT5O.js'),chunkUXUMYP4L_js=require('./chunk-UXUMYP4L.js'),chunkZVOIR4QH_js=require('./chunk-ZVOIR4QH.js');require('./chunk-RFPLZDIO.js');Object.defineProperty(exports,"NDPRProvider",{enumerable:true,get:function(){return chunkUAV7V4EM_js.a}});Object.defineProperty(exports,"useNDPRConfig",{enumerable:true,get:function(){return chunkUAV7V4EM_js.b}});Object.defineProperty(exports,"useNDPRLocale",{enumerable:true,get:function(){return chunkUAV7V4EM_js.c}});Object.defineProperty(exports,"hausaLocale",{enumerable:true,get:function(){return chunk4QXTB3L6_js.c}});Object.defineProperty(exports,"igboLocale",{enumerable:true,get:function(){return chunk4QXTB3L6_js.b}});Object.defineProperty(exports,"pidginLocale",{enumerable:true,get:function(){return chunk4QXTB3L6_js.d}});Object.defineProperty(exports,"yorubaLocale",{enumerable:true,get:function(){return chunk4QXTB3L6_js.a}});Object.defineProperty(exports,"defaultLocale",{enumerable:true,get:function(){return chunk7IFSWCQP_js.a}});Object.defineProperty(exports,"mergeLocale",{enumerable:true,get:function(){return chunk7IFSWCQP_js.b}});Object.defineProperty(exports,"DEFAULT_POLICY_SECTIONS",{enumerable:true,get:function(){return chunkLVGT3DLT_js.c}});Object.defineProperty(exports,"DEFAULT_POLICY_VARIABLES",{enumerable:true,get:function(){return chunkLVGT3DLT_js.d}});Object.defineProperty(exports,"createBusinessPolicyTemplate",{enumerable:true,get:function(){return chunkLVGT3DLT_js.e}});Object.defineProperty(exports,"findUnfilledTokens",{enumerable:true,get:function(){return chunkLVGT3DLT_js.a}});Object.defineProperty(exports,"generatePolicyText",{enumerable:true,get:function(){return chunkLVGT3DLT_js.b}});Object.defineProperty(exports,"getComplianceScore",{enumerable:true,get:function(){return chunkQPRYXVH2_js.a}});Object.defineProperty(exports,"assemblePolicy",{enumerable:true,get:function(){return chunkQ64735OC_js.c}});Object.defineProperty(exports,"createDefaultContext",{enumerable:true,get:function(){return chunkQ64735OC_js.e}});Object.defineProperty(exports,"evaluatePolicyCompliance",{enumerable:true,get:function(){return chunkQ64735OC_js.f}});Object.defineProperty(exports,"assessComplianceGaps",{enumerable:true,get:function(){return chunkWZYCBW2R_js.c}});Object.defineProperty(exports,"generateLawfulBasisSummary",{enumerable:true,get:function(){return chunkWZYCBW2R_js.d}});Object.defineProperty(exports,"getLawfulBasisDescription",{enumerable:true,get:function(){return chunkWZYCBW2R_js.b}});Object.defineProperty(exports,"validateProcessingActivity",{enumerable:true,get:function(){return chunkWZYCBW2R_js.a}});Object.defineProperty(exports,"assessTransferRisk",{enumerable:true,get:function(){return chunkYFBDJ4FH_js.h}});Object.defineProperty(exports,"getTransferMechanismDescription",{enumerable:true,get:function(){return chunkYFBDJ4FH_js.f}});Object.defineProperty(exports,"isNDPCApprovalRequired",{enumerable:true,get:function(){return chunkYFBDJ4FH_js.e}});Object.defineProperty(exports,"validateTransfer",{enumerable:true,get:function(){return chunkYFBDJ4FH_js.g}});Object.defineProperty(exports,"exportROPAToCSV",{enumerable:true,get:function(){return chunk4CVBQC66_js.c}});Object.defineProperty(exports,"generateROPASummary",{enumerable:true,get:function(){return chunk4CVBQC66_js.b}});Object.defineProperty(exports,"identifyComplianceGaps",{enumerable:true,get:function(){return chunk4CVBQC66_js.d}});Object.defineProperty(exports,"validateProcessingRecord",{enumerable:true,get:function(){return chunk4CVBQC66_js.a}});Object.defineProperty(exports,"appendAuditEntry",{enumerable:true,get:function(){return chunk3IA3KDII_js.c}});Object.defineProperty(exports,"createAuditEntry",{enumerable:true,get:function(){return chunk3IA3KDII_js.a}});Object.defineProperty(exports,"getAuditLog",{enumerable:true,get:function(){return chunk3IA3KDII_js.b}});Object.defineProperty(exports,"validateConsent",{enumerable:true,get:function(){return chunkB46SJB5V_js.a}});Object.defineProperty(exports,"validateConsentOptions",{enumerable:true,get:function(){return chunkB46SJB5V_js.b}});Object.defineProperty(exports,"formatDSRRequest",{enumerable:true,get:function(){return chunkL2BRFMVS_js.b}});Object.defineProperty(exports,"validateDsrSubmission",{enumerable:true,get:function(){return chunkL2BRFMVS_js.a}});Object.defineProperty(exports,"assessDPIARisk",{enumerable:true,get:function(){return chunkTQZWJGJ2_js.a}});Object.defineProperty(exports,"calculateBreachSeverity",{enumerable:true,get:function(){return chunk3YTAOT5O_js.a}});Object.defineProperty(exports,"sanitizeInput",{enumerable:true,get:function(){return chunkUXUMYP4L_js.a}});Object.defineProperty(exports,"LEGAL_DISCLAIMER_LONG",{enumerable:true,get:function(){return chunkZVOIR4QH_js.b}});Object.defineProperty(exports,"LEGAL_DISCLAIMER_SHORT",{enumerable:true,get:function(){return chunkZVOIR4QH_js.a}});Object.defineProperty(exports,"legalDisclaimerBlock",{enumerable:true,get:function(){return chunkZVOIR4QH_js.c}});

package/dist/core.mjs

@@ -1,2 +1 @@
-export{a as NDPRProvider,b as useNDPRConfig,c as useNDPRLocale}from'./chunk-74Z23WUA.mjs';export{c as hausaLocale,b as igboLocale,d as pidginLocale,a as yorubaLocale}from'./chunk-R5FW5XUQ.mjs';export{a as defaultLocale,b as mergeLocale}from'./chunk-XHROISIF.mjs';export{b as createDefaultContext,c as evaluatePolicyCompliance}from'./chunk-I557S566.mjs';export{c as DEFAULT_POLICY_SECTIONS,d as DEFAULT_POLICY_VARIABLES,e as createBusinessPolicyTemplate,a as findUnfilledTokens,b as generatePolicyText}from'./chunk-CKGJK4D7.mjs';export{a as getComplianceScore}from'./chunk-ABDB7LEV.mjs';export{c as assemblePolicy}from'./chunk-GRLIPT5V.mjs';export{c as assessComplianceGaps,d as generateLawfulBasisSummary,b as getLawfulBasisDescription,a as validateProcessingActivity}from'./chunk-TXBZPCGF.mjs';export{h as assessTransferRisk,f as getTransferMechanismDescription,e as isNDPCApprovalRequired,g as validateTransfer}from'./chunk-75TJPK2N.mjs';export{c as exportROPAToCSV,b as generateROPASummary,d as identifyComplianceGaps,a as validateProcessingRecord}from'./chunk-SHMJNRHO.mjs';export{c as appendAuditEntry,a as createAuditEntry,b as getAuditLog}from'./chunk-P3PULLYP.mjs';export{a as validateConsent,b as validateConsentOptions}from'./chunk-U62QYKVG.mjs';export{b as formatDSRRequest,a as validateDsrSubmission}from'./chunk-B4Z5MBUC.mjs';export{a as assessDPIARisk}from'./chunk-6TA2MVTU.mjs';export{a as calculateBreachSeverity}from'./chunk-DJGS7SSN.mjs';export{a as sanitizeInput}from'./chunk-GKKAK6ES.mjs';import'./chunk-WWT2ZSNU.mjs';//# sourceMappingURL=core.mjs.map
-//# sourceMappingURL=core.mjs.map
+export{a as NDPRProvider,b as useNDPRConfig,c as useNDPRLocale}from'./chunk-EEQALYOY.mjs';export{c as hausaLocale,b as igboLocale,d as pidginLocale,a as yorubaLocale}from'./chunk-LQTARVPU.mjs';export{a as defaultLocale,b as mergeLocale}from'./chunk-HWHBINVN.mjs';export{c as DEFAULT_POLICY_SECTIONS,d as DEFAULT_POLICY_VARIABLES,e as createBusinessPolicyTemplate,a as findUnfilledTokens,b as generatePolicyText}from'./chunk-Y3MKMAFQ.mjs';export{a as getComplianceScore}from'./chunk-EFIBHKQE.mjs';export{c as assemblePolicy,e as createDefaultContext,f as evaluatePolicyCompliance}from'./chunk-RMQ7OLNY.mjs';export{c as assessComplianceGaps,d as generateLawfulBasisSummary,b as getLawfulBasisDescription,a as validateProcessingActivity}from'./chunk-LWIKDDSU.mjs';export{h as assessTransferRisk,f as getTransferMechanismDescription,e as isNDPCApprovalRequired,g as validateTransfer}from'./chunk-7BJXI2HI.mjs';export{c as exportROPAToCSV,b as generateROPASummary,d as identifyComplianceGaps,a as validateProcessingRecord}from'./chunk-XP5PL6K7.mjs';export{c as appendAuditEntry,a as createAuditEntry,b as getAuditLog}from'./chunk-V7UFP6QU.mjs';export{a as validateConsent,b as validateConsentOptions}from'./chunk-PJNKQPQP.mjs';export{b as formatDSRRequest,a as validateDsrSubmission}from'./chunk-RZ6GC6WN.mjs';export{a as assessDPIARisk}from'./chunk-LRRENTT5.mjs';export{a as calculateBreachSeverity}from'./chunk-WTGKZX7J.mjs';export{a as sanitizeInput}from'./chunk-EWVK45Z3.mjs';export{b as LEGAL_DISCLAIMER_LONG,a as LEGAL_DISCLAIMER_SHORT,c as legalDisclaimerBlock}from'./chunk-ITCY2Z66.mjs';import'./chunk-ZJYULEER.mjs';

package/dist/cross-border.d.mts

@@ -19,9 +19,13 @@ export declare function assessTransferRisk(transfer: CrossBorderTransfer): Trans
  * Database of country adequacy determinations for cross-border data transfers.
  *
  * This map is keyed by ISO 3166-1 alpha-2 country code (uppercase).
- * Statuses reflect general assessments based on each country's data protection
- * framework and are provided for guidance purposes. Organizations should verify
- * current NDPC guidance before relying on these determinations.
+ *
+ * IMPORTANT — Statuses with `recognizedBy: 'self-assessment'` are this toolkit's
+ * guidance assessments based on each country's data-protection framework. They
+ * are NOT NDPC-issued adequacy decisions. NDPC has not (as of publication)
+ * published any formal Section 42 adequacy list. Organisations transferring
+ * personal data outside Nigeria should perform their own transfer impact
+ * assessment and consult counsel before relying on any entry here.
  */
 export declare const COUNTRY_ADEQUACY_MAP: Record<string, CountryAdequacy>;
 
@@ -35,8 +39,16 @@ export declare interface CountryAdequacy {
     isoCode: string;
     /** Adequacy status for data protection purposes */
     adequacyStatus: CountryAdequacyStatus;
-    /** Authority or framework that recognized the adequacy (e.g. 'NDPC', 'EU') */
-    recognizedBy: string;
+    /**
+     * Source of the adequacy determination.
+     * - 'NDPC' — formally listed by the Nigeria Data Protection Commission under
+     *   NDPA Section 42 (no such list has been published at time of writing).
+     * - 'EU' — recognized as adequate by EU member-state membership / GDPR.
+     * - 'UK' — recognized by the UK ICO.
+     * - 'self-assessment' — toolkit maintainers' guidance assessment. Verify
+     *   independently and confirm with your DPO/counsel before relying on it.
+     */
+    recognizedBy: 'NDPC' | 'EU' | 'UK' | 'self-assessment';
     /** Additional notes about the adequacy determination */
     notes: string;
     /** Date the adequacy determination was last reviewed */
@@ -47,10 +59,15 @@ export declare interface CountryAdequacy {
  * Country adequacy determinations for cross-border data transfers
  * under the Nigeria Data Protection Act (NDPA).
  *
- * This module provides a reference database of adequacy statuses for countries
- * that Nigerian businesses commonly transfer personal data to, along with
- * helper functions for querying adequacy and determining whether NDPC approval
- * is required for a given destination.
+ * IMPORTANT — Not legal advice and not an NDPC adequacy list.
+ *
+ * As of publication, the Nigeria Data Protection Commission has not published
+ * a formal list of countries it deems adequate under NDPA Section 42. The
+ * Commission is empowered to issue such guidelines under Section 42(3), but
+ * has not yet done so. The entries in this map are *self-assessments* by the
+ * toolkit maintainers based on each country's data-protection framework, and
+ * are intended for guidance only. Verify the current NDPC position and consult
+ * counsel before relying on any entry here for a transfer impact assessment.
  */
 /**
  * Adequacy status of a country for cross-border data transfers.
@@ -281,11 +298,13 @@ export declare function getTransferMechanismDescription(mechanism: TransferMecha
 
 /**
  * Returns whether NDPC approval is required for a given transfer mechanism.
- * Approval is required for standard contractual clauses (Section 42),
- * binding corporate rules (Section 43), and specific NDPC authorization (Section 44).
+ * Under NDPA Section 42(5), the Commission may approve binding corporate rules,
+ * codes of conduct, certification mechanisms, or similar instruments. Standard
+ * contractual clauses are one of the appropriate safeguards under Section 41(1)(a)
+ * and the Commission may approve them per Section 42(4).
  *
  * @param mechanism The transfer mechanism
- * @returns Whether NDPC approval is required
+ * @returns Whether NDPC approval is typically required
  */
 export declare function isNDPCApprovalRequired(mechanism: TransferMechanism): boolean;
 
@@ -353,8 +372,11 @@ export declare interface TransferImpactAssessment {
 }
 
 /**
- * Cross-Border Data Transfer types aligned with NDPA 2023 Part VI (Sections 41-45)
- * Personal data may only be transferred outside Nigeria under specific conditions
+ * Cross-Border Data Transfer types aligned with NDPA 2023 Part VIII (Sections 41-43).
+ * Personal data may only be transferred outside Nigeria under the bases listed in
+ * Section 41(1), where Section 42 defines adequacy and Section 43 lists derogations.
+ *
+ * Note: These are guidance labels — not legal advice. Verify with your DPO or counsel.
  */
 /**
  * Transfer mechanisms recognized under the NDPA

package/dist/cross-border.d.ts

@@ -19,9 +19,13 @@ export declare function assessTransferRisk(transfer: CrossBorderTransfer): Trans
  * Database of country adequacy determinations for cross-border data transfers.
  *
  * This map is keyed by ISO 3166-1 alpha-2 country code (uppercase).
- * Statuses reflect general assessments based on each country's data protection
- * framework and are provided for guidance purposes. Organizations should verify
- * current NDPC guidance before relying on these determinations.
+ *
+ * IMPORTANT — Statuses with `recognizedBy: 'self-assessment'` are this toolkit's
+ * guidance assessments based on each country's data-protection framework. They
+ * are NOT NDPC-issued adequacy decisions. NDPC has not (as of publication)
+ * published any formal Section 42 adequacy list. Organisations transferring
+ * personal data outside Nigeria should perform their own transfer impact
+ * assessment and consult counsel before relying on any entry here.
  */
 export declare const COUNTRY_ADEQUACY_MAP: Record<string, CountryAdequacy>;
 
@@ -35,8 +39,16 @@ export declare interface CountryAdequacy {
     isoCode: string;
     /** Adequacy status for data protection purposes */
     adequacyStatus: CountryAdequacyStatus;
-    /** Authority or framework that recognized the adequacy (e.g. 'NDPC', 'EU') */
-    recognizedBy: string;
+    /**
+     * Source of the adequacy determination.
+     * - 'NDPC' — formally listed by the Nigeria Data Protection Commission under
+     *   NDPA Section 42 (no such list has been published at time of writing).
+     * - 'EU' — recognized as adequate by EU member-state membership / GDPR.
+     * - 'UK' — recognized by the UK ICO.
+     * - 'self-assessment' — toolkit maintainers' guidance assessment. Verify
+     *   independently and confirm with your DPO/counsel before relying on it.
+     */
+    recognizedBy: 'NDPC' | 'EU' | 'UK' | 'self-assessment';
     /** Additional notes about the adequacy determination */
     notes: string;
     /** Date the adequacy determination was last reviewed */
@@ -47,10 +59,15 @@ export declare interface CountryAdequacy {
  * Country adequacy determinations for cross-border data transfers
  * under the Nigeria Data Protection Act (NDPA).
  *
- * This module provides a reference database of adequacy statuses for countries
- * that Nigerian businesses commonly transfer personal data to, along with
- * helper functions for querying adequacy and determining whether NDPC approval
- * is required for a given destination.
+ * IMPORTANT — Not legal advice and not an NDPC adequacy list.
+ *
+ * As of publication, the Nigeria Data Protection Commission has not published
+ * a formal list of countries it deems adequate under NDPA Section 42. The
+ * Commission is empowered to issue such guidelines under Section 42(3), but
+ * has not yet done so. The entries in this map are *self-assessments* by the
+ * toolkit maintainers based on each country's data-protection framework, and
+ * are intended for guidance only. Verify the current NDPC position and consult
+ * counsel before relying on any entry here for a transfer impact assessment.
  */
 /**
  * Adequacy status of a country for cross-border data transfers.
@@ -281,11 +298,13 @@ export declare function getTransferMechanismDescription(mechanism: TransferMecha
 
 /**
  * Returns whether NDPC approval is required for a given transfer mechanism.
- * Approval is required for standard contractual clauses (Section 42),
- * binding corporate rules (Section 43), and specific NDPC authorization (Section 44).
+ * Under NDPA Section 42(5), the Commission may approve binding corporate rules,
+ * codes of conduct, certification mechanisms, or similar instruments. Standard
+ * contractual clauses are one of the appropriate safeguards under Section 41(1)(a)
+ * and the Commission may approve them per Section 42(4).
  *
  * @param mechanism The transfer mechanism
- * @returns Whether NDPC approval is required
+ * @returns Whether NDPC approval is typically required
  */
 export declare function isNDPCApprovalRequired(mechanism: TransferMechanism): boolean;
 
@@ -353,8 +372,11 @@ export declare interface TransferImpactAssessment {
 }
 
 /**
- * Cross-Border Data Transfer types aligned with NDPA 2023 Part VI (Sections 41-45)
- * Personal data may only be transferred outside Nigeria under specific conditions
+ * Cross-Border Data Transfer types aligned with NDPA 2023 Part VIII (Sections 41-43).
+ * Personal data may only be transferred outside Nigeria under the bases listed in
+ * Section 41(1), where Section 42 defines adequacy and Section 43 lists derogations.
+ *
+ * Note: These are guidance labels — not legal advice. Verify with your DPO or counsel.
  */
 /**
  * Transfer mechanisms recognized under the NDPA

package/dist/cross-border.js

@@ -1,3 +1,2 @@
 "use client";
-'use strict';var chunkNQNFS3QI_js=require('./chunk-NQNFS3QI.js'),chunkMCWV7S2G_js=require('./chunk-MCWV7S2G.js'),chunkC4YM4UMI_js=require('./chunk-C4YM4UMI.js');require('./chunk-E64TU6IU.js'),require('./chunk-ELKB2AFZ.js'),require('./chunk-MQFZHA2D.js');var react=require('react'),jsxRuntime=require('react/jsx-runtime');var t=react.createContext(null);function A(){let r=react.useContext(t);if(!r)throw new Error("CrossBorder compound components must be wrapped in <CrossBorder.Provider>. Example: <CrossBorder.Provider><CrossBorder.Manager /></CrossBorder.Provider>");return r}var e=({adapter:r,storageKey:d,useLocalStorage:a,initialTransfers:n,onAdd:p,onUpdate:C,onRemove:f,children:i})=>{let m=chunkMCWV7S2G_js.a({adapter:r,storageKey:d,useLocalStorage:a,initialTransfers:n,onAdd:p,onUpdate:C,onRemove:f});return jsxRuntime.jsx(t.Provider,{value:m,children:i})};var q={Provider:e,Manager:chunkNQNFS3QI_js.a};Object.defineProperty(exports,"CrossBorderTransferManager",{enumerable:true,get:function(){return chunkNQNFS3QI_js.a}});Object.defineProperty(exports,"useCrossBorderTransfer",{enumerable:true,get:function(){return chunkMCWV7S2G_js.a}});Object.defineProperty(exports,"COUNTRY_ADEQUACY_MAP",{enumerable:true,get:function(){return chunkC4YM4UMI_js.a}});Object.defineProperty(exports,"assessTransferRisk",{enumerable:true,get:function(){return chunkC4YM4UMI_js.h}});Object.defineProperty(exports,"getAdequateCountries",{enumerable:true,get:function(){return chunkC4YM4UMI_js.c}});Object.defineProperty(exports,"getCountryAdequacy",{enumerable:true,get:function(){return chunkC4YM4UMI_js.b}});Object.defineProperty(exports,"getTransferMechanismDescription",{enumerable:true,get:function(){return chunkC4YM4UMI_js.f}});Object.defineProperty(exports,"isNDPCApprovalRequired",{enumerable:true,get:function(){return chunkC4YM4UMI_js.e}});Object.defineProperty(exports,"requiresNDPCApproval",{enumerable:true,get:function(){return chunkC4YM4UMI_js.d}});Object.defineProperty(exports,"validateTransfer",{enumerable:true,get:function(){return chunkC4YM4UMI_js.g}});exports.CrossBorder=q;exports.CrossBorderProvider=e;exports.useCrossBorderCompound=A;//# sourceMappingURL=cross-border.js.map
-//# sourceMappingURL=cross-border.js.map
+'use strict';var chunkI3Y4LOSL_js=require('./chunk-I3Y4LOSL.js'),chunkHHK5LHEG_js=require('./chunk-HHK5LHEG.js'),chunkYFBDJ4FH_js=require('./chunk-YFBDJ4FH.js');require('./chunk-AME4HJR4.js'),require('./chunk-VWED6UTN.js'),require('./chunk-RFPLZDIO.js');var react=require('react'),jsxRuntime=require('react/jsx-runtime');var s=react.createContext(null);function A(){let r=react.useContext(s);if(!r)throw new Error("CrossBorder compound components must be wrapped in <CrossBorder.Provider>. Example: <CrossBorder.Provider><CrossBorder.Manager /></CrossBorder.Provider>");return r}var t=({adapter:r,storageKey:d,useLocalStorage:a,initialTransfers:n,onAdd:p,onUpdate:C,onRemove:f,children:i})=>{let m=chunkHHK5LHEG_js.a({adapter:r,storageKey:d,useLocalStorage:a,initialTransfers:n,onAdd:p,onUpdate:C,onRemove:f});return jsxRuntime.jsx(s.Provider,{value:m,children:i})};var q={Provider:t,Manager:chunkI3Y4LOSL_js.a};Object.defineProperty(exports,"CrossBorderTransferManager",{enumerable:true,get:function(){return chunkI3Y4LOSL_js.a}});Object.defineProperty(exports,"useCrossBorderTransfer",{enumerable:true,get:function(){return chunkHHK5LHEG_js.a}});Object.defineProperty(exports,"COUNTRY_ADEQUACY_MAP",{enumerable:true,get:function(){return chunkYFBDJ4FH_js.a}});Object.defineProperty(exports,"assessTransferRisk",{enumerable:true,get:function(){return chunkYFBDJ4FH_js.h}});Object.defineProperty(exports,"getAdequateCountries",{enumerable:true,get:function(){return chunkYFBDJ4FH_js.c}});Object.defineProperty(exports,"getCountryAdequacy",{enumerable:true,get:function(){return chunkYFBDJ4FH_js.b}});Object.defineProperty(exports,"getTransferMechanismDescription",{enumerable:true,get:function(){return chunkYFBDJ4FH_js.f}});Object.defineProperty(exports,"isNDPCApprovalRequired",{enumerable:true,get:function(){return chunkYFBDJ4FH_js.e}});Object.defineProperty(exports,"requiresNDPCApproval",{enumerable:true,get:function(){return chunkYFBDJ4FH_js.d}});Object.defineProperty(exports,"validateTransfer",{enumerable:true,get:function(){return chunkYFBDJ4FH_js.g}});exports.CrossBorder=q;exports.CrossBorderProvider=t;exports.useCrossBorderCompound=A;

package/dist/cross-border.mjs

@@ -1,3 +1,2 @@
 "use client";
-import {a}from'./chunk-SYMQJO2W.mjs';export{a as CrossBorderTransferManager}from'./chunk-SYMQJO2W.mjs';import {a as a$1}from'./chunk-Z6IIMLZU.mjs';export{a as useCrossBorderTransfer}from'./chunk-Z6IIMLZU.mjs';export{a as COUNTRY_ADEQUACY_MAP,h as assessTransferRisk,c as getAdequateCountries,b as getCountryAdequacy,f as getTransferMechanismDescription,e as isNDPCApprovalRequired,d as requiresNDPCApproval,g as validateTransfer}from'./chunk-75TJPK2N.mjs';import'./chunk-AYKLAEOU.mjs';import'./chunk-6WIP33TW.mjs';import'./chunk-WWT2ZSNU.mjs';import {createContext,useContext}from'react';import {jsx}from'react/jsx-runtime';var t=createContext(null);function A(){let r=useContext(t);if(!r)throw new Error("CrossBorder compound components must be wrapped in <CrossBorder.Provider>. Example: <CrossBorder.Provider><CrossBorder.Manager /></CrossBorder.Provider>");return r}var e=({adapter:r,storageKey:d,useLocalStorage:a,initialTransfers:n,onAdd:p,onUpdate:C,onRemove:f,children:i})=>{let m=a$1({adapter:r,storageKey:d,useLocalStorage:a,initialTransfers:n,onAdd:p,onUpdate:C,onRemove:f});return jsx(t.Provider,{value:m,children:i})};var q={Provider:e,Manager:a};export{q as CrossBorder,e as CrossBorderProvider,A as useCrossBorderCompound};//# sourceMappingURL=cross-border.mjs.map
-//# sourceMappingURL=cross-border.mjs.map
+import {a}from'./chunk-GTYXVAJX.mjs';export{a as CrossBorderTransferManager}from'./chunk-GTYXVAJX.mjs';import {a as a$1}from'./chunk-KDAZQO3N.mjs';export{a as useCrossBorderTransfer}from'./chunk-KDAZQO3N.mjs';export{a as COUNTRY_ADEQUACY_MAP,h as assessTransferRisk,c as getAdequateCountries,b as getCountryAdequacy,f as getTransferMechanismDescription,e as isNDPCApprovalRequired,d as requiresNDPCApproval,g as validateTransfer}from'./chunk-7BJXI2HI.mjs';import'./chunk-SFGW37LE.mjs';import'./chunk-DBZSN4WP.mjs';import'./chunk-ZJYULEER.mjs';import {createContext,useContext}from'react';import {jsx}from'react/jsx-runtime';var s=createContext(null);function A(){let r=useContext(s);if(!r)throw new Error("CrossBorder compound components must be wrapped in <CrossBorder.Provider>. Example: <CrossBorder.Provider><CrossBorder.Manager /></CrossBorder.Provider>");return r}var t=({adapter:r,storageKey:d,useLocalStorage:a,initialTransfers:n,onAdd:p,onUpdate:C,onRemove:f,children:i})=>{let m=a$1({adapter:r,storageKey:d,useLocalStorage:a,initialTransfers:n,onAdd:p,onUpdate:C,onRemove:f});return jsx(s.Provider,{value:m,children:i})};var q={Provider:t,Manager:a};export{q as CrossBorder,t as CrossBorderProvider,A as useCrossBorderCompound};

package/dist/dpia.d.mts

@@ -34,8 +34,8 @@ export declare const DPIAProvider: React__default.FC<DPIAProviderProps>;
 
 export declare interface DPIAProviderProps {
     sections: DPIASection[];
-    initialAnswers?: Record<string, any>;
-    adapter?: StorageAdapter<Record<string, any>>;
+    initialAnswers?: DPIAAnswerMap;
+    adapter?: StorageAdapter<DPIAAnswerMap>;
     storageKey?: string;
     useLocalStorage?: boolean;
     onComplete?: (result: DPIAResult) => void;
@@ -85,8 +85,8 @@ export declare interface DPIAQuestion {
 }
 
 /**
- * DPIA questionnaire component. Implements NDPA Section 38 requirements
- * for conducting Data Protection Impact Assessments on high-risk processing activities.
+ * DPIA questionnaire component. Implements NDPA Section 28 requirements
+ * for conducting Data Privacy Impact Assessments on high-risk processing activities.
  */
 export declare const DPIAQuestionnaire: React__default.FC<DPIAQuestionnaireProps>;
 

package/dist/dpia.d.ts

@@ -34,8 +34,8 @@ export declare const DPIAProvider: React__default.FC<DPIAProviderProps>;
 
 export declare interface DPIAProviderProps {
     sections: DPIASection[];
-    initialAnswers?: Record<string, any>;
-    adapter?: StorageAdapter<Record<string, any>>;
+    initialAnswers?: DPIAAnswerMap;
+    adapter?: StorageAdapter<DPIAAnswerMap>;
     storageKey?: string;
     useLocalStorage?: boolean;
     onComplete?: (result: DPIAResult) => void;
@@ -85,8 +85,8 @@ export declare interface DPIAQuestion {
 }
 
 /**
- * DPIA questionnaire component. Implements NDPA Section 38 requirements
- * for conducting Data Protection Impact Assessments on high-risk processing activities.
+ * DPIA questionnaire component. Implements NDPA Section 28 requirements
+ * for conducting Data Privacy Impact Assessments on high-risk processing activities.
  */
 export declare const DPIAQuestionnaire: React__default.FC<DPIAQuestionnaireProps>;
 

package/dist/dpia.js

@@ -1,3 +1,2 @@
 "use client";
-'use strict';var chunk3VQAYQR7_js=require('./chunk-3VQAYQR7.js'),chunk5HL4UBFV_js=require('./chunk-5HL4UBFV.js'),chunkOPYQIJKY_js=require('./chunk-OPYQIJKY.js'),chunkP42Z5CFE_js=require('./chunk-P42Z5CFE.js');require('./chunk-E64TU6IU.js'),require('./chunk-ELKB2AFZ.js');var chunkMQFZHA2D_js=require('./chunk-MQFZHA2D.js'),react=require('react'),jsxRuntime=require('react/jsx-runtime');var i=react.createContext(null);function v(){let o=react.useContext(i);if(!o)throw new Error("DPIA compound components must be wrapped in <DPIA.Provider>. Example: <DPIA.Provider sections={...}><DPIA.Questionnaire /></DPIA.Provider>");return o}var p=({sections:o,initialAnswers:a,adapter:m,storageKey:I,useLocalStorage:A,onComplete:d,children:D})=>{let u=chunkOPYQIJKY_js.a({sections:o,initialAnswers:a,adapter:m,storageKey:I,useLocalStorage:A,onComplete:d}),c=chunkMQFZHA2D_js.b(chunkMQFZHA2D_js.a({},u),{sections:o});return jsxRuntime.jsx(i.Provider,{value:c,children:D})};var y={Provider:p,Questionnaire:chunk5HL4UBFV_js.a,Report:chunk3VQAYQR7_js.a,StepIndicator:chunk3VQAYQR7_js.b};Object.defineProperty(exports,"DPIAReport",{enumerable:true,get:function(){return chunk3VQAYQR7_js.a}});Object.defineProperty(exports,"StepIndicator",{enumerable:true,get:function(){return chunk3VQAYQR7_js.b}});Object.defineProperty(exports,"DPIAQuestionnaire",{enumerable:true,get:function(){return chunk5HL4UBFV_js.a}});Object.defineProperty(exports,"useDPIA",{enumerable:true,get:function(){return chunkOPYQIJKY_js.a}});Object.defineProperty(exports,"assessDPIARisk",{enumerable:true,get:function(){return chunkP42Z5CFE_js.a}});exports.DPIA=y;exports.DPIAProvider=p;exports.useDPIACompound=v;//# sourceMappingURL=dpia.js.map
-//# sourceMappingURL=dpia.js.map
+'use strict';var chunkEZCGTHQV_js=require('./chunk-EZCGTHQV.js'),chunkWDDCKYWA_js=require('./chunk-WDDCKYWA.js'),chunkC7IDR2IV_js=require('./chunk-C7IDR2IV.js'),chunkTQZWJGJ2_js=require('./chunk-TQZWJGJ2.js');require('./chunk-ZVOIR4QH.js'),require('./chunk-AME4HJR4.js'),require('./chunk-VWED6UTN.js');var chunkRFPLZDIO_js=require('./chunk-RFPLZDIO.js'),react=require('react'),jsxRuntime=require('react/jsx-runtime');var n=react.createContext(null);function v(){let o=react.useContext(n);if(!o)throw new Error("DPIA compound components must be wrapped in <DPIA.Provider>. Example: <DPIA.Provider sections={...}><DPIA.Questionnaire /></DPIA.Provider>");return o}var i=({sections:o,initialAnswers:a,adapter:m,storageKey:A,useLocalStorage:I,onComplete:D,children:d})=>{let u=chunkC7IDR2IV_js.a({sections:o,initialAnswers:a,adapter:m,storageKey:A,useLocalStorage:I,onComplete:D}),f=chunkRFPLZDIO_js.b(chunkRFPLZDIO_js.a({},u),{sections:o});return jsxRuntime.jsx(n.Provider,{value:f,children:d})};var C={Provider:i,Questionnaire:chunkWDDCKYWA_js.a,Report:chunkEZCGTHQV_js.a,StepIndicator:chunkEZCGTHQV_js.b};Object.defineProperty(exports,"DPIAReport",{enumerable:true,get:function(){return chunkEZCGTHQV_js.a}});Object.defineProperty(exports,"StepIndicator",{enumerable:true,get:function(){return chunkEZCGTHQV_js.b}});Object.defineProperty(exports,"DPIAQuestionnaire",{enumerable:true,get:function(){return chunkWDDCKYWA_js.a}});Object.defineProperty(exports,"useDPIA",{enumerable:true,get:function(){return chunkC7IDR2IV_js.a}});Object.defineProperty(exports,"assessDPIARisk",{enumerable:true,get:function(){return chunkTQZWJGJ2_js.a}});exports.DPIA=C;exports.DPIAProvider=i;exports.useDPIACompound=v;

package/dist/dpia.mjs

@@ -1,3 +1,2 @@
 "use client";
-import {b,a}from'./chunk-TCN22KYP.mjs';export{a as DPIAReport,b as StepIndicator}from'./chunk-TCN22KYP.mjs';import {a as a$1}from'./chunk-LJNNPAFU.mjs';export{a as DPIAQuestionnaire}from'./chunk-LJNNPAFU.mjs';import {a as a$2}from'./chunk-6FGCGLH5.mjs';export{a as useDPIA}from'./chunk-6FGCGLH5.mjs';export{a as assessDPIARisk}from'./chunk-6TA2MVTU.mjs';import'./chunk-AYKLAEOU.mjs';import'./chunk-6WIP33TW.mjs';import {b as b$1,a as a$3}from'./chunk-WWT2ZSNU.mjs';import {createContext,useContext}from'react';import {jsx}from'react/jsx-runtime';var i=createContext(null);function v(){let o=useContext(i);if(!o)throw new Error("DPIA compound components must be wrapped in <DPIA.Provider>. Example: <DPIA.Provider sections={...}><DPIA.Questionnaire /></DPIA.Provider>");return o}var p=({sections:o,initialAnswers:a,adapter:m,storageKey:I,useLocalStorage:A,onComplete:d,children:D})=>{let u=a$2({sections:o,initialAnswers:a,adapter:m,storageKey:I,useLocalStorage:A,onComplete:d}),c=b$1(a$3({},u),{sections:o});return jsx(i.Provider,{value:c,children:D})};var y={Provider:p,Questionnaire:a$1,Report:a,StepIndicator:b};export{y as DPIA,p as DPIAProvider,v as useDPIACompound};//# sourceMappingURL=dpia.mjs.map
-//# sourceMappingURL=dpia.mjs.map
+import {b,a}from'./chunk-O45PKBZA.mjs';export{a as DPIAReport,b as StepIndicator}from'./chunk-O45PKBZA.mjs';import {a as a$1}from'./chunk-ZQZJNKVB.mjs';export{a as DPIAQuestionnaire}from'./chunk-ZQZJNKVB.mjs';import {a as a$2}from'./chunk-H3XJV2IR.mjs';export{a as useDPIA}from'./chunk-H3XJV2IR.mjs';export{a as assessDPIARisk}from'./chunk-LRRENTT5.mjs';import'./chunk-ITCY2Z66.mjs';import'./chunk-SFGW37LE.mjs';import'./chunk-DBZSN4WP.mjs';import {b as b$1,a as a$3}from'./chunk-ZJYULEER.mjs';import {createContext,useContext}from'react';import {jsx}from'react/jsx-runtime';var n=createContext(null);function v(){let o=useContext(n);if(!o)throw new Error("DPIA compound components must be wrapped in <DPIA.Provider>. Example: <DPIA.Provider sections={...}><DPIA.Questionnaire /></DPIA.Provider>");return o}var i=({sections:o,initialAnswers:a,adapter:m,storageKey:A,useLocalStorage:I,onComplete:D,children:d})=>{let u=a$2({sections:o,initialAnswers:a,adapter:m,storageKey:A,useLocalStorage:I,onComplete:D}),f=b$1(a$3({},u),{sections:o});return jsx(n.Provider,{value:f,children:d})};var C={Provider:i,Questionnaire:a$1,Report:a,StepIndicator:b};export{C as DPIA,i as DPIAProvider,v as useDPIACompound};

package/dist/dsr.d.mts

@@ -199,7 +199,7 @@ export declare interface DSRRequest {
 }
 
 /**
- * Data Subject Request form component. Implements NDPA Part IV, Sections 29-36
+ * Data Subject Request form component. Implements NDPA Part VI (Sections 34-38)
  * covering data subject rights including access, rectification, erasure, and portability.
  */
 export declare const DSRRequestForm: React__default.FC<DSRRequestFormProps>;
@@ -438,20 +438,25 @@ declare interface DSRTrackerProps {
 }
 
 /**
- * Data Subject Rights types aligned with NDPA 2023 Part IV (Sections 29-36)
+ * Data Subject Rights types aligned with NDPA 2023 Part VI (Sections 34-38)
+ * and the related provisions in Part V (Section 27 — information to the data subject)
+ * and Part X (Section 46 — complaint to the Commission).
+ *
+ * Note: These are guidance labels — not legal advice. Verify with your DPO or counsel.
  */
 /**
- * Types of data subject requests per NDPA Part IV
- * - 'information': Right to be informed (Section 29)
- * - 'access': Right of access (Section 30)
- * - 'rectification': Right to rectification (Section 31)
- * - 'erasure': Right to erasure (Section 32)
- * - 'restriction': Right to restrict processing (Section 33)
- * - 'portability': Right to data portability (Section 34)
- * - 'objection': Right to object (Section 35)
- * - 'automated_decision_making': Rights related to automated decision-making (Section 36)
+ * Types of data subject requests per NDPA Part VI
+ * - 'information': Right to be informed (Section 27 — provision of information; Section 34(1)(a))
+ * - 'access': Right of access / confirmation + data copy (Section 34(1)(a)–(b))
+ * - 'rectification': Right to rectification (Section 34(1)(c))
+ * - 'erasure': Right to erasure (Section 34(1)(d), Section 34(2))
+ * - 'restriction': Right to restrict processing (Section 34(1)(e))
+ * - 'portability': Right to data portability (Section 38)
+ * - 'objection': Right to object (Section 36)
+ * - 'automated_decision_making': Rights re. automated decisions / profiling (Section 37)
+ * - 'withdraw_consent': Right to withdraw consent (Section 35)
  */
-export declare type DSRType = 'information' | 'access' | 'rectification' | 'erasure' | 'restriction' | 'portability' | 'objection' | 'automated_decision_making';
+export declare type DSRType = 'information' | 'access' | 'rectification' | 'erasure' | 'restriction' | 'portability' | 'objection' | 'automated_decision_making' | 'withdraw_consent';
 
 /**
  * Formats a DSR request for display or submission
@@ -481,7 +486,9 @@ export declare interface RequestType {
     /** Description of what this request type entails */
     description: string;
     /**
-     * NDPA section reference (e.g., "Section 30" for access requests)
+     * NDPA 2023 section reference for this right
+     * (e.g., "Section 34(1)(a)" for access, "Section 38" for portability).
+     * Used for display purposes only — verify the exact subsection with counsel.
      */
     ndpaSection?: string;
     /**
@@ -559,9 +566,10 @@ declare interface UseDSRReturn {
      */
     requests: DSRRequest[];
     /**
-     * Submit a new request
+     * Submit a new request. The hook assigns `id`, `status`, `createdAt`,
+     * `updatedAt`, and `dueDate` — pass everything else.
      */
-    submitRequest: (requestData: Omit<DSRRequest, 'id' | 'status' | 'submittedAt' | 'updatedAt' | 'estimatedCompletionDate'>) => DSRRequest;
+    submitRequest: (requestData: Omit<DSRRequest, 'id' | 'status' | 'createdAt' | 'updatedAt' | 'dueDate'>) => DSRRequest;
     /**
      * Update an existing request
      */
@@ -573,7 +581,12 @@ declare interface UseDSRReturn {
     /**
      * Get requests by status
      */
-    getRequestsByStatus: (status: RequestStatus) => DSRRequest[];
+    /**
+     * Filter requests by status. Accepts both the modern `DSRStatus` union and
+     * the deprecated `RequestStatus` for backward compatibility — pass the
+     * modern values (`'pending' | 'awaitingVerification' | 'inProgress' | ...`).
+     */
+    getRequestsByStatus: (status: DSRStatus | RequestStatus) => DSRRequest[];
     /**
      * Get requests by type
      */
@@ -646,7 +659,7 @@ export declare interface ValidateDsrSubmissionOptions {
     /**
      * Allowed request types. When provided, the payload's `requestType`
      * must be one of these — useful for locking the server to a specific
-     * set of supported NDPA Part IV §29-36 rights.
+     * set of supported NDPA Part VI §34-38 (plus §35, §36, §37) data-subject rights.
      */
     allowedRequestTypes?: string[];
 }