Organizations constantly strive to adhere to evolving regulations and compliance standards in the dynamic landscape of data privacy and protection. The General Data Protection Regulation (GDPR) stands as one of the most significant legal frameworks in this realm, aiming to safeguard individual's personal data and ensure its proper handling, including during data transfers. The GDPR - Transfer Impact Assessment - 2.1 (TIA) template in particular is a crucial tool for organizations that deal with cross-border data transfers as this template facilitates the assessment process, helping organizations identify potential risks and implement necessary safeguards.
Currently, the OneTrust application does not support the direct addition of the GDPR - TIA template. However, to overcome this limitation, the following procedure details an alternative stop-gap solution that leverages the Privacy Cloud - Assessment Template Import Template API to import the GDPR - TIA template into the OneTrust application. While not a permanent fix, this approach enables organizations to continue their compliance efforts without hindrance.
To import the GDPR - TIA template
The following procedure will guide you through copying the GDPR - TIA template and utilizing the Import Template API to import the GDPR - TIA template into the OneTrust application.
Step 1: Copy the Template
Click the clipboard icon on the right-side of the code block below to copy the JSON text for the GDPR - TIA template in a compatible format.
{"template":{"id":"01e74ccf-7c09-434f-aa10-3ff81db117d9","rootVersionId":"07a8c92d-a9c9-4dd9-9249-ba119237a883","name":"GDPR - Transfer Impact Assessment - 2.1 (TIA)","friendlyName":"GDPR TIA","description":"Data exporters subject to the European Union's General Data Protection Regulation should use this questionnaire to assess the lawfulness of any personal data transfer from the EU/EEA to a third country (i.e., destination country), namely, whether the third country provides an essentially equivalent level of data protection as that guaranteed in the EU). This assessment aligns with Step 1 (know your transfers), Step 2 (identify the transfer tools you are relying on), Step 3 (assess whether the Article 46 GDPR transfer tool you are relying on is effective in light of all circumstances of the transfer), and Step 6 (re-evaluate) in the European Data Protection Board's \"Recommendations 01/2020 on measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data.\"","templateVersion":9,"templateType":"PIA","status":"PUBLISHED","icon":"ot-desktop","welcomeText":"<p><strong>Welcome to the GDPR Transfer Impact Assessment!</strong></p><p><br></p><p>This template consists of a dynamic GDPR Transfer Impact Assessment (TIA) based, in part, on the <a href=\"https://edpb.europa.eu/our-work-tools/documents/public-consultations/2020/recommendations-012020-measures-supplement_en\"rel=\"noopener noreferrer\"target=\"_blank\">Recommendations 01/2020 on measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data</a> (Supplementary Measures Recommendations) issued by the <a href=\"https://edpb.europa.eu/edpb_en\"rel=\"noopener noreferrer\"target=\"_blank\">European Data Protection Board</a> (EDPB).</p><p><br></p><p><strong>Background:</strong></p><p><br></p><p>According to <a href=\"http://curia.europa.eu/juris/document/document.jsf?text=&docid=228677&pageIndex=0&doclang=EN&mode=req&dir=&occ=first&part=1&cid=11549805\"rel=\"noopener noreferrer\"target=\"_blank\">Case C-311/18 - <em>Data Protection Commissioner v Facebook Ireland Ltd and Maximillian Schrems</em></a> (<em>Schrems II</em>), the <a href=\"https://curia.europa.eu/jcms/jcms/j_6/en/\"rel=\"noopener noreferrer\"target=\"_blank\">Court of Justice of the European Union</a> (CJEU) requires data exporters to assess whether the data importer's third country provides essentially equivalent protections to the transferred personal data as guaranteed under the European Union <a href=\"https://eur-lex.europa.eu/eli/reg/2016/679/oj\"rel=\"noopener noreferrer\"target=\"_blank\">General Data Protection Regulation</a> (GDPR) and the <a href=\"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:12012P/TXT\"rel=\"noopener noreferrer\"target=\"_blank\">Charter of the Fundamental Rights of the European Union</a> (Charter). The CJEU stated that it is, above all, for the data exporter to verify, on a case-by-case basis and, where appropriate, in collaboration with the data importer, whether the law of the third country of destination ensures an essentially equivalent level of protection, under EU law, of personal data transferred under standard data protection clauses (i.e., based on <a href=\"https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en\"rel=\"noopener noreferrer\"target=\"_blank\">standard contractual clauses</a> (SCCs), <a href=\"https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/binding-corporate-rules-bcr_en\"rel=\"noopener noreferrer\"target=\"_blank\">binding corporate rules</a> (BCRs), or ad hoc contractual clauses), by providing, where necessary, supplementary measures to those offered by those clauses.</p><p>Finally, On 11 July 2023, the European Commission adopted its <a href=\"https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en\"rel=\"noopener noreferrer\"target=\"_blank\">adequacy decision for the EU-U.S. Data Privacy Framework (DPF)</a>. The EU concluded that the US provides adequate protection for personal data transferred to US companies self-certifying under the new framework. This decision was made after the US implemented new safeguards, pursuant <a href=\"https://www.justice.gov/opcl/executive-order-14086\"rel=\"noopener noreferrer\"target=\"_blank\">the Executive Order 14086</a>, to address concerns raised by the EU Court of Justice in the Schrems II decision. These safeguards ensure that US intelligence agencies only access necessary data in a proportional manner and establish a new specific redress mechanism for handling complaints.</p><p><br></p><p>This TIA aims to help data exporters ensure that the personal data transferred to a third country is afforded a level of protection essentially equivalent to that guaranteed within the EU/EEA in accordance with the following steps in the EDPB's Supplementary Measures Recommendations:</p><p><br></p><ul><li><strong>Step 1:</strong> <u>Understand Your Transfers.</u> The initial step is to ensure comprehensive awareness of all your personal data transfers, verifying that the data is adequate, relevant, and necessary for its intended purpose, in accordance with the GDPR's principle of \"data minimization\". It's important to note that remote access from a third country or data storage on a non-EEA cloud also constitutes a transfer. If using an international cloud infrastructure, you must confirm if your data will be transferred to third countries unless the cloud provider is located in the EEA and guarantees that data won't be processed in third countries.</li><li><strong>Step 2</strong>:<u>Determine Your Transfer Tool</u>. Identify the transfer tool your transfer depends on, as outlined in Chapter V of the GDPR. If the European Commission has deemed the destination of your data as adequate under Article 45 GDPR or the preceding Directive 95/46, provided the decision remains valid, no further steps are necessary except ongoing monitoring of the adequacy decision. If there is no adequacy decision, you need to employ a transfer tool specified in Article 46 GDPR. In some circumstances, you might rely on a derogation in Article 49 of GDPR, which should be applied strictly and not become the standard practice.</li><li><strong>Step 3</strong>:<u>Assess the Effectiveness of Your Transfer Tool</u>. Evaluate if any laws or practices in the third country could impact the effectiveness of your transfer tool in the context of your specific transfer. This assessment should prioritize the third country's legislation relevant to your transfer and the Article 46 GDPR transfer tool you employ. Scrutinizing the third country's public authorities' practices can help verify if your transfer tool's safeguards provide practical, adequate protection for the transferred personal data. This scrutiny is vital when:</li><li class=\"ql-indent-1\">The third country's legislation that meets EU standards is not upheld in practice;</li><li class=\"ql-indent-1\">Practices incompatible with your transfer tool exist due to the absence of relevant legislation in the third country;</li><li class=\"ql-indent-1\">Your transferred data or importer falls or may fall under problematic legislation.</li><li>In the first two scenarios, you must suspend the transfer or implement supplementary measures to proceed. In the last scenario, given the uncertain application of problematic legislation, you can choose to suspend the transfer, implement supplementary measures, or proceed without additional measures if you can justify and document that problematic legislation will not apply to your transferred data and importer.</li><li><strong>Step 4:</strong> <u>Identify Supplementary Measures</u>. If your transfer tool's effectiveness is undermined by the third country's legislation or practices, supplementary measures are required to ensure an EU-equivalent level of data protection. Evaluate the efficacy of these measures in relation to your transfer, considering the third country's laws and practices and the transfer tool you rely on. If no supplementary measure can ensure an equivalent level of protection, the transfer must be suspended or terminated.</li><li><strong>Step 5:</strong> <u>Take Formal Procedural Steps</u>. Depending on the Article 46 GDPR transfer tool employed, you might need to undertake formal procedural steps, which these recommendations specify. Consult your competent supervisory authorities as necessary.</li><li><strong>Step 6:</strong> <u>Continually Re-Evaluate Protection Level</u>. Regularly review the level of protection provided to the personal data you transfer to third countries, monitoring for any developments that might impact it. Data protection requires constant vigilance. Supervisory authorities may request your assessments and will consider the steps you've taken to ensure data protection when investigating complaints or compliance issues.</li></ul><p><br></p><p><u>This template is based on the following resources:</u></p><ul><li>The <a href=\"https://eur-lex.europa.eu/eli/reg/2016/679/oj\"rel=\"noopener noreferrer\"target=\"_blank\">General Data Protection Regulation</a> (Reg. UE 2016/679);</li><li>The Article 29 Working Party's <a href=\"https://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=614108\"rel=\"noopener noreferrer\"target=\"_blank\">Adequacy Referential</a>;</li><li>The EDPB's <a href=\"https://edpb.europa.eu/our-work-tools/our-documents/recommendations/recommendations-012020-measures-supplement-transfer_en\"rel=\"noopener noreferrer\"target=\"_blank\">Recommendations 01/2020 on measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data</a>; and</li><li>The EDPB's <a href=\"https://edpb.europa.eu/our-work-tools/our-documents/recommendations/recommendations-022020-european-essential-guarantees_en\"rel=\"noopener noreferrer\"target=\"_blank\">Recommendations 02/2020 on the European Essential Guarantees for surveillance measures</a> (\"EDPB European Essential Guarantees\").</li><li>The EDPB's <a href=\"https://edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-052021-interplay-between-application-article-3_en\"rel=\"noopener noreferrer\"target=\"_blank\">Guidelines 05/2021 on the Interplay between the application of Article 3 and the provisions on international transfers as per Chapter V of the GDPR</a>.</li></ul><p><br></p><p><br></p><p><strong>Key Terms:</strong></p><ul><li>“<u>Third Country</u>” means any country that is not a Member State of the European Economic Area, which includes the Member States of the European Union and Iceland, Norway, and Liechtenstein. The GDPR applies to the latter by virtue of the EEA Agreement, particularly its Annex XI and Protocol 37.</li><li>“<u>Data Exporter</u>” means the controller or processor within the EEA who transfers personal data to a controller or processor in a third country.</li><li>“<u>Data Importer</u>” means the controller or processor in a third country who receives or gets access to personal data transferred from the EEA.</li><li>\"<u>Data Transfer</u>\"means any disclosure of personal data by a Data exporter subject to the GDPR to a Data importer in a Third Country or an international organization, irrespective of whether the latter is subject to the GDPR.</li></ul><p><br></p><p><strong>Additional Resources:</strong></p><ul><li>General Data Protection Regulation (GDPR) - <a href=\"https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679&from=EN#d1e4227-1-1\"rel=\"noopener noreferrer\"target=\"_blank\">Chapter V - Transfers of personal data to third countries or international organizations</a></li><li>European Commission</li><li class=\"ql-indent-1\"><a href=\"https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en\"rel=\"noopener noreferrer\"target=\"_blank\">Standard Contractual Clauses</a> for Data Transfers between EU and non-EU Countries</li><li class=\"ql-indent-1\"><a href=\"https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/binding-corporate-rules-bcr_en\"rel=\"noopener noreferrer\"target=\"_blank\">Binding Corporate Rules</a> for data transfers within multinational companies</li><li>The Court of Justice of the European Union - <a href=\"https://curia.europa.eu/jcms/upload/docs/application/pdf/2020-07/cp200091en.pdf\"rel=\"noopener noreferrer\"target=\"_blank\">Press Release No 91/20:The Court of Justice invalidates Decision 2016/1250 on the adequacy of the protection provided by the EU-US Data Protection Shield</a></li><li>The European Data Protection Board</li><li class=\"ql-indent-1\"><a href=\"https://edpb.europa.eu/sites/edpb/files/files/file1/20200724_edpb_faqoncjeuc31118_en.pdf\"rel=\"noopener noreferrer\"target=\"_blank\">Frequently Asked Questions on the judgment of the Court of Justice of the European Union in Case C-311/18 - Data Protection Commissioner v Facebook Ireland Ltd and Maximillian Schrems</a>.</li><li class=\"ql-indent-1\"><a href=\"https://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=614108\"rel=\"noopener noreferrer\"target=\"_blank\">Adequacy Referential, WP 254 rev.01</a></li><li>The European Data Protection Supervisor</li><li class=\"ql-indent-1\">\"<a href=\"https://edps.europa.eu/press-publications/press-news/press-releases/2020/edps-statement-following-court-justice-ruling-case_en\"rel=\"noopener noreferrer\"target=\"_blank\">Statement following the Court of Justice ruling in Case C-311/18 Data Protection Commissioner v Facebook Ireland Ltd and Maximilian Schrems (“Schrems II”)</a>\"</li><li class=\"ql-indent-1\"><a href=\"https://edps.europa.eu/sites/edp/files/publication/17-06-01_necessity_toolkit_final_en_0.pdf\"rel=\"noopener noreferrer\"target=\"_blank\">Assessing the necessity of measures that limit the fundamental right to the protection of personal data:A Toolkit</a></li><li class=\"ql-indent-1\"><a href=\"https://edps.europa.eu/sites/edp/files/publication/19-12-19_edps_proportionality_guidelines_en.pdf\"rel=\"noopener noreferrer\"target=\"_blank\">EDPS Guidelines on assessing the proportionality of measures that limit the fundamental rights to privacy and to the protection of personal data</a></li><li>European Union Agency for Fundamental Rights and Council of Europe - <a href=\"https://echr.coe.int/Documents/Handbook_data_protection_ENG.pdf\"rel=\"noopener noreferrer\"target=\"_blank\">Handbook on European data protection law</a> (2018 edition)</li><li>Council of Europe/European Court of Human Rights - <a href=\"https://echr.coe.int/Documents/Guide_Art_8_ENG.pdf\"rel=\"noopener noreferrer\"target=\"_blank\">Guide on Article 8 of the European Convention on Human Rights</a> (31 December 2019)</li><li>Member States of the <a href=\"https://europa.eu/european-union/about-eu/countries_en\"rel=\"noopener noreferrer\"target=\"_blank\">European Union</a> (EU) and countries in the <a href=\"https://ec.europa.eu/eurostat/statistics-explained/index.php/Glossary:European_Economic_Area_(EEA)#:~:text=The%20European%20Economic%20Area%2C%20abbreviated,force%20on%201%20January%201994.\"rel=\"noopener noreferrer\"target=\"_blank\">European Economic Area</a> (EEA)</li><li>The <a href=\"https://legalinstruments.oecd.org/en/instruments/OECD-LEGAL-0487\"rel=\"noopener noreferrer\"target=\"_blank\">OECD Declaration on Government Access to Instruments Personal Data held by Private Sector Entities</a></li><li>Adequacy decision for the <a href=\"https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en\"rel=\"noopener noreferrer\"target=\"_blank\">EU-U.S. Data Privacy Framework (DPF)</a></li></ul><p><br></p><p><strong>For additional information on regulatory updates regarding International Data Transfers, </strong>visit the OneTrust DataGuidance <a href=\"https://www.dataguidance.com/comparisons/data-transfers\"rel=\"noopener noreferrer\"target=\"_blank\">Data Transfers Resources Portal</a>.</p><p><br></p><p><strong>Other FAQs</strong></p><p><em>1. How do I get help?</em></p><p>Commenting capabilities are built into this portal. You can flag certain answers with a \"not sure\"response or add comments, and our team will provide help directly within the questionnaire.</p><p><em>2.. What is OneTrust?</em></p><p>OneTrust is a tool that we use to automate privacy assessments across our organization. Using OneTrust will make it easier for our team to provide timely and relevant feedback on your projects.</p><p><br></p><p>--</p><p>OneTrust products, content and materials are for informational purposes only and not for the purpose of providing legal advice. You should contact your attorney to obtain advice with respect to any particular issue. OneTrust materials do not guarantee compliance with applicable laws and regulations. All trademarks, service marks, trade names, product names and logos appearing herein are the property of their respective owners.</p>","valid":true,"active":null,"sections":[{"name":"Introduction","invalidQuestionCount":0,"id":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","rootVersionId":"e338ff0b-4195-45b2-a598-15ca06f59b50","sequence":1,"questions":[{"id":"7f8da3ab-7813-4e48-bae5-a3314220d3dd","content":"EDPB Supplementary Measures Recommendations Guidance","questionType":"STATEMENT","required":false,"attributes":"{\"isQuestionHintEnabled\":false,\"allowLaws\":false}","description":"<p><strong>Key Guidance from the EDPB's </strong><a href=\"https://edpb.europa.eu/our-work-tools/our-documents/recommendations/recommendations-012020-measures-supplement-transfer_en\"rel=\"noopener noreferrer\"target=\"_blank\"><strong>Recommendations 01/2020 on measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data</strong></a><strong>:</strong></p><p><br></p><ul><li>In the Schrems II judgment, the Court emphasizes the responsibilities of exporters and importers to ensure that the processing of personal data has been and will continue to be carried out in compliance with the level of protection set by EU data protection law and to suspend the transfer and/or terminate the contract where the importer of the data is not, or is no longer, able to comply with standard data protection clauses incorporated in the relevant contract between the exporter and the importer. The controller or processor acting as exporter must ensure that the importers collaborate with the exporter, where appropriate, in its performance of these responsibilities, by keeping it informed, for instance, of any development affecting the level of protection of the personal data received in the importer’s country. These responsibilities are an application of the GDPR principle of accountability to the data transfers.</li></ul><p><br></p><ul><li>An essentially equivalent level of protection to that guaranteed within the EU must accompany the data when it travels to third countries outside the EEA to ensure that the level of protection guaranteed by the GDPR is not undermined, both during and after the transfer.</li></ul><p><br></p><ul><li>The selected Article 46 GDPR transfer tool must be effective in ensuring that the level of protection guaranteed by the GDPR is not undermined by the transfer in practice.</li></ul><p><br></p><ul><li>In particular, the protection afforded to the transferred personal data in the third country must be essentially equivalent to that guaranteed in the EEA by the GDPR, read in light of the Charter of Fundamental Rights of the EU. This is not the case if the data importer is prevented from complying with its obligations under the chosen Article 46 GDPR transfer tool due to the third country’s legislation and practices applicable to the transfer, including during the transit of data from the exporter to the importer’s country.</li></ul><p><br></p><ul><li>You must first assess, where appropriate in collaboration with the importer, if there is anything in the law and/or practices in force in the third country that may impinge on the effectiveness of the appropriate safeguards of the Article 46 GDPR transfer tool you are relying on, in the context of your specific transfer. This implies determining whether your transfer falls within the scope of legislation and/or practices which may impinge on the effectiveness of your Article 46 GDPR transfer tool. The assessment required must be based first and foremost on legislation publicly available.</li></ul><p><br></p><ul><li>This assessment must contain elements concerning access to data by public authorities of the third country of your importer such as:</li></ul><p><br></p><ul><li class=\"ql-indent-1\">Elements on whether public authorities of the third country of your importer may seek to access the data with or without the data importer’s knowledge, in light of legislation, practice and reported precedents;</li></ul><p><br></p><ul><li class=\"ql-indent-1\">Elements on whether public authorities of the third country of your importer may be able to access the data through the data importer or through the telecommunication providers or communication channels in light of legislation, legal powers, technical, financial, and human resources at their disposal and of reported precedents.</li></ul><p><br></p><ul><li>You will need to look into the characteristics of each of your transfers and determine whether the domestic legal order and/or practices in force of the country to which data is transferred (or onward transferred) affect your transfers. The scope of your assessment is thus limited to the legislation and practices relevant to the protection of the specific data you transfer.</li></ul><p><br></p><ul><li>You should in any case pay specific attention to any relevant laws, in particular laws laying down requirements to disclose personal data to public authorities or granting such public authorities powers of access to personal data (for instance for criminal law enforcement, regulatory supervision or national security purposes). If these requirements or powers restrict the fundamental rights of data subjects while respecting their essence and being necessary and proportionate measures in a democratic society to safeguard important objectives as also recognised in Union or EU Member States’ law, they may not impinge on the commitments contained in the Article 46 GDPR transfer tool you are relying on.</li></ul><p><br></p><ul><li>You will need to assess relevant rules and practices of a general nature insofar as they have an impact on the effective application of the safeguards contained in the Article 46 GDPR transfer tool.</li></ul><p><br></p><ul><li>The obligations or powers resulting from such laws and practices will be considered to impinge on/be incompatible with the commitments of the Article 46 GDPR transfer tool if they:</li></ul><p><br></p><ul><li class=\"ql-indent-1\">Do not respect the essence of the fundamental rights and freedoms of the EU Charter of Fundamental Rights, or</li></ul><p><br></p><ul><li class=\"ql-indent-1\">Exceed what is necessary and proportionate in a democratic society to safeguard one of the important objectives as also recognised in Union or member state law such as those listed in Article 23 (1) GDPR.</li></ul>","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"rootVersionId":"01a0922d-da71-4128-ad47-3786d284d3ca","sequence":1},{"id":"bfacd15f-29a6-403a-9d6c-7d42451e8d83","content":"GDPR Data Transfer Definition","questionType":"STATEMENT","required":false,"attributes":"{\"isQuestionHintEnabled\":false,\"allowLaws\":true}","description":"<p>According to the EDPB's <a href=\"https://edpb.europa.eu/system/files/2021-11/edpb_guidelinesinterplaychapterv_article3_adopted_en.pdf\"rel=\"noopener noreferrer\"target=\"_blank\">Guidelines 05/2021 on the Interplay between the application of Article 3 and the provisions on international transfers as per Chapter V of the GDPR</a>, under the GDPR, a <strong>data transfer</strong> occurs when:</p><p><br></p><ol><li>A controller or a processor is <strong>subject to the GDPR</strong> for the given processing.</li><li>This controller or processor (\"exporter\") <strong>discloses by transmission or otherwise makes personal data</strong>, subject to this processing, <strong>available</strong> to another controller, joint controller or processor (\"importer\").</li><li>The importer is <strong>in a third country or is an international organisation</strong>, irrespective of whether or not this importer is subject to the GDPR in respect of the given processing in accordance with Article 3.</li></ol><p><br></p><p><em>Note</em>:</p><ul><li>The second criterion implies that the concept of \"transfer of personal data to a third country or to an international organisation\"only applies to disclosures of personal data where two different (separate) parties (each of them a controller, joint controller or processor) are involved. In order to qualify as a transfer, there must be a controller or processor disclosing the data (the exporter) and a different controller or processor receiving or being given access to the data (the importer).</li></ul>","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"questionLaws":[{"name":"EU-GDPR"}],"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"rootVersionId":"64e67bce-1a5e-4352-b7ed-9be7af739447","sequence":2},{"id":"ad43751a-643b-423f-b0c5-90505d2d8adf","content":"Who are you transferring data to?","questionType":"RELATIONSHIP","required":true,"attributes":"{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"id\":\"c7277f03-8358-4103-92f3-9ca339cd0cf6\",\"name\":\"Data Transfer\",\"nameKey\":\"InventoryLinking.DataTransferNameKey\",\"schemaName\":\"dataTransferSchema\",\"moduleName\":\"InventoryLinking\",\"seeded\":true,\"requireJustification\":false}","friendlyName":"Data Transfer","description":"<p>Please indicate the relevant transfer occurring between</p><ul><li><strong><u>the Data Exporter</u></strong> - the entity currently undertaking this assessment, which is sending or making data available data;</li><li><strong><u>the Data Importer</u></strong> - the entity to which data will be transferred.</li><li>Whereas possible, also indicate the <strong>processing activity in which context this transfer occurs.</strong></li></ul><p><br></p><p><strong><u>Note</u></strong>:this question presupposes you created records in related inventories for the importer and exporter and, where applicable, the processing activity in scope. If not, please consider starting a record for each entity as a preliminary step.</p><p>If you do not have the proper authorization to do it, please contact the administrator, who shall take this initial step.</p>","valid":true,"prePopulateResponse":true,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":true,"readOnly":false,"translationIdentifier":"2c0c87cd-20a4-4b6a-a8c9-50603a745343","rootVersionId":"bed815e8-5cc5-49a7-b87a-9bea4c5bff3f","sequence":3},{"id":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","content":"What is the recipient country you are sending data to?","questionType":"MULTICHOICE","options":[{"id":"a70fa995-5cd2-48fb-9c9b-7a249a9b6959","option":"United States","sequence":1,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null,"translationIdentifier":"4e61d055-99b3-461d-9457-f0e22ce2def0"},{"id":"9b13d90d-4314-42ee-8ff2-97422d090195","option":"European Economic Area","sequence":2,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null,"translationIdentifier":"082a6ff9-9b2e-4399-8a80-7fec4e463cf8"},{"id":"5cde9447-d09a-44ea-96f8-58b0dc33abeb","option":"Adequate Country","sequence":3,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null,"translationIdentifier":"b5fb28bd-1b6f-47f7-b254-39727a90a08b"},{"id":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","option":"Other Third Country","sequence":4,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null,"translationIdentifier":"62e36e56-c9d7-4747-8339-d299f56ef24c"}],"required":true,"attributes":"{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"requireJustification\":false,\"displayAnswerType\":\"dropdown\"}","friendlyName":"Recipient Country Geographic Area","description":"<p><strong><u>Guidance</u></strong></p><ul><li>Thoroughly select the appropriate option below to determine conditional logic on the following sections of this assessment.</li><li>The current list of adequate countries based on the European Commission decisions is available <a href=\"https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en\"rel=\"noopener noreferrer\"target=\"_blank\"style=\"background-color:rgb(255, 255, 255);\"><strong>here</strong></a>.</li><li>Select Other Third Country as a residual option, if none of the others is applicable</li></ul><p><br></p><p><u>Note</u>:In selecting the relevant country, remember it shall be where the data importer is established, either when physically transferring personal data or making them available for remote access outside the data exporter's country.</p>","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"translationIdentifier":"5849a542-2bb8-4466-ae1b-ae226458d35f","rootVersionId":"0ddddefc-5e48-4cb7-85cc-aa56f61cf75a","sequence":4},{"id":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","content":"Is the recipient organization self-certified under the EU-US Data Privacy Framework (DPF)?","questionType":"YESNO","options":[{"id":"81e5c256-cbf0-4c9f-bc80-187e284717df","option":"Yes","sequence":1,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null,"translationIdentifier":"08cf8210-4b3e-4d48-9cad-563adbd164c4"},{"id":"1ea0461f-99de-4ac3-8d25-e1e785012832","option":"No","sequence":2,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null,"translationIdentifier":"22e5001c-f7f9-4048-a17e-5a5379f856a9"},{"id":"a5dec21d-d87f-4b2f-93e8-561a5466410f","option":"NotApplicable","sequence":3,"attributes":null,"hint":null,"optionType":"NOT_APPLICABLE","optionKey":null}],"required":true,"attributes":"{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"allowJustification\":true,\"requireJustification\":false}","friendlyName":"EU-US Data Privacy Framework","description":"<p>On 11 July 2023, the European Commission adopted its <a href=\"https://commission.europa.eu/system/files/2023-07/Adequacy%20decision%20EU-US%20Data%20Privacy%20Framework_en.pdf\"rel=\"noopener noreferrer\"target=\"_blank\">Adequacy Decision on the adequate level of protection of personal data under the EU-US Data Privacy Framework</a>. The decision concludes that the United States ensures an adequate level of protection – compared to that of the EU - for personal data transferred from the EU to US companies participating in the EU-U.S. Data Privacy Framework.</p><p><br></p><p>Eligible US companies can certify their participation in the EU-U.S. Data Privacy Framework by committing to comply with a detailed set of Privacy Principles, including Notice, Choice, Accountability for Onward Transfer, Security, Data Integrity and Purpose Limitation, Access, Recourse, Enforcement and Liability.</p><p><br></p><p>The list of organizations currently participating in the DPF is available at:<a href=\"https://www.dataprivacyframework.gov/s/participant-search\"rel=\"noopener noreferrer\"target=\"_blank\">https://www.dataprivacyframework.gov/s/participant-search</a>.</p>","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"translationIdentifier":"a9a63f87-ac7d-4a1b-bb6b-7da18c008513","rootVersionId":"f9a97a71-bc90-416a-b155-8dba90bdc275","sequence":5},{"id":"17fe032b-96fe-4aee-b598-4af6b681954e","content":"What cross-border transfer mechanism are you relying on for this transfer?","questionType":"ATTRIBUTE","options":[{"id":"9b913b66-8dd6-4854-904f-39157a329e14","option":"NotApplicable","sequence":1,"attributes":null,"hint":null,"optionType":"NOT_APPLICABLE","optionKey":null}],"required":true,"attributes":"{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"attributeId\":\"96616e43-f4c5-46f4-a896-bffc6028e944\",\"allowJustification\":true,\"attributeType\":\"none\",\"displayAnswerType\":\"dropdown\",\"fieldName\":\"transferMechanism\",\"name\":\"Transfer Mechanism\",\"nameKey\":\"InventoryLinking.TransferMechanism\",\"requireJustification\":false,\"responseType\":\"single-select\",\"showQuestionDetailsLink\":false}","friendlyName":"Cross-border Transfer Mechanism","description":"<p>Please select the relevant transfer mechanism among the following:</p><ul><li>Standard data protection clauses (SCCs); </li><li>Binding corporate rules (BCRs);</li><li>Codes of conduct;</li><li>Certification mechanisms;</li><li>Ad hoc contractual clauses</li><li>Derogations (article 49 GDPR).</li></ul>","parentQuestionId":"ad43751a-643b-423f-b0c5-90505d2d8adf","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"translationIdentifier":"c0a4032b-2d96-47dd-8626-0d303885fc09","rootVersionId":"e4c8a64c-e4c9-4c7f-8dd6-9cb1a6b458c8","sequence":6}]},{"name":"Context of the Transfer","invalidQuestionCount":0,"translationIdentifier":"8ca7d6ce-b694-4ce3-8f54-c6a4d08873f9","id":"ce0e1775-675d-4686-96e0-2a080a1b0ce3","rootVersionId":"49e65348-3e16-4539-bff2-795725b8998b","sequence":2,"questions":[{"id":"8f63bb92-f2a1-4e16-a265-8fa14d90addb","content":"What is the purpose for which you are transferring personal data?","questionType":"TEXTBOX","options":[{"id":"e66148a0-056f-4845-a01a-479d5e8ff61c","option":"","sequence":1,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null,"translationIdentifier":"1f985697-4515-458d-b70d-0c7d3f2630b9"}],"required":false,"attributes":"{\"isQuestionHintEnabled\":false,\"requireJustification\":false,\"allowLaws\":true}","friendlyName":"Purpose of transfer","description":"<p>Please define the purpose for which you are transferring personal data.</p><p>If you selected a specific activity in which context the transfer happens, under question 1.3, please further elaborate on why the transfer is needed to accomplish that purpose.</p>","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"translationIdentifier":"7f9f483e-de43-41be-b6d0-adede1a1f9c7","rootVersionId":"e0069f67-6a3f-410e-aecd-c7630f71bd03","sequence":1},{"id":"4eac414a-5bd7-4900-ad57-7fe7bcaf7a1e","content":"Whose and what personal data are you transferring?","questionType":"PERSONAL_DATA","required":true,"attributes":"{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"attributeId\":null,\"requireJustification\":false}","friendlyName":"Personal Data","description":"<p>Please select the relevant categories of data subjects and the related data elements subject to this transfer operation.</p>","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"translationIdentifier":"8248b94b-1f73-48d8-9d11-9c81e1481c35","rootVersionId":"73d60132-fb3d-4100-bde0-12329aa2d47c","sequence":2},{"id":"9a5b69a6-3246-4aee-b468-d5be58ece7f8","content":"What is the relationship between the entities transferring data?","questionType":"MULTICHOICE","options":[{"id":"398f7a2a-592d-414a-9910-9984701db013","option":"Controller to Processor","sequence":1,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null,"translationIdentifier":"05ed116b-102b-433c-b2cf-f47c34ffe79f"},{"id":"eb68f7f8-d456-470e-a06f-44f276a28b33","option":"Controller to Controller","sequence":2,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null,"translationIdentifier":"a03dc168-cb22-4a79-a023-726171c34aab"},{"id":"227c7e5a-e130-4261-9494-60054a2ae688","option":"Processor to (Sub-)Processor","sequence":3,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null,"translationIdentifier":"9fe601a1-6437-4a6f-a815-1c188a75a3e1"},{"id":"65f9064b-dcf9-48df-9216-cbf4695464a3","option":"Processor to Controller","sequence":4,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null,"translationIdentifier":"2bfb1925-dcf9-49cf-89c2-7d36eaafdc85"}],"required":false,"attributes":"{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"displayAnswerType\":\"dropdown\",\"requireJustification\":false}","friendlyName":"Parties Relationship","description":"<p>Please select the correct relationship among those listed below.</p><p><br></p><p><u>Note</u>:the 2021 European Commission's Standard Contractual Clauses has a modular approach based on the four scenarios below. </p><p>Select the functional module based on the parties' relationship if you rely on the SCCs as a transfer tool.</p>","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"translationIdentifier":"c5e8a1fc-9129-49c8-8b99-bc3e4819f667","rootVersionId":"4e49179d-c09b-462f-ace4-52a8f9e3ccdd","sequence":3},{"id":"1fa545b5-8c52-4031-8690-55aebf273045","content":"What is the volume of data you are transferring?","questionType":"ATTRIBUTE","required":false,"attributes":"{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"attributeId\":\"ceb29eeb-e7c1-443c-a799-1b6f6d8fe42d\",\"allowJustification\":false,\"attributeType\":\"none\",\"fieldName\":\"volumeOfData\",\"name\":\"Volume of data\",\"nameKey\":\"InventoryLinking.VolumeOfData\",\"requireJustification\":false,\"responseType\":\"text\",\"showQuestionDetailsLink\":false}","friendlyName":"Volume of data","description":"<p>Please select the relevant volume of data you are going to transfer.</p>","parentQuestionId":"ad43751a-643b-423f-b0c5-90505d2d8adf","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"translationIdentifier":"723a0959-65a7-44db-b7ef-649651d2069b","rootVersionId":"75e65505-9e88-4ebc-9d76-576d815d0654","sequence":4},{"id":"ecdbab18-bc8c-46a1-81b8-96a954e8869b","content":"What is the frequency of this transfer?","questionType":"ATTRIBUTE","required":false,"attributes":"{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"attributeId\":\"7e1787e3-cdc0-455b-b197-d7614f744632\",\"allowJustification\":false,\"attributeType\":\"none\",\"fieldName\":\"frequencyOfTransfer\",\"name\":\"Frequency of transfer\",\"nameKey\":\"InventoryLinking.FrequencyOfTransfer\",\"requireJustification\":false,\"responseType\":\"text\",\"showQuestionDetailsLink\":false}","friendlyName":"Frequency of transfer","description":"<p>Please indicate the frequency of this transfer to the best of your knowledge.</p>","parentQuestionId":"ad43751a-643b-423f-b0c5-90505d2d8adf","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"translationIdentifier":"01068a35-7ce9-417f-92ba-451d4ef172f7","rootVersionId":"92e92f11-b25b-4487-a308-cb193e84cb85","sequence":5},{"id":"662282e9-4a04-462b-9751-77d8fe231f3d","content":"What are the applicable surveillance or security laws that may affect this transfer?","questionType":"ATTRIBUTE","required":false,"attributes":"{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"attributeId\":\"873516bf-b2ff-469e-a2f9-1a66cf5c9225\",\"allowJustification\":false,\"attributeType\":\"none\",\"displayAnswerType\":\"button\",\"fieldName\":\"securityLaws\",\"name\":\"Applicable surveillance or security laws\",\"nameKey\":\"InventoryLinking.SecurityLaws\",\"requireJustification\":false,\"responseType\":\"multi-select\",\"showQuestionDetailsLink\":false}","friendlyName":"Applicable surveillance or security laws","description":"<p>Please select the relevant surveillance or security laws that might affect this transfer as soon as data leave the data exporter.</p>","parentQuestionId":"ad43751a-643b-423f-b0c5-90505d2d8adf","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"translationIdentifier":"cba141c1-25da-4e22-8ce9-a19c3a9673b7","rootVersionId":"46b90e45-991b-47ba-9f09-1b2464d101bf","sequence":6},{"id":"cc2e821c-0f20-4bd2-a1e4-06b8e51ffca6","content":"Do any onward transfers occur?","questionType":"TEXTBOX","required":false,"attributes":"{\"isQuestionHintEnabled\":false,\"allowLaws\":true}","friendlyName":"Onward Transfers","description":"<p>Please indicate any onward transfers you are aware of in collaboration with the data importer.</p><p>Onward transfers shall take place from the data importer's country to further third countries.</p><p><br></p><p><br></p>","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"translationIdentifier":"b563c21b-0e4c-4a75-aed4-9330611daf80","rootVersionId":"22405257-b581-41cb-98e9-ac6fc5db4953","sequence":7},{"id":"38b5c136-37c8-4b63-8493-21e5553c4e25","content":"Do the parties have entered a legal agreement for processing personal data?","questionType":"YESNO","options":[{"id":"3dc0c1e6-45be-4623-8ece-ac5b5b91d09a","option":"Yes","sequence":1,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null,"translationIdentifier":"0bb5536c-ad54-4406-a49d-d0dd9cf52cd4"},{"id":"9f583c9c-75a2-4e3a-9bac-1c7b4aa5d93b","option":"No","sequence":2,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null,"translationIdentifier":"ee2d650a-aa7f-48bc-8970-52e06b300dd5"},{"id":"fcce2cd7-acd7-40e9-bba6-d66ca21e619f","option":"NotApplicable","sequence":3,"attributes":null,"hint":null,"optionType":"NOT_APPLICABLE","optionKey":null}],"required":false,"attributes":"{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"requireJustification\":false}","friendlyName":"Data Processing Agreement","description":"<p>Depending on the selected Cross-border transfer mechanism, this agreement may be integrated or replaced by the relevant transfer tool.</p><p><br></p><p><u>Note</u>:If yes, please attach the evidence.</p>","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"translationIdentifier":"d09223cd-55cf-41a3-b4a4-3eeb761f2a9c","rootVersionId":"fdb2aef8-29fb-4cf0-8681-6fdba3f4ee6d","sequence":8},{"id":"42d97c55-0e95-4aba-97fa-f1df55ed0f25","content":"Does the data importer have previous experience in dealing with such transfers?","questionType":"YESNO","options":[{"id":"d03e0b12-f29c-40bf-a197-03bd7f251126","option":"Yes","sequence":1,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null,"translationIdentifier":"fc4a2ec3-9aad-4920-8e3f-cd52a433bb14"},{"id":"8081f1f1-da36-4007-9d5e-0ef33a35a7db","option":"No","sequence":2,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null,"translationIdentifier":"1f9a44f1-6d32-4a48-9a98-312729e18c87"},{"id":"10764c77-cdb3-447d-9316-1645e884ea05","option":"NotSure","sequence":3,"attributes":null,"hint":null,"optionType":"NOT_SURE","optionKey":null}],"required":false,"attributes":"{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"allowJustification\":true,\"requireJustification\":false}","friendlyName":"Documented Practical Experience of the Importer","description":"<p><strong><u>Guidance</u></strong></p><p>Answer this question, in collaboration with the data importer in light of the following excerpt from the Recommendation 01/2020 EDPB:</p><ul><li>\"Y<em>ou may also take into consideration </em><strong><em>documented practical experience of the importer with relevant prior instances of requests for access </em></strong><em>received from public authorities in the third country. You will only be able to use the experience of the importer as an additional source of information if the legal framework of the third country does not prohibit the importer to provide information on requests for disclosure from public authorities or on the absence of such requests (and you should also document such an assessment). You must however note that the absence of prior instances of requests received by the importer can never be considered, by itself, as a decisive factor on the effectiveness of the Article 46 GDPR transfer tool that allows the transfer to proceed without supplementary measures. You will be able to consider this information, together with other types of information obtained from other sources, as part of your overall assessment of the laws and practices of the third country in relation to your transfer.</em>\"</li></ul><p><br></p><p>Please consider attaching supporting evidence where possible.</p>","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"translationIdentifier":"f0a83faf-184f-4109-a12f-33e8c36fcf84","rootVersionId":"48d10b64-1bd5-4980-9498-abfc70035ae3","sequence":9}]},{"name":"Third Country Assessment","invalidQuestionCount":0,"id":"671ac1af-f16b-4096-81c4-9ce47355b8e0","rootVersionId":"ddb64a91-a544-49f3-b092-79d6ea0ce646","sequence":3,"questions":[{"id":"877540cb-6ac5-4275-a4d0-8e1073828050","content":"Have you, in a previous assessment, deemed the country safe for personal data transfers?","questionType":"YESNO","options":[{"id":"3dbbc738-a9b4-477d-8ee7-5b9f73af3569","option":"Yes","sequence":1,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"fbb62d8f-70de-4c5d-9ac3-a85584cb117a","option":"No","sequence":2,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"7f47b5c1-4746-40b5-add8-6915a5890fc0","option":"NotSure","sequence":3,"attributes":null,"hint":null,"optionType":"NOT_SURE","optionKey":null}],"required":true,"attributes":"{\"isQuestionHintEnabled\":false,\"requireJustification\":false,\"allowLaws\":true,\"allowJustification\":true}","friendlyName":"Previous assessment","description":"<p>If you have already assessed the country for a similar transfer, you might not need a new assessment. However, please be reminded that each transfer might be subject to different laws and circumstances.</p><p><br></p><p>Please select <strong>yes</strong> only if you are sure that the circumstances surrounding the country haven't changed.</p>","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"rootVersionId":"8a607b21-4fe1-48d8-ba33-963cc7af05a2","sequence":1},{"id":"4df5d952-6507-4317-8291-ece329137f78","content":"EDPB Third Country Assessment Guidance","questionType":"STATEMENT","required":false,"attributes":"{\"isQuestionHintEnabled\":false,\"allowLaws\":false}","description":"<p>Your data importer should provide you with the relevant sources and information relating to the third country in which it is established and the laws and practices in force applicable to the transfer.</p><p><br></p><p>In addition to the legal framework of the third country applicable to the transfer, sources and information should be relevant, objective, reliable, verifiable and publicly available or otherwise accessible to determine whether your Article 46 transfer tool can be effectively applied and you will have to assess and document that they are.</p><p><br></p><ul><li class=\"ql-indent-1\"><strong>Relevant:</strong> the information must be relevant to the specific transfer and/or importer and their compliance with the requirements set in EU law and the Article 46 GDPR transfer instrument, and not overly general or abstract.</li><li class=\"ql-indent-1\"><strong>Objective information:</strong> is information supported by empirical evidence based on knowledge gained from the past, not assumptions about potential events and risks.</li><li class=\"ql-indent-1\"><strong>Reliable:</strong> the exporter and the importer must objectively assess the reliability of the source of information and the information itself and evaluate them separately.</li><li class=\"ql-indent-1\"><strong>Verifiable:</strong> information and conclusions should be verifiable or contrastable with other types of information or sources as part of an overall assessment, also to allow the competent supervisory or judicial authority to check the objectivity and reliability of this information if needed.</li><li class=\"ql-indent-1\"><strong>Publicly available or otherwise accessible information:</strong> information should preferably be public or at least accessible to facilitate the verification of the criteria made above and ensure its possible sharing with supervisory authorities, judicial authorities and ultimately, data subjects.</li></ul><p><br></p><p>You may also take into consideration the <u>documented practical experience of the importer </u>with relevant prior instances of requests for access received from public authorities in the third country. You will only be able to use the experience of the importer as an additional source of information if the legal framework of the third country does not prohibit the importer from providing information on requests for disclosure from public authorities or in the absence of such requests (and you should also document such an assessment). You must, however, note that the absence of prior instances of requests received by the importer can never be considered, by itself, as a decisive factor in the effectiveness of the Article 46 GDPR transfer tool that allows the transfer to proceed without supplementary measures. You will be able to consider this information, together with other types of information obtained from other sources, as part of your overall assessment of the laws and practices of the third country concerning your transfer. The relevant and documented experience of the importer should be corroborated and not contradicted by relevant, objective, reliable, verifiable and publicly available or otherwise accessible information on the practical application of the applicable law (e.g. the existence or absence of requests for access received by other actors operating within the same sector and/or related to similar transferred personal data and/or the application of the law in practice, such as case law and reports by independent oversight bodies).</p>","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"rootVersionId":"811241eb-09c1-463c-bebf-586e88da7ff9","sequence":2},{"id":"32b7b8f5-450c-4f64-9332-558801da9a00","content":"Possible Sources of Information to Assess a Third Country","questionType":"STATEMENT","required":false,"attributes":"{\"isQuestionHintEnabled\":false,\"allowLaws\":false}","description":"<p>Your data importer should be in a position to provide you with relevant sources and information relating to the third country in which it is established, including the laws and the practices applicable to the importer and the data transferred. You and the importer may refer to several sources of information, such as the ones non-exhaustively listed below and presented by order of preference:</p><p><br></p><ul><li>Case-law of the Court of Justice of the European Union (CJEU) and of the European Court of Human Rights (ECtHR) as referred to in the European Essential Guarantees recommendations;</li></ul><p><br></p><ul><li>Adequacy decisions in the country of destination if the transfer relies on a different legal basis;</li></ul><p><br></p><ul><li>Resolutions and reports from intergovernmental organisations, such as the Council of Europe, other regional bodies, and UN bodies and agencies (e.g. UN Human Rights Council, Human Rights Committee);</li></ul><p><br></p><ul><li>Reports and analysis from competent regulatory networks, such as the Global Privacy Assembly (GPA);</li></ul><p><br></p><ul><li>National case-law or decisions taken by independent judicial or administrative authorities competent on data privacy and data protection of third countries;</li></ul><p><br></p><ul><li>Reports of independent oversight or parliamentary bodies;</li></ul><p><br></p><ul><li>Reports based on practical experience with prior instances of requests for disclosure from public authorities, or the absence of such requests, from entities active in the same sector as the importer;</li></ul><p><br></p><ul><li>Warrant canaries of other entities processing data in the same field as the importer;</li></ul><p><br></p><ul><li>Reports produced or commissioned by Chambers of commerce, business, professional and trade associations, governmental diplomatic, trade and investment agencies of the exporter or other third countries exporting to the third country to which the transfer is made;</li></ul><p><br></p><ul><li>Reports from academic institutions, and civil society organizations (e.g. NGOs);</li></ul><p><br></p><ul><li>Reports from private providers of business intelligence on financial, regulatory and reputational risks for companies;</li></ul><p><br></p><ul><li>Warrant canaries of the importer itself;</li></ul><p><br></p><ul><li>Transparency reports, on the condition that they expressly mention the fact that no access requests were received. Transparency reports merely silent on this point would not qualify as sufficient evidence as these reports most often focus on access requests received from law enforcement authorities and provide figures only on this aspect while remaining silent on access requests for national security purposes received. This does not mean that no access requests were received but rather that this information cannot be shared;</li></ul><p><br></p><ul><li>Internal statements or records of the importer expressly indicating that no access requests were received for a sufficiently long period; and with a preference for statements and records engaging the liability of the importer and/or issued by internal positions with some autonomy such as internal auditors, DPOs, etc.</li></ul>","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"rootVersionId":"cd6c93ed-7707-493a-bf34-43bd447aafdd","sequence":3},{"id":"08dc64a1-3770-40e5-840c-f7a66f4042c1","content":"United States \uD83C\uDDFA\uD83C\uDDF8 - Third Country Assessment","questionType":"STATEMENT","required":false,"attributes":"{\"isQuestionHintEnabled\":false,\"allowLaws\":true}","description":"<p class=\"ql-align-justify\"><strong>Rule of Law and Respect for Human Rights in the US</strong></p><p class=\"ql-align-justify\">The United States upholds the rule of law and respects human rights through its <a href=\"https://www.dataguidance.com/legal-research/constitution-united-states\"rel=\"noopener noreferrer\"target=\"_blank\">Constitution</a> and <a href=\"https://www.dataguidance.com/legal-research/bill-rights-1789\"rel=\"noopener noreferrer\"target=\"_blank\">Bill of Rights</a>, securing civil rights, including free speech, peaceful assembly, protection against unreasonable search and seizure, a fair trial, and protection from cruel and unusual punishment. The Fourth Amendment ensures people's security in their persons, houses, papers, and effects against unreasonable searches and seizures. All law enforcement and regulatory activities must conform to applicable law, including the US Constitution, statutes, rules, and regulations. Judicial redress avenues are available for individuals against public authorities processing personal data, open to all individuals irrespective of their nationality. The US also ensures a level of protection for personal data transferred from the Union to the US under the EU-U.S. Data Privacy Framework, with safeguards ensuring that the US signals intelligence activities are necessary and proportionate in the pursuit of defined national security objectives.</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\">Additionally, the US ranks:</p><ul><li class=\"ql-align-justify\">26/128 on the <a href=\"https://worldjusticeproject.org/rule-of-law-index/\"rel=\"noopener noreferrer\"target=\"_blank\">World Justice Project Rule of Law Index</a> 2022</li><li class=\"ql-align-justify\">83/100 on the <a href=\"https://freedomhouse.org/country/united-states/freedom-world/2021\"rel=\"noopener noreferrer\"target=\"_blank\">Freedom House's Freedom in the World Report</a> 2023</li></ul><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong>Comprehensive Privacy Laws in the US</strong></p><p class=\"ql-align-justify\">Several US states have enacted data protection laws, indicative of a growing trend towards comprehensive privacy legislation. The California Consumer Privacy Act of 2018, California Privacy Rights Act, Virginia's Consumer Data Protection Act, and Colorado's Protection of Data Relating to Personal Privacy Act are notable examples. Complementing these state laws is the Federal Privacy Act of 1974, which ensures fair information practices across federal agencies. The US employs a sectoral approach to privacy protection, relying on a mix of legislation, regulation, and self-regulation. The FTC Act's prohibition on unfair or deceptive acts or practices extends protections to foreign consumers, and the EU-U.S. Data Privacy Framework, issued by the US Department of Commerce in collaboration with the European Commission, further safeguards personal data transferred from the Union to the US.</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\">A complete and up-to-date overview of the approved and proposed privacy legislation is accessible <a href=\"https://www.dataguidance.com/comparisons/usa-privacy-laws\"rel=\"noopener noreferrer\"target=\"_blank\">here</a>.</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong>Sectoral Privacy Legislation in the US</strong></p><p class=\"ql-align-justify\">Privacy is further safeguarded by numerous federal laws and regulations that are sector-specific. <a href=\"https://platform.dataguidance.com/legal-research/health-insurance-portability-and-accountability-act-1996\"rel=\"noopener noreferrer\"target=\"_blank\">Health Insurance Portability and Accountability Act of 1996</a> (HIPAA) protects health information, the <a href=\"https://platform.dataguidance.com/legal-research/gramm-leach-bliley-act-1999-glba\"rel=\"noopener noreferrer\"target=\"_blank\">Gramm-Leach-Bliley Act of 1999</a> (GLBA) safeguards financial institutions, and the <a href=\"https://platform.dataguidance.com/legal-research/childrens-online-privacy-protection-act-1998-coppa\"rel=\"noopener noreferrer\"target=\"_blank\">Children's Online Privacy Protection Act of 1998</a> (COPPA) applies to online services directed at children.</p><p class=\"ql-align-justify\">Laws addressing deceptive telemarketing, commercial email regulation, consumer credit reporting, and restrictions on telemarketing calls also exist. Electronic surveillance is regulated by federal and state laws such as the Omnibus Crime Control and Safe Streets Act, Electronic Communications Privacy Act (ECPA), and <a href=\"https://bja.ojp.gov/program/it/privacy-civil-liberties/authorities/statutes/1286\"rel=\"noopener noreferrer\"target=\"_blank\">Foreign Intelligence Surveillance Act</a> (FISA).</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong>Privacy Legislation, Data Protection and Security Rules in the US</strong></p><p class=\"ql-align-justify\">Data protection and privacy regulation in the US consist of a patchwork of federal and state laws, with the FTC Act holding the broadest jurisdiction. The country's intelligence activities are guided by <a href=\"https://www.justice.gov/opcl/executive-order-14086\"rel=\"noopener noreferrer\"target=\"_blank\">Executive Order 14086</a>, which stipulates provisions for personal data collection and processing.</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong>Privacy Concepts and Principles in the US</strong></p><p class=\"ql-align-justify\">US privacy principles resonate with common data protection concepts like lawful and fair processing, purpose limitation, data quality, and retention and security. State laws, such as California's CCPA and CPRA, Virginia's CDPA, and Colorado's CPA, build upon these principles, as do federal laws like HIPAA, GLBA, COPPA, and the Privacy Act of 1974.</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong>Independent Supervisory Authority in the US</strong></p><p class=\"ql-align-justify\">The US does not have a single federal authority for data protection compliance, but it's monitored by a range of agencies such as the FTC, SEC, OCC, the Board, FDIC, NCUA, and CFPB, each overseeing a different sector.</p><p class=\"ql-align-justify\">On a state level, monitoring is usually conducted by the Attorney Generals or District Attorneys.</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong>International Commitments and Obligations of the US</strong></p><p class=\"ql-align-justify\">The US is part of various international commitments, including Mutual Legal Assistance Treaties (MLAT) with many countries, membership in the Budapest Convention on Cybercrime, and adherence to the OECD Privacy Framework. It is also a party to several international agreements safeguarding privacy rights.</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong>Problematic Legislation Subject to Transfers in the US</strong></p><p class=\"ql-align-justify\">Surveillance laws in the US, like the Wiretap Act, Stored Communications Act (SCA), and the Foreign Intelligence Surveillance Act (FISA), regulate electronic surveillance and protect privacy but could potentially impact cross-border data transfers. Evaluating data transfers to the US, therefore, requires an in-depth understanding of the applicable legislation and risks involved.</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong style=\"color:rgb(77, 81, 86);\">European Essential Guarantees for surveillance measures</strong></p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong>EEG A - Adherence to clear, precise, and accessible rules for processing in the US</strong></p><p class=\"ql-align-justify\">Processing in the US adheres to clear, precise, and accessible rules, with comprehensive privacy legislation enacted in several states and sectoral laws like the CCPA, CPRA, CDPA, and CPA providing legal bases. Access to information by US government authorities relies on subpoenas, judicial orders, and search warrants. While there are no specific statutory retention periods, limitations exist on indefinite data storage, and sector-specific laws may impose retention requirements. The Wiretap Act, SCA, and FISA govern the collection and disclosure of communications, with the FTC recommending privacy protections, including data security, reasonable collection limits, retention practices, and data accuracy. The Privacy Act 1974 requires agencies to maintain only relevant and necessary information. Furthermore, based on FISA as complemented by Executive Order 14086, the US also ensures that signals intelligence activities are conducted in a manner that is necessary and proportionate to the validated intelligence priority, with senior-level legal, oversight, and compliance officials conducting periodic oversight of these activities.</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\">Further information concerning the Guarantee A assessment can be found in the <a href=\"https://edpb.europa.eu/system/files/2023-02/edpb_opinion52023_eu-us_dpf_en.pdf\"rel=\"noopener noreferrer\"target=\"_blank\"style=\"background-color:rgb(255, 255, 255);\">EDPB's Opinion 05/2023 on the European Commission Draft Implementing Decision on the adequate protection of personal data under the EU-US Data Privacy Framework</a> (pp. 28-31).</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong>EEG B - Necessity and Proportionality in the US</strong></p><p class=\"ql-align-justify\">In the US legal framework, Executive Order 14086 introduced the concepts of necessity and proportionality, restricting signals intelligence activities to validated intelligence priorities and proportionate to their objectives. Data minimization provisions are included in the FISA, requiring minimal collection, retention, and dissemination of US persons' data. The activities should be as tailored as feasible, taking into account the intrusiveness, duration, and probable contribution of the collection to the objective pursued. Reasonable methods and technical measures are applied to limit the data collected to what is necessary while minimizing the collection of non-pertinent information.</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\">Further information concerning the Guarantee B assessment can be found in the <a href=\"https://edpb.europa.eu/system/files/2023-02/edpb_opinion52023_eu-us_dpf_en.pdf\"rel=\"noopener noreferrer\"target=\"_blank\"style=\"background-color:rgb(255, 255, 255);\">EDPB's Opinion 05/2023 on the European Commission Draft Implementing Decision on the adequate protection of personal data under the EU-US Data Privacy Framework</a> (pp. 31-40).</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong>EEG C - Independent Oversight Mechanism in the US</strong></p><p class=\"ql-align-justify\">US privacy protections are subject to oversight through a variety of mechanisms, including courts, Congress, and executive agencies. Courts approve surveillance tools, and Congress monitors surveillance activities. Several federal agencies enforce sectoral laws, and the CPRA establishes the California Privacy Protection Agency for state-level enforcement. Additionally, each element of the Intelligence Community that collects signals intelligence has senior-level legal, oversight, and compliance officials conducting periodic oversight. The oversight process includes an Inspector General, a Privacy and Civil Liberties Officer, and officers in a designated compliance role. The process is designed to ensure rigorous oversight of signals intelligence activities and includes a redress mechanism for qualifying complaints. The Director of the oversight process and the Attorney General are independent and cannot interfere with the review of qualifying complaints.</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\">Further information concerning the Guarantee C assessment can be found in the <a href=\"https://edpb.europa.eu/system/files/2023-02/edpb_opinion52023_eu-us_dpf_en.pdf\"rel=\"noopener noreferrer\"target=\"_blank\"style=\"background-color:rgb(255, 255, 255);\">EDPB's Opinion 05/2023 on the European Commission Draft Implementing Decision on the adequate protection of personal data under the EU-US Data Privacy Framework</a> (pp. 40-44).</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong>EEG D - Effective Remedies Available to Individuals in the US</strong></p><p class=\"ql-align-justify\">Individuals in the US have effective remedies to uphold their rights when they believe they have not been respected. Various laws like the CCPA, CPA, CPRA, FCRA, COPPA, and Security and Privacy Rules provide data subjects with rights and remedies. Transparency measures, public reporting requirements, and annual transparency reports enhance public scrutiny and accountability. Non-US individuals can invoke safeguards and laws through a redress mechanism introduced by Executive Order 14086. This mechanism allows individuals to submit qualifying complaints about violations of US signals intelligence activities. The Attorney General can designate a country or regional organization as a qualifying state for this mechanism. Appropriate remediation, such as administrative measures to correct procedural or technical errors, is provided if necessary. The Intelligence Community must comply with any remediation determined by the Data Protection Review Court.</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\">Further information concerning the Guarantee D assessment can be found in the <a href=\"https://edpb.europa.eu/system/files/2023-02/edpb_opinion52023_eu-us_dpf_en.pdf\"rel=\"noopener noreferrer\"target=\"_blank\"style=\"background-color:rgb(255, 255, 255);\">EDPB's Opinion 05/2023 on the European Commission Draft Implementing Decision on the adequate protection of personal data under the EU-US Data Privacy Framework</a> (pp. 45-52).</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong>Final Notes on the European Commission's Adequacy Decision</strong></p><p class=\"ql-align-justify\">On July 11, 2023, <a href=\"https://commission.europa.eu/system/files/2023-07/Adequacy%20decision%20EU-US%20Data%20Privacy%20Framework_en.pdf\"rel=\"noopener noreferrer\"target=\"_blank\">the European Commission declared the Adequacy of the EU-US Data Privacy Framework (DPF)</a> for outbound transfers from the European Economic Area toward the United States. Although the DPF is a voluntary self-certification scheme applicable only to eligible US companies, the elements addressed by the Commission could be considered regardless of the participation in the adequacy mechanism, extending to all companies engaging in transatlantic data flows.</p><p class=\"ql-align-justify\">In summary, it is worth mentioning that the European Commission's decision to establish the Adequacy of the EU-US Data Privacy Framework is rooted in the comprehensive privacy protections in the US. The US employs a sectoral approach to privacy protection, combining legislation, regulation, and self-regulation. The FTC Act provides broad protections, including for foreign consumers, against unfair or deceptive practices. The EU-US Data Privacy Framework, which operates within the larger US privacy landscape, is based on a system of certification where US organizations commit to privacy principles. The US legal system offers multiple judicial redress avenues for individuals, irrespective of their nationality, against public authorities processing personal data. Interference by US public authorities with the fundamental rights of individuals is limited to what is strictly necessary for legitimate objectives, and adequate legal protection against such interference exists. All law enforcement and regulatory activities must conform to applicable laws, including the US Constitution, statutes, rules, and regulations. The Fourth Amendment provides robust protections against unreasonable searches and seizures. Through the Principles issued by the US DoC, the US ensures that signal intelligence activities are necessary and proportionate, strengthening privacy and civil liberties safeguards. These factors shall all be accounted for when assessing the level of protection for personal data transferred from the EU to the US, even if not relying directly on the EU-US DPF.</p>","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"translationIdentifier":"1caee2b7-5ab5-4137-80ba-a745e13833aa","rootVersionId":"72988847-a677-48db-a70b-0465230be7a8","sequence":4},{"id":"52923d50-2211-49cf-917e-0dc953a17056","content":"Rate the rule of law in the third country.","questionType":"MULTICHOICE","options":[{"id":"40225878-2a7c-4e81-9b1f-e57f5b145137","option":"Weak","sequence":1,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"71cadb05-bc52-4a08-9e26-2c30c618218b","option":"Average","sequence":2,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"c367b920-4cfb-4829-ac1e-ed9cde4543a1","option":"Strong","sequence":3,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"ab31a9ba-6e42-456d-8215-10ce5aa0c15f","option":"NotSure","sequence":4,"attributes":null,"hint":null,"optionType":"NOT_SURE","optionKey":null}],"required":false,"attributes":"{\"isQuestionHintEnabled\":true,\"allowLaws\":false,\"requireJustification\":false,\"allowJustification\":true,\"allowOther\":false}","friendlyName":"Rule of law","description":"<p>Please explain how the country respects the rule of law.</p><p><br></p><p>To help determine the ranking of the third country's rule of law, you might take into account the following resources:</p><ul><li><a href=\"https://worldjusticeproject.org/sites/default/files/documents/WJP-ROLI-2020-Online_0.pdf\"rel=\"noopener noreferrer\"target=\"_blank\">The World Justice Project Rule of Law Index® 2020</a></li><li>Freedom House's <a href=\"https://freedomhouse.org/countries/freedom-world/scores\"rel=\"noopener noreferrer\"target=\"_blank\">Freedom in the World report</a></li></ul><p><br></p>","hint":"Article 45(2)(a) of the GDPR.","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"rootVersionId":"6bee35f1-5131-442b-bee0-f60d83f16694","sequence":5},{"id":"a3edeb53-07bc-4ff0-98d5-d9e522d15b10","content":"Rate the respect for human rights and fundamental freedoms in the third country.","questionType":"MULTICHOICE","options":[{"id":"481766a2-ef26-4523-8313-aa396b22f00a","option":"Weak","sequence":1,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"2e8aaac7-0786-4c3a-bdd1-cd722de8377c","option":"Average","sequence":2,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"5e40333f-be01-473d-a722-fd299d258c22","option":"Strong","sequence":3,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"72b76ac3-64d4-4cea-9658-7ce3fac05bfd","option":"NotSure","sequence":4,"attributes":null,"hint":null,"optionType":"NOT_SURE","optionKey":null}],"required":false,"attributes":"{\"isQuestionHintEnabled\":true,\"allowLaws\":false,\"requireJustification\":false,\"allowJustification\":true}","friendlyName":"Respect for human rights and fundamental freedoms","description":"<p>Please explain how the country respects international human rights norms and standards.</p><p><br></p><p>To help determine the ranking of the third country's respect for human rights and fundamental freedoms, you might take into account the following resources:</p><ul><li><a href=\"https://worldjusticeproject.org/sites/default/files/documents/WJP-ROLI-2020-Online_0.pdf\"rel=\"noopener noreferrer\"target=\"_blank\">The World Justice Project Rule of Law Index® 2020</a></li><li>Freedom House's <a href=\"https://freedomhouse.org/countries/freedom-world/scores\"rel=\"noopener noreferrer\"target=\"_blank\">Freedom in the World report</a></li></ul><p><br></p>","hint":"Article 45(2)(a) of the GDPR.","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"rootVersionId":"27bdc47c-d36a-40e7-9759-f6243a566848","sequence":6},{"id":"6f4f2d51-6d64-4f91-a1e8-6fc5f660b367","content":"Indicate which of the following laws and frameworks are present and in force in the country","questionType":"MULTICHOICE","options":[{"id":"9ef99815-81b9-4308-b93f-18fabdbe7c35","option":"General data protection legislation","sequence":1,"attributes":null,"hint":"i.e. comprehensive and universal privacy laws, similar to the EU General Data Protection Regulation","optionType":"DEFAULT","optionKey":null},{"id":"4a70daaf-72d3-4d02-8a99-a68a442285b1","option":"Sectoral legislation","sequence":2,"attributes":null,"hint":"i.e. specific to certain sectors, such as health, finance, etc.","optionType":"DEFAULT","optionKey":null},{"id":"a138ee1a-319a-464f-b9f6-d68ea6de53b8","option":"Professional rules","sequence":3,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"0a753b2b-5e3b-4a5d-8ce3-c9842946b045","option":"Security legislation","sequence":4,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"633bf7bb-bf84-44b7-ae88-e44b9835725a","option":"Relevant case-law","sequence":5,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"b301be95-b7fb-41ee-91ff-f807806abb1d","option":"NotSure","sequence":6,"attributes":null,"hint":null,"optionType":"NOT_SURE","optionKey":null},{"id":"896b195b-99ce-4376-a266-37bf7675802f","option":"Other","sequence":7,"attributes":null,"hint":null,"optionType":"OTHERS","optionKey":null}],"required":false,"attributes":"{\"isQuestionHintEnabled\":true,\"allowLaws\":true,\"requireJustification\":false,\"optionHintEnabled\":true,\"allowOther\":true,\"isMultiSelect\":true,\"allowJustification\":true}","friendlyName":"Relevant legislation","description":"<p>Please identify the relevant laws and describe their implementation. Include links to official texts.</p>","hint":"Article 45(2)(a) of the GDPR.","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"rootVersionId":"e7127ab4-7abd-4520-996a-dac3c64974b5","sequence":7},{"id":"c65a9cde-8556-4a44-88dc-628932396361","content":"Rate the third country's overall data protection system taking into consideration the following basic data protection concepts and/or principles","questionType":"MULTICHOICE","options":[{"id":"68344b3d-fc68-40eb-8ece-21980b780389","option":"Weak","sequence":1,"attributes":null,"hint":"","optionType":"DEFAULT","optionKey":null},{"id":"60a6b9fc-e304-4ebc-bfe9-724a8724ea11","option":"Average","sequence":2,"attributes":null,"hint":"","optionType":"DEFAULT","optionKey":null},{"id":"e2be9607-374b-4ad0-8841-7832fac6a9b4","option":"Strong","sequence":3,"attributes":null,"hint":"","optionType":"DEFAULT","optionKey":null},{"id":"72f197fa-5019-4f9a-8601-8ef440f2a192","option":"NotSure","sequence":4,"attributes":null,"hint":null,"optionType":"NOT_SURE","optionKey":null}],"required":false,"attributes":"{\"isQuestionHintEnabled\":true,\"allowLaws\":false,\"requireJustification\":false,\"optionHintEnabled\":false,\"allowOther\":false,\"isMultiSelect\":false,\"allowJustification\":true}","friendlyName":"Privacy concepts and principles","description":"<ul><li><strong>Basic data protection principles</strong></li><li><strong>Lawful and fair processing rules:</strong>for example, provisions requiring data to be processed fairly and based on specific legal bases</li><li><strong>Purpose limitation principles:</strong>for example, provisions requiring data to be processed based on a specific purpose</li><li><strong>Data quality principles:</strong>for example, provisions requiring data to be accurate and kept up to date</li><li><strong>Data retention principles:</strong>for example, provisions requiring data to be kept no longer than what is necessary</li><li><strong>Security and confidentiality principles:</strong>for example, provisions relating to data breaches and confidentiality</li><li><strong>Transparency principles:</strong>for example, provisions requiring controllers to inform data subjects of processing activities</li><li><strong>Right of the data subjects:</strong>for example, provisions allowing data subjects to access, rectify or erase personal data</li><li><strong>Restrictions on onward transfers:</strong>for example, provisions restricting data transfers to third parties</li></ul><p><br></p>","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"rootVersionId":"4e6052cc-f192-4138-bb52-b5d14ac57c06","sequence":8},{"id":"e1b2cbca-8054-4ffa-8284-a3f92075479b","content":"Is there an independent supervisory authority able to ensure and enforce data protection rules?","questionType":"YESNO","options":[{"id":"95b66494-cc59-467d-aa6c-4c28dcd4575c","option":"Yes","sequence":1,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"fa57f4e2-2ccb-404d-acd3-9671310f08d7","option":"No","sequence":2,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"f789cd9f-15f3-426b-a0a2-092c1524f50a","option":"NotSure","sequence":3,"attributes":null,"hint":null,"optionType":"NOT_SURE","optionKey":null}],"required":false,"attributes":"{\"isQuestionHintEnabled\":true,\"allowLaws\":false,\"allowJustification\":true,\"requireJustification\":false}","friendlyName":"Independent supervisory authority","description":"<p>Please identify these authorities. The authority must possess adequate enforcement powers and independence. </p>","hint":"Article 45(2)(b) of the GDPR.","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"rootVersionId":"f9d92447-b183-42a8-9e83-ce9111f276a3","sequence":9},{"id":"7b6c2be0-a184-469b-980c-f3cbf1653ae8","content":"The third country has international commitments or other obligations arising from legally binding conventions or instruments, as well as from its participation in multilateral or regional systems, related to personal data protection.","questionType":"YESNO","options":[{"id":"a96e6bf6-6a3a-453b-9ed0-74f9c43c8c9e","option":"Yes","sequence":1,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"41b1ffd3-5899-40c6-98db-da24b393bfa1","option":"No","sequence":2,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null}],"required":false,"attributes":"{\"isQuestionHintEnabled\":true,\"allowLaws\":false,\"allowJustification\":true,\"requireJustification\":false}","friendlyName":"International commitments/obligations","description":"<p>Please explain any commitments/obligations.</p><p><br></p><p>For example, determine whether the third country has signed and ratified the <a href=\"https://www.coe.int/en/web/conventions/full-list/-/conventions/treaty/108\"rel=\"noopener noreferrer\"target=\"_blank\">Council of Europe Convention of 28 January 1981 for the Protection of Individuals with regard to the Automatic Processing of Personal Data</a> (i.e., Convention 108) and its <a href=\"https://www.coe.int/en/web/conventions/full-list/-/conventions/treaty/181\"rel=\"noopener noreferrer\"target=\"_blank\">Additional Protocol</a>.</p>","hint":"Article 45(2)(c) of the GDPR.","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"rootVersionId":"5d0b4512-7df2-434d-bfe5-be0ba8370ae5","sequence":10},{"id":"2676127c-01a9-41e7-ac6a-496d029f90e7","content":"The third country has public security, defence, national security, and/or criminal laws to which the transfer might be subject and that enable public authorities or law enforcement to access the transferred personal data.","questionType":"YESNO","options":[{"id":"4db48c99-00e4-4893-b745-502a23cec980","option":"Yes","sequence":1,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"7d5ce03f-65f4-4025-b0bf-fdf5eb9fabaf","option":"No","sequence":2,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"0221b2a0-285c-452a-b7bb-51e71a1dc957","option":"NotSure","sequence":3,"attributes":null,"hint":null,"optionType":"NOT_SURE","optionKey":null}],"required":false,"attributes":"{\"isQuestionHintEnabled\":true,\"allowLaws\":false,\"allowJustification\":true,\"requireJustification\":false}","friendlyName":"Problematic legislation to which the transfer might be subject","description":"<p>In other words, the third country's national security laws apply to the transfers to you (e.g., via electronic or digital means) that fall under the scope of that legislation (i.e., are you, along with the data transfers, explicitly subject to the national security laws).</p><p><br></p><p>Please explain the country's legislation concerning public security, defence, and national security, as well as public order and criminal law.</p>","hint":"Article 45(2)(a) of the GDPR.","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"rootVersionId":"b13c20e5-5c44-4623-8c35-e0e03f14d9d8","sequence":11},{"id":"437d57bc-8f4a-4304-9425-f5800a0cdcf2","content":"EDPB EEG Guidance","questionType":"STATEMENT","required":false,"attributes":"{\"isQuestionHintEnabled\":false,\"allowLaws\":false}","description":"<p><br></p><p>The EDPB's <a href=\"https://edpb.europa.eu/sites/edpb/files/files/file1/edpb_recommendations_202002_europeanessentialguaranteessurveillance_en.pdf\"rel=\"noopener noreferrer\"target=\"_blank\">European Essential Guarantees (EEG)</a>:</p><p><br></p><ul><li>Processing should be based on clear, precise and accessible rules</li><li>Necessity and proportionality with regard to the legitimate objectives pursued need to be demonstrated</li><li>An independent oversight mechanism should exist</li><li>Effective remedies need to be available to the individual</li></ul><p><br></p><p>The EDPB European Essential Guarantees (EEG) recommendations provide clarifications on the elements which have to be assessed to determine whether the legal framework governing access to personal data by public authorities in a third country, being national security agencies or law enforcement authorities, can be regarded as a justifiable interference or not. In particular, this should be carefully considered when the legislation governing the access to data by public authorities is ambiguous or not publicly available.</p><p><br></p><p>Applied to the situation of data transfers based on Article 46 transfer tools, the EDPB European Essential Guarantees recommendations can guide the data exporter in assessing whether such powers unjustifiably interfere with the data exporter and importer’s obligations to ensure essential equivalence pursuant to the GDPR or the commitments contained in the transfer tool. The lack of an essentially equivalent level of protection will be especially evident where the legislation and/or practices of the third country relevant to your transfer do not meet the requirements of the European Essential Guarantees. The EDPB reiterates that the European Essential Guarantees are a referential standard when assessing the interference entailed by third-country surveillance measures in the context of international data transfers. These standards stem from EU law and the jurisprudence of the CJEU and the ECtHR, which is binding on EU Member States.</p><p><br></p><p>Your assessment must be based first and foremost on legislation publicly available. Examining also the practices of the third country’s public authorities will allow you to verify if the safeguards contained in the Article 46 GDPR transfer tool can be a sufficient means of ensuring, in practice, the effective protection of the personal data transferred.</p>","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"rootVersionId":"50976a9b-9b08-48e0-a3db-6ee9ba1261a1","sequence":12},{"id":"8a95c4bd-52b2-4cab-87fe-59fe268ea6b7","content":"Please indicate whether domestic legislation ensures clear, precise and accessible rules when interfering with individuals' privacy by taking into account the following aspects","questionType":"YESNO","options":[{"id":"8bd5765f-5c84-4198-ba5f-f895713ce31b","option":"Yes","sequence":1,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"b5fb3e24-1251-4dab-a20a-4f16c7e5b377","option":"No","sequence":2,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"5ca6732b-552b-40ce-90ce-784c68777ed8","option":"NotSure","sequence":3,"attributes":null,"hint":null,"optionType":"NOT_SURE","optionKey":null}],"required":false,"attributes":"{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"requireJustification\":false,\"allowJustification\":true}","friendlyName":"EEG A - Processing should be based on clear, precise and accessible rules","description":"<p>You should make sure that all the following aspects are taken into account</p><p><br></p><ul><li><strong>Clear, precise and accessible legal bases/purposes to access information</strong>:for example, the law requires specific conditions and legal bases to intercept communications or require data to be handled to public authorities</li><li><strong>Limits on retention of information:</strong>for example, the law forbids storage of information over a certain time limit</li><li><strong>Clear indication of categories of individuals that might be subject to surveillance </strong></li></ul>","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"rootVersionId":"b3b5de76-5939-40b8-8d19-96cc89a4dd5d","sequence":13},{"id":"1d96fd4d-293f-497b-a337-7ab3ce8c4947","content":"Indicate whether legislation ensures that the principles of necessity and proportionality are complied with","questionType":"YESNO","options":[{"id":"3dcc7550-bd72-4e73-9928-5bf46b8651fd","option":"Yes","sequence":1,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"d878ac70-11bf-477c-84e4-12bdad0cc575","option":"No","sequence":2,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"d881997d-30bb-4efc-b0e8-69d5c5cc5f7c","option":"NotSure","sequence":3,"attributes":null,"hint":null,"optionType":"NOT_SURE","optionKey":null}],"required":false,"attributes":"{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"requireJustification\":false,\"allowJustification\":true}","friendlyName":"EEG B - Necessity and proportionality","description":"<p>You should make sure that all the following aspects are taken into account</p><p><br></p><ul><li><strong>The seriousness of any interference with privacy rights is proportionate to the importance of the public interest objective:</strong>for example, the law should define the scope and limitations of the interference based on the public aim</li><li><strong>The limitations provided by law should be necessary in order to achieve the public interest:</strong>for example, a general authorization to retain all electronic communications wouldn't be compliant with this guarantee </li></ul>","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"rootVersionId":"3cb74c25-bd81-464b-bd6f-d93ffe121d46","sequence":14},{"id":"8749807b-e8a6-4499-8b3f-1ce1a23c09d4","content":"Indicate whether the legislation ensures that an independent oversight system exists","questionType":"YESNO","options":[{"id":"26e386f4-05dd-450b-914f-268e1c56434d","option":"Yes","sequence":1,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"8841eb10-ec1d-431a-8f51-9d5be480e5c2","option":"No","sequence":2,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"a0e16fdf-79b3-41c3-b262-02153d97b183","option":"NotSure","sequence":3,"attributes":null,"hint":null,"optionType":"NOT_SURE","optionKey":null}],"required":false,"attributes":"{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"requireJustification\":false,\"allowJustification\":true}","friendlyName":"EEG C - Independent oversight mechanism","description":"<p>Any interference with the right to privacy and data protection should be subject to an effective, independent and impartial oversight system provided by a judge or other independent body (such as an administrative authority or parliamentary body).</p><p><br></p><p>In evaluating the effectiveness and independence of the aforementioned body, you should take into account the following aspects:</p><p><br></p><ul><li>measures for effective reviews;</li><li>openness to public scrutiny;</li><li>manner of appointment; and</li><li>legal status.</li></ul><p><br></p>","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"rootVersionId":"251b6017-4b81-4cdb-9f2e-a7dc57738dc3","sequence":15},{"id":"c0de1bc1-c2cf-48fd-b826-06142ba6783d","content":"Indicate whether the law makes effective legal remedies available to the individual","questionType":"YESNO","options":[{"id":"f7f6f643-8f1c-4f85-bcb4-c54518691abd","option":"Yes","sequence":1,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"3b8f7d98-b024-42ca-9de2-1d268692fd6b","option":"No","sequence":2,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"59d1c21d-f2d1-45dc-a9ab-8715aaa468f5","option":"NotSure","sequence":3,"attributes":null,"hint":null,"optionType":"NOT_SURE","optionKey":null}],"required":false,"attributes":"{\"isQuestionHintEnabled\":false,\"requireJustification\":false,\"allowLaws\":true,\"allowJustification\":true}","friendlyName":"EEG D - Effective remedies available to the individual","description":"<p>Individuals should have effective remedies to satisfy their rights when they consider that they are not or have not been respected. Please take into account the following aspects when considering this guarantee:</p><p><br></p><ul><li><strong>Individuals are notified of surveillance measures or provided with equally effective remedies</strong></li><li><strong>Courts providing redress mechanisms are independent and impartial, adopt rules of procedures, include members that held judicial offices or experienced lawyers, have access to all relevant information and powers to remedy non-compliance. </strong></li><li><strong>There is no evidential burden to overcome in order to lodge an application with the courts</strong></li></ul><p><br></p><p>The same level of protection can be provided by non-judicial bodies, as long as they offer equal guarantees. </p>","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"rootVersionId":"5b8a69e3-d785-48f6-9ede-a4caca32264f","sequence":16},{"id":"4bfe55e4-7928-47da-8a1c-e496688e91ee","content":"Government access to personal information for national security and law enforcement purposes","questionType":"YESNO","options":[{"id":"24706e40-212b-44cd-8a6a-4812badf7e15","option":"Yes","sequence":1,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"f3998414-4997-46d6-8b11-0ed03ad39aad","option":"No","sequence":2,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"d264f8d8-9197-4623-97ba-c862e07f4df7","option":"NotSure","sequence":3,"attributes":null,"hint":null,"optionType":"NOT_SURE","optionKey":null}],"required":false,"attributes":"{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"allowJustification\":true,\"requireJustification\":false}","friendlyName":"Government access to personal information","description":"<p>Please indicate if the government access to personal information <strong>is consistent with democratic values and the rule of law</strong>. This is based on the <a href=\"https://legalinstruments.oecd.org/en/instruments/OECD-LEGAL-0487\"rel=\"noopener noreferrer\"target=\"_blank\">OECD Declaration on Government Access to Instruments Personal Data held by Private Sector Entities</a>.</p><p><br></p><p>You can take into account the following elements:</p><ul><li class=\"ql-align-justify\">Government access supports the pursuit of specified and legitimate aims. Governments do not seek access to personal data for the purpose of suppressing or burdening criticism or dissent; or disadvantaging persons or groups solely on the basis of characteristics including, but not limited to:age, mental or physical disability, ethnicity, indigenous status, gender identity or expression, sexual orientation, or political or religious affiliation.</li><li>Prior approval requirements for government access are established in the third country legal framework</li><li>The legal framework for government access is clear and easily accessible to the public</li><li>There are effective and impartial oversight to ensure that government access complies with the legal framework.</li><li>The legal framework provides individuals with effective judicial and non-judicial redress to identify and remedy violations of the national legal framework.</li></ul>","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"rootVersionId":"68c8050b-dea4-4a0a-a6cd-fb28f2a2d8c8","sequence":17},{"id":"ccb9373b-7ff0-4651-956c-9de1709254bf","content":"Based on your responses in the previous sections, does the Third Country provide an essentially equivalent level of data protection as guaranteed by the GDPR in light of the EU Charter of Fundamental Rights?","questionType":"YESNO","options":[{"id":"fdb288bd-1d21-44dc-87db-ebd5d2ef029e","option":"Yes","sequence":1,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"32a1c666-2967-4778-a900-d57f549e4187","option":"No","sequence":2,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"660a89da-1913-4171-ae6d-f0f62764bc8b","option":"NotSure","sequence":3,"attributes":null,"hint":null,"optionType":"NOT_SURE","optionKey":null}],"required":true,"attributes":"{\"isQuestionHintEnabled\":false,\"allowLaws\":false,\"allowJustification\":true,\"requireJustification\":false}","friendlyName":"Essential Equivalence Evaluation","description":"<p>You should answer <strong>Yes </strong>only if you have verified that</p><ol><li>Legislation in the third country meets EU standards both formally and substantially</li><li>There are no practices incompatible with the commitments of the transfer tool</li><li>Your transfer does not fall under the scope of problematic legislation that would allow access to data by public authorities without meeting EU standards</li></ol><p><br></p><p>Next Step:</p><ul><li>If you select <strong><u>Yes</u></strong>, the Supplementary Measures evaluation section is optional. </li><li>If you select <strong><u>No</u></strong>, in order to proceed further you need to evaluate the adoption of Supplementary Measures.</li></ul><p><br></p><p>---</p><p><br></p><p><strong>EDPB Supplementary Measures Recommendations</strong></p><p><br></p><ul><li><u>Relevant legislation in the third country may formally meet EU standards on fundamental rights and freedoms and the necessity and proportionality of restrictions thereto.</u></li><li class=\"ql-indent-1\">However, the practices of its public authorities (e.g. accessing personal data held by the private sector or when enforcing -or not- legislation as supervisory or judicial bodies) may clearly indicate that they do not normally apply/comply with the legislation that governs, in principle, their activities. In this case, you must take these practices into account in your assessment and consider that the Article 46 GDPR tool will not be able to effectively ensure, by itself (i.e. without supplementary measures), an essentially equivalent level of protection. In such case, if you wish to proceed with the transfer, you will have to implement adequate supplementary measures.</li></ul><p><br></p><ul><li><u>Relevant legislation in the third country (e.g. on access to personal data held by the private sector) may be lacking.</u></li><li class=\"ql-indent-1\">In this case you cannot automatically infer from this absence of relevant legislation that your Article 46 GDPR transfer tool can be effectively applied. You will have to check if there are indications of practices in force in the country that are incompatible with EU law and the commitments of the Article 46 GDPR transfer tool. If there are incompatible practices, the Article 46 GDPR transfer tool will not be able to effectively ensure, by itself (i.e. without adequate supplementary measures), an essentially equivalent level of protection. In such case, if you wish to proceed with the transfer, you will have to implement adequate supplementary measures.</li></ul><p><br></p><ul><li><u>The assessment may reveal that relevant legislation in the third country may be problematic and that the transferred data and/or the importer at hand fall or might fall within the scope of this problematic legislation.</u></li><li class=\"ql-indent-1\">‘Problematic legislation’ is understood as legislation that 1) imposes on the recipient of personal data from the European Union obligations and/or affect the data transferred in a manner that may impinge on the transfer tools’ contractual guarantee of an essentially equivalent level of protection and 2) does not respect the essence of the fundamental rights and freedoms recognised by the EU Charter of Fundamental Rights or exceeds what is necessary and proportionate in a democratic society to safeguard one of the important objectives as also recognised in Union or EU Member States’ law, such as those listed in Article 23 (1) GDPR.</li></ul>","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"rootVersionId":"ccb48f08-5355-4c5d-a05b-eb7ad3c622b9","sequence":18}]},{"name":"Re-Evaluation Procedures","invalidQuestionCount":0,"id":"c1a12c92-8acd-42de-a6c3-7f43cc76f85a","rootVersionId":"5fd23b8d-c103-4828-b918-f33866895dd8","sequence":4,"questions":[{"id":"a089af6d-0f7c-48fa-9aec-8aab693204b3","content":"Do you have documented policies and procedures to monitor, on an ongoing basis, and where appropriate in collaboration with the data importer, developments in the third country that could affect your initial assessment of the level of protection and the decisions you may have taken for your transfers?","questionType":"YESNO","options":[{"id":"832f28d6-5969-4a8e-aa85-b4842c7cd6ed","option":"Yes","sequence":1,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"8c1904e8-8de6-40dd-a9fe-e3f956f7e984","option":"No","sequence":2,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"b22afee7-000a-4d74-845d-bfe44a51c12d","option":"NotSure","sequence":3,"attributes":null,"hint":null,"optionType":"NOT_SURE","optionKey":null}],"required":false,"attributes":"{\"isQuestionHintEnabled\":false,\"allowLaws\":false,\"allowJustification\":true,\"requireJustification\":false}","friendlyName":"Re-Evaluation Procedures","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"rootVersionId":"797de92c-da1c-46a3-95fc-681c5776d3ee","sequence":1},{"id":"54c22bcd-a459-4b2a-bb77-bef138441b3d","content":"Do you have sufficiently sound mechanisms in place to ensure that you promptly suspend or end transfers where the data importer has breached or is unable to honour the commitments it has taken in the Article 46 GDPR transfer tool?","questionType":"YESNO","options":[{"id":"ba68331e-628d-411d-8960-3b373fe2a6ed","option":"Yes","sequence":1,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"54fb81a0-325b-4592-b359-8c010f2cd704","option":"No","sequence":2,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"2378ceb8-0a26-4326-a48a-c778b6b93697","option":"NotSure","sequence":3,"attributes":null,"hint":null,"optionType":"NOT_SURE","optionKey":null}],"required":false,"attributes":"{\"isQuestionHintEnabled\":false,\"requireJustification\":false,\"allowLaws\":false,\"allowJustification\":true}","friendlyName":"Transfer suspension - Importer Breach","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"rootVersionId":"481a2ba8-1203-417e-a302-0a7857d25751","sequence":2}]},{"name":"Supplementary Measures Evaluation","invalidQuestionCount":0,"id":"a7e15759-7464-4282-bdd6-49d825dd1224","rootVersionId":"f1e0635b-104e-4b8f-be4e-9e25c004a206","sequence":5,"questions":[{"id":"331c2403-0899-4c3a-ade3-d74b7bc66835","content":"Are data to be transferred encrypted at rest?","questionType":"YESNO","options":[{"id":"56a2c69c-fd7a-422e-aa5c-d145beefba1a","option":"Yes","sequence":1,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null,"translationIdentifier":"8bc0073d-ecb3-4a57-af47-807c34b1adf2"},{"id":"1c5a2dce-4849-406a-805a-e906492a9cca","option":"No","sequence":2,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null,"translationIdentifier":"c05afa67-27ff-4cf7-820a-735583474615"},{"id":"4b980a03-040c-4247-864b-5509aea8d489","option":"NotApplicable","sequence":3,"attributes":null,"hint":null,"optionType":"NOT_APPLICABLE","optionKey":null}],"required":false,"attributes":"{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"requireJustification\":false,\"allowJustification\":true}","friendlyName":"Encryption at-rest","description":"<p>It is a best practice to encrypt data before sharing it with third parties. </p><p>If no, please justify your answer</p>","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"translationIdentifier":"03766654-3c1b-49b0-9ef3-6450c61cd657","rootVersionId":"26a0c4d3-3352-4ee4-944e-37698a020bec","sequence":1},{"id":"8859e842-ce09-49c5-98ca-f282de4a31e5","content":"Is any further encryption type applicable (in transit, E2EE, homomorphic etc.)?","questionType":"MULTICHOICE","options":[{"id":"84c83cc2-3475-4f2b-a843-0dfec4467fe0","option":"In-Transit Encryption","sequence":1,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null,"translationIdentifier":"fb8ceb2e-1397-41a5-9fe1-d8442dd225cc"},{"id":"8830f9df-875d-42bc-b3fb-24149a051939","option":"End-to-end Encryption (E2EE)","sequence":2,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null,"translationIdentifier":"bbb22426-d2fa-4ef5-b7ec-d40577e6eaef"},{"id":"15422c61-cee5-4b48-916a-5a4ed140ed74","option":"Homomorphic Encryption","sequence":3,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null,"translationIdentifier":"a1cbecd6-219f-42bd-a66f-52390d2d91eb"},{"id":"99a9c3b7-be52-4098-9de2-37cd83e0b48c","option":"Other","sequence":4,"attributes":null,"hint":null,"optionType":"OTHERS","optionKey":null},{"id":"7606ee1b-fcec-4ddc-a569-45ed5e3c7d67","option":"NotApplicable","sequence":5,"attributes":null,"hint":null,"optionType":"NOT_APPLICABLE","optionKey":null}],"required":false,"attributes":"{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"isMultiSelect\":true,\"requireJustification\":false,\"allowJustification\":true,\"allowOther\":true}","friendlyName":"Other Encryption Forms","description":"<p>Other forms of encryption shall be advisable based on the circumstantial factors of the transfer. </p><ul><li>It is strongly recommended to adopt <strong>in-transit encryption</strong> to prevent access during personal information transfer.</li><li>Where applicable, <strong>end-to-end encryption (E2EE) </strong>shall also be a golden standard for preventing unauthorised access to personal data.</li><li><strong>Homomorphic encryption </strong>is a form of encryption that permits users to perform computations on its encrypted data without first decrypting it.</li></ul><p><br></p><p>Where applicable, please also specify the suitable protocol or algorithm.</p>","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"translationIdentifier":"7bc63077-3cd6-4cd9-a435-8f09582a9287","rootVersionId":"177b742e-62d7-48af-a777-bcfe58337a91","sequence":2},{"id":"eb3346d1-c3fe-4a14-a305-1a2df69835ca","content":"Does your organisation, as a data exporter, have exclusive access to encryption keys?","questionType":"YESNO","options":[{"id":"6316572f-6db4-404a-8556-533c53782b44","option":"Yes","sequence":1,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null,"translationIdentifier":"51cfc5e3-89db-4f50-94e9-c7630f0de577"},{"id":"66d44f2d-000d-4cb9-b880-ec794a182c14","option":"No","sequence":2,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null,"translationIdentifier":"48c2d2e0-a65c-4d3c-9fc3-016a40c8d4ea"},{"id":"d1a19f5c-b1ef-431a-a60d-add8d80c5430","option":"NotApplicable","sequence":3,"attributes":null,"hint":null,"optionType":"NOT_APPLICABLE","optionKey":null}],"required":false,"attributes":"{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"requireJustification\":false}","friendlyName":"Data Importer-Managed Keys","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"translationIdentifier":"0b068079-eae9-4061-b19f-ecc6618c49cf","rootVersionId":"7f7bc6b7-384f-4396-8d64-b7d17bf18111","sequence":3},{"id":"06d8a19c-1710-4a75-b013-fd6c9d084d68","content":"Do you intend to transfer pseudonymized data?","questionType":"YESNO","options":[{"id":"9801f07d-e5f7-4e53-afbc-499c1e80cd04","option":"Yes","sequence":1,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"45b0f740-1481-410f-ad4b-6e92699a9bd2","option":"No","sequence":2,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"d3737c06-e7b3-4a8b-a9c6-15c75d7e5afd","option":"NotSure","sequence":3,"attributes":null,"hint":null,"optionType":"NOT_SURE","optionKey":null}],"required":false,"attributes":"{\"isQuestionHintEnabled\":false,\"allowLaws\":false,\"requireJustification\":false,\"allowJustification\":true}","friendlyName":"Pseudonymized data","description":"<p>You might need to re-identify the personal data you transferred, for example for research purposes. In this case, you need to implement specific pseudonymization measures that block the data importer from identifying the individuals to which the data refer. </p><p><br></p>","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"rootVersionId":"fc3a7cf3-ccba-4a21-89cd-509f7b24d86a","sequence":4},{"id":"cad81b20-54dd-4da8-b751-310d9f2ff712","content":"Are you transferring data to an importer that is specifically protected in the destination country in such a way to prevent access from public authorities?","questionType":"MULTICHOICE","options":[{"id":"55a2b9e6-81bc-4f2d-8015-fddcd11d09ea","option":"Yes, all my data is protected by this exception and is being transferred to a protected recipient","sequence":1,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"3ceb461c-b6f9-4f49-b92b-3df81ae9e5ff","option":"Yes, but not all of the data isprotected by this exception","sequence":2,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"b9dcd0bb-6082-4758-802e-9223572439f2","option":"NotSure","sequence":3,"attributes":null,"hint":null,"optionType":"NOT_SURE","optionKey":null},{"id":"b75c9f55-1652-427c-a0c6-2df1ac216933","option":"NotApplicable","sequence":4,"attributes":null,"hint":null,"optionType":"NOT_APPLICABLE","optionKey":null}],"required":false,"attributes":"{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"requireJustification\":false,\"isMultiSelect\":false,\"displayAnswerType\":\"dropdown\"}","friendlyName":"Protected recipient","description":"<p>For example, the law protects the recipient with formal and substantial guarantees because it provides medical or legal services. </p>","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"rootVersionId":"5ae166dc-044e-48c0-856f-226489fc4d72","sequence":5},{"id":"024e01b5-2f91-44e3-a6e7-d530d211e06c","content":"Can you split the data between two or more importer in different jurisdictions, so that each of them is unable individually to reconstruct the personal data and single-out the data subjects?","questionType":"YESNO","options":[{"id":"74e5dcf4-e5bc-4a44-b9e2-4c5b856efba4","option":"Yes","sequence":1,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"642e0c3f-4954-476e-9850-706fa2d4432d","option":"No","sequence":2,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"28bc0d71-20a1-42a2-a804-1237118f26b6","option":"NotSure","sequence":3,"attributes":null,"hint":null,"optionType":"NOT_SURE","optionKey":null}],"required":false,"attributes":"{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"requireJustification\":false,\"allowJustification\":true}","friendlyName":"Split or multi-party processing","description":"<p>This way of transferring data consists in splitting personal data into two or more parts each of which cannot be used to to identify a specific data subject, without the use of the other or of additional information.</p><p>The importers must be in different jurisdictions. </p>","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"rootVersionId":"e11f751b-0260-4a78-a60b-4501386b5ed8","sequence":6},{"id":"c03ea6b5-fa68-4e84-a071-cba7b6f14e69","content":"Can the data importer need to access personal data in clear?","questionType":"YESNO","options":[{"id":"c5006f6d-b294-4e5b-a02f-071e5b8e0df4","option":"Yes","sequence":1,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"1b7caef9-3761-4f6d-8c92-6b57def3ebe0","option":"No","sequence":2,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null},{"id":"896c3c3e-ce15-460f-b26f-53cc30da907c","option":"NotSure","sequence":3,"attributes":null,"hint":null,"optionType":"NOT_SURE","optionKey":null}],"required":false,"attributes":"{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"requireJustification\":false,\"allowJustification\":true}","friendlyName":"Access in clear from data importer","description":"<p>For example, does the data importer needs to access data in clear because technically necessary for the provision of a service? If yes, it should be noted that <u>the EDPB considers this scenario as high-risk for the data subject's fundamental rights.</u></p><p><br></p><p>[\"<em>In the given scenarios, where unencrypted personal data is technically necessary for the provision of the service by the processor, transport encryption and data-at-rest encryption even taken together, do not constitute a supplementary measure that ensures an essentially equivalent level of protection if the data importer is in possession of the cryptographic keys\"- </em>EDPB, Use Case 6 Transfer to cloud services providers or other processors which require access to data in the clear, Recommendations 01/2020]</p>","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"rootVersionId":"4bc598d3-3dd4-4647-85e8-f707a6440f01","sequence":7},{"id":"3da1c5b1-da0e-43b3-a929-3ede736001ff","content":"What controls are already in place to safeguard this transfer?","questionType":"ASSESS_CONTROL","required":false,"attributes":"{\"isQuestionHintEnabled\":false,\"isMultiSelect\":true,\"allowLaws\":true,\"requireJustification\":false}","friendlyName":"Additional Controls in place","description":"<p>Select the relevant implemented controls that contribute to mitigating personal data processing in the context of cross-border transfer.</p><p>These measures may consist of</p><ul><li><u>Technical Security Safeguards</u></li><li><u>Organizational Controls</u></li><li><u>Contractual Commitments and Obligations</u></li></ul><p><br></p><p>Please attach supporting evidence where possible.</p>","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":true,"readOnly":false,"translationIdentifier":"28a0b3a1-ba21-47fa-9347-0e0bf7156c85","rootVersionId":"2eff8bf0-88e3-4867-9d46-6b184dfdb941","sequence":8},{"id":"c08c70cb-8f5a-46c5-9852-e8ee101d6a63","content":"Based on this section, do the supplementary measures deployed or recommended grant effectiveness in protecting the transfer?","questionType":"YESNO","options":[{"id":"1255e9fd-2130-47e6-9515-6387713a7c34","option":"Yes","sequence":1,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null,"translationIdentifier":"171f2d26-d1cf-4707-a2bc-c352c0a20a71"},{"id":"2126cd49-1b8e-4eb1-bd07-aeb35124ecab","option":"No","sequence":2,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null,"translationIdentifier":"d7f82cc8-857b-4f34-9b46-6d4edeadfde6"}],"required":true,"attributes":"{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"requireJustification\":true,\"allowJustification\":true}","friendlyName":"Supplementary Measures Effectiveness","description":"<p>Please determine whether the supplementary measures selected in this section are sufficiently robust in protecting data in the Third Country.</p><p>If unsure, please refer to the EDPB guidance:</p><p><a href=\"https://edpb.europa.eu/system/files/2021-06/edpb_recommendations_202001vo.2.0_supplementarymeasurestransferstools_en.pdf\"rel=\"noopener noreferrer\"target=\"_blank\">Recommendations 01/2020 on measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data</a></p><p><br></p><p><u>Note</u>:According to some Data Protection Authorities, a risk-based approach is not advisable for performing a TIA. Therefore, if the Third Country presents any risk of undermining data protection with regard to the transfer, the abovementioned measures might not be enough to mitigate them.</p>","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"translationIdentifier":"f1ad97f6-9b77-4e3b-944e-0aec3b028ae5","rootVersionId":"cc38f196-98cd-4317-8df2-1cf338addd35","sequence":9}]},{"name":"Transfer Impact Assessment Result","invalidQuestionCount":0,"id":"00f7a3b3-8515-40d6-8b87-92ef8c3cb422","rootVersionId":"5213f662-7a59-4c7a-b252-6cc0a7a0f7d8","sequence":6,"questions":[{"id":"dd388747-13de-467c-95a9-c1a288e1fdf7","content":"Based on your previous answers, this transfer can be deemed safe [EEA/Adequacy Decision]","questionType":"STATEMENT","required":false,"attributes":"{\"isQuestionHintEnabled\":false,\"allowLaws\":true}","description":"<p>You are transferring data to a country inside the European Economic Area or covered by the European Commission Adequacy Decision (complete list <a href=\"https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en\"rel=\"noopener noreferrer\"target=\"_blank\">here</a>).</p><p><br></p><p>Therefore, your transfer shall be considered safe.</p>","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"translationIdentifier":"78f75076-9a55-47a2-989c-2bee66c06b23","rootVersionId":"ad709a77-d05d-4733-897f-64f519224687","sequence":1},{"id":"b2593951-626f-4826-827e-b6483f54230c","content":"Based on your previous answers, this transfer can be deemed safe [Essential equivalence]","questionType":"STATEMENT","required":false,"attributes":"{\"isQuestionHintEnabled\":false,\"allowLaws\":true}","description":"<p>Based on your assessment:</p><ul><li>The country of the data importer <strong>is deemed to grant an equivalent level of protection to that of the GDPR</strong>, and no problematic legislation applies to the transfer.</li><li>To comply with Chapter V of GDPR, you shall rely on a <strong>cross-border transfer tool </strong>(Article 46.2 GDPR);</li><li><strong>s<u>upplementary measures are recommended but not mandatory</u></strong> since the Third Country does not encompass any significant intrinsic risks, with a view on its legal framework.</li></ul><p><br></p><p><u>Note</u>:this is a subjective response based on your previous answers; if you have any doubts about the equivalency level, please consider reassessing sections 2 and 3.</p>","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"rootVersionId":"e45d9f31-0fda-4ab4-8e0f-69a0baf70d3a","sequence":2},{"id":"9cf1d7a3-c309-4e77-8ad8-c39589d8ba0d","content":"Based on your previous answers, this transfer can be deemed safe [Supplementary measures]","questionType":"STATEMENT","required":false,"attributes":"{\"isQuestionHintEnabled\":false,\"allowLaws\":true}","description":"<p>Based on your assessment:</p><ul><li>The data importer's country does not grant an <strong>equivalent level of protection to that of the GDPR</strong>,</li><li>To comply with Chapter V of GDPR, you shall rely on a <strong><u>cross-border transfer tool </u></strong>(Article 46.2 GDPR); </li><li><strong><u>Supplementary measures are required </u></strong>since the transfer tool is insufficient to address concerns raised by personal data transfer.</li></ul>","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"translationIdentifier":"b4a446bf-ebc1-46b2-9e07-d4d9d0080246","rootVersionId":"09ef5733-764a-47f6-b5ef-248180807c1a","sequence":3},{"id":"3312e036-9db6-4047-9422-3573e59757ed","content":"Based on your previous answers, this transfer can be deemed safe [Derogation, article 49 GDPR]","questionType":"STATEMENT","required":false,"attributes":"{\"isQuestionHintEnabled\":false,\"allowLaws\":true}","description":"<p>Because you are transferring personal data to a country while relying on specific derogations, you don't need to perform any more assessments on the transfer. </p><p>Please consider reviewing this outcome if any of the conditions change.</p>","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"rootVersionId":"11c6c277-3cd6-48d3-b72a-6818141c3aa0","sequence":4},{"id":"d1a329c7-76bf-4e76-8e4b-d0873b0f4864","content":"Based on your previous answers, this transfer can be deemed unsafe","questionType":"STATEMENT","required":false,"attributes":"{\"isQuestionHintEnabled\":false,\"allowLaws\":true}","description":"<p>Based on your assessment:</p><ul><li>The data importer's country does not grant an equivalent level of protection to that of the GDPR,</li><li>Even if combined with supplementary measures, a cross-border transfer tool cannot mitigate the risks posed by the transfer to the Data Importer in the third country.</li></ul><p><br></p><p>Please consider suspending the transfer or changing the conditions under which it shall occur before proceeding further.</p>","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"rootVersionId":"166099df-5eae-419e-85b9-9fb258aaccf3","sequence":5}]},{"name":"Final Considerations","invalidQuestionCount":0,"translationIdentifier":"17602d8a-4b2b-46bf-be27-774260133e77","id":"43c24b42-26fc-4d92-bd5e-9fb460ac1d80","rootVersionId":"f8fe0598-bff2-48a5-bf6f-8cc17a6fa688","sequence":7,"questions":[{"id":"bd5d71b6-a391-434c-bde6-e252918736d9","content":"You're done!","questionType":"TEXTBOX","options":[{"id":"f4048c28-3d03-4b82-9735-d0cb5f6b0911","option":"","sequence":1,"attributes":null,"hint":null,"optionType":"DEFAULT","optionKey":null,"translationIdentifier":"d1a936db-d62d-4491-9e61-e4e8b973acde"}],"required":false,"attributes":"{\"isQuestionHintEnabled\":false,\"requireJustification\":false,\"allowLaws\":true}","friendlyName":"Done","description":"<p>Please provide any final consideration in the text box below as needed.</p>","valid":true,"prePopulateResponse":false,"linkAssessmentToInventory":false,"attachmentRequired":false,"linkAssessmentToResponseEntity":false,"readOnly":false,"translationIdentifier":"9baab504-f046-429e-b19b-8b56d752a166","rootVersionId":"1055a282-999d-4d5a-9e49-1b9ac2e845d0","sequence":1}]}],"navigations":[],"showNavigationRules":[{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"8a95c4bd-52b2-4cab-87fe-59fe268ea6b7","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"3dbbc738-a9b4-477d-8ee7-5b9f73af3569","optionType":"DEFAULT","option":"Yes","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":2,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":3,"optionList":null}]}]},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"8749807b-e8a6-4499-8b3f-1ce1a23c09d4","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"3dbbc738-a9b4-477d-8ee7-5b9f73af3569","optionType":"DEFAULT","option":"Yes","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":2,"optionList":null}]}]},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a70fa995-5cd2-48fb-9c9b-7a249a9b6959","optionType":"DEFAULT","option":"United States","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":0,"optionList":null}]}]},{"sectionId":"ce0e1775-675d-4686-96e0-2a080a1b0ce3","questionId":"4eac414a-5bd7-4900-ad57-7fe7bcaf7a1e","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a70fa995-5cd2-48fb-9c9b-7a249a9b6959","optionType":"DEFAULT","option":"United States","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":2,"optionList":null}]}]},{"sectionId":"a7e15759-7464-4282-bdd6-49d825dd1224","questionId":"c08c70cb-8f5a-46c5-9852-e8ee101d6a63","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != 'fdb288bd-1d21-44dc-87db-ebd5d2ef029e' ) && ( @.questionId == 'ccb9373b-7ff0-4651-956c-9de1709254bf' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"ccb9373b-7ff0-4651-956c-9de1709254bf"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"3dbbc738-a9b4-477d-8ee7-5b9f73af3569","optionType":"DEFAULT","option":"Yes","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a70fa995-5cd2-48fb-9c9b-7a249a9b6959","optionType":"DEFAULT","option":"United States","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":2,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":3,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"fdb288bd-1d21-44dc-87db-ebd5d2ef029e","optionType":"DEFAULT","option":"Yes","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"ccb9373b-7ff0-4651-956c-9de1709254bf","responseCount":null,"group":4,"optionList":null}]}]},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"4bfe55e4-7928-47da-8a1c-e496688e91ee","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"3dbbc738-a9b4-477d-8ee7-5b9f73af3569","optionType":"DEFAULT","option":"Yes","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":2,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":3,"optionList":null}]}]},{"sectionId":"ce0e1775-675d-4686-96e0-2a080a1b0ce3","questionId":"1fa545b5-8c52-4031-8690-55aebf273045","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a70fa995-5cd2-48fb-9c9b-7a249a9b6959","optionType":"DEFAULT","option":"United States","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":2,"optionList":null}]}]},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"a3edeb53-07bc-4ff0-98d5-d9e522d15b10","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"3dbbc738-a9b4-477d-8ee7-5b9f73af3569","optionType":"DEFAULT","option":"Yes","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":2,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":3,"optionList":null}]}]},{"sectionId":"ce0e1775-675d-4686-96e0-2a080a1b0ce3","questionId":"662282e9-4a04-462b-9751-77d8fe231f3d","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a70fa995-5cd2-48fb-9c9b-7a249a9b6959","optionType":"DEFAULT","option":"United States","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":2,"optionList":null}]}]},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"437d57bc-8f4a-4304-9425-f5800a0cdcf2","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"3dbbc738-a9b4-477d-8ee7-5b9f73af3569","optionType":"DEFAULT","option":"Yes","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":2,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":3,"optionList":null}]}]},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"ccb9373b-7ff0-4651-956c-9de1709254bf","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"3dbbc738-a9b4-477d-8ee7-5b9f73af3569","optionType":"DEFAULT","option":"Yes","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a70fa995-5cd2-48fb-9c9b-7a249a9b6959","optionType":"DEFAULT","option":"United States","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":2,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":3,"optionList":null}]}]},{"sectionId":"ce0e1775-675d-4686-96e0-2a080a1b0ce3","questionId":"42d97c55-0e95-4aba-97fa-f1df55ed0f25","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a70fa995-5cd2-48fb-9c9b-7a249a9b6959","optionType":"DEFAULT","option":"United States","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":2,"optionList":null}]}]},{"sectionId":"a7e15759-7464-4282-bdd6-49d825dd1224","questionId":"8859e842-ce09-49c5-98ca-f282de4a31e5","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"3dbbc738-a9b4-477d-8ee7-5b9f73af3569","optionType":"DEFAULT","option":"Yes","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a70fa995-5cd2-48fb-9c9b-7a249a9b6959","optionType":"DEFAULT","option":"United States","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":2,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":3,"optionList":null}]}]},{"sectionId":"a7e15759-7464-4282-bdd6-49d825dd1224","questionId":"cad81b20-54dd-4da8-b751-310d9f2ff712","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"3dbbc738-a9b4-477d-8ee7-5b9f73af3569","optionType":"DEFAULT","option":"Yes","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a70fa995-5cd2-48fb-9c9b-7a249a9b6959","optionType":"DEFAULT","option":"United States","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":2,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":3,"optionList":null}]}]},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"52923d50-2211-49cf-917e-0dc953a17056","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"3dbbc738-a9b4-477d-8ee7-5b9f73af3569","optionType":"DEFAULT","option":"Yes","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":2,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":3,"optionList":null}]}]},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"c0de1bc1-c2cf-48fd-b826-06142ba6783d","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"3dbbc738-a9b4-477d-8ee7-5b9f73af3569","optionType":"DEFAULT","option":"Yes","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":2,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":3,"optionList":null}]}]},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"c65a9cde-8556-4a44-88dc-628932396361","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"3dbbc738-a9b4-477d-8ee7-5b9f73af3569","optionType":"DEFAULT","option":"Yes","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":2,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":3,"optionList":null}]}]},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"08dc64a1-3770-40e5-840c-f7a66f4042c1","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"3dbbc738-a9b4-477d-8ee7-5b9f73af3569","optionType":"DEFAULT","option":"Yes","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a70fa995-5cd2-48fb-9c9b-7a249a9b6959","optionType":"DEFAULT","option":"United States","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":2,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":3,"optionList":null}]}]},{"sectionId":"00f7a3b3-8515-40d6-8b87-92ef8c3cb422","questionId":"9cf1d7a3-c309-4e77-8ad8-c39589d8ba0d","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( @.responseId != 'fdb288bd-1d21-44dc-87db-ebd5d2ef029e' ) && ( @.questionId == 'ccb9373b-7ff0-4651-956c-9de1709254bf' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId == '1255e9fd-2130-47e6-9515-6387713a7c34' ) && ( @.questionId == 'c08c70cb-8f5a-46c5-9852-e8ee101d6a63' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]},{"expressionGroups":[{"expressions":["$..[?( ( @.responseId == '1255e9fd-2130-47e6-9515-6387713a7c34' ) && ( @.questionId == 'c08c70cb-8f5a-46c5-9852-e8ee101d6a63' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"a7e15759-7464-4282-bdd6-49d825dd1224","questionId":"c08c70cb-8f5a-46c5-9852-e8ee101d6a63"},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"ccb9373b-7ff0-4651-956c-9de1709254bf"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"fdb288bd-1d21-44dc-87db-ebd5d2ef029e","optionType":"DEFAULT","option":"Yes","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"ccb9373b-7ff0-4651-956c-9de1709254bf","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"1255e9fd-2130-47e6-9515-6387713a7c34","optionType":"DEFAULT","option":"Yes","sectionId":"a7e15759-7464-4282-bdd6-49d825dd1224","questionId":"c08c70cb-8f5a-46c5-9852-e8ee101d6a63","responseCount":null,"group":1,"optionList":null}]},{"logicalOperator":"OR","conditions":[{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"1255e9fd-2130-47e6-9515-6387713a7c34","optionType":"DEFAULT","option":"Yes","sectionId":"a7e15759-7464-4282-bdd6-49d825dd1224","questionId":"c08c70cb-8f5a-46c5-9852-e8ee101d6a63","responseCount":null,"group":0,"optionList":null}]}]},{"sectionId":"a7e15759-7464-4282-bdd6-49d825dd1224","questionId":"331c2403-0899-4c3a-ade3-d74b7bc66835","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"3dbbc738-a9b4-477d-8ee7-5b9f73af3569","optionType":"DEFAULT","option":"Yes","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a70fa995-5cd2-48fb-9c9b-7a249a9b6959","optionType":"DEFAULT","option":"United States","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":2,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":3,"optionList":null}]}]},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"e1b2cbca-8054-4ffa-8284-a3f92075479b","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"3dbbc738-a9b4-477d-8ee7-5b9f73af3569","optionType":"DEFAULT","option":"Yes","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":2,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":3,"optionList":null}]}]},{"sectionId":"00f7a3b3-8515-40d6-8b87-92ef8c3cb422","questionId":"d1a329c7-76bf-4e76-8e4b-d0873b0f4864","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( @.responseId == '32a1c666-2967-4778-a900-d57f549e4187' ) && ( @.questionId == 'ccb9373b-7ff0-4651-956c-9de1709254bf' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId == '2126cd49-1b8e-4eb1-bd07-aeb35124ecab' ) && ( @.questionId == 'c08c70cb-8f5a-46c5-9852-e8ee101d6a63' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]},{"expressionGroups":[{"expressions":["$..[?( ( @.responseId == '2126cd49-1b8e-4eb1-bd07-aeb35124ecab' ) && ( @.questionId == 'c08c70cb-8f5a-46c5-9852-e8ee101d6a63' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"a7e15759-7464-4282-bdd6-49d825dd1224","questionId":"c08c70cb-8f5a-46c5-9852-e8ee101d6a63"},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"ccb9373b-7ff0-4651-956c-9de1709254bf"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"32a1c666-2967-4778-a900-d57f549e4187","optionType":"DEFAULT","option":"No","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"ccb9373b-7ff0-4651-956c-9de1709254bf","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"2126cd49-1b8e-4eb1-bd07-aeb35124ecab","optionType":"DEFAULT","option":"No","sectionId":"a7e15759-7464-4282-bdd6-49d825dd1224","questionId":"c08c70cb-8f5a-46c5-9852-e8ee101d6a63","responseCount":null,"group":1,"optionList":null}]},{"logicalOperator":"OR","conditions":[{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"2126cd49-1b8e-4eb1-bd07-aeb35124ecab","optionType":"DEFAULT","option":"No","sectionId":"a7e15759-7464-4282-bdd6-49d825dd1224","questionId":"c08c70cb-8f5a-46c5-9852-e8ee101d6a63","responseCount":null,"group":0,"optionList":null}]}]},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"1d96fd4d-293f-497b-a337-7ab3ce8c4947","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"3dbbc738-a9b4-477d-8ee7-5b9f73af3569","optionType":"DEFAULT","option":"Yes","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":2,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":3,"optionList":null}]}]},{"sectionId":"c1a12c92-8acd-42de-a6c3-7f43cc76f85a","questionId":"54c22bcd-a459-4b2a-bb77-bef138441b3d","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"3dbbc738-a9b4-477d-8ee7-5b9f73af3569","optionType":"DEFAULT","option":"Yes","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a70fa995-5cd2-48fb-9c9b-7a249a9b6959","optionType":"DEFAULT","option":"United States","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":2,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":3,"optionList":null}]}]},{"sectionId":"00f7a3b3-8515-40d6-8b87-92ef8c3cb422","questionId":"dd388747-13de-467c-95a9-c1a288e1fdf7","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( ( @.responseId == '9b13d90d-4314-42ee-8ff2-97422d090195' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == '5cde9447-d09a-44ea-96f8-58b0dc33abeb' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId == '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"9b13d90d-4314-42ee-8ff2-97422d090195","optionType":"DEFAULT","option":"European Economic Area","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"5cde9447-d09a-44ea-96f8-58b0dc33abeb","optionType":"DEFAULT","option":"Adequate Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a70fa995-5cd2-48fb-9c9b-7a249a9b6959","optionType":"DEFAULT","option":"United States","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":1,"optionList":null}]}]},{"sectionId":"00f7a3b3-8515-40d6-8b87-92ef8c3cb422","questionId":"b2593951-626f-4826-827e-b6483f54230c","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( @.responseId == 'fdb288bd-1d21-44dc-87db-ebd5d2ef029e' ) && ( @.questionId == 'ccb9373b-7ff0-4651-956c-9de1709254bf' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]},{"expressionGroups":[{"expressions":["$..[?( ( @.responseId == '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"ccb9373b-7ff0-4651-956c-9de1709254bf"},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050"}],"conditionGroupDtos":[{"logicalOperator":"AND","conditions":[{"comparisonOperator":"EQUAL_TO","logicalOperator":"AND","optionId":"fdb288bd-1d21-44dc-87db-ebd5d2ef029e","optionType":"DEFAULT","option":"Yes","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"ccb9373b-7ff0-4651-956c-9de1709254bf","responseCount":null,"group":0,"optionList":null}]},{"logicalOperator":"OR","conditions":[{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"3dbbc738-a9b4-477d-8ee7-5b9f73af3569","optionType":"DEFAULT","option":"Yes","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050","responseCount":null,"group":0,"optionList":null}]}]},{"sectionId":"ce0e1775-675d-4686-96e0-2a080a1b0ce3","questionId":"8f63bb92-f2a1-4e16-a265-8fa14d90addb","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a70fa995-5cd2-48fb-9c9b-7a249a9b6959","optionType":"DEFAULT","option":"United States","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":2,"optionList":null}]}]},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"4df5d952-6507-4317-8291-ece329137f78","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"3dbbc738-a9b4-477d-8ee7-5b9f73af3569","optionType":"DEFAULT","option":"Yes","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a70fa995-5cd2-48fb-9c9b-7a249a9b6959","optionType":"DEFAULT","option":"United States","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":2,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":3,"optionList":null}]}]},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"6f4f2d51-6d64-4f91-a1e8-6fc5f660b367","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"3dbbc738-a9b4-477d-8ee7-5b9f73af3569","optionType":"DEFAULT","option":"Yes","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":2,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":3,"optionList":null}]}]},{"sectionId":"c1a12c92-8acd-42de-a6c3-7f43cc76f85a","questionId":"a089af6d-0f7c-48fa-9aec-8aab693204b3","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"3dbbc738-a9b4-477d-8ee7-5b9f73af3569","optionType":"DEFAULT","option":"Yes","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a70fa995-5cd2-48fb-9c9b-7a249a9b6959","optionType":"DEFAULT","option":"United States","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":2,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":3,"optionList":null}]}]},{"sectionId":"a7e15759-7464-4282-bdd6-49d825dd1224","questionId":"eb3346d1-c3fe-4a14-a305-1a2df69835ca","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"3dbbc738-a9b4-477d-8ee7-5b9f73af3569","optionType":"DEFAULT","option":"Yes","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a70fa995-5cd2-48fb-9c9b-7a249a9b6959","optionType":"DEFAULT","option":"United States","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":2,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":3,"optionList":null}]}]},{"sectionId":"ce0e1775-675d-4686-96e0-2a080a1b0ce3","questionId":"38b5c136-37c8-4b63-8493-21e5553c4e25","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a70fa995-5cd2-48fb-9c9b-7a249a9b6959","optionType":"DEFAULT","option":"United States","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":2,"optionList":null}]}]},{"sectionId":"a7e15759-7464-4282-bdd6-49d825dd1224","questionId":"06d8a19c-1710-4a75-b013-fd6c9d084d68","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"3dbbc738-a9b4-477d-8ee7-5b9f73af3569","optionType":"DEFAULT","option":"Yes","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a70fa995-5cd2-48fb-9c9b-7a249a9b6959","optionType":"DEFAULT","option":"United States","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":2,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":3,"optionList":null}]}]},{"sectionId":"00f7a3b3-8515-40d6-8b87-92ef8c3cb422","questionId":"3312e036-9db6-4047-9422-3573e59757ed","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( @.responseId == '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":0,"optionList":null}]}]},{"sectionId":"ce0e1775-675d-4686-96e0-2a080a1b0ce3","questionId":"9a5b69a6-3246-4aee-b468-d5be58ece7f8","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a70fa995-5cd2-48fb-9c9b-7a249a9b6959","optionType":"DEFAULT","option":"United States","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":2,"optionList":null}]}]},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"2676127c-01a9-41e7-ac6a-496d029f90e7","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"3dbbc738-a9b4-477d-8ee7-5b9f73af3569","optionType":"DEFAULT","option":"Yes","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":2,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":3,"optionList":null}]}]},{"sectionId":"ce0e1775-675d-4686-96e0-2a080a1b0ce3","questionId":"cc2e821c-0f20-4bd2-a1e4-06b8e51ffca6","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a70fa995-5cd2-48fb-9c9b-7a249a9b6959","optionType":"DEFAULT","option":"United States","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":2,"optionList":null}]}]},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a70fa995-5cd2-48fb-9c9b-7a249a9b6959","optionType":"DEFAULT","option":"United States","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":2,"optionList":null}]}]},{"sectionId":"ce0e1775-675d-4686-96e0-2a080a1b0ce3","questionId":"ecdbab18-bc8c-46a1-81b8-96a954e8869b","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a70fa995-5cd2-48fb-9c9b-7a249a9b6959","optionType":"DEFAULT","option":"United States","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":2,"optionList":null}]}]},{"sectionId":"a7e15759-7464-4282-bdd6-49d825dd1224","questionId":"c03ea6b5-fa68-4e84-a071-cba7b6f14e69","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"3dbbc738-a9b4-477d-8ee7-5b9f73af3569","optionType":"DEFAULT","option":"Yes","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a70fa995-5cd2-48fb-9c9b-7a249a9b6959","optionType":"DEFAULT","option":"United States","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":2,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":3,"optionList":null}]}]},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"32b7b8f5-450c-4f64-9332-558801da9a00","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"3dbbc738-a9b4-477d-8ee7-5b9f73af3569","optionType":"DEFAULT","option":"Yes","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":2,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":3,"optionList":null}]}]},{"sectionId":"a7e15759-7464-4282-bdd6-49d825dd1224","questionId":"3da1c5b1-da0e-43b3-a929-3ede736001ff","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"3dbbc738-a9b4-477d-8ee7-5b9f73af3569","optionType":"DEFAULT","option":"Yes","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a70fa995-5cd2-48fb-9c9b-7a249a9b6959","optionType":"DEFAULT","option":"United States","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":2,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":3,"optionList":null}]}]},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"7b6c2be0-a184-469b-980c-f3cbf1653ae8","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"3dbbc738-a9b4-477d-8ee7-5b9f73af3569","optionType":"DEFAULT","option":"Yes","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":2,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":3,"optionList":null}]}]},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a70fa995-5cd2-48fb-9c9b-7a249a9b6959","optionType":"DEFAULT","option":"United States","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":1,"optionList":null}]}]},{"sectionId":"a7e15759-7464-4282-bdd6-49d825dd1224","questionId":"024e01b5-2f91-44e3-a6e7-d530d211e06c","conditionGroupExpressions":[{"expressionGroups":[{"expressions":["$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"},{"expressions":["$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"],"logicalOperator":null,"expressionType":"JSONPATH"}]}],"anchorQuestionDetails":[{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af"},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8"},{"sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e"}],"conditionGroupDtos":[{"logicalOperator":"OR","conditions":[{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"3dbbc738-a9b4-477d-8ee7-5b9f73af3569","optionType":"DEFAULT","option":"Yes","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"877540cb-6ac5-4275-a4d0-8e1073828050","responseCount":null,"group":0,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a20fc718-7cec-4e67-826b-51e8e5ff0ef9","optionType":"DEFAULT","option":"Other Third Country","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"EQUAL_TO","logicalOperator":"OR","optionId":"a70fa995-5cd2-48fb-9c9b-7a249a9b6959","optionType":"DEFAULT","option":"United States","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"c346b4eb-b71e-4701-bce6-8e9d78ca38f8","responseCount":null,"group":1,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"6404cd2c-fedd-4847-907c-e3ca96c48f86","optionType":"DEFAULT","option":"Derogations","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"17fe032b-96fe-4aee-b598-4af6b681954e","responseCount":null,"group":2,"optionList":null},{"comparisonOperator":"NOT_EQUAL_TO","logicalOperator":"OR","optionId":"81e5c256-cbf0-4c9f-bc80-187e284717df","optionType":"DEFAULT","option":"Yes","sectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","questionId":"fc0ad68e-dba5-4460-9d79-34f310e6e1af","responseCount":null,"group":3,"optionList":null}]}]}],"parentChildQuestionIds":{"ad43751a-643b-423f-b0c5-90505d2d8adf":["662282e9-4a04-462b-9751-77d8fe231f3d","17fe032b-96fe-4aee-b598-4af6b681954e","ecdbab18-bc8c-46a1-81b8-96a954e8869b","1fa545b5-8c52-4031-8690-55aebf273045"]},"actions":[{"conditionGroups":[{"sectionId":null,"questionId":null,"conditions":[{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"52923d50-2211-49cf-917e-0dc953a17056","logicalOperator":"OR","comparisonOperator":"EQUAL_TO","optionId":null,"optionType":"DEFAULT","responseCount":null,"option":null,"optionList":[{"optionId":"40225878-2a7c-4e81-9b1f-e57f5b145137","option":"Weak","optionType":"DEFAULT"}],"dataElements":null,"dataCategories":null,"dataSubjects":null}],"logicalOperator":"OR"},{"sectionId":null,"questionId":null,"conditions":[{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"52923d50-2211-49cf-917e-0dc953a17056","logicalOperator":"OR","comparisonOperator":"EQUAL_TO","optionId":null,"optionType":"DEFAULT","responseCount":null,"option":null,"optionList":[{"optionId":"ab31a9ba-6e42-456d-8215-10ce5aa0c15f","option":"NotSure","optionType":"NOT_SURE"}],"dataElements":null,"dataCategories":null,"dataSubjects":null}],"logicalOperator":"OR"}],"action":"RISK_CREATION","actionParameters":{"level":4,"description":null,"recommendation":null,"probabilityLevel":"VeryHigh","impactLevel":"VeryHigh","probabilityLevelId":4,"impactLevelId":4,"riskScore":8,"name":null,"categories":[],"controls":null,"customControls":null,"riskApprovers":[],"riskOwners":[],"threat":null,"vulnerabilities":null,"riskOwnerType":null,"riskApproverType":null,"riskTemplate":null,"targetRiskLevel":null,"attributeValues":{},"deadlineAfterDays":null,"reminder":null,"inventoryTypeAndFieldNameMapForApproverSource":null,"inventoryTypeAndFieldNameMapForOwnerSource":null},"conditionGroupType":"QUESTION_CONDITION","actionDetails":[{"id":"d5a19c26-78c1-4a81-a334-3c05b31fd862","actionRuleId":"88ad1f8a-7561-417f-8a9d-7f9aa0a1f183","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"52923d50-2211-49cf-917e-0dc953a17056"}],"id":"88ad1f8a-7561-417f-8a9d-7f9aa0a1f183","sequence":6,"rootVersionId":"6b089d47-a881-4e20-b06d-a821a04776e4","name":"Third Country - Rule of Law - Weak","active":true},{"conditionGroups":[{"sectionId":null,"questionId":null,"conditions":[{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"52923d50-2211-49cf-917e-0dc953a17056","logicalOperator":"OR","comparisonOperator":"EQUAL_TO","optionId":null,"optionType":"DEFAULT","responseCount":null,"option":null,"optionList":[{"optionId":"71cadb05-bc52-4a08-9e26-2c30c618218b","option":"Average","optionType":"DEFAULT"}],"dataElements":null,"dataCategories":null,"dataSubjects":null}],"logicalOperator":"OR"}],"action":"RISK_CREATION","actionParameters":{"level":3,"description":null,"recommendation":null,"probabilityLevel":"High","impactLevel":"Medium","probabilityLevelId":3,"impactLevelId":2,"riskScore":5,"name":null,"categories":[],"controls":null,"customControls":null,"riskApprovers":[],"riskOwners":[],"threat":null,"vulnerabilities":null,"riskOwnerType":null,"riskApproverType":null,"riskTemplate":null,"targetRiskLevel":null,"attributeValues":{},"deadlineAfterDays":null,"reminder":null,"inventoryTypeAndFieldNameMapForApproverSource":null,"inventoryTypeAndFieldNameMapForOwnerSource":null},"conditionGroupType":"QUESTION_CONDITION","actionDetails":[{"id":"c4f3cff1-514c-42ab-aab7-fd6b263fc753","actionRuleId":"131bf94b-43bf-4974-a7ce-f920c50f0ea9","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"52923d50-2211-49cf-917e-0dc953a17056"}],"id":"131bf94b-43bf-4974-a7ce-f920c50f0ea9","sequence":7,"rootVersionId":"70a1635c-e7bd-4532-8ce7-4159b6c1aec3","name":"Third Country - Rule of Law - Average","active":true},{"conditionGroups":[{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"52923d50-2211-49cf-917e-0dc953a17056","conditions":[{"sectionId":null,"questionId":null,"logicalOperator":"OR","comparisonOperator":"EQUAL_TO","optionId":"71cadb05-bc52-4a08-9e26-2c30c618218b","optionType":"DEFAULT","responseCount":null,"option":"Average","optionList":null,"dataElements":null,"dataCategories":null,"dataSubjects":null}],"logicalOperator":"OR"}],"action":"RISK_CREATION","actionParameters":{"level":1,"description":null,"recommendation":null,"probabilityLevel":"Low","impactLevel":"Low","probabilityLevelId":1,"impactLevelId":1,"riskScore":2,"name":null,"categories":[],"controls":null,"customControls":null,"riskApprovers":[],"riskOwners":[],"threat":null,"vulnerabilities":null,"riskOwnerType":null,"riskApproverType":null,"riskTemplate":null,"targetRiskLevel":null,"attributeValues":{},"deadlineAfterDays":null,"reminder":null,"inventoryTypeAndFieldNameMapForApproverSource":null,"inventoryTypeAndFieldNameMapForOwnerSource":null},"conditionGroupType":"QUESTION_RESPONSE","actionDetails":[{"id":"94d3c998-06b9-4720-91cb-7f925589b09e","actionRuleId":"6395832e-f4ff-4b23-bf86-3902c1d1b235","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"52923d50-2211-49cf-917e-0dc953a17056"}],"id":"6395832e-f4ff-4b23-bf86-3902c1d1b235","sequence":8,"rootVersionId":"2efc149c-1d25-48ab-83fc-f1f9d6773f6b","name":"Third Country - Rule of Law - Strong","active":true},{"conditionGroups":[{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"a3edeb53-07bc-4ff0-98d5-d9e522d15b10","conditions":[{"sectionId":null,"questionId":null,"logicalOperator":"OR","comparisonOperator":"EQUAL_TO","optionId":"481766a2-ef26-4523-8313-aa396b22f00a","optionType":"DEFAULT","responseCount":null,"option":"Weak","optionList":null,"dataElements":null,"dataCategories":null,"dataSubjects":null}],"logicalOperator":"OR"},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"a3edeb53-07bc-4ff0-98d5-d9e522d15b10","conditions":[{"sectionId":null,"questionId":null,"logicalOperator":"OR","comparisonOperator":"EQUAL_TO","optionId":"72b76ac3-64d4-4cea-9658-7ce3fac05bfd","optionType":"NOT_SURE","responseCount":null,"option":"NotSure","optionList":null,"dataElements":null,"dataCategories":null,"dataSubjects":null}],"logicalOperator":"OR"}],"action":"RISK_CREATION","actionParameters":{"level":4,"description":null,"recommendation":null,"probabilityLevel":"VeryHigh","impactLevel":"VeryHigh","probabilityLevelId":4,"impactLevelId":4,"riskScore":8,"name":null,"categories":[],"controls":null,"customControls":null,"riskApprovers":[],"riskOwners":[],"threat":null,"vulnerabilities":null,"riskOwnerType":null,"riskApproverType":null,"riskTemplate":null,"targetRiskLevel":null,"attributeValues":{},"deadlineAfterDays":null,"reminder":null,"inventoryTypeAndFieldNameMapForApproverSource":null,"inventoryTypeAndFieldNameMapForOwnerSource":null},"conditionGroupType":"QUESTION_RESPONSE","actionDetails":[{"id":"4998e8ec-e081-44fd-8d65-a2f3dc352fa7","actionRuleId":"e6644c06-d76a-4eeb-bf08-49b60a414608","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"a3edeb53-07bc-4ff0-98d5-d9e522d15b10"}],"id":"e6644c06-d76a-4eeb-bf08-49b60a414608","sequence":9,"rootVersionId":"aea7d91c-c5bc-4b02-af93-0061cc7402ef","name":"Third Country - Respect for human life - Weak","active":true},{"conditionGroups":[{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"a3edeb53-07bc-4ff0-98d5-d9e522d15b10","conditions":[{"sectionId":null,"questionId":null,"logicalOperator":"OR","comparisonOperator":"EQUAL_TO","optionId":"2e8aaac7-0786-4c3a-bdd1-cd722de8377c","optionType":"DEFAULT","responseCount":null,"option":"Average","optionList":null,"dataElements":null,"dataCategories":null,"dataSubjects":null}],"logicalOperator":"OR"}],"action":"RISK_CREATION","actionParameters":{"level":3,"description":null,"recommendation":null,"probabilityLevel":"High","impactLevel":"Medium","probabilityLevelId":3,"impactLevelId":2,"riskScore":5,"name":null,"categories":[],"controls":null,"customControls":null,"riskApprovers":[],"riskOwners":[],"threat":null,"vulnerabilities":null,"riskOwnerType":null,"riskApproverType":null,"riskTemplate":null,"targetRiskLevel":null,"attributeValues":{},"deadlineAfterDays":null,"reminder":null,"inventoryTypeAndFieldNameMapForApproverSource":null,"inventoryTypeAndFieldNameMapForOwnerSource":null},"conditionGroupType":"QUESTION_RESPONSE","actionDetails":[{"id":"21ce7cd6-0304-419f-a9ee-6296d6f99f75","actionRuleId":"0fb1f256-68c7-44d3-9b5c-0f33c36a0d08","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"a3edeb53-07bc-4ff0-98d5-d9e522d15b10"}],"id":"0fb1f256-68c7-44d3-9b5c-0f33c36a0d08","sequence":10,"rootVersionId":"c008366a-054e-4c95-aef6-e357eba2cff9","name":"Third Country - Respect for human life - Average","active":true},{"conditionGroups":[{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"a3edeb53-07bc-4ff0-98d5-d9e522d15b10","conditions":[{"sectionId":null,"questionId":null,"logicalOperator":"OR","comparisonOperator":"EQUAL_TO","optionId":"5e40333f-be01-473d-a722-fd299d258c22","optionType":"DEFAULT","responseCount":null,"option":"Strong","optionList":null,"dataElements":null,"dataCategories":null,"dataSubjects":null}],"logicalOperator":"OR"}],"action":"RISK_CREATION","actionParameters":{"level":1,"description":null,"recommendation":null,"probabilityLevel":"Low","impactLevel":"Low","probabilityLevelId":1,"impactLevelId":1,"riskScore":2,"name":null,"categories":[],"controls":null,"customControls":null,"riskApprovers":[],"riskOwners":[],"threat":null,"vulnerabilities":null,"riskOwnerType":null,"riskApproverType":null,"riskTemplate":null,"targetRiskLevel":null,"attributeValues":{},"deadlineAfterDays":null,"reminder":null,"inventoryTypeAndFieldNameMapForApproverSource":null,"inventoryTypeAndFieldNameMapForOwnerSource":null},"conditionGroupType":"QUESTION_RESPONSE","actionDetails":[{"id":"097b6116-659e-47fd-9618-bdd6d1c4041f","actionRuleId":"875c555e-667f-4791-a908-4831e4b78684","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"a3edeb53-07bc-4ff0-98d5-d9e522d15b10"}],"id":"875c555e-667f-4791-a908-4831e4b78684","sequence":11,"rootVersionId":"5f0ca0a1-1ad2-455b-8b5a-7d16df61d9e4","name":"Third Country - Respect for human life - Strong","active":true},{"conditionGroups":[{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"c65a9cde-8556-4a44-88dc-628932396361","conditions":[{"sectionId":null,"questionId":null,"logicalOperator":"OR","comparisonOperator":"EQUAL_TO","optionId":"68344b3d-fc68-40eb-8ece-21980b780389","optionType":"DEFAULT","responseCount":null,"option":"Weak","optionList":null,"dataElements":null,"dataCategories":null,"dataSubjects":null}],"logicalOperator":"OR"},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"c65a9cde-8556-4a44-88dc-628932396361","conditions":[{"sectionId":null,"questionId":null,"logicalOperator":"OR","comparisonOperator":"EQUAL_TO","optionId":"72f197fa-5019-4f9a-8601-8ef440f2a192","optionType":"NOT_SURE","responseCount":null,"option":"NotSure","optionList":null,"dataElements":null,"dataCategories":null,"dataSubjects":null}],"logicalOperator":"OR"}],"action":"RISK_CREATION","actionParameters":{"level":4,"description":null,"recommendation":null,"probabilityLevel":"VeryHigh","impactLevel":"VeryHigh","probabilityLevelId":4,"impactLevelId":4,"riskScore":8,"name":null,"categories":[],"controls":null,"customControls":null,"riskApprovers":[],"riskOwners":[],"threat":null,"vulnerabilities":null,"riskOwnerType":null,"riskApproverType":null,"riskTemplate":null,"targetRiskLevel":null,"attributeValues":{},"deadlineAfterDays":null,"reminder":null,"inventoryTypeAndFieldNameMapForApproverSource":null,"inventoryTypeAndFieldNameMapForOwnerSource":null},"conditionGroupType":"QUESTION_RESPONSE","actionDetails":[{"id":"b148324d-1b93-4345-a30c-e974f57c18fa","actionRuleId":"28983494-01d2-43dc-9efb-bd9d0dcebc0f","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"c65a9cde-8556-4a44-88dc-628932396361"}],"id":"28983494-01d2-43dc-9efb-bd9d0dcebc0f","sequence":12,"rootVersionId":"31f3ea92-9ec2-4145-b690-cf5c883fae33","name":"Third Country - Data protection concepts - Weak","active":true},{"conditionGroups":[{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"c65a9cde-8556-4a44-88dc-628932396361","conditions":[{"sectionId":null,"questionId":null,"logicalOperator":"OR","comparisonOperator":"EQUAL_TO","optionId":"60a6b9fc-e304-4ebc-bfe9-724a8724ea11","optionType":"DEFAULT","responseCount":null,"option":"Average","optionList":null,"dataElements":null,"dataCategories":null,"dataSubjects":null}],"logicalOperator":"OR"}],"action":"RISK_CREATION","actionParameters":{"level":3,"description":null,"recommendation":null,"probabilityLevel":"High","impactLevel":"Medium","probabilityLevelId":3,"impactLevelId":2,"riskScore":5,"name":null,"categories":[],"controls":null,"customControls":null,"riskApprovers":[],"riskOwners":[],"threat":null,"vulnerabilities":null,"riskOwnerType":null,"riskApproverType":null,"riskTemplate":null,"targetRiskLevel":null,"attributeValues":{},"deadlineAfterDays":null,"reminder":null,"inventoryTypeAndFieldNameMapForApproverSource":null,"inventoryTypeAndFieldNameMapForOwnerSource":null},"conditionGroupType":"QUESTION_RESPONSE","actionDetails":[{"id":"d0eca5a6-6cb7-4ccb-ae74-5197e331e62d","actionRuleId":"5d18eab1-bbd0-406c-8dcc-131f4e5d727c","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"c65a9cde-8556-4a44-88dc-628932396361"}],"id":"5d18eab1-bbd0-406c-8dcc-131f4e5d727c","sequence":13,"rootVersionId":"940ff7a3-5db9-4268-ac8c-76f7471a14e4","name":"Third Country - Data protection concepts - Average","active":true},{"conditionGroups":[{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"c65a9cde-8556-4a44-88dc-628932396361","conditions":[{"sectionId":null,"questionId":null,"logicalOperator":"OR","comparisonOperator":"EQUAL_TO","optionId":"60a6b9fc-e304-4ebc-bfe9-724a8724ea11","optionType":"DEFAULT","responseCount":null,"option":"Average","optionList":null,"dataElements":null,"dataCategories":null,"dataSubjects":null}],"logicalOperator":"OR"}],"action":"RISK_CREATION","actionParameters":{"level":1,"description":null,"recommendation":null,"probabilityLevel":"Low","impactLevel":"Low","probabilityLevelId":1,"impactLevelId":1,"riskScore":2,"name":null,"categories":[],"controls":null,"customControls":null,"riskApprovers":[],"riskOwners":[],"threat":null,"vulnerabilities":null,"riskOwnerType":null,"riskApproverType":null,"riskTemplate":null,"targetRiskLevel":null,"attributeValues":{},"deadlineAfterDays":null,"reminder":null,"inventoryTypeAndFieldNameMapForApproverSource":null,"inventoryTypeAndFieldNameMapForOwnerSource":null},"conditionGroupType":"QUESTION_RESPONSE","actionDetails":[{"id":"aa124ccf-ac07-4add-9e5a-7290c91bfdad","actionRuleId":"3bd74717-d6b7-426b-bc88-1d9dff5ad32a","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"c65a9cde-8556-4a44-88dc-628932396361"}],"id":"3bd74717-d6b7-426b-bc88-1d9dff5ad32a","sequence":14,"rootVersionId":"a9b968ad-02e4-4e68-af80-e532f6a20bf6","name":"Third Country - Data protection concepts - Strong","active":true},{"conditionGroups":[{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"e1b2cbca-8054-4ffa-8284-a3f92075479b","conditions":[{"sectionId":null,"questionId":null,"logicalOperator":"AND","comparisonOperator":"EQUAL_TO","optionId":"fa57f4e2-2ccb-404d-acd3-9671310f08d7","optionType":"DEFAULT","responseCount":null,"option":"No","optionList":null,"dataElements":null,"dataCategories":null,"dataSubjects":null}],"logicalOperator":"AND"},{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"e1b2cbca-8054-4ffa-8284-a3f92075479b","conditions":[{"sectionId":null,"questionId":null,"logicalOperator":"AND","comparisonOperator":"EQUAL_TO","optionId":"f789cd9f-15f3-426b-a0a2-092c1524f50a","optionType":"NOT_SURE","responseCount":null,"option":"NotSure","optionList":null,"dataElements":null,"dataCategories":null,"dataSubjects":null}],"logicalOperator":"AND"}],"action":"RISK_CREATION","actionParameters":{"level":4,"description":null,"recommendation":null,"probabilityLevel":"VeryHigh","impactLevel":"VeryHigh","probabilityLevelId":4,"impactLevelId":4,"riskScore":8,"name":null,"categories":[],"controls":null,"customControls":null,"riskApprovers":[],"riskOwners":[],"threat":null,"vulnerabilities":null,"riskOwnerType":null,"riskApproverType":null,"riskTemplate":null,"targetRiskLevel":null,"attributeValues":{},"deadlineAfterDays":null,"reminder":null,"inventoryTypeAndFieldNameMapForApproverSource":null,"inventoryTypeAndFieldNameMapForOwnerSource":null},"conditionGroupType":"QUESTION_RESPONSE","actionDetails":[{"id":"0cdceb46-4c68-4012-8ff6-838d13c52841","actionRuleId":"8b492e04-70be-4685-84a1-3e7ac66d8a9a","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"e1b2cbca-8054-4ffa-8284-a3f92075479b"}],"id":"8b492e04-70be-4685-84a1-3e7ac66d8a9a","sequence":15,"rootVersionId":"388609a2-d44d-4a09-a261-b8b1db2f12a2","name":"Third Country - Independent authority - No","active":true},{"conditionGroups":[{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"e1b2cbca-8054-4ffa-8284-a3f92075479b","conditions":[{"sectionId":null,"questionId":null,"logicalOperator":"AND","comparisonOperator":"EQUAL_TO","optionId":"95b66494-cc59-467d-aa6c-4c28dcd4575c","optionType":"DEFAULT","responseCount":null,"option":"Yes","optionList":null,"dataElements":null,"dataCategories":null,"dataSubjects":null}],"logicalOperator":"AND"}],"action":"RISK_CREATION","actionParameters":{"level":1,"description":null,"recommendation":null,"probabilityLevel":"Low","impactLevel":"Low","probabilityLevelId":1,"impactLevelId":1,"riskScore":2,"name":null,"categories":[],"controls":null,"customControls":null,"riskApprovers":[],"riskOwners":[],"threat":null,"vulnerabilities":null,"riskOwnerType":null,"riskApproverType":null,"riskTemplate":null,"targetRiskLevel":null,"attributeValues":{},"deadlineAfterDays":null,"reminder":null,"inventoryTypeAndFieldNameMapForApproverSource":null,"inventoryTypeAndFieldNameMapForOwnerSource":null},"conditionGroupType":"QUESTION_RESPONSE","actionDetails":[{"id":"7ec2fd26-e040-4a75-9df1-aee9a61d5e58","actionRuleId":"3d77c583-bbf0-4789-8ed9-04f0170e9099","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"e1b2cbca-8054-4ffa-8284-a3f92075479b"}],"id":"3d77c583-bbf0-4789-8ed9-04f0170e9099","sequence":16,"rootVersionId":"cd41a9d6-932a-4c1f-abb3-4ae4c57fe702","name":"Third Country - Independent authority - Yes","active":true},{"conditionGroups":[{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"7b6c2be0-a184-469b-980c-f3cbf1653ae8","conditions":[{"sectionId":null,"questionId":null,"logicalOperator":"AND","comparisonOperator":"EQUAL_TO","optionId":"41b1ffd3-5899-40c6-98db-da24b393bfa1","optionType":"DEFAULT","responseCount":null,"option":"No","optionList":null,"dataElements":null,"dataCategories":null,"dataSubjects":null}],"logicalOperator":"AND"}],"action":"RISK_CREATION","actionParameters":{"level":4,"description":null,"recommendation":null,"probabilityLevel":"VeryHigh","impactLevel":"VeryHigh","probabilityLevelId":4,"impactLevelId":4,"riskScore":8,"name":null,"categories":[],"controls":null,"customControls":null,"riskApprovers":[],"riskOwners":[],"threat":null,"vulnerabilities":null,"riskOwnerType":null,"riskApproverType":null,"riskTemplate":null,"targetRiskLevel":null,"attributeValues":{},"deadlineAfterDays":null,"reminder":null,"inventoryTypeAndFieldNameMapForApproverSource":null,"inventoryTypeAndFieldNameMapForOwnerSource":null},"conditionGroupType":"QUESTION_RESPONSE","actionDetails":[{"id":"fe967666-e7a7-466e-b1f0-52dff43abce0","actionRuleId":"9701060c-321a-4b35-afaf-73eab6360007","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"7b6c2be0-a184-469b-980c-f3cbf1653ae8"}],"id":"9701060c-321a-4b35-afaf-73eab6360007","sequence":17,"rootVersionId":"89f06c9e-677a-46f2-bef9-97081315a8d7","name":"Third Country - International commitments - No","active":true},{"conditionGroups":[{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"7b6c2be0-a184-469b-980c-f3cbf1653ae8","conditions":[{"sectionId":null,"questionId":null,"logicalOperator":"AND","comparisonOperator":"EQUAL_TO","optionId":"a96e6bf6-6a3a-453b-9ed0-74f9c43c8c9e","optionType":"DEFAULT","responseCount":null,"option":"Yes","optionList":null,"dataElements":null,"dataCategories":null,"dataSubjects":null}],"logicalOperator":"AND"}],"action":"RISK_CREATION","actionParameters":{"level":1,"description":null,"recommendation":null,"probabilityLevel":"Low","impactLevel":"Low","probabilityLevelId":1,"impactLevelId":1,"riskScore":2,"name":null,"categories":[],"controls":null,"customControls":null,"riskApprovers":[],"riskOwners":[],"threat":null,"vulnerabilities":null,"riskOwnerType":null,"riskApproverType":null,"riskTemplate":null,"targetRiskLevel":null,"attributeValues":{},"deadlineAfterDays":null,"reminder":null,"inventoryTypeAndFieldNameMapForApproverSource":null,"inventoryTypeAndFieldNameMapForOwnerSource":null},"conditionGroupType":"QUESTION_RESPONSE","actionDetails":[{"id":"67d2c589-1658-48a4-8b3a-331dc0b2f0c0","actionRuleId":"8d85124e-f2b8-4c38-8327-9f0dc8027572","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"7b6c2be0-a184-469b-980c-f3cbf1653ae8"}],"id":"8d85124e-f2b8-4c38-8327-9f0dc8027572","sequence":18,"rootVersionId":"e160e03e-ca16-430e-8eeb-62667bc1fa94","name":"Third Country - International commitments - Yes","active":true},{"conditionGroups":[{"sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"ccb9373b-7ff0-4651-956c-9de1709254bf","conditions":[{"sectionId":null,"questionId":null,"logicalOperator":"AND","comparisonOperator":"NOT_EQUAL_TO","optionId":"fdb288bd-1d21-44dc-87db-ebd5d2ef029e","optionType":"DEFAULT","responseCount":null,"option":"Yes","optionList":null,"dataElements":null,"dataCategories":null,"dataSubjects":null}],"logicalOperator":"AND"}],"action":"RISK_CREATION","actionParameters":{"level":4,"description":"Lack of essential equivalence","recommendation":"You should carefully decide whether or not to proceed with the transfer and/or apply supplementary measures","probabilityLevel":"VeryHigh","impactLevel":"VeryHigh","probabilityLevelId":4,"impactLevelId":4,"riskScore":8,"name":null,"categories":[],"controls":null,"customControls":null,"riskApprovers":[],"riskOwners":[],"threat":null,"vulnerabilities":null,"riskOwnerType":null,"riskApproverType":null,"riskTemplate":null,"targetRiskLevel":null,"attributeValues":{},"deadlineAfterDays":null,"reminder":null,"inventoryTypeAndFieldNameMapForApproverSource":null,"inventoryTypeAndFieldNameMapForOwnerSource":null},"conditionGroupType":"QUESTION_RESPONSE","actionDetails":[{"id":"32e54251-6a2c-42fa-8169-92c662b62e3b","actionRuleId":"5d93edb8-5fc4-4c9d-832f-7f79b1904087","sectionId":"671ac1af-f16b-4096-81c4-9ce47355b8e0","questionId":"ccb9373b-7ff0-4651-956c-9de1709254bf"}],"id":"5d93edb8-5fc4-4c9d-832f-7f79b1904087","sequence":19,"rootVersionId":"e51bf639-f50c-4820-bc2e-a38fef849349","name":"Third Country - Essential Equivalence","active":true},{"conditionGroups":[{"sectionId":"c1a12c92-8acd-42de-a6c3-7f43cc76f85a","questionId":"a089af6d-0f7c-48fa-9aec-8aab693204b3","conditions":[{"sectionId":null,"questionId":null,"logicalOperator":"AND","comparisonOperator":"NOT_EQUAL_TO","optionId":"832f28d6-5969-4a8e-aa85-b4842c7cd6ed","optionType":"DEFAULT","responseCount":null,"option":"Yes","optionList":null,"dataElements":null,"dataCategories":null,"dataSubjects":null}],"logicalOperator":"AND"}],"action":"RISK_CREATION","actionParameters":{"level":4,"description":"Having a re-evaluation procedure is necessary to make sure that all new developments in the target countries are accounted for","recommendation":"Have a procedure in place to regularly re-assess countries and/or flag new developments","probabilityLevel":"VeryHigh","impactLevel":"VeryHigh","probabilityLevelId":4,"impactLevelId":4,"riskScore":8,"name":null,"categories":[],"controls":null,"customControls":null,"riskApprovers":[],"riskOwners":[],"threat":null,"vulnerabilities":null,"riskOwnerType":null,"riskApproverType":null,"riskTemplate":null,"targetRiskLevel":null,"attributeValues":{},"deadlineAfterDays":null,"reminder":null,"inventoryTypeAndFieldNameMapForApproverSource":null,"inventoryTypeAndFieldNameMapForOwnerSource":null},"conditionGroupType":"QUESTION_RESPONSE","actionDetails":[{"id":"df066042-572e-471a-863c-c50b09806424","actionRuleId":"fa4cb654-78b3-45e2-9d94-ff63100aa9f6","sectionId":"c1a12c92-8acd-42de-a6c3-7f43cc76f85a","questionId":"a089af6d-0f7c-48fa-9aec-8aab693204b3"}],"id":"fa4cb654-78b3-45e2-9d94-ff63100aa9f6","sequence":34,"rootVersionId":"bd647881-17e0-4a0c-9df4-eaaf57483cdf","name":"Re-evaluation procedure","active":true},{"conditionGroups":[{"sectionId":null,"questionId":null,"conditions":[{"sectionId":"c1a12c92-8acd-42de-a6c3-7f43cc76f85a","questionId":"54c22bcd-a459-4b2a-bb77-bef138441b3d","logicalOperator":"AND","comparisonOperator":"NOT_EQUAL_TO","optionId":null,"optionType":"DEFAULT","responseCount":null,"option":null,"optionList":[{"optionId":"ba68331e-628d-411d-8960-3b373fe2a6ed","option":"Yes","optionType":"DEFAULT"}],"dataElements":null,"dataCategories":null,"dataSubjects":null}],"logicalOperator":"AND"}],"action":"RISK_CREATION","actionParameters":{"level":4,"description":"Having a procedure to suspend transfers is necessary to reduce risks","recommendation":"Have a procedure in place to suspend risky transfers, for example through contractual or technical measures","probabilityLevel":"VeryHigh","impactLevel":"VeryHigh","probabilityLevelId":4,"impactLevelId":4,"riskScore":8,"name":null,"categories":[],"controls":null,"customControls":null,"riskApprovers":[],"riskOwners":[],"threat":null,"vulnerabilities":null,"riskOwnerType":null,"riskApproverType":null,"riskTemplate":null,"targetRiskLevel":null,"attributeValues":{},"deadlineAfterDays":null,"reminder":null,"inventoryTypeAndFieldNameMapForApproverSource":null,"inventoryTypeAndFieldNameMapForOwnerSource":null},"conditionGroupType":"QUESTION_CONDITION","actionDetails":[{"id":"031c8bfe-255f-46ad-b566-c26b4d2884e5","actionRuleId":"a0aa48ed-6af6-46c2-9dab-ffc59d31c484","sectionId":"c1a12c92-8acd-42de-a6c3-7f43cc76f85a","questionId":"54c22bcd-a459-4b2a-bb77-bef138441b3d"}],"id":"a0aa48ed-6af6-46c2-9dab-ffc59d31c484","sequence":35,"rootVersionId":"d4d8eddf-f649-49e0-8c7d-10a98365f64c","name":"Data transfers - Suspension","active":true},{"conditionGroups":[{"sectionId":null,"questionId":null,"conditions":[{"sectionId":"a7e15759-7464-4282-bdd6-49d825dd1224","questionId":"c03ea6b5-fa68-4e84-a071-cba7b6f14e69","logicalOperator":"OR","comparisonOperator":"EQUAL_TO","optionId":null,"optionType":"DEFAULT","responseCount":null,"option":null,"optionList":[{"optionId":"c5006f6d-b294-4e5b-a02f-071e5b8e0df4","option":"Yes","optionType":"DEFAULT"}],"dataElements":null,"dataCategories":null,"dataSubjects":null}],"logicalOperator":"AND"}],"action":"RISK_CREATION","actionParameters":{"level":4,"description":"Making data in clear available to a data importer in a third-country creates a high risk for the data subjects.","recommendation":"Adopt measures to pseudonymise, encrypt or protect information.","probabilityLevel":"VeryHigh","impactLevel":"VeryHigh","probabilityLevelId":4,"impactLevelId":4,"riskScore":8,"name":null,"categories":[{"id":"c402b042-8292-461f-953b-082307a57004"}],"controls":[{"id":"69201f20-c2c7-465f-91ef-3d0d5e24ce4b","identifier":"1.1.1","name":"The personal data is processed using strong encryption before transmission. [Use Case 1:Data storage for backup and other purposes that do not require access to data in the clear]","frameworkName":"EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"},{"id":"747f0a51-8858-41cd-8201-406d28a92000","identifier":"1.1.4","name":"The encryption algorithm is flawlessly implemented by properly maintained software the conformity of which to the specification of the algorithm chosen has been verified. [Use Case 1:Data storage for backup and other purposes that do not require access to data in the clear]","frameworkName":"EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"},{"id":"30f6a8d4-8ad2-43d9-9198-70a05729d7a6","identifier":"1.1.5","name":"The keys are reliably managed. [Use Case 1:Data storage for backup and other purposes that do not require access to data in the clear]","frameworkName":"EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"},{"id":"b6c5e4ae-778a-4a5b-9b75-7440d625d69d","identifier":"1.1.6","name":"The keys are retained solely under the control of the data exporter, or other entities entrusted with this task which reside in the EEA or other jurisdiction in accordance with Article 45. [Use Case 1:Data storage for backup and other purposes that do not require access to data in the clear]","frameworkName":"EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"},{"id":"b2d93439-4b1f-4fdb-909c-aa36081af800","identifier":"1.1.2","name":"The encryption algorithm and its parameterization conform to the state-of-the-art and can be considered robust against cryptanalysis performed by the public authorities in the recipient country. [Use Case 1:Data storage for backup and other purposes that do not require access to data in the clear]","frameworkName":"EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"},{"id":"4b00ad2e-e1d3-4c81-be08-f4788064ce63","identifier":"1.1.3","name":"The strength of the encryption takes into account the specific time period during which the confidentiality of the encrypted personal data must be preserved. [Use Case 1:Data storage for backup and other purposes that do not require access to data in the clear]","frameworkName":"EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"}],"customControls":null,"riskApprovers":[],"riskOwners":[],"threat":null,"vulnerabilities":null,"riskOwnerType":null,"riskApproverType":null,"riskTemplate":null,"targetRiskLevel":null,"attributeValues":{},"deadlineAfterDays":null,"reminder":null,"inventoryTypeAndFieldNameMapForApproverSource":null,"inventoryTypeAndFieldNameMapForOwnerSource":null},"conditionGroupType":"QUESTION_CONDITION","actionDetails":[{"id":"c0d812d6-5d43-484e-9b06-459316a4ed3d","actionRuleId":"15b759b9-fca3-44bf-a6fc-9a4c24379fcb","sectionId":"a7e15759-7464-4282-bdd6-49d825dd1224","questionId":"c03ea6b5-fa68-4e84-a071-cba7b6f14e69"}],"id":"15b759b9-fca3-44bf-a6fc-9a4c24379fcb","sequence":36,"rootVersionId":"b91c5409-cbc1-4995-9dab-b7515932b11c","name":"Access in clear - Yes","active":true},{"conditionGroups":[{"sectionId":null,"questionId":null,"conditions":[{"sectionId":"a7e15759-7464-4282-bdd6-49d825dd1224","questionId":"c03ea6b5-fa68-4e84-a071-cba7b6f14e69","logicalOperator":"OR","comparisonOperator":"NOT_EQUAL_TO","optionId":null,"optionType":"DEFAULT","responseCount":null,"option":null,"optionList":[{"optionId":"c5006f6d-b294-4e5b-a02f-071e5b8e0df4","option":"Yes","optionType":"DEFAULT"}],"dataElements":null,"dataCategories":null,"dataSubjects":null}],"logicalOperator":"AND"}],"action":"RISK_CREATION","actionParameters":{"level":null,"description":"Using proper encryption measures provides an effective supplementary measure. (EDPB 01/2020, Use Case 1)","recommendation":"Adopt proper encryption controls","probabilityLevel":null,"impactLevel":null,"probabilityLevelId":null,"impactLevelId":null,"riskScore":null,"name":null,"categories":[],"controls":[{"id":"69201f20-c2c7-465f-91ef-3d0d5e24ce4b","identifier":"1.1.1","name":"The personal data is processed using strong encryption before transmission. [Use Case 1:Data storage for backup and other purposes that do not require access to data in the clear]","frameworkName":"EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"},{"id":"747f0a51-8858-41cd-8201-406d28a92000","identifier":"1.1.4","name":"The encryption algorithm is flawlessly implemented by properly maintained software the conformity of which to the specification of the algorithm chosen has been verified. [Use Case 1:Data storage for backup and other purposes that do not require access to data in the clear]","frameworkName":"EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"},{"id":"30f6a8d4-8ad2-43d9-9198-70a05729d7a6","identifier":"1.1.5","name":"The keys are reliably managed. [Use Case 1:Data storage for backup and other purposes that do not require access to data in the clear]","frameworkName":"EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"},{"id":"b6c5e4ae-778a-4a5b-9b75-7440d625d69d","identifier":"1.1.6","name":"The keys are retained solely under the control of the data exporter, or other entities entrusted with this task which reside in the EEA or other jurisdiction in accordance with Article 45. [Use Case 1:Data storage for backup and other purposes that do not require access to data in the clear]","frameworkName":"EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"},{"id":"b2d93439-4b1f-4fdb-909c-aa36081af800","identifier":"1.1.2","name":"The encryption algorithm and its parameterization conform to the state-of-the-art and can be considered robust against cryptanalysis performed by the public authorities in the recipient country. [Use Case 1:Data storage for backup and other purposes that do not require access to data in the clear]","frameworkName":"EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"},{"id":"4b00ad2e-e1d3-4c81-be08-f4788064ce63","identifier":"1.1.3","name":"The strength of the encryption takes into account the specific time period during which the confidentiality of the encrypted personal data must be preserved. [Use Case 1:Data storage for backup and other purposes that do not require access to data in the clear]","frameworkName":"EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"}],"customControls":null,"riskApprovers":[],"riskOwners":[],"threat":null,"vulnerabilities":null,"riskOwnerType":null,"riskApproverType":null,"riskTemplate":null,"targetRiskLevel":null,"attributeValues":{},"deadlineAfterDays":null,"reminder":null,"inventoryTypeAndFieldNameMapForApproverSource":null,"inventoryTypeAndFieldNameMapForOwnerSource":null},"conditionGroupType":"QUESTION_CONDITION","actionDetails":[{"id":"2da99bee-7c8c-4f3f-bdef-6b13a3e9a79e","actionRuleId":"dc17a65e-ce0c-406c-b0ea-a5b77e3c734a","sectionId":"a7e15759-7464-4282-bdd6-49d825dd1224","questionId":"c03ea6b5-fa68-4e84-a071-cba7b6f14e69"}],"id":"dc17a65e-ce0c-406c-b0ea-a5b77e3c734a","sequence":37,"rootVersionId":"ff33c649-776e-40d4-8465-ba22a88815b8","name":"Access in clear - No","active":true},{"conditionGroups":[{"sectionId":null,"questionId":null,"conditions":[{"sectionId":"a7e15759-7464-4282-bdd6-49d825dd1224","questionId":"06d8a19c-1710-4a75-b013-fd6c9d084d68","logicalOperator":"OR","comparisonOperator":"NOT_EQUAL_TO","optionId":null,"optionType":"DEFAULT","responseCount":null,"option":null,"optionList":[{"optionId":"45b0f740-1481-410f-ad4b-6e92699a9bd2","option":"No","optionType":"DEFAULT"}],"dataElements":null,"dataCategories":null,"dataSubjects":null}],"logicalOperator":"AND"}],"action":"RISK_CREATION","actionParameters":{"level":3,"description":"Pseudonymization mght pose a risk for the data subjects, unless you adopt specific technical and organizational measures.","recommendation":"Adopt specific technical and organizational measures in order to make pseudonymisation effective.","probabilityLevel":"High","impactLevel":"High","probabilityLevelId":3,"impactLevelId":3,"riskScore":6,"name":null,"categories":[{"id":"c402b042-8292-461f-953b-082307a57004"}],"controls":[{"id":"c2311bff-fd55-400d-8718-044c35b9f07d","identifier":"1.2.1","name":"A data exporter transfers personal data processed in such a manner that the personal data can no longer be attributed to a specific data subject, nor be used to single out the data subject in a larger group, without the use of additional information. [Use Case 2:Transfer of pseudonymised Data]","frameworkName":"EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"},{"id":"85b52e9c-7c37-482a-9516-31714cbf8978","identifier":"1.2.2","name":"Additional information is held exclusively by the data exporter and kept separately in a Member State or other jurisdiction in accordance with Article 45. [Use Case 2:Transfer of pseudonymised Data]","frameworkName":"EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"},{"id":"48d19975-2d14-461a-b6b2-3a69856020e6","identifier":"1.2.5","name":"The controller has established that the pseudonymised personal data cannot be attributed to an identified or identifiable natural person even if cross-referenced with such information. [Use Case 2:Transfer of pseudonymised Data]","frameworkName":"EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"},{"id":"637c8406-9d4c-41d3-9c2e-d6ac02126006","identifier":"1.2.3","name":"Disclosure or unauthorised use of that additional information is prevented by appropriate technical and organisational safeguards. [Use Case 2:Transfer of pseudonymised Data]","frameworkName":"EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"},{"id":"06687014-4817-4e97-bc56-dfbc210a8c45","identifier":"1.2.4","name":"it is ensured that the data exporter retains sole control of the algorithm or repository that enables re-identification using the additional information. [Use Case 2:Transfer of pseudonymised Data]","frameworkName":"EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"}],"customControls":null,"riskApprovers":[],"riskOwners":[],"threat":null,"vulnerabilities":null,"riskOwnerType":null,"riskApproverType":null,"riskTemplate":null,"targetRiskLevel":null,"attributeValues":{},"deadlineAfterDays":null,"reminder":null,"inventoryTypeAndFieldNameMapForApproverSource":null,"inventoryTypeAndFieldNameMapForOwnerSource":null},"conditionGroupType":"QUESTION_CONDITION","actionDetails":[{"id":"c892433d-5408-4ce5-8bc6-fd66c4e8cb48","actionRuleId":"9163f921-d4b3-44b6-a854-c541c922be1b","sectionId":"a7e15759-7464-4282-bdd6-49d825dd1224","questionId":"06d8a19c-1710-4a75-b013-fd6c9d084d68"}],"id":"9163f921-d4b3-44b6-a854-c541c922be1b","sequence":38,"rootVersionId":"333dbd31-74c2-41b1-af9d-bcd0e16a4d40","name":"Pseudonymization","active":true},{"conditionGroups":[{"sectionId":null,"questionId":null,"conditions":[{"sectionId":"a7e15759-7464-4282-bdd6-49d825dd1224","questionId":"024e01b5-2f91-44e3-a6e7-d530d211e06c","logicalOperator":"OR","comparisonOperator":"NOT_EQUAL_TO","optionId":null,"optionType":"DEFAULT","responseCount":null,"option":null,"optionList":[{"optionId":"642e0c3f-4954-476e-9850-706fa2d4432d","option":"No","optionType":"DEFAULT"}],"dataElements":null,"dataCategories":null,"dataSubjects":null}],"logicalOperator":"AND"}],"action":"RISK_CREATION","actionParameters":{"level":4,"description":"Split or multi party processing may effectively safeguard a transfer, provided you apply specific controls.","recommendation":"Apply specific controls to ensure that split/multi party processing is effective.","probabilityLevel":"VeryHigh","impactLevel":"VeryHigh","probabilityLevelId":4,"impactLevelId":4,"riskScore":8,"name":null,"categories":[{"id":"c402b042-8292-461f-953b-082307a57004"}],"controls":[{"id":"91e7fb3c-2643-490e-b246-25a3e398159e","identifier":"1.5.4","name":"The algorithm used for the shared computation is secure against active adversaries. [Use Case 5:Split or multi-party processing]","frameworkName":"EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"},{"id":"b82fa4bb-9e85-4eb5-b600-3f44fcdba1aa","identifier":"1.5.3","name":"The processors optionally process the data jointly, e.g. using secure multi-party computation, in a way that no information is revealed to any of them that they do not possess prior to the computation. [Use Case 5:Split or multi-party processing]","frameworkName":"EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"},{"id":"a9b1c50f-fb21-4916-9735-556b73382516","identifier":"1.5.6","name":"The controller has established that the pieces of personal data it transmits to the processors cannot be attributed to an identified or identifiable natural person even if cross-referenced with such information. [Use Case 5:Split or multi-party processing]","frameworkName":"EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"},{"id":"0aa66946-ea59-421a-bee3-7b17a303631e","identifier":"1.5.2","name":"Each of the pieces is transferred to a separate processor located in a different jurisdiction. [Use Case 5:Split or multi-party processing]","frameworkName":"EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"},{"id":"5d12fe7d-791b-4fb7-acb8-e23d7af290a3","identifier":"1.5.1","name":"A data exporter processes personal data in such a manner that it is split into two or more parts each of which can no longer be interpreted or attributed to a specific data subject without the use of additional information. [Use Case 5:Split or multi-party processing]","frameworkName":"EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"},{"id":"ec8ba695-13ba-4750-ba76-e7365cc636c1","identifier":"1.5.5","name":"There is no evidence of collaboration between the public authorities located in the respective jurisdictions where each of the processors are located, which would allow them access to all sets of personal data held by the processors. [Use Case 5:Split or multi-party processing]","frameworkName":"EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"}],"customControls":null,"riskApprovers":[],"riskOwners":[],"threat":null,"vulnerabilities":null,"riskOwnerType":null,"riskApproverType":null,"riskTemplate":null,"targetRiskLevel":null,"attributeValues":{},"deadlineAfterDays":null,"reminder":null,"inventoryTypeAndFieldNameMapForApproverSource":null,"inventoryTypeAndFieldNameMapForOwnerSource":null},"conditionGroupType":"QUESTION_CONDITION","actionDetails":[{"id":"8e1433ae-b44d-423d-aff9-a1948d7d787c","actionRuleId":"7866c51b-1228-4ad5-a206-8e31bca6fbb4","sectionId":"a7e15759-7464-4282-bdd6-49d825dd1224","questionId":"024e01b5-2f91-44e3-a6e7-d530d211e06c"}],"id":"7866c51b-1228-4ad5-a206-8e31bca6fbb4","sequence":41,"rootVersionId":"3c81235d-6902-446c-88dd-eea99c162b4f","name":"Split or multi party processing","active":true},{"conditionGroups":[{"sectionId":null,"questionId":null,"conditions":[{"sectionId":"a7e15759-7464-4282-bdd6-49d825dd1224","questionId":"8859e842-ce09-49c5-98ca-f282de4a31e5","logicalOperator":"OR","comparisonOperator":"DOES_NOT_CONTAIN","optionId":null,"optionType":"DEFAULT","responseCount":null,"option":null,"optionList":[{"optionId":"84c83cc2-3475-4f2b-a843-0dfec4467fe0","option":"In-Transit Encryption","optionType":"DEFAULT"}],"dataElements":null,"dataCategories":null,"dataSubjects":null}],"logicalOperator":"AND"}],"action":"RISK_CREATION","actionParameters":{"level":3,"description":"Data is not encrypted in transit. This might entail a risk for the data subjects, although it shall be evaluated in combination with other controls.","recommendation":"Consider adopting one or more risk controls to mitigate this issue.","probabilityLevel":"High","impactLevel":"Medium","probabilityLevelId":3,"impactLevelId":2,"riskScore":5,"name":null,"categories":[],"controls":[{"id":"2eff9371-e3dc-4ed5-b820-17501415c799","identifier":"1.3.3","name":"Decryption is only possible outside the third country in question. [Use Case 3:Encrypted data merely transiting third countries]","frameworkName":"EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"},{"id":"ad045f19-3941-4214-8ea2-1affce189a5f","identifier":"1.3.9","name":"The encryption algorithm is flawlessly implemented by properly maintained software the conformity of which to the specification of the algorithm chosen has been verified, e.g., by certification. [Use Case 3:Encrypted data merely transiting third countries]","frameworkName":"EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"},{"id":"b937173a-d0b1-4e35-8b3a-2d779d93dea5","identifier":"1.3.11","name":"The keys are reliably managed, by the exporter or by an entity trusted by the exporter under a jurisdiction offering an essentially equivalent level of protection. [Use Case 3:Encrypted data merely transiting third countries]","frameworkName":"EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"},{"id":"a59a4ed2-2d0f-45b6-9050-3b8284ee0b19","identifier":"1.3.6","name":"In case the transport encryption does not provide appropriate security by itself, personal data is also encrypted end-to-end on the application layer using state-of-the-art encryption methods. [Use Case 3:Encrypted data merely transiting third countries]","frameworkName":"EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"},{"id":"bce50fdf-c0b6-4347-93eb-564a8b550bd5","identifier":"1.3.4","name":"The parties involved in the communication agree on a trustworthy public-key certification authority or infrastructure. [Use Case 3:Encrypted data merely transiting third countries]","frameworkName":"EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"},{"id":"c7b6a903-08b1-4cd7-bee2-83656610bcc1","identifier":"1.3.1","name":"A data exporter transfers personal data to a data importer in a jurisdiction ensuring adequate protection. [Use Case 3:Encrypted data merely transiting third countries]","frameworkName":"EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"},{"id":"540db5a9-09da-4e5c-a2f1-a08598e45689","identifier":"1.3.7","name":"The encryption algorithm and its parameterization conform to the state-of-the-art and can be considered robust against cryptanalysis performed by the public authorities in the transiting country. [Use Case 3:Encrypted data merely transiting third countries]","frameworkName":"EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"},{"id":"20e88098-ffb5-455f-a690-bab33cf4c909","identifier":"1.3.2","name":"It is ensured that the encryption protocols employed are state-of-the-art and provide effective protection against active and passive attacks with resources known to be available to the public authorities of the third country. [Use Case 3:Encrypted data merely transiting third countries]","frameworkName":"EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"},{"id":"ea9f071a-2957-4e90-9a17-f43bc3dc09b3","identifier":"1.3.8","name":"The strength of the encryption takes into account the specific time period during which the confidentiality of the encrypted personal data must be preserved. [Use Case 3:Encrypted data merely transiting third countries]","frameworkName":"EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"}],"customControls":null,"riskApprovers":[],"riskOwners":[],"threat":null,"vulnerabilities":null,"riskOwnerType":null,"riskApproverType":null,"riskTemplate":null,"targetRiskLevel":null,"attributeValues":{},"deadlineAfterDays":null,"reminder":null,"inventoryTypeAndFieldNameMapForApproverSource":null,"inventoryTypeAndFieldNameMapForOwnerSource":null},"conditionGroupType":"QUESTION_CONDITION","actionDetails":[{"id":"0cd98284-8342-4d04-90d1-9959e45596b6","actionRuleId":"75339ab6-cd4d-4b1e-b76e-b2ff433ad963","sectionId":"a7e15759-7464-4282-bdd6-49d825dd1224","questionId":"8859e842-ce09-49c5-98ca-f282de4a31e5"}],"id":"75339ab6-cd4d-4b1e-b76e-b2ff433ad963","sequence":42,"rootVersionId":"9b1d8b48-0635-4c62-8d03-63b9bfcfc962","name":"In-transit Encryption","active":true}],"settings":{"prepopulateAttributeQuestions":true,"gettingStartedBannerEnabled":false,"locked":false,"conditionType":"SHOW","customizeInstructionalMessage":false,"instructionalMessage":null,"optOutPrimaryRecordOnAssessmentLaunch":true,"userRespondentDelegation":false,"autoAssignPrimaryRecord":false,"restrictDisplayOfRespondentUserList":false,"allowMaturityScaleOnTemplate":false,"allowedAccessOptions":null,"enableScoreProfile":false},"inventoryRelationshipsByQuestionId":{"ad43751a-643b-423f-b0c5-90505d2d8adf":[{"id":"06936e9c-5f9e-493b-8ccc-59b26f36705c","relationshipType":"RelatedLinkType","sourceInventorySectionId":"9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb","sourceInventoryQuestionId":"ad43751a-643b-423f-b0c5-90505d2d8adf","destinationInventorySectionId":"ce0e1775-675d-4686-96e0-2a080a1b0ce3","destinationInventoryQuestionId":"4eac414a-5bd7-4900-ad57-7fe7bcaf7a1e"}]},"responseFilterByQuestionId":null,"responseFilterWithBusinessKeysByQuestionId":{},"businessKeyReference":null,"seedReference":null,"orgGroupId":"526ac23a-728c-4835-b979-776b0268b6f3","welcomeTitle":"Where would you like to begin?","frameworkTags":null,"languageCode":"en-us","hasQuestionsWithLibraryLabels":null,"scoreProfilesConfigured":false}}
Step 2: Utilize the Import Template API
Next, you'll use the Import Template API to effectively import the GDPR - TIA template into the OneTrust application by completing the following steps:
- Navigate to the Import Template API documentation page.
- Enter a valid authorization OAuth2 Bearer token.
- Verify that the
matchAttributesByNamequery parameter is set totrue. - Under the Body Params section, paste the JSON text that you copied from Step 1: Copy the Template.
- Under the Languages section, select your preferred language. The default language is cURL/Shell.
- Copy the example request and ensure that you update the hostname from
customer.my.onetrust.comto your OneTrust application's hostname such asapp.onetrust.com. - Perform the API operation. You can reference the two examples available below. If copying an example, ensure that you update the
hostnameandtokenparameters.
When leveraging the Import Template API to import the GDPR - TIA template, the request takes about 3-4 seconds. Ensure that your API client is configured to allow for at least 5 seconds to avoid a timeout error as some API clients default to 2 seconds.
curl --location 'https://<hostname>.onetrust.com/api/template/v2/templates/import?matchAttributesByName=true' \
--header 'Accept: application/json' \
--header 'Content-Type: application/json' \
--header 'Authorization: Bearer <token>' \
--data-raw '{
"template": {
"id": "01e74ccf-7c09-434f-aa10-3ff81db117d9",
"rootVersionId": "07a8c92d-a9c9-4dd9-9249-ba119237a883",
"name": "GDPR - Transfer Impact Assessment - 2.1 (TIA)",
"friendlyName": "GDPR TIA ",
"description": "Data exporters subject to the European Union'\''s General Data Protection Regulation should use this questionnaire to assess the lawfulness of any personal data transfer from the EU/EEA to a third country (i.e., destination country), namely, whether the third country provides an essentially equivalent level of data protection as that guaranteed in the EU). This assessment aligns with Step 1 (know your transfers), Step 2 (identify the transfer tools you are relying on), Step 3 (assess whether the Article 46 GDPR transfer tool you are relying on is effective in light of all circumstances of the transfer), and Step 6 (re-evaluate) in the European Data Protection Board'\''s \"Recommendations 01/2020 on measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data.\"",
"templateVersion": 9,
"templateType": "PIA",
"status": "PUBLISHED",
"icon": "ot-desktop",
"welcomeText": "<p><strong>Welcome to the GDPR Transfer Impact Assessment!</strong></p><p><br></p><p>This template consists of a dynamic GDPR Transfer Impact Assessment (TIA) based, in part, on the <a href=\"https://edpb.europa.eu/our-work-tools/documents/public-consultations/2020/recommendations-012020-measures-supplement_en\" rel=\"noopener noreferrer\" target=\"_blank\">Recommendations 01/2020 on measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data</a> (Supplementary Measures Recommendations) issued by the <a href=\"https://edpb.europa.eu/edpb_en\" rel=\"noopener noreferrer\" target=\"_blank\">European Data Protection Board</a> (EDPB).</p><p><br></p><p><strong>Background:</strong></p><p><br></p><p>According to <a href=\"http://curia.europa.eu/juris/document/document.jsf?text=&docid=228677&pageIndex=0&doclang=EN&mode=req&dir=&occ=first&part=1&cid=11549805\" rel=\"noopener noreferrer\" target=\"_blank\">Case C-311/18 - <em>Data Protection Commissioner v Facebook Ireland Ltd and Maximillian Schrems</em></a> (<em>Schrems II</em>), the <a href=\"https://curia.europa.eu/jcms/jcms/j_6/en/\" rel=\"noopener noreferrer\" target=\"_blank\">Court of Justice of the European Union</a> (CJEU) requires data exporters to assess whether the data importer'\''s third country provides essentially equivalent protections to the transferred personal data as guaranteed under the European Union <a href=\"https://eur-lex.europa.eu/eli/reg/2016/679/oj\" rel=\"noopener noreferrer\" target=\"_blank\">General Data Protection Regulation</a> (GDPR) and the <a href=\"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:12012P/TXT\" rel=\"noopener noreferrer\" target=\"_blank\">Charter of the Fundamental Rights of the European Union</a> (Charter). The CJEU stated that it is, above all, for the data exporter to verify, on a case-by-case basis and, where appropriate, in collaboration with the data importer, whether the law of the third country of destination ensures an essentially equivalent level of protection, under EU law, of personal data transferred under standard data protection clauses (i.e., based on <a href=\"https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en\" rel=\"noopener noreferrer\" target=\"_blank\">standard contractual clauses</a> (SCCs), <a href=\"https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/binding-corporate-rules-bcr_en\" rel=\"noopener noreferrer\" target=\"_blank\">binding corporate rules</a> (BCRs), or ad hoc contractual clauses), by providing, where necessary, supplementary measures to those offered by those clauses.</p><p>Finally, On 11 July 2023, the European Commission adopted its <a href=\"https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en\" rel=\"noopener noreferrer\" target=\"_blank\">adequacy decision for the EU-U.S. Data Privacy Framework (DPF)</a>. The EU concluded that the US provides adequate protection for personal data transferred to US companies self-certifying under the new framework. This decision was made after the US implemented new safeguards, pursuant <a href=\"https://www.justice.gov/opcl/executive-order-14086\" rel=\"noopener noreferrer\" target=\"_blank\">the Executive Order 14086</a>, to address concerns raised by the EU Court of Justice in the Schrems II decision. These safeguards ensure that US intelligence agencies only access necessary data in a proportional manner and establish a new specific redress mechanism for handling complaints.</p><p><br></p><p>This TIA aims to help data exporters ensure that the personal data transferred to a third country is afforded a level of protection essentially equivalent to that guaranteed within the EU/EEA in accordance with the following steps in the EDPB'\''s Supplementary Measures Recommendations:</p><p><br></p><ul><li><strong>Step 1:</strong> <u>Understand Your Transfers.</u> The initial step is to ensure comprehensive awareness of all your personal data transfers, verifying that the data is adequate, relevant, and necessary for its intended purpose, in accordance with the GDPR'\''s principle of \"data minimization\". It'\''s important to note that remote access from a third country or data storage on a non-EEA cloud also constitutes a transfer. If using an international cloud infrastructure, you must confirm if your data will be transferred to third countries unless the cloud provider is located in the EEA and guarantees that data won'\''t be processed in third countries.</li><li><strong>Step 2</strong>: <u>Determine Your Transfer Tool</u>. Identify the transfer tool your transfer depends on, as outlined in Chapter V of the GDPR. If the European Commission has deemed the destination of your data as adequate under Article 45 GDPR or the preceding Directive 95/46, provided the decision remains valid, no further steps are necessary except ongoing monitoring of the adequacy decision. If there is no adequacy decision, you need to employ a transfer tool specified in Article 46 GDPR. In some circumstances, you might rely on a derogation in Article 49 of GDPR, which should be applied strictly and not become the standard practice.</li><li><strong>Step 3</strong>: <u>Assess the Effectiveness of Your Transfer Tool</u>. Evaluate if any laws or practices in the third country could impact the effectiveness of your transfer tool in the context of your specific transfer. This assessment should prioritize the third country'\''s legislation relevant to your transfer and the Article 46 GDPR transfer tool you employ. Scrutinizing the third country'\''s public authorities'\'' practices can help verify if your transfer tool'\''s safeguards provide practical, adequate protection for the transferred personal data. This scrutiny is vital when:</li><li class=\"ql-indent-1\">The third country'\''s legislation that meets EU standards is not upheld in practice;</li><li class=\"ql-indent-1\">Practices incompatible with your transfer tool exist due to the absence of relevant legislation in the third country;</li><li class=\"ql-indent-1\">Your transferred data or importer falls or may fall under problematic legislation.</li><li>In the first two scenarios, you must suspend the transfer or implement supplementary measures to proceed. In the last scenario, given the uncertain application of problematic legislation, you can choose to suspend the transfer, implement supplementary measures, or proceed without additional measures if you can justify and document that problematic legislation will not apply to your transferred data and importer.</li><li><strong>Step 4:</strong> <u>Identify Supplementary Measures</u>. If your transfer tool'\''s effectiveness is undermined by the third country'\''s legislation or practices, supplementary measures are required to ensure an EU-equivalent level of data protection. Evaluate the efficacy of these measures in relation to your transfer, considering the third country'\''s laws and practices and the transfer tool you rely on. If no supplementary measure can ensure an equivalent level of protection, the transfer must be suspended or terminated.</li><li><strong>Step 5:</strong> <u>Take Formal Procedural Steps</u>. Depending on the Article 46 GDPR transfer tool employed, you might need to undertake formal procedural steps, which these recommendations specify. Consult your competent supervisory authorities as necessary.</li><li><strong>Step 6:</strong> <u>Continually Re-Evaluate Protection Level</u>. Regularly review the level of protection provided to the personal data you transfer to third countries, monitoring for any developments that might impact it. Data protection requires constant vigilance. Supervisory authorities may request your assessments and will consider the steps you'\''ve taken to ensure data protection when investigating complaints or compliance issues.</li></ul><p><br></p><p><u>This template is based on the following resources:</u></p><ul><li>The <a href=\"https://eur-lex.europa.eu/eli/reg/2016/679/oj\" rel=\"noopener noreferrer\" target=\"_blank\">General Data Protection Regulation</a> (Reg. UE 2016/679);</li><li>The Article 29 Working Party'\''s <a href=\"https://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=614108\" rel=\"noopener noreferrer\" target=\"_blank\">Adequacy Referential</a>;</li><li>The EDPB'\''s <a href=\"https://edpb.europa.eu/our-work-tools/our-documents/recommendations/recommendations-012020-measures-supplement-transfer_en\" rel=\"noopener noreferrer\" target=\"_blank\">Recommendations 01/2020 on measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data</a>; and</li><li>The EDPB'\''s <a href=\"https://edpb.europa.eu/our-work-tools/our-documents/recommendations/recommendations-022020-european-essential-guarantees_en\" rel=\"noopener noreferrer\" target=\"_blank\">Recommendations 02/2020 on the European Essential Guarantees for surveillance measures</a> (\"EDPB European Essential Guarantees\").</li><li>The EDPB'\''s <a href=\"https://edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-052021-interplay-between-application-article-3_en\" rel=\"noopener noreferrer\" target=\"_blank\">Guidelines 05/2021 on the Interplay between the application of Article 3 and the provisions on international transfers as per Chapter V of the GDPR</a>.</li></ul><p><br></p><p><br></p><p><strong>Key Terms:</strong></p><ul><li>“<u>Third Country</u>” means any country that is not a Member State of the European Economic Area, which includes the Member States of the European Union and Iceland, Norway, and Liechtenstein. The GDPR applies to the latter by virtue of the EEA Agreement, particularly its Annex XI and Protocol 37.</li><li>“<u>Data Exporter</u>” means the controller or processor within the EEA who transfers personal data to a controller or processor in a third country.</li><li>“<u>Data Importer</u>” means the controller or processor in a third country who receives or gets access to personal data transferred from the EEA.</li><li>\"<u>Data Transfer</u>\" means any disclosure of personal data by a Data exporter subject to the GDPR to a Data importer in a Third Country or an international organization, irrespective of whether the latter is subject to the GDPR.</li></ul><p><br></p><p><strong>Additional Resources:</strong></p><ul><li>General Data Protection Regulation (GDPR) - <a href=\"https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679&from=EN#d1e4227-1-1\" rel=\"noopener noreferrer\" target=\"_blank\">Chapter V - Transfers of personal data to third countries or international organizations</a></li><li>European Commission</li><li class=\"ql-indent-1\"><a href=\"https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en\" rel=\"noopener noreferrer\" target=\"_blank\">Standard Contractual Clauses</a> for Data Transfers between EU and non-EU Countries</li><li class=\"ql-indent-1\"><a href=\"https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/binding-corporate-rules-bcr_en\" rel=\"noopener noreferrer\" target=\"_blank\">Binding Corporate Rules</a> for data transfers within multinational companies</li><li>The Court of Justice of the European Union - <a href=\"https://curia.europa.eu/jcms/upload/docs/application/pdf/2020-07/cp200091en.pdf\" rel=\"noopener noreferrer\" target=\"_blank\">Press Release No 91/20: The Court of Justice invalidates Decision 2016/1250 on the adequacy of the protection provided by the EU-US Data Protection Shield</a></li><li>The European Data Protection Board</li><li class=\"ql-indent-1\"><a href=\"https://edpb.europa.eu/sites/edpb/files/files/file1/20200724_edpb_faqoncjeuc31118_en.pdf\" rel=\"noopener noreferrer\" target=\"_blank\">Frequently Asked Questions on the judgment of the Court of Justice of the European Union in Case C-311/18 - Data Protection Commissioner v Facebook Ireland Ltd and Maximillian Schrems</a>.</li><li class=\"ql-indent-1\"><a href=\"https://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=614108\" rel=\"noopener noreferrer\" target=\"_blank\">Adequacy Referential, WP 254 rev.01</a></li><li>The European Data Protection Supervisor</li><li class=\"ql-indent-1\">\"<a href=\"https://edps.europa.eu/press-publications/press-news/press-releases/2020/edps-statement-following-court-justice-ruling-case_en\" rel=\"noopener noreferrer\" target=\"_blank\">Statement following the Court of Justice ruling in Case C-311/18 Data Protection Commissioner v Facebook Ireland Ltd and Maximilian Schrems (“Schrems II”)</a>\"</li><li class=\"ql-indent-1\"><a href=\"https://edps.europa.eu/sites/edp/files/publication/17-06-01_necessity_toolkit_final_en_0.pdf\" rel=\"noopener noreferrer\" target=\"_blank\">Assessing the necessity of measures that limit the fundamental right to the protection of personal data: A Toolkit</a></li><li class=\"ql-indent-1\"><a href=\"https://edps.europa.eu/sites/edp/files/publication/19-12-19_edps_proportionality_guidelines_en.pdf\" rel=\"noopener noreferrer\" target=\"_blank\">EDPS Guidelines on assessing the proportionality of measures that limit the fundamental rights to privacy and to the protection of personal data</a></li><li>European Union Agency for Fundamental Rights and Council of Europe - <a href=\"https://echr.coe.int/Documents/Handbook_data_protection_ENG.pdf\" rel=\"noopener noreferrer\" target=\"_blank\">Handbook on European data protection law</a> (2018 edition)</li><li>Council of Europe/European Court of Human Rights - <a href=\"https://echr.coe.int/Documents/Guide_Art_8_ENG.pdf\" rel=\"noopener noreferrer\" target=\"_blank\">Guide on Article 8 of the European Convention on Human Rights</a> (31 December 2019)</li><li>Member States of the <a href=\"https://europa.eu/european-union/about-eu/countries_en\" rel=\"noopener noreferrer\" target=\"_blank\">European Union</a> (EU) and countries in the <a href=\"https://ec.europa.eu/eurostat/statistics-explained/index.php/Glossary:European_Economic_Area_(EEA)#:~:text=The%20European%20Economic%20Area%2C%20abbreviated,force%20on%201%20January%201994.\" rel=\"noopener noreferrer\" target=\"_blank\">European Economic Area</a> (EEA)</li><li>The <a href=\"https://legalinstruments.oecd.org/en/instruments/OECD-LEGAL-0487\" rel=\"noopener noreferrer\" target=\"_blank\">OECD Declaration on Government Access to Instruments Personal Data held by Private Sector Entities</a></li><li>Adequacy decision for the <a href=\"https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en\" rel=\"noopener noreferrer\" target=\"_blank\">EU-U.S. Data Privacy Framework (DPF)</a></li></ul><p><br></p><p><strong>For additional information on regulatory updates regarding International Data Transfers, </strong>visit the OneTrust DataGuidance <a href=\"https://www.dataguidance.com/comparisons/data-transfers\" rel=\"noopener noreferrer\" target=\"_blank\">Data Transfers Resources Portal</a>.</p><p><br></p><p><strong>Other FAQs</strong></p><p><em>1. How do I get help?</em></p><p>Commenting capabilities are built into this portal. You can flag certain answers with a \"not sure\" response or add comments, and our team will provide help directly within the questionnaire.</p><p><em>2.. What is OneTrust?</em></p><p>OneTrust is a tool that we use to automate privacy assessments across our organization. Using OneTrust will make it easier for our team to provide timely and relevant feedback on your projects.</p><p><br></p><p>--</p><p>OneTrust products, content and materials are for informational purposes only and not for the purpose of providing legal advice. You should contact your attorney to obtain advice with respect to any particular issue. OneTrust materials do not guarantee compliance with applicable laws and regulations. All trademarks, service marks, trade names, product names and logos appearing herein are the property of their respective owners.</p>",
"valid": true,
"active": null,
"sections": [
{
"name": "Introduction ",
"invalidQuestionCount": 0,
"id": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"rootVersionId": "e338ff0b-4195-45b2-a598-15ca06f59b50",
"sequence": 1,
"questions": [
{
"id": "7f8da3ab-7813-4e48-bae5-a3314220d3dd",
"content": "EDPB Supplementary Measures Recommendations Guidance",
"questionType": "STATEMENT",
"required": false,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":false}",
"description": "<p><strong>Key Guidance from the EDPB'\''s </strong><a href=\"https://edpb.europa.eu/our-work-tools/our-documents/recommendations/recommendations-012020-measures-supplement-transfer_en\" rel=\"noopener noreferrer\" target=\"_blank\"><strong>Recommendations 01/2020 on measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data</strong></a><strong>:</strong></p><p><br></p><ul><li>In the Schrems II judgment, the Court emphasizes the responsibilities of exporters and importers to ensure that the processing of personal data has been and will continue to be carried out in compliance with the level of protection set by EU data protection law and to suspend the transfer and/or terminate the contract where the importer of the data is not, or is no longer, able to comply with standard data protection clauses incorporated in the relevant contract between the exporter and the importer. The controller or processor acting as exporter must ensure that the importers collaborate with the exporter, where appropriate, in its performance of these responsibilities, by keeping it informed, for instance, of any development affecting the level of protection of the personal data received in the importer’s country. These responsibilities are an application of the GDPR principle of accountability to the data transfers.</li></ul><p><br></p><ul><li>An essentially equivalent level of protection to that guaranteed within the EU must accompany the data when it travels to third countries outside the EEA to ensure that the level of protection guaranteed by the GDPR is not undermined, both during and after the transfer.</li></ul><p><br></p><ul><li>The selected Article 46 GDPR transfer tool must be effective in ensuring that the level of protection guaranteed by the GDPR is not undermined by the transfer in practice.</li></ul><p><br></p><ul><li>In particular, the protection afforded to the transferred personal data in the third country must be essentially equivalent to that guaranteed in the EEA by the GDPR, read in light of the Charter of Fundamental Rights of the EU. This is not the case if the data importer is prevented from complying with its obligations under the chosen Article 46 GDPR transfer tool due to the third country’s legislation and practices applicable to the transfer, including during the transit of data from the exporter to the importer’s country.</li></ul><p><br></p><ul><li>You must first assess, where appropriate in collaboration with the importer, if there is anything in the law and/or practices in force in the third country that may impinge on the effectiveness of the appropriate safeguards of the Article 46 GDPR transfer tool you are relying on, in the context of your specific transfer. This implies determining whether your transfer falls within the scope of legislation and/or practices which may impinge on the effectiveness of your Article 46 GDPR transfer tool. The assessment required must be based first and foremost on legislation publicly available.</li></ul><p><br></p><ul><li>This assessment must contain elements concerning access to data by public authorities of the third country of your importer such as:</li></ul><p><br></p><ul><li class=\"ql-indent-1\">Elements on whether public authorities of the third country of your importer may seek to access the data with or without the data importer’s knowledge, in light of legislation, practice and reported precedents;</li></ul><p><br></p><ul><li class=\"ql-indent-1\">Elements on whether public authorities of the third country of your importer may be able to access the data through the data importer or through the telecommunication providers or communication channels in light of legislation, legal powers, technical, financial, and human resources at their disposal and of reported precedents.</li></ul><p><br></p><ul><li>You will need to look into the characteristics of each of your transfers and determine whether the domestic legal order and/or practices in force of the country to which data is transferred (or onward transferred) affect your transfers. The scope of your assessment is thus limited to the legislation and practices relevant to the protection of the specific data you transfer.</li></ul><p><br></p><ul><li>You should in any case pay specific attention to any relevant laws, in particular laws laying down requirements to disclose personal data to public authorities or granting such public authorities powers of access to personal data (for instance for criminal law enforcement, regulatory supervision or national security purposes). If these requirements or powers restrict the fundamental rights of data subjects while respecting their essence and being necessary and proportionate measures in a democratic society to safeguard important objectives as also recognised in Union or EU Member States’ law, they may not impinge on the commitments contained in the Article 46 GDPR transfer tool you are relying on.</li></ul><p><br></p><ul><li>You will need to assess relevant rules and practices of a general nature insofar as they have an impact on the effective application of the safeguards contained in the Article 46 GDPR transfer tool.</li></ul><p><br></p><ul><li>The obligations or powers resulting from such laws and practices will be considered to impinge on/be incompatible with the commitments of the Article 46 GDPR transfer tool if they:</li></ul><p><br></p><ul><li class=\"ql-indent-1\">Do not respect the essence of the fundamental rights and freedoms of the EU Charter of Fundamental Rights, or</li></ul><p><br></p><ul><li class=\"ql-indent-1\">Exceed what is necessary and proportionate in a democratic society to safeguard one of the important objectives as also recognised in Union or member state law such as those listed in Article 23 (1) GDPR.</li></ul>",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"rootVersionId": "01a0922d-da71-4128-ad47-3786d284d3ca",
"sequence": 1
},
{
"id": "bfacd15f-29a6-403a-9d6c-7d42451e8d83",
"content": "GDPR Data Transfer Definition",
"questionType": "STATEMENT",
"required": false,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true}",
"description": "<p>According to the EDPB'\''s <a href=\"https://edpb.europa.eu/system/files/2021-11/edpb_guidelinesinterplaychapterv_article3_adopted_en.pdf\" rel=\"noopener noreferrer\" target=\"_blank\">Guidelines 05/2021 on the Interplay between the application of Article 3 and the provisions on international transfers as per Chapter V of the GDPR</a>, under the GDPR, a <strong>data transfer</strong> occurs when:</p><p><br></p><ol><li>A controller or a processor is <strong>subject to the GDPR</strong> for the given processing.</li><li>This controller or processor (\"exporter\") <strong>discloses by transmission or otherwise makes personal data</strong>, subject to this processing, <strong>available</strong> to another controller, joint controller or processor (\"importer\").</li><li>The importer is <strong>in a third country or is an international organisation</strong>, irrespective of whether or not this importer is subject to the GDPR in respect of the given processing in accordance with Article 3.</li></ol><p><br></p><p><em>Note</em>:</p><ul><li>The second criterion implies that the concept of \"transfer of personal data to a third country or to an international organisation\" only applies to disclosures of personal data where two different (separate) parties (each of them a controller, joint controller or processor) are involved. In order to qualify as a transfer, there must be a controller or processor disclosing the data (the exporter) and a different controller or processor receiving or being given access to the data (the importer).</li></ul>",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"questionLaws": [
{
"name": "EU-GDPR"
}
],
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"rootVersionId": "64e67bce-1a5e-4352-b7ed-9be7af739447",
"sequence": 2
},
{
"id": "ad43751a-643b-423f-b0c5-90505d2d8adf",
"content": "Who are you transferring data to?",
"questionType": "RELATIONSHIP",
"required": true,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"id\":\"c7277f03-8358-4103-92f3-9ca339cd0cf6\",\"name\":\"Data Transfer\",\"nameKey\":\"InventoryLinking.DataTransferNameKey\",\"schemaName\":\"dataTransferSchema\",\"moduleName\":\"InventoryLinking\",\"seeded\":true,\"requireJustification\":false}",
"friendlyName": "Data Transfer",
"description": "<p>Please indicate the relevant transfer occurring between</p><ul><li><strong><u>the Data Exporter</u></strong> - the entity currently undertaking this assessment, which is sending or making data available data;</li><li><strong><u>the Data Importer</u></strong> - the entity to which data will be transferred.</li><li>Whereas possible, also indicate the <strong>processing activity in which context this transfer occurs.</strong></li></ul><p><br></p><p><strong><u>Note</u></strong>: this question presupposes you created records in related inventories for the importer and exporter and, where applicable, the processing activity in scope. If not, please consider starting a record for each entity as a preliminary step.</p><p>If you do not have the proper authorization to do it, please contact the administrator, who shall take this initial step.</p>",
"valid": true,
"prePopulateResponse": true,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": true,
"readOnly": false,
"translationIdentifier": "2c0c87cd-20a4-4b6a-a8c9-50603a745343",
"rootVersionId": "bed815e8-5cc5-49a7-b87a-9bea4c5bff3f",
"sequence": 3
},
{
"id": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"content": "What is the recipient country you are sending data to?",
"questionType": "MULTICHOICE",
"options": [
{
"id": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"option": "United States",
"sequence": 1,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null,
"translationIdentifier": "4e61d055-99b3-461d-9457-f0e22ce2def0"
},
{
"id": "9b13d90d-4314-42ee-8ff2-97422d090195",
"option": "European Economic Area",
"sequence": 2,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null,
"translationIdentifier": "082a6ff9-9b2e-4399-8a80-7fec4e463cf8"
},
{
"id": "5cde9447-d09a-44ea-96f8-58b0dc33abeb",
"option": "Adequate Country",
"sequence": 3,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null,
"translationIdentifier": "b5fb28bd-1b6f-47f7-b254-39727a90a08b"
},
{
"id": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"option": "Other Third Country",
"sequence": 4,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null,
"translationIdentifier": "62e36e56-c9d7-4747-8339-d299f56ef24c"
}
],
"required": true,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"requireJustification\":false,\"displayAnswerType\":\"dropdown\"}",
"friendlyName": "Recipient Country Geographic Area",
"description": "<p><strong><u>Guidance</u></strong></p><ul><li>Thoroughly select the appropriate option below to determine conditional logic on the following sections of this assessment.</li><li>The current list of adequate countries based on the European Commission decisions is available <a href=\"https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en\" rel=\"noopener noreferrer\" target=\"_blank\" style=\"background-color: rgb(255, 255, 255);\"><strong>here</strong></a>.</li><li>Select Other Third Country as a residual option, if none of the others is applicable</li></ul><p><br></p><p><u>Note</u>: In selecting the relevant country, remember it shall be where the data importer is established, either when physically transferring personal data or making them available for remote access outside the data exporter'\''s country.</p>",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"translationIdentifier": "5849a542-2bb8-4466-ae1b-ae226458d35f",
"rootVersionId": "0ddddefc-5e48-4cb7-85cc-aa56f61cf75a",
"sequence": 4
},
{
"id": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"content": "Is the recipient organization self-certified under the EU-US Data Privacy Framework (DPF)?",
"questionType": "YESNO",
"options": [
{
"id": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"option": "Yes",
"sequence": 1,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null,
"translationIdentifier": "08cf8210-4b3e-4d48-9cad-563adbd164c4"
},
{
"id": "1ea0461f-99de-4ac3-8d25-e1e785012832",
"option": "No",
"sequence": 2,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null,
"translationIdentifier": "22e5001c-f7f9-4048-a17e-5a5379f856a9"
},
{
"id": "a5dec21d-d87f-4b2f-93e8-561a5466410f",
"option": "NotApplicable",
"sequence": 3,
"attributes": null,
"hint": null,
"optionType": "NOT_APPLICABLE",
"optionKey": null
}
],
"required": true,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"allowJustification\":true,\"requireJustification\":false}",
"friendlyName": "EU-US Data Privacy Framework",
"description": "<p>On 11 July 2023, the European Commission adopted its <a href=\"https://commission.europa.eu/system/files/2023-07/Adequacy%20decision%20EU-US%20Data%20Privacy%20Framework_en.pdf\" rel=\"noopener noreferrer\" target=\"_blank\">Adequacy Decision on the adequate level of protection of personal data under the EU-US Data Privacy Framework</a>. The decision concludes that the United States ensures an adequate level of protection – compared to that of the EU - for personal data transferred from the EU to US companies participating in the EU-U.S. Data Privacy Framework.</p><p><br></p><p>Eligible US companies can certify their participation in the EU-U.S. Data Privacy Framework by committing to comply with a detailed set of Privacy Principles, including Notice, Choice, Accountability for Onward Transfer, Security, Data Integrity and Purpose Limitation, Access, Recourse, Enforcement and Liability.</p><p><br></p><p>The list of organizations currently participating in the DPF is available at: <a href=\"https://www.dataprivacyframework.gov/s/participant-search\" rel=\"noopener noreferrer\" target=\"_blank\">https://www.dataprivacyframework.gov/s/participant-search</a>.</p>",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"translationIdentifier": "a9a63f87-ac7d-4a1b-bb6b-7da18c008513",
"rootVersionId": "f9a97a71-bc90-416a-b155-8dba90bdc275",
"sequence": 5
},
{
"id": "17fe032b-96fe-4aee-b598-4af6b681954e",
"content": "What cross-border transfer mechanism are you relying on for this transfer?",
"questionType": "ATTRIBUTE",
"options": [
{
"id": "9b913b66-8dd6-4854-904f-39157a329e14",
"option": "NotApplicable",
"sequence": 1,
"attributes": null,
"hint": null,
"optionType": "NOT_APPLICABLE",
"optionKey": null
}
],
"required": true,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"attributeId\":\"96616e43-f4c5-46f4-a896-bffc6028e944\",\"allowJustification\":true,\"attributeType\":\"none\",\"displayAnswerType\":\"dropdown\",\"fieldName\":\"transferMechanism\",\"name\":\"Transfer Mechanism\",\"nameKey\":\"InventoryLinking.TransferMechanism\",\"requireJustification\":false,\"responseType\":\"single-select\",\"showQuestionDetailsLink\":false}",
"friendlyName": "Cross-border Transfer Mechanism",
"description": "<p>Please select the relevant transfer mechanism among the following:</p><ul><li>Standard data protection clauses (SCCs); </li><li>Binding corporate rules (BCRs);</li><li>Codes of conduct;</li><li>Certification mechanisms;</li><li>Ad hoc contractual clauses</li><li>Derogations (article 49 GDPR).</li></ul>",
"parentQuestionId": "ad43751a-643b-423f-b0c5-90505d2d8adf",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"translationIdentifier": "c0a4032b-2d96-47dd-8626-0d303885fc09",
"rootVersionId": "e4c8a64c-e4c9-4c7f-8dd6-9cb1a6b458c8",
"sequence": 6
}
]
},
{
"name": "Context of the Transfer",
"invalidQuestionCount": 0,
"translationIdentifier": "8ca7d6ce-b694-4ce3-8f54-c6a4d08873f9",
"id": "ce0e1775-675d-4686-96e0-2a080a1b0ce3",
"rootVersionId": "49e65348-3e16-4539-bff2-795725b8998b",
"sequence": 2,
"questions": [
{
"id": "8f63bb92-f2a1-4e16-a265-8fa14d90addb",
"content": "What is the purpose for which you are transferring personal data?",
"questionType": "TEXTBOX",
"options": [
{
"id": "e66148a0-056f-4845-a01a-479d5e8ff61c",
"option": "",
"sequence": 1,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null,
"translationIdentifier": "1f985697-4515-458d-b70d-0c7d3f2630b9"
}
],
"required": false,
"attributes": "{\"isQuestionHintEnabled\":false,\"requireJustification\":false,\"allowLaws\":true}",
"friendlyName": "Purpose of transfer",
"description": "<p>Please define the purpose for which you are transferring personal data.</p><p>If you selected a specific activity in which context the transfer happens, under question 1.3, please further elaborate on why the transfer is needed to accomplish that purpose.</p>",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"translationIdentifier": "7f9f483e-de43-41be-b6d0-adede1a1f9c7",
"rootVersionId": "e0069f67-6a3f-410e-aecd-c7630f71bd03",
"sequence": 1
},
{
"id": "4eac414a-5bd7-4900-ad57-7fe7bcaf7a1e",
"content": "Whose and what personal data are you transferring?",
"questionType": "PERSONAL_DATA",
"required": true,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"attributeId\":null,\"requireJustification\":false}",
"friendlyName": "Personal Data",
"description": "<p>Please select the relevant categories of data subjects and the related data elements subject to this transfer operation.</p>",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"translationIdentifier": "8248b94b-1f73-48d8-9d11-9c81e1481c35",
"rootVersionId": "73d60132-fb3d-4100-bde0-12329aa2d47c",
"sequence": 2
},
{
"id": "9a5b69a6-3246-4aee-b468-d5be58ece7f8",
"content": "What is the relationship between the entities transferring data?",
"questionType": "MULTICHOICE",
"options": [
{
"id": "398f7a2a-592d-414a-9910-9984701db013",
"option": "Controller to Processor",
"sequence": 1,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null,
"translationIdentifier": "05ed116b-102b-433c-b2cf-f47c34ffe79f"
},
{
"id": "eb68f7f8-d456-470e-a06f-44f276a28b33",
"option": "Controller to Controller",
"sequence": 2,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null,
"translationIdentifier": "a03dc168-cb22-4a79-a023-726171c34aab"
},
{
"id": "227c7e5a-e130-4261-9494-60054a2ae688",
"option": "Processor to (Sub-)Processor",
"sequence": 3,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null,
"translationIdentifier": "9fe601a1-6437-4a6f-a815-1c188a75a3e1"
},
{
"id": "65f9064b-dcf9-48df-9216-cbf4695464a3",
"option": "Processor to Controller",
"sequence": 4,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null,
"translationIdentifier": "2bfb1925-dcf9-49cf-89c2-7d36eaafdc85"
}
],
"required": false,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"displayAnswerType\":\"dropdown\",\"requireJustification\":false}",
"friendlyName": "Parties Relationship",
"description": "<p>Please select the correct relationship among those listed below.</p><p><br></p><p><u>Note</u>: the 2021 European Commission'\''s Standard Contractual Clauses has a modular approach based on the four scenarios below. </p><p>Select the functional module based on the parties'\'' relationship if you rely on the SCCs as a transfer tool.</p>",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"translationIdentifier": "c5e8a1fc-9129-49c8-8b99-bc3e4819f667",
"rootVersionId": "4e49179d-c09b-462f-ace4-52a8f9e3ccdd",
"sequence": 3
},
{
"id": "1fa545b5-8c52-4031-8690-55aebf273045",
"content": "What is the volume of data you are transferring?",
"questionType": "ATTRIBUTE",
"required": false,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"attributeId\":\"ceb29eeb-e7c1-443c-a799-1b6f6d8fe42d\",\"allowJustification\":false,\"attributeType\":\"none\",\"fieldName\":\"volumeOfData\",\"name\":\"Volume of data\",\"nameKey\":\"InventoryLinking.VolumeOfData\",\"requireJustification\":false,\"responseType\":\"text\",\"showQuestionDetailsLink\":false}",
"friendlyName": "Volume of data",
"description": "<p>Please select the relevant volume of data you are going to transfer.</p>",
"parentQuestionId": "ad43751a-643b-423f-b0c5-90505d2d8adf",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"translationIdentifier": "723a0959-65a7-44db-b7ef-649651d2069b",
"rootVersionId": "75e65505-9e88-4ebc-9d76-576d815d0654",
"sequence": 4
},
{
"id": "ecdbab18-bc8c-46a1-81b8-96a954e8869b",
"content": "What is the frequency of this transfer?",
"questionType": "ATTRIBUTE",
"required": false,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"attributeId\":\"7e1787e3-cdc0-455b-b197-d7614f744632\",\"allowJustification\":false,\"attributeType\":\"none\",\"fieldName\":\"frequencyOfTransfer\",\"name\":\"Frequency of transfer\",\"nameKey\":\"InventoryLinking.FrequencyOfTransfer\",\"requireJustification\":false,\"responseType\":\"text\",\"showQuestionDetailsLink\":false}",
"friendlyName": "Frequency of transfer",
"description": "<p>Please indicate the frequency of this transfer to the best of your knowledge.</p>",
"parentQuestionId": "ad43751a-643b-423f-b0c5-90505d2d8adf",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"translationIdentifier": "01068a35-7ce9-417f-92ba-451d4ef172f7",
"rootVersionId": "92e92f11-b25b-4487-a308-cb193e84cb85",
"sequence": 5
},
{
"id": "662282e9-4a04-462b-9751-77d8fe231f3d",
"content": "What are the applicable surveillance or security laws that may affect this transfer?",
"questionType": "ATTRIBUTE",
"required": false,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"attributeId\":\"873516bf-b2ff-469e-a2f9-1a66cf5c9225\",\"allowJustification\":false,\"attributeType\":\"none\",\"displayAnswerType\":\"button\",\"fieldName\":\"securityLaws\",\"name\":\"Applicable surveillance or security laws\",\"nameKey\":\"InventoryLinking.SecurityLaws\",\"requireJustification\":false,\"responseType\":\"multi-select\",\"showQuestionDetailsLink\":false}",
"friendlyName": "Applicable surveillance or security laws",
"description": "<p>Please select the relevant surveillance or security laws that might affect this transfer as soon as data leave the data exporter.</p>",
"parentQuestionId": "ad43751a-643b-423f-b0c5-90505d2d8adf",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"translationIdentifier": "cba141c1-25da-4e22-8ce9-a19c3a9673b7",
"rootVersionId": "46b90e45-991b-47ba-9f09-1b2464d101bf",
"sequence": 6
},
{
"id": "cc2e821c-0f20-4bd2-a1e4-06b8e51ffca6",
"content": "Do any onward transfers occur?",
"questionType": "TEXTBOX",
"required": false,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true}",
"friendlyName": "Onward Transfers",
"description": "<p>Please indicate any onward transfers you are aware of in collaboration with the data importer.</p><p>Onward transfers shall take place from the data importer'\''s country to further third countries.</p><p><br></p><p><br></p>",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"translationIdentifier": "b563c21b-0e4c-4a75-aed4-9330611daf80",
"rootVersionId": "22405257-b581-41cb-98e9-ac6fc5db4953",
"sequence": 7
},
{
"id": "38b5c136-37c8-4b63-8493-21e5553c4e25",
"content": "Do the parties have entered a legal agreement for processing personal data?",
"questionType": "YESNO",
"options": [
{
"id": "3dc0c1e6-45be-4623-8ece-ac5b5b91d09a",
"option": "Yes",
"sequence": 1,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null,
"translationIdentifier": "0bb5536c-ad54-4406-a49d-d0dd9cf52cd4"
},
{
"id": "9f583c9c-75a2-4e3a-9bac-1c7b4aa5d93b",
"option": "No",
"sequence": 2,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null,
"translationIdentifier": "ee2d650a-aa7f-48bc-8970-52e06b300dd5"
},
{
"id": "fcce2cd7-acd7-40e9-bba6-d66ca21e619f",
"option": "NotApplicable",
"sequence": 3,
"attributes": null,
"hint": null,
"optionType": "NOT_APPLICABLE",
"optionKey": null
}
],
"required": false,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"requireJustification\":false}",
"friendlyName": "Data Processing Agreement",
"description": "<p>Depending on the selected Cross-border transfer mechanism, this agreement may be integrated or replaced by the relevant transfer tool.</p><p><br></p><p><u>Note</u>: If yes, please attach the evidence.</p>",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"translationIdentifier": "d09223cd-55cf-41a3-b4a4-3eeb761f2a9c",
"rootVersionId": "fdb2aef8-29fb-4cf0-8681-6fdba3f4ee6d",
"sequence": 8
},
{
"id": "42d97c55-0e95-4aba-97fa-f1df55ed0f25",
"content": "Does the data importer have previous experience in dealing with such transfers?",
"questionType": "YESNO",
"options": [
{
"id": "d03e0b12-f29c-40bf-a197-03bd7f251126",
"option": "Yes",
"sequence": 1,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null,
"translationIdentifier": "fc4a2ec3-9aad-4920-8e3f-cd52a433bb14"
},
{
"id": "8081f1f1-da36-4007-9d5e-0ef33a35a7db",
"option": "No",
"sequence": 2,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null,
"translationIdentifier": "1f9a44f1-6d32-4a48-9a98-312729e18c87"
},
{
"id": "10764c77-cdb3-447d-9316-1645e884ea05",
"option": "NotSure",
"sequence": 3,
"attributes": null,
"hint": null,
"optionType": "NOT_SURE",
"optionKey": null
}
],
"required": false,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"allowJustification\":true,\"requireJustification\":false}",
"friendlyName": "Documented Practical Experience of the Importer",
"description": "<p><strong><u>Guidance</u></strong></p><p>Answer this question, in collaboration with the data importer in light of the following excerpt from the Recommendation 01/2020 EDPB:</p><ul><li>\"Y<em>ou may also take into consideration </em><strong><em>documented practical experience of the importer with relevant prior instances of requests for access </em></strong><em>received from public authorities in the third country. You will only be able to use the experience of the importer as an additional source of information if the legal framework of the third country does not prohibit the importer to provide information on requests for disclosure from public authorities or on the absence of such requests (and you should also document such an assessment). You must however note that the absence of prior instances of requests received by the importer can never be considered, by itself, as a decisive factor on the effectiveness of the Article 46 GDPR transfer tool that allows the transfer to proceed without supplementary measures. You will be able to consider this information, together with other types of information obtained from other sources, as part of your overall assessment of the laws and practices of the third country in relation to your transfer.</em>\"</li></ul><p><br></p><p>Please consider attaching supporting evidence where possible.</p>",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"translationIdentifier": "f0a83faf-184f-4109-a12f-33e8c36fcf84",
"rootVersionId": "48d10b64-1bd5-4980-9498-abfc70035ae3",
"sequence": 9
}
]
},
{
"name": "Third Country Assessment",
"invalidQuestionCount": 0,
"id": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"rootVersionId": "ddb64a91-a544-49f3-b092-79d6ea0ce646",
"sequence": 3,
"questions": [
{
"id": "877540cb-6ac5-4275-a4d0-8e1073828050",
"content": "Have you, in a previous assessment, deemed the country safe for personal data transfers? ",
"questionType": "YESNO",
"options": [
{
"id": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"option": "Yes",
"sequence": 1,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "fbb62d8f-70de-4c5d-9ac3-a85584cb117a",
"option": "No",
"sequence": 2,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "7f47b5c1-4746-40b5-add8-6915a5890fc0",
"option": "NotSure",
"sequence": 3,
"attributes": null,
"hint": null,
"optionType": "NOT_SURE",
"optionKey": null
}
],
"required": true,
"attributes": "{\"isQuestionHintEnabled\":false,\"requireJustification\":false,\"allowLaws\":true,\"allowJustification\":true}",
"friendlyName": "Previous assessment",
"description": "<p>If you have already assessed the country for a similar transfer, you might not need a new assessment. However, please be reminded that each transfer might be subject to different laws and circumstances.</p><p><br></p><p>Please select <strong>yes</strong> only if you are sure that the circumstances surrounding the country haven'\''t changed.</p>",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"rootVersionId": "8a607b21-4fe1-48d8-ba33-963cc7af05a2",
"sequence": 1
},
{
"id": "4df5d952-6507-4317-8291-ece329137f78",
"content": "EDPB Third Country Assessment Guidance",
"questionType": "STATEMENT",
"required": false,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":false}",
"description": "<p>Your data importer should provide you with the relevant sources and information relating to the third country in which it is established and the laws and practices in force applicable to the transfer.</p><p><br></p><p>In addition to the legal framework of the third country applicable to the transfer, sources and information should be relevant, objective, reliable, verifiable and publicly available or otherwise accessible to determine whether your Article 46 transfer tool can be effectively applied and you will have to assess and document that they are.</p><p><br></p><ul><li class=\"ql-indent-1\"><strong>Relevant:</strong> the information must be relevant to the specific transfer and/or importer and their compliance with the requirements set in EU law and the Article 46 GDPR transfer instrument, and not overly general or abstract.</li><li class=\"ql-indent-1\"><strong>Objective information:</strong> is information supported by empirical evidence based on knowledge gained from the past, not assumptions about potential events and risks.</li><li class=\"ql-indent-1\"><strong>Reliable:</strong> the exporter and the importer must objectively assess the reliability of the source of information and the information itself and evaluate them separately.</li><li class=\"ql-indent-1\"><strong>Verifiable:</strong> information and conclusions should be verifiable or contrastable with other types of information or sources as part of an overall assessment, also to allow the competent supervisory or judicial authority to check the objectivity and reliability of this information if needed.</li><li class=\"ql-indent-1\"><strong>Publicly available or otherwise accessible information:</strong> information should preferably be public or at least accessible to facilitate the verification of the criteria made above and ensure its possible sharing with supervisory authorities, judicial authorities and ultimately, data subjects.</li></ul><p><br></p><p>You may also take into consideration the <u>documented practical experience of the importer </u>with relevant prior instances of requests for access received from public authorities in the third country. You will only be able to use the experience of the importer as an additional source of information if the legal framework of the third country does not prohibit the importer from providing information on requests for disclosure from public authorities or in the absence of such requests (and you should also document such an assessment). You must, however, note that the absence of prior instances of requests received by the importer can never be considered, by itself, as a decisive factor in the effectiveness of the Article 46 GDPR transfer tool that allows the transfer to proceed without supplementary measures. You will be able to consider this information, together with other types of information obtained from other sources, as part of your overall assessment of the laws and practices of the third country concerning your transfer. The relevant and documented experience of the importer should be corroborated and not contradicted by relevant, objective, reliable, verifiable and publicly available or otherwise accessible information on the practical application of the applicable law (e.g. the existence or absence of requests for access received by other actors operating within the same sector and/or related to similar transferred personal data and/or the application of the law in practice, such as case law and reports by independent oversight bodies).</p>",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"rootVersionId": "811241eb-09c1-463c-bebf-586e88da7ff9",
"sequence": 2
},
{
"id": "32b7b8f5-450c-4f64-9332-558801da9a00",
"content": "Possible Sources of Information to Assess a Third Country",
"questionType": "STATEMENT",
"required": false,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":false}",
"description": "<p>Your data importer should be in a position to provide you with relevant sources and information relating to the third country in which it is established, including the laws and the practices applicable to the importer and the data transferred. You and the importer may refer to several sources of information, such as the ones non-exhaustively listed below and presented by order of preference:</p><p><br></p><ul><li>Case-law of the Court of Justice of the European Union (CJEU) and of the European Court of Human Rights (ECtHR) as referred to in the European Essential Guarantees recommendations;</li></ul><p><br></p><ul><li>Adequacy decisions in the country of destination if the transfer relies on a different legal basis;</li></ul><p><br></p><ul><li>Resolutions and reports from intergovernmental organisations, such as the Council of Europe, other regional bodies, and UN bodies and agencies (e.g. UN Human Rights Council, Human Rights Committee);</li></ul><p><br></p><ul><li>Reports and analysis from competent regulatory networks, such as the Global Privacy Assembly (GPA);</li></ul><p><br></p><ul><li>National case-law or decisions taken by independent judicial or administrative authorities competent on data privacy and data protection of third countries;</li></ul><p><br></p><ul><li>Reports of independent oversight or parliamentary bodies;</li></ul><p><br></p><ul><li>Reports based on practical experience with prior instances of requests for disclosure from public authorities, or the absence of such requests, from entities active in the same sector as the importer;</li></ul><p><br></p><ul><li>Warrant canaries of other entities processing data in the same field as the importer;</li></ul><p><br></p><ul><li>Reports produced or commissioned by Chambers of commerce, business, professional and trade associations, governmental diplomatic, trade and investment agencies of the exporter or other third countries exporting to the third country to which the transfer is made;</li></ul><p><br></p><ul><li>Reports from academic institutions, and civil society organizations (e.g. NGOs);</li></ul><p><br></p><ul><li>Reports from private providers of business intelligence on financial, regulatory and reputational risks for companies;</li></ul><p><br></p><ul><li>Warrant canaries of the importer itself;</li></ul><p><br></p><ul><li>Transparency reports, on the condition that they expressly mention the fact that no access requests were received. Transparency reports merely silent on this point would not qualify as sufficient evidence as these reports most often focus on access requests received from law enforcement authorities and provide figures only on this aspect while remaining silent on access requests for national security purposes received. This does not mean that no access requests were received but rather that this information cannot be shared;</li></ul><p><br></p><ul><li>Internal statements or records of the importer expressly indicating that no access requests were received for a sufficiently long period; and with a preference for statements and records engaging the liability of the importer and/or issued by internal positions with some autonomy such as internal auditors, DPOs, etc.</li></ul>",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"rootVersionId": "cd6c93ed-7707-493a-bf34-43bd447aafdd",
"sequence": 3
},
{
"id": "08dc64a1-3770-40e5-840c-f7a66f4042c1",
"content": "United States \uD83C\uDDFA\uD83C\uDDF8 - Third Country Assessment",
"questionType": "STATEMENT",
"required": false,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true}",
"description": "<p class=\"ql-align-justify\"><strong>Rule of Law and Respect for Human Rights in the US</strong></p><p class=\"ql-align-justify\">The United States upholds the rule of law and respects human rights through its <a href=\"https://www.dataguidance.com/legal-research/constitution-united-states\" rel=\"noopener noreferrer\" target=\"_blank\">Constitution</a> and <a href=\"https://www.dataguidance.com/legal-research/bill-rights-1789\" rel=\"noopener noreferrer\" target=\"_blank\">Bill of Rights</a>, securing civil rights, including free speech, peaceful assembly, protection against unreasonable search and seizure, a fair trial, and protection from cruel and unusual punishment. The Fourth Amendment ensures people'\''s security in their persons, houses, papers, and effects against unreasonable searches and seizures. All law enforcement and regulatory activities must conform to applicable law, including the US Constitution, statutes, rules, and regulations. Judicial redress avenues are available for individuals against public authorities processing personal data, open to all individuals irrespective of their nationality. The US also ensures a level of protection for personal data transferred from the Union to the US under the EU-U.S. Data Privacy Framework, with safeguards ensuring that the US signals intelligence activities are necessary and proportionate in the pursuit of defined national security objectives.</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\">Additionally, the US ranks:</p><ul><li class=\"ql-align-justify\">26/128 on the <a href=\"https://worldjusticeproject.org/rule-of-law-index/\" rel=\"noopener noreferrer\" target=\"_blank\">World Justice Project Rule of Law Index</a> 2022</li><li class=\"ql-align-justify\">83/100 on the <a href=\"https://freedomhouse.org/country/united-states/freedom-world/2021\" rel=\"noopener noreferrer\" target=\"_blank\">Freedom House'\''s Freedom in the World Report</a> 2023</li></ul><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong>Comprehensive Privacy Laws in the US</strong></p><p class=\"ql-align-justify\">Several US states have enacted data protection laws, indicative of a growing trend towards comprehensive privacy legislation. The California Consumer Privacy Act of 2018, California Privacy Rights Act, Virginia'\''s Consumer Data Protection Act, and Colorado'\''s Protection of Data Relating to Personal Privacy Act are notable examples. Complementing these state laws is the Federal Privacy Act of 1974, which ensures fair information practices across federal agencies. The US employs a sectoral approach to privacy protection, relying on a mix of legislation, regulation, and self-regulation. The FTC Act'\''s prohibition on unfair or deceptive acts or practices extends protections to foreign consumers, and the EU-U.S. Data Privacy Framework, issued by the US Department of Commerce in collaboration with the European Commission, further safeguards personal data transferred from the Union to the US.</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\">A complete and up-to-date overview of the approved and proposed privacy legislation is accessible <a href=\"https://www.dataguidance.com/comparisons/usa-privacy-laws\" rel=\"noopener noreferrer\" target=\"_blank\">here</a>.</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong>Sectoral Privacy Legislation in the US</strong></p><p class=\"ql-align-justify\">Privacy is further safeguarded by numerous federal laws and regulations that are sector-specific. <a href=\"https://platform.dataguidance.com/legal-research/health-insurance-portability-and-accountability-act-1996\" rel=\"noopener noreferrer\" target=\"_blank\">Health Insurance Portability and Accountability Act of 1996</a> (HIPAA) protects health information, the <a href=\"https://platform.dataguidance.com/legal-research/gramm-leach-bliley-act-1999-glba\" rel=\"noopener noreferrer\" target=\"_blank\">Gramm-Leach-Bliley Act of 1999</a> (GLBA) safeguards financial institutions, and the <a href=\"https://platform.dataguidance.com/legal-research/childrens-online-privacy-protection-act-1998-coppa\" rel=\"noopener noreferrer\" target=\"_blank\">Children'\''s Online Privacy Protection Act of 1998</a> (COPPA) applies to online services directed at children.</p><p class=\"ql-align-justify\">Laws addressing deceptive telemarketing, commercial email regulation, consumer credit reporting, and restrictions on telemarketing calls also exist. Electronic surveillance is regulated by federal and state laws such as the Omnibus Crime Control and Safe Streets Act, Electronic Communications Privacy Act (ECPA), and <a href=\"https://bja.ojp.gov/program/it/privacy-civil-liberties/authorities/statutes/1286\" rel=\"noopener noreferrer\" target=\"_blank\">Foreign Intelligence Surveillance Act</a> (FISA).</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong>Privacy Legislation, Data Protection and Security Rules in the US</strong></p><p class=\"ql-align-justify\">Data protection and privacy regulation in the US consist of a patchwork of federal and state laws, with the FTC Act holding the broadest jurisdiction. The country'\''s intelligence activities are guided by <a href=\"https://www.justice.gov/opcl/executive-order-14086\" rel=\"noopener noreferrer\" target=\"_blank\">Executive Order 14086</a>, which stipulates provisions for personal data collection and processing.</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong>Privacy Concepts and Principles in the US</strong></p><p class=\"ql-align-justify\">US privacy principles resonate with common data protection concepts like lawful and fair processing, purpose limitation, data quality, and retention and security. State laws, such as California'\''s CCPA and CPRA, Virginia'\''s CDPA, and Colorado'\''s CPA, build upon these principles, as do federal laws like HIPAA, GLBA, COPPA, and the Privacy Act of 1974.</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong>Independent Supervisory Authority in the US</strong></p><p class=\"ql-align-justify\">The US does not have a single federal authority for data protection compliance, but it'\''s monitored by a range of agencies such as the FTC, SEC, OCC, the Board, FDIC, NCUA, and CFPB, each overseeing a different sector.</p><p class=\"ql-align-justify\">On a state level, monitoring is usually conducted by the Attorney Generals or District Attorneys.</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong>International Commitments and Obligations of the US</strong></p><p class=\"ql-align-justify\">The US is part of various international commitments, including Mutual Legal Assistance Treaties (MLAT) with many countries, membership in the Budapest Convention on Cybercrime, and adherence to the OECD Privacy Framework. It is also a party to several international agreements safeguarding privacy rights.</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong>Problematic Legislation Subject to Transfers in the US</strong></p><p class=\"ql-align-justify\">Surveillance laws in the US, like the Wiretap Act, Stored Communications Act (SCA), and the Foreign Intelligence Surveillance Act (FISA), regulate electronic surveillance and protect privacy but could potentially impact cross-border data transfers. Evaluating data transfers to the US, therefore, requires an in-depth understanding of the applicable legislation and risks involved.</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong style=\"color: rgb(77, 81, 86);\">European Essential Guarantees for surveillance measures</strong></p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong>EEG A - Adherence to clear, precise, and accessible rules for processing in the US</strong></p><p class=\"ql-align-justify\">Processing in the US adheres to clear, precise, and accessible rules, with comprehensive privacy legislation enacted in several states and sectoral laws like the CCPA, CPRA, CDPA, and CPA providing legal bases. Access to information by US government authorities relies on subpoenas, judicial orders, and search warrants. While there are no specific statutory retention periods, limitations exist on indefinite data storage, and sector-specific laws may impose retention requirements. The Wiretap Act, SCA, and FISA govern the collection and disclosure of communications, with the FTC recommending privacy protections, including data security, reasonable collection limits, retention practices, and data accuracy. The Privacy Act 1974 requires agencies to maintain only relevant and necessary information. Furthermore, based on FISA as complemented by Executive Order 14086, the US also ensures that signals intelligence activities are conducted in a manner that is necessary and proportionate to the validated intelligence priority, with senior-level legal, oversight, and compliance officials conducting periodic oversight of these activities.</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\">Further information concerning the Guarantee A assessment can be found in the <a href=\"https://edpb.europa.eu/system/files/2023-02/edpb_opinion52023_eu-us_dpf_en.pdf\" rel=\"noopener noreferrer\" target=\"_blank\" style=\"background-color: rgb(255, 255, 255);\">EDPB'\''s Opinion 05/2023 on the European Commission Draft Implementing Decision on the adequate protection of personal data under the EU-US Data Privacy Framework</a> (pp. 28-31).</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong>EEG B - Necessity and Proportionality in the US</strong></p><p class=\"ql-align-justify\">In the US legal framework, Executive Order 14086 introduced the concepts of necessity and proportionality, restricting signals intelligence activities to validated intelligence priorities and proportionate to their objectives. Data minimization provisions are included in the FISA, requiring minimal collection, retention, and dissemination of US persons'\'' data. The activities should be as tailored as feasible, taking into account the intrusiveness, duration, and probable contribution of the collection to the objective pursued. Reasonable methods and technical measures are applied to limit the data collected to what is necessary while minimizing the collection of non-pertinent information.</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\">Further information concerning the Guarantee B assessment can be found in the <a href=\"https://edpb.europa.eu/system/files/2023-02/edpb_opinion52023_eu-us_dpf_en.pdf\" rel=\"noopener noreferrer\" target=\"_blank\" style=\"background-color: rgb(255, 255, 255);\">EDPB'\''s Opinion 05/2023 on the European Commission Draft Implementing Decision on the adequate protection of personal data under the EU-US Data Privacy Framework</a> (pp. 31-40).</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong>EEG C - Independent Oversight Mechanism in the US</strong></p><p class=\"ql-align-justify\">US privacy protections are subject to oversight through a variety of mechanisms, including courts, Congress, and executive agencies. Courts approve surveillance tools, and Congress monitors surveillance activities. Several federal agencies enforce sectoral laws, and the CPRA establishes the California Privacy Protection Agency for state-level enforcement. Additionally, each element of the Intelligence Community that collects signals intelligence has senior-level legal, oversight, and compliance officials conducting periodic oversight. The oversight process includes an Inspector General, a Privacy and Civil Liberties Officer, and officers in a designated compliance role. The process is designed to ensure rigorous oversight of signals intelligence activities and includes a redress mechanism for qualifying complaints. The Director of the oversight process and the Attorney General are independent and cannot interfere with the review of qualifying complaints.</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\">Further information concerning the Guarantee C assessment can be found in the <a href=\"https://edpb.europa.eu/system/files/2023-02/edpb_opinion52023_eu-us_dpf_en.pdf\" rel=\"noopener noreferrer\" target=\"_blank\" style=\"background-color: rgb(255, 255, 255);\">EDPB'\''s Opinion 05/2023 on the European Commission Draft Implementing Decision on the adequate protection of personal data under the EU-US Data Privacy Framework</a> (pp. 40-44).</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong>EEG D - Effective Remedies Available to Individuals in the US</strong></p><p class=\"ql-align-justify\">Individuals in the US have effective remedies to uphold their rights when they believe they have not been respected. Various laws like the CCPA, CPA, CPRA, FCRA, COPPA, and Security and Privacy Rules provide data subjects with rights and remedies. Transparency measures, public reporting requirements, and annual transparency reports enhance public scrutiny and accountability. Non-US individuals can invoke safeguards and laws through a redress mechanism introduced by Executive Order 14086. This mechanism allows individuals to submit qualifying complaints about violations of US signals intelligence activities. The Attorney General can designate a country or regional organization as a qualifying state for this mechanism. Appropriate remediation, such as administrative measures to correct procedural or technical errors, is provided if necessary. The Intelligence Community must comply with any remediation determined by the Data Protection Review Court.</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\">Further information concerning the Guarantee D assessment can be found in the <a href=\"https://edpb.europa.eu/system/files/2023-02/edpb_opinion52023_eu-us_dpf_en.pdf\" rel=\"noopener noreferrer\" target=\"_blank\" style=\"background-color: rgb(255, 255, 255);\">EDPB'\''s Opinion 05/2023 on the European Commission Draft Implementing Decision on the adequate protection of personal data under the EU-US Data Privacy Framework</a> (pp. 45-52).</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong>Final Notes on the European Commission'\''s Adequacy Decision</strong></p><p class=\"ql-align-justify\">On July 11, 2023, <a href=\"https://commission.europa.eu/system/files/2023-07/Adequacy%20decision%20EU-US%20Data%20Privacy%20Framework_en.pdf\" rel=\"noopener noreferrer\" target=\"_blank\">the European Commission declared the Adequacy of the EU-US Data Privacy Framework (DPF)</a> for outbound transfers from the European Economic Area toward the United States. Although the DPF is a voluntary self-certification scheme applicable only to eligible US companies, the elements addressed by the Commission could be considered regardless of the participation in the adequacy mechanism, extending to all companies engaging in transatlantic data flows.</p><p class=\"ql-align-justify\">In summary, it is worth mentioning that the European Commission'\''s decision to establish the Adequacy of the EU-US Data Privacy Framework is rooted in the comprehensive privacy protections in the US. The US employs a sectoral approach to privacy protection, combining legislation, regulation, and self-regulation. The FTC Act provides broad protections, including for foreign consumers, against unfair or deceptive practices. The EU-US Data Privacy Framework, which operates within the larger US privacy landscape, is based on a system of certification where US organizations commit to privacy principles. The US legal system offers multiple judicial redress avenues for individuals, irrespective of their nationality, against public authorities processing personal data. Interference by US public authorities with the fundamental rights of individuals is limited to what is strictly necessary for legitimate objectives, and adequate legal protection against such interference exists. All law enforcement and regulatory activities must conform to applicable laws, including the US Constitution, statutes, rules, and regulations. The Fourth Amendment provides robust protections against unreasonable searches and seizures. Through the Principles issued by the US DoC, the US ensures that signal intelligence activities are necessary and proportionate, strengthening privacy and civil liberties safeguards. These factors shall all be accounted for when assessing the level of protection for personal data transferred from the EU to the US, even if not relying directly on the EU-US DPF.</p>",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"translationIdentifier": "1caee2b7-5ab5-4137-80ba-a745e13833aa",
"rootVersionId": "72988847-a677-48db-a70b-0465230be7a8",
"sequence": 4
},
{
"id": "52923d50-2211-49cf-917e-0dc953a17056",
"content": "Rate the rule of law in the third country.",
"questionType": "MULTICHOICE",
"options": [
{
"id": "40225878-2a7c-4e81-9b1f-e57f5b145137",
"option": "Weak",
"sequence": 1,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "71cadb05-bc52-4a08-9e26-2c30c618218b",
"option": "Average",
"sequence": 2,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "c367b920-4cfb-4829-ac1e-ed9cde4543a1",
"option": "Strong",
"sequence": 3,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "ab31a9ba-6e42-456d-8215-10ce5aa0c15f",
"option": "NotSure",
"sequence": 4,
"attributes": null,
"hint": null,
"optionType": "NOT_SURE",
"optionKey": null
}
],
"required": false,
"attributes": "{\"isQuestionHintEnabled\":true,\"allowLaws\":false,\"requireJustification\":false,\"allowJustification\":true,\"allowOther\":false}",
"friendlyName": "Rule of law",
"description": "<p>Please explain how the country respects the rule of law.</p><p><br></p><p>To help determine the ranking of the third country'\''s rule of law, you might take into account the following resources:</p><ul><li><a href=\"https://worldjusticeproject.org/sites/default/files/documents/WJP-ROLI-2020-Online_0.pdf\" rel=\"noopener noreferrer\" target=\"_blank\">The World Justice Project Rule of Law Index® 2020</a></li><li>Freedom House'\''s <a href=\"https://freedomhouse.org/countries/freedom-world/scores\" rel=\"noopener noreferrer\" target=\"_blank\">Freedom in the World report</a></li></ul><p><br></p>",
"hint": "Article 45(2)(a) of the GDPR.",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"rootVersionId": "6bee35f1-5131-442b-bee0-f60d83f16694",
"sequence": 5
},
{
"id": "a3edeb53-07bc-4ff0-98d5-d9e522d15b10",
"content": "Rate the respect for human rights and fundamental freedoms in the third country.",
"questionType": "MULTICHOICE",
"options": [
{
"id": "481766a2-ef26-4523-8313-aa396b22f00a",
"option": "Weak",
"sequence": 1,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "2e8aaac7-0786-4c3a-bdd1-cd722de8377c",
"option": "Average",
"sequence": 2,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "5e40333f-be01-473d-a722-fd299d258c22",
"option": "Strong",
"sequence": 3,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "72b76ac3-64d4-4cea-9658-7ce3fac05bfd",
"option": "NotSure",
"sequence": 4,
"attributes": null,
"hint": null,
"optionType": "NOT_SURE",
"optionKey": null
}
],
"required": false,
"attributes": "{\"isQuestionHintEnabled\":true,\"allowLaws\":false,\"requireJustification\":false,\"allowJustification\":true}",
"friendlyName": "Respect for human rights and fundamental freedoms",
"description": "<p>Please explain how the country respects international human rights norms and standards.</p><p><br></p><p>To help determine the ranking of the third country'\''s respect for human rights and fundamental freedoms, you might take into account the following resources:</p><ul><li><a href=\"https://worldjusticeproject.org/sites/default/files/documents/WJP-ROLI-2020-Online_0.pdf\" rel=\"noopener noreferrer\" target=\"_blank\">The World Justice Project Rule of Law Index® 2020</a></li><li>Freedom House'\''s <a href=\"https://freedomhouse.org/countries/freedom-world/scores\" rel=\"noopener noreferrer\" target=\"_blank\">Freedom in the World report</a></li></ul><p><br></p>",
"hint": "Article 45(2)(a) of the GDPR.",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"rootVersionId": "27bdc47c-d36a-40e7-9759-f6243a566848",
"sequence": 6
},
{
"id": "6f4f2d51-6d64-4f91-a1e8-6fc5f660b367",
"content": "Indicate which of the following laws and frameworks are present and in force in the country ",
"questionType": "MULTICHOICE",
"options": [
{
"id": "9ef99815-81b9-4308-b93f-18fabdbe7c35",
"option": "General data protection legislation",
"sequence": 1,
"attributes": null,
"hint": "i.e. comprehensive and universal privacy laws, similar to the EU General Data Protection Regulation",
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "4a70daaf-72d3-4d02-8a99-a68a442285b1",
"option": "Sectoral legislation",
"sequence": 2,
"attributes": null,
"hint": "i.e. specific to certain sectors, such as health, finance, etc.",
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "a138ee1a-319a-464f-b9f6-d68ea6de53b8",
"option": "Professional rules ",
"sequence": 3,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "0a753b2b-5e3b-4a5d-8ce3-c9842946b045",
"option": "Security legislation ",
"sequence": 4,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "633bf7bb-bf84-44b7-ae88-e44b9835725a",
"option": "Relevant case-law ",
"sequence": 5,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "b301be95-b7fb-41ee-91ff-f807806abb1d",
"option": "NotSure",
"sequence": 6,
"attributes": null,
"hint": null,
"optionType": "NOT_SURE",
"optionKey": null
},
{
"id": "896b195b-99ce-4376-a266-37bf7675802f",
"option": "Other",
"sequence": 7,
"attributes": null,
"hint": null,
"optionType": "OTHERS",
"optionKey": null
}
],
"required": false,
"attributes": "{\"isQuestionHintEnabled\":true,\"allowLaws\":true,\"requireJustification\":false,\"optionHintEnabled\":true,\"allowOther\":true,\"isMultiSelect\":true,\"allowJustification\":true}",
"friendlyName": "Relevant legislation",
"description": "<p>Please identify the relevant laws and describe their implementation. Include links to official texts.</p>",
"hint": "Article 45(2)(a) of the GDPR.",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"rootVersionId": "e7127ab4-7abd-4520-996a-dac3c64974b5",
"sequence": 7
},
{
"id": "c65a9cde-8556-4a44-88dc-628932396361",
"content": "Rate the third country'\''s overall data protection system taking into consideration the following basic data protection concepts and/or principles",
"questionType": "MULTICHOICE",
"options": [
{
"id": "68344b3d-fc68-40eb-8ece-21980b780389",
"option": "Weak",
"sequence": 1,
"attributes": null,
"hint": "",
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "60a6b9fc-e304-4ebc-bfe9-724a8724ea11",
"option": "Average",
"sequence": 2,
"attributes": null,
"hint": "",
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "e2be9607-374b-4ad0-8841-7832fac6a9b4",
"option": "Strong",
"sequence": 3,
"attributes": null,
"hint": "",
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "72f197fa-5019-4f9a-8601-8ef440f2a192",
"option": "NotSure",
"sequence": 4,
"attributes": null,
"hint": null,
"optionType": "NOT_SURE",
"optionKey": null
}
],
"required": false,
"attributes": "{\"isQuestionHintEnabled\":true,\"allowLaws\":false,\"requireJustification\":false,\"optionHintEnabled\":false,\"allowOther\":false,\"isMultiSelect\":false,\"allowJustification\":true}",
"friendlyName": "Privacy concepts and principles",
"description": "<ul><li><strong>Basic data protection principles</strong></li><li><strong>Lawful and fair processing rules: </strong>for example, provisions requiring data to be processed fairly and based on specific legal bases</li><li><strong>Purpose limitation principles: </strong>for example, provisions requiring data to be processed based on a specific purpose</li><li><strong>Data quality principles: </strong>for example, provisions requiring data to be accurate and kept up to date</li><li><strong>Data retention principles: </strong>for example, provisions requiring data to be kept no longer than what is necessary</li><li><strong>Security and confidentiality principles: </strong>for example, provisions relating to data breaches and confidentiality</li><li><strong>Transparency principles: </strong>for example, provisions requiring controllers to inform data subjects of processing activities</li><li><strong>Right of the data subjects: </strong>for example, provisions allowing data subjects to access, rectify or erase personal data</li><li><strong>Restrictions on onward transfers: </strong>for example, provisions restricting data transfers to third parties</li></ul><p><br></p>",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"rootVersionId": "4e6052cc-f192-4138-bb52-b5d14ac57c06",
"sequence": 8
},
{
"id": "e1b2cbca-8054-4ffa-8284-a3f92075479b",
"content": "Is there an independent supervisory authority able to ensure and enforce data protection rules? ",
"questionType": "YESNO",
"options": [
{
"id": "95b66494-cc59-467d-aa6c-4c28dcd4575c",
"option": "Yes",
"sequence": 1,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "fa57f4e2-2ccb-404d-acd3-9671310f08d7",
"option": "No",
"sequence": 2,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "f789cd9f-15f3-426b-a0a2-092c1524f50a",
"option": "NotSure",
"sequence": 3,
"attributes": null,
"hint": null,
"optionType": "NOT_SURE",
"optionKey": null
}
],
"required": false,
"attributes": "{\"isQuestionHintEnabled\":true,\"allowLaws\":false,\"allowJustification\":true,\"requireJustification\":false}",
"friendlyName": "Independent supervisory authority",
"description": "<p>Please identify these authorities. The authority must possess adequate enforcement powers and independence. </p>",
"hint": "Article 45(2)(b) of the GDPR.",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"rootVersionId": "f9d92447-b183-42a8-9e83-ce9111f276a3",
"sequence": 9
},
{
"id": "7b6c2be0-a184-469b-980c-f3cbf1653ae8",
"content": "The third country has international commitments or other obligations arising from legally binding conventions or instruments, as well as from its participation in multilateral or regional systems, related to personal data protection.",
"questionType": "YESNO",
"options": [
{
"id": "a96e6bf6-6a3a-453b-9ed0-74f9c43c8c9e",
"option": "Yes",
"sequence": 1,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "41b1ffd3-5899-40c6-98db-da24b393bfa1",
"option": "No",
"sequence": 2,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
}
],
"required": false,
"attributes": "{\"isQuestionHintEnabled\":true,\"allowLaws\":false,\"allowJustification\":true,\"requireJustification\":false}",
"friendlyName": "International commitments/obligations",
"description": "<p>Please explain any commitments/obligations.</p><p><br></p><p>For example, determine whether the third country has signed and ratified the <a href=\"https://www.coe.int/en/web/conventions/full-list/-/conventions/treaty/108\" rel=\"noopener noreferrer\" target=\"_blank\">Council of Europe Convention of 28 January 1981 for the Protection of Individuals with regard to the Automatic Processing of Personal Data</a> (i.e., Convention 108) and its <a href=\"https://www.coe.int/en/web/conventions/full-list/-/conventions/treaty/181\" rel=\"noopener noreferrer\" target=\"_blank\">Additional Protocol</a>.</p>",
"hint": "Article 45(2)(c) of the GDPR.",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"rootVersionId": "5d0b4512-7df2-434d-bfe5-be0ba8370ae5",
"sequence": 10
},
{
"id": "2676127c-01a9-41e7-ac6a-496d029f90e7",
"content": "The third country has public security, defence, national security, and/or criminal laws to which the transfer might be subject and that enable public authorities or law enforcement to access the transferred personal data.",
"questionType": "YESNO",
"options": [
{
"id": "4db48c99-00e4-4893-b745-502a23cec980",
"option": "Yes",
"sequence": 1,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "7d5ce03f-65f4-4025-b0bf-fdf5eb9fabaf",
"option": "No",
"sequence": 2,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "0221b2a0-285c-452a-b7bb-51e71a1dc957",
"option": "NotSure",
"sequence": 3,
"attributes": null,
"hint": null,
"optionType": "NOT_SURE",
"optionKey": null
}
],
"required": false,
"attributes": "{\"isQuestionHintEnabled\":true,\"allowLaws\":false,\"allowJustification\":true,\"requireJustification\":false}",
"friendlyName": "Problematic legislation to which the transfer might be subject",
"description": "<p>In other words, the third country'\''s national security laws apply to the transfers to you (e.g., via electronic or digital means) that fall under the scope of that legislation (i.e., are you, along with the data transfers, explicitly subject to the national security laws).</p><p><br></p><p>Please explain the country'\''s legislation concerning public security, defence, and national security, as well as public order and criminal law.</p>",
"hint": "Article 45(2)(a) of the GDPR.",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"rootVersionId": "b13c20e5-5c44-4623-8c35-e0e03f14d9d8",
"sequence": 11
},
{
"id": "437d57bc-8f4a-4304-9425-f5800a0cdcf2",
"content": "EDPB EEG Guidance",
"questionType": "STATEMENT",
"required": false,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":false}",
"description": "<p><br></p><p>The EDPB'\''s <a href=\"https://edpb.europa.eu/sites/edpb/files/files/file1/edpb_recommendations_202002_europeanessentialguaranteessurveillance_en.pdf\" rel=\"noopener noreferrer\" target=\"_blank\">European Essential Guarantees (EEG)</a>:</p><p><br></p><ul><li>Processing should be based on clear, precise and accessible rules</li><li>Necessity and proportionality with regard to the legitimate objectives pursued need to be demonstrated</li><li>An independent oversight mechanism should exist</li><li>Effective remedies need to be available to the individual</li></ul><p><br></p><p>The EDPB European Essential Guarantees (EEG) recommendations provide clarifications on the elements which have to be assessed to determine whether the legal framework governing access to personal data by public authorities in a third country, being national security agencies or law enforcement authorities, can be regarded as a justifiable interference or not. In particular, this should be carefully considered when the legislation governing the access to data by public authorities is ambiguous or not publicly available.</p><p><br></p><p>Applied to the situation of data transfers based on Article 46 transfer tools, the EDPB European Essential Guarantees recommendations can guide the data exporter in assessing whether such powers unjustifiably interfere with the data exporter and importer’s obligations to ensure essential equivalence pursuant to the GDPR or the commitments contained in the transfer tool. The lack of an essentially equivalent level of protection will be especially evident where the legislation and/or practices of the third country relevant to your transfer do not meet the requirements of the European Essential Guarantees. The EDPB reiterates that the European Essential Guarantees are a referential standard when assessing the interference entailed by third-country surveillance measures in the context of international data transfers. These standards stem from EU law and the jurisprudence of the CJEU and the ECtHR, which is binding on EU Member States.</p><p><br></p><p>Your assessment must be based first and foremost on legislation publicly available. Examining also the practices of the third country’s public authorities will allow you to verify if the safeguards contained in the Article 46 GDPR transfer tool can be a sufficient means of ensuring, in practice, the effective protection of the personal data transferred.</p>",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"rootVersionId": "50976a9b-9b08-48e0-a3db-6ee9ba1261a1",
"sequence": 12
},
{
"id": "8a95c4bd-52b2-4cab-87fe-59fe268ea6b7",
"content": "Please indicate whether domestic legislation ensures clear, precise and accessible rules when interfering with individuals'\'' privacy by taking into account the following aspects",
"questionType": "YESNO",
"options": [
{
"id": "8bd5765f-5c84-4198-ba5f-f895713ce31b",
"option": "Yes",
"sequence": 1,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "b5fb3e24-1251-4dab-a20a-4f16c7e5b377",
"option": "No",
"sequence": 2,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "5ca6732b-552b-40ce-90ce-784c68777ed8",
"option": "NotSure",
"sequence": 3,
"attributes": null,
"hint": null,
"optionType": "NOT_SURE",
"optionKey": null
}
],
"required": false,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"requireJustification\":false,\"allowJustification\":true}",
"friendlyName": "EEG A - Processing should be based on clear, precise and accessible rules",
"description": "<p>You should make sure that all the following aspects are taken into account</p><p><br></p><ul><li><strong>Clear, precise and accessible legal bases/purposes to access information</strong>: for example, the law requires specific conditions and legal bases to intercept communications or require data to be handled to public authorities</li><li><strong>Limits on retention of information: </strong>for example, the law forbids storage of information over a certain time limit</li><li><strong>Clear indication of categories of individuals that might be subject to surveillance </strong></li></ul>",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"rootVersionId": "b3b5de76-5939-40b8-8d19-96cc89a4dd5d",
"sequence": 13
},
{
"id": "1d96fd4d-293f-497b-a337-7ab3ce8c4947",
"content": "Indicate whether legislation ensures that the principles of necessity and proportionality are complied with",
"questionType": "YESNO",
"options": [
{
"id": "3dcc7550-bd72-4e73-9928-5bf46b8651fd",
"option": "Yes",
"sequence": 1,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "d878ac70-11bf-477c-84e4-12bdad0cc575",
"option": "No",
"sequence": 2,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "d881997d-30bb-4efc-b0e8-69d5c5cc5f7c",
"option": "NotSure",
"sequence": 3,
"attributes": null,
"hint": null,
"optionType": "NOT_SURE",
"optionKey": null
}
],
"required": false,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"requireJustification\":false,\"allowJustification\":true}",
"friendlyName": "EEG B - Necessity and proportionality",
"description": "<p>You should make sure that all the following aspects are taken into account</p><p><br></p><ul><li><strong>The seriousness of any interference with privacy rights is proportionate to the importance of the public interest objective: </strong>for example, the law should define the scope and limitations of the interference based on the public aim</li><li><strong>The limitations provided by law should be necessary in order to achieve the public interest: </strong>for example, a general authorization to retain all electronic communications wouldn'\''t be compliant with this guarantee </li></ul>",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"rootVersionId": "3cb74c25-bd81-464b-bd6f-d93ffe121d46",
"sequence": 14
},
{
"id": "8749807b-e8a6-4499-8b3f-1ce1a23c09d4",
"content": "Indicate whether the legislation ensures that an independent oversight system exists",
"questionType": "YESNO",
"options": [
{
"id": "26e386f4-05dd-450b-914f-268e1c56434d",
"option": "Yes",
"sequence": 1,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "8841eb10-ec1d-431a-8f51-9d5be480e5c2",
"option": "No",
"sequence": 2,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "a0e16fdf-79b3-41c3-b262-02153d97b183",
"option": "NotSure",
"sequence": 3,
"attributes": null,
"hint": null,
"optionType": "NOT_SURE",
"optionKey": null
}
],
"required": false,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"requireJustification\":false,\"allowJustification\":true}",
"friendlyName": "EEG C - Independent oversight mechanism",
"description": "<p>Any interference with the right to privacy and data protection should be subject to an effective, independent and impartial oversight system provided by a judge or other independent body (such as an administrative authority or parliamentary body).</p><p><br></p><p>In evaluating the effectiveness and independence of the aforementioned body, you should take into account the following aspects: </p><p><br></p><ul><li>measures for effective reviews;</li><li>openness to public scrutiny;</li><li>manner of appointment; and</li><li>legal status.</li></ul><p><br></p>",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"rootVersionId": "251b6017-4b81-4cdb-9f2e-a7dc57738dc3",
"sequence": 15
},
{
"id": "c0de1bc1-c2cf-48fd-b826-06142ba6783d",
"content": "Indicate whether the law makes effective legal remedies available to the individual",
"questionType": "YESNO",
"options": [
{
"id": "f7f6f643-8f1c-4f85-bcb4-c54518691abd",
"option": "Yes",
"sequence": 1,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "3b8f7d98-b024-42ca-9de2-1d268692fd6b",
"option": "No",
"sequence": 2,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "59d1c21d-f2d1-45dc-a9ab-8715aaa468f5",
"option": "NotSure",
"sequence": 3,
"attributes": null,
"hint": null,
"optionType": "NOT_SURE",
"optionKey": null
}
],
"required": false,
"attributes": "{\"isQuestionHintEnabled\":false,\"requireJustification\":false,\"allowLaws\":true,\"allowJustification\":true}",
"friendlyName": "EEG D - Effective remedies available to the individual",
"description": "<p>Individuals should have effective remedies to satisfy their rights when they consider that they are not or have not been respected. Please take into account the following aspects when considering this guarantee: </p><p><br></p><ul><li><strong>Individuals are notified of surveillance measures or provided with equally effective remedies</strong></li><li><strong>Courts providing redress mechanisms are independent and impartial, adopt rules of procedures, include members that held judicial offices or experienced lawyers, have access to all relevant information and powers to remedy non-compliance. </strong></li><li><strong>There is no evidential burden to overcome in order to lodge an application with the courts</strong></li></ul><p><br></p><p>The same level of protection can be provided by non-judicial bodies, as long as they offer equal guarantees. </p>",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"rootVersionId": "5b8a69e3-d785-48f6-9ede-a4caca32264f",
"sequence": 16
},
{
"id": "4bfe55e4-7928-47da-8a1c-e496688e91ee",
"content": "Government access to personal information for national security and law enforcement purposes",
"questionType": "YESNO",
"options": [
{
"id": "24706e40-212b-44cd-8a6a-4812badf7e15",
"option": "Yes",
"sequence": 1,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "f3998414-4997-46d6-8b11-0ed03ad39aad",
"option": "No",
"sequence": 2,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "d264f8d8-9197-4623-97ba-c862e07f4df7",
"option": "NotSure",
"sequence": 3,
"attributes": null,
"hint": null,
"optionType": "NOT_SURE",
"optionKey": null
}
],
"required": false,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"allowJustification\":true,\"requireJustification\":false}",
"friendlyName": "Government access to personal information",
"description": "<p>Please indicate if the government access to personal information <strong>is consistent with democratic values and the rule of law</strong>. This is based on the <a href=\"https://legalinstruments.oecd.org/en/instruments/OECD-LEGAL-0487\" rel=\"noopener noreferrer\" target=\"_blank\">OECD Declaration on Government Access to Instruments Personal Data held by Private Sector Entities</a>.</p><p><br></p><p>You can take into account the following elements:</p><ul><li class=\"ql-align-justify\">Government access supports the pursuit of specified and legitimate aims. Governments do not seek access to personal data for the purpose of suppressing or burdening criticism or dissent; or disadvantaging persons or groups solely on the basis of characteristics including, but not limited to: age, mental or physical disability, ethnicity, indigenous status, gender identity or expression, sexual orientation, or political or religious affiliation.</li><li>Prior approval requirements for government access are established in the third country legal framework</li><li>The legal framework for government access is clear and easily accessible to the public</li><li>There are effective and impartial oversight to ensure that government access complies with the legal framework.</li><li>The legal framework provides individuals with effective judicial and non-judicial redress to identify and remedy violations of the national legal framework.</li></ul>",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"rootVersionId": "68c8050b-dea4-4a0a-a6cd-fb28f2a2d8c8",
"sequence": 17
},
{
"id": "ccb9373b-7ff0-4651-956c-9de1709254bf",
"content": "Based on your responses in the previous sections, does the Third Country provide an essentially equivalent level of data protection as guaranteed by the GDPR in light of the EU Charter of Fundamental Rights?",
"questionType": "YESNO",
"options": [
{
"id": "fdb288bd-1d21-44dc-87db-ebd5d2ef029e",
"option": "Yes",
"sequence": 1,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "32a1c666-2967-4778-a900-d57f549e4187",
"option": "No",
"sequence": 2,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "660a89da-1913-4171-ae6d-f0f62764bc8b",
"option": "NotSure",
"sequence": 3,
"attributes": null,
"hint": null,
"optionType": "NOT_SURE",
"optionKey": null
}
],
"required": true,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":false,\"allowJustification\":true,\"requireJustification\":false}",
"friendlyName": "Essential Equivalence Evaluation",
"description": "<p>You should answer <strong>Yes </strong>only if you have verified that</p><ol><li>Legislation in the third country meets EU standards both formally and substantially</li><li>There are no practices incompatible with the commitments of the transfer tool</li><li>Your transfer does not fall under the scope of problematic legislation that would allow access to data by public authorities without meeting EU standards</li></ol><p><br></p><p>Next Step:</p><ul><li>If you select <strong><u>Yes</u></strong>, the Supplementary Measures evaluation section is optional. </li><li>If you select <strong><u>No</u></strong>, in order to proceed further you need to evaluate the adoption of Supplementary Measures.</li></ul><p><br></p><p>---</p><p><br></p><p><strong>EDPB Supplementary Measures Recommendations</strong></p><p><br></p><ul><li><u>Relevant legislation in the third country may formally meet EU standards on fundamental rights and freedoms and the necessity and proportionality of restrictions thereto.</u></li><li class=\"ql-indent-1\">However, the practices of its public authorities (e.g. accessing personal data held by the private sector or when enforcing -or not- legislation as supervisory or judicial bodies) may clearly indicate that they do not normally apply/comply with the legislation that governs, in principle, their activities. In this case, you must take these practices into account in your assessment and consider that the Article 46 GDPR tool will not be able to effectively ensure, by itself (i.e. without supplementary measures), an essentially equivalent level of protection. In such case, if you wish to proceed with the transfer, you will have to implement adequate supplementary measures.</li></ul><p><br></p><ul><li><u>Relevant legislation in the third country (e.g. on access to personal data held by the private sector) may be lacking.</u></li><li class=\"ql-indent-1\">In this case you cannot automatically infer from this absence of relevant legislation that your Article 46 GDPR transfer tool can be effectively applied. You will have to check if there are indications of practices in force in the country that are incompatible with EU law and the commitments of the Article 46 GDPR transfer tool. If there are incompatible practices, the Article 46 GDPR transfer tool will not be able to effectively ensure, by itself (i.e. without adequate supplementary measures), an essentially equivalent level of protection. In such case, if you wish to proceed with the transfer, you will have to implement adequate supplementary measures.</li></ul><p><br></p><ul><li><u>The assessment may reveal that relevant legislation in the third country may be problematic and that the transferred data and/or the importer at hand fall or might fall within the scope of this problematic legislation.</u></li><li class=\"ql-indent-1\">‘Problematic legislation’ is understood as legislation that 1) imposes on the recipient of personal data from the European Union obligations and/or affect the data transferred in a manner that may impinge on the transfer tools’ contractual guarantee of an essentially equivalent level of protection and 2) does not respect the essence of the fundamental rights and freedoms recognised by the EU Charter of Fundamental Rights or exceeds what is necessary and proportionate in a democratic society to safeguard one of the important objectives as also recognised in Union or EU Member States’ law, such as those listed in Article 23 (1) GDPR.</li></ul>",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"rootVersionId": "ccb48f08-5355-4c5d-a05b-eb7ad3c622b9",
"sequence": 18
}
]
},
{
"name": "Re-Evaluation Procedures",
"invalidQuestionCount": 0,
"id": "c1a12c92-8acd-42de-a6c3-7f43cc76f85a",
"rootVersionId": "5fd23b8d-c103-4828-b918-f33866895dd8",
"sequence": 4,
"questions": [
{
"id": "a089af6d-0f7c-48fa-9aec-8aab693204b3",
"content": "Do you have documented policies and procedures to monitor, on an ongoing basis, and where appropriate in collaboration with the data importer, developments in the third country that could affect your initial assessment of the level of protection and the decisions you may have taken for your transfers?",
"questionType": "YESNO",
"options": [
{
"id": "832f28d6-5969-4a8e-aa85-b4842c7cd6ed",
"option": "Yes",
"sequence": 1,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "8c1904e8-8de6-40dd-a9fe-e3f956f7e984",
"option": "No",
"sequence": 2,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "b22afee7-000a-4d74-845d-bfe44a51c12d",
"option": "NotSure",
"sequence": 3,
"attributes": null,
"hint": null,
"optionType": "NOT_SURE",
"optionKey": null
}
],
"required": false,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":false,\"allowJustification\":true,\"requireJustification\":false}",
"friendlyName": "Re-Evaluation Procedures",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"rootVersionId": "797de92c-da1c-46a3-95fc-681c5776d3ee",
"sequence": 1
},
{
"id": "54c22bcd-a459-4b2a-bb77-bef138441b3d",
"content": "Do you have sufficiently sound mechanisms in place to ensure that you promptly suspend or end transfers where the data importer has breached or is unable to honour the commitments it has taken in the Article 46 GDPR transfer tool?",
"questionType": "YESNO",
"options": [
{
"id": "ba68331e-628d-411d-8960-3b373fe2a6ed",
"option": "Yes",
"sequence": 1,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "54fb81a0-325b-4592-b359-8c010f2cd704",
"option": "No",
"sequence": 2,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "2378ceb8-0a26-4326-a48a-c778b6b93697",
"option": "NotSure",
"sequence": 3,
"attributes": null,
"hint": null,
"optionType": "NOT_SURE",
"optionKey": null
}
],
"required": false,
"attributes": "{\"isQuestionHintEnabled\":false,\"requireJustification\":false,\"allowLaws\":false,\"allowJustification\":true}",
"friendlyName": "Transfer suspension - Importer Breach",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"rootVersionId": "481a2ba8-1203-417e-a302-0a7857d25751",
"sequence": 2
}
]
},
{
"name": "Supplementary Measures Evaluation",
"invalidQuestionCount": 0,
"id": "a7e15759-7464-4282-bdd6-49d825dd1224",
"rootVersionId": "f1e0635b-104e-4b8f-be4e-9e25c004a206",
"sequence": 5,
"questions": [
{
"id": "331c2403-0899-4c3a-ade3-d74b7bc66835",
"content": "Are data to be transferred encrypted at rest?",
"questionType": "YESNO",
"options": [
{
"id": "56a2c69c-fd7a-422e-aa5c-d145beefba1a",
"option": "Yes",
"sequence": 1,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null,
"translationIdentifier": "8bc0073d-ecb3-4a57-af47-807c34b1adf2"
},
{
"id": "1c5a2dce-4849-406a-805a-e906492a9cca",
"option": "No",
"sequence": 2,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null,
"translationIdentifier": "c05afa67-27ff-4cf7-820a-735583474615"
},
{
"id": "4b980a03-040c-4247-864b-5509aea8d489",
"option": "NotApplicable",
"sequence": 3,
"attributes": null,
"hint": null,
"optionType": "NOT_APPLICABLE",
"optionKey": null
}
],
"required": false,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"requireJustification\":false,\"allowJustification\":true}",
"friendlyName": "Encryption at-rest",
"description": "<p>It is a best practice to encrypt data before sharing it with third parties. </p><p>If no, please justify your answer</p>",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"translationIdentifier": "03766654-3c1b-49b0-9ef3-6450c61cd657",
"rootVersionId": "26a0c4d3-3352-4ee4-944e-37698a020bec",
"sequence": 1
},
{
"id": "8859e842-ce09-49c5-98ca-f282de4a31e5",
"content": "Is any further encryption type applicable (in transit, E2EE, homomorphic etc.)?",
"questionType": "MULTICHOICE",
"options": [
{
"id": "84c83cc2-3475-4f2b-a843-0dfec4467fe0",
"option": "In-Transit Encryption",
"sequence": 1,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null,
"translationIdentifier": "fb8ceb2e-1397-41a5-9fe1-d8442dd225cc"
},
{
"id": "8830f9df-875d-42bc-b3fb-24149a051939",
"option": "End-to-end Encryption (E2EE)",
"sequence": 2,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null,
"translationIdentifier": "bbb22426-d2fa-4ef5-b7ec-d40577e6eaef"
},
{
"id": "15422c61-cee5-4b48-916a-5a4ed140ed74",
"option": "Homomorphic Encryption",
"sequence": 3,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null,
"translationIdentifier": "a1cbecd6-219f-42bd-a66f-52390d2d91eb"
},
{
"id": "99a9c3b7-be52-4098-9de2-37cd83e0b48c",
"option": "Other",
"sequence": 4,
"attributes": null,
"hint": null,
"optionType": "OTHERS",
"optionKey": null
},
{
"id": "7606ee1b-fcec-4ddc-a569-45ed5e3c7d67",
"option": "NotApplicable",
"sequence": 5,
"attributes": null,
"hint": null,
"optionType": "NOT_APPLICABLE",
"optionKey": null
}
],
"required": false,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"isMultiSelect\":true,\"requireJustification\":false,\"allowJustification\":true,\"allowOther\":true}",
"friendlyName": "Other Encryption Forms",
"description": "<p>Other forms of encryption shall be advisable based on the circumstantial factors of the transfer. </p><ul><li>It is strongly recommended to adopt <strong>in-transit encryption</strong> to prevent access during personal information transfer.</li><li>Where applicable, <strong>end-to-end encryption (E2EE) </strong>shall also be a golden standard for preventing unauthorised access to personal data.</li><li><strong>Homomorphic encryption </strong>is a form of encryption that permits users to perform computations on its encrypted data without first decrypting it.</li></ul><p><br></p><p>Where applicable, please also specify the suitable protocol or algorithm.</p>",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"translationIdentifier": "7bc63077-3cd6-4cd9-a435-8f09582a9287",
"rootVersionId": "177b742e-62d7-48af-a777-bcfe58337a91",
"sequence": 2
},
{
"id": "eb3346d1-c3fe-4a14-a305-1a2df69835ca",
"content": "Does your organisation, as a data exporter, have exclusive access to encryption keys?",
"questionType": "YESNO",
"options": [
{
"id": "6316572f-6db4-404a-8556-533c53782b44",
"option": "Yes",
"sequence": 1,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null,
"translationIdentifier": "51cfc5e3-89db-4f50-94e9-c7630f0de577"
},
{
"id": "66d44f2d-000d-4cb9-b880-ec794a182c14",
"option": "No",
"sequence": 2,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null,
"translationIdentifier": "48c2d2e0-a65c-4d3c-9fc3-016a40c8d4ea"
},
{
"id": "d1a19f5c-b1ef-431a-a60d-add8d80c5430",
"option": "NotApplicable",
"sequence": 3,
"attributes": null,
"hint": null,
"optionType": "NOT_APPLICABLE",
"optionKey": null
}
],
"required": false,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"requireJustification\":false}",
"friendlyName": "Data Importer-Managed Keys",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"translationIdentifier": "0b068079-eae9-4061-b19f-ecc6618c49cf",
"rootVersionId": "7f7bc6b7-384f-4396-8d64-b7d17bf18111",
"sequence": 3
},
{
"id": "06d8a19c-1710-4a75-b013-fd6c9d084d68",
"content": "Do you intend to transfer pseudonymized data? ",
"questionType": "YESNO",
"options": [
{
"id": "9801f07d-e5f7-4e53-afbc-499c1e80cd04",
"option": "Yes",
"sequence": 1,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "45b0f740-1481-410f-ad4b-6e92699a9bd2",
"option": "No",
"sequence": 2,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "d3737c06-e7b3-4a8b-a9c6-15c75d7e5afd",
"option": "NotSure",
"sequence": 3,
"attributes": null,
"hint": null,
"optionType": "NOT_SURE",
"optionKey": null
}
],
"required": false,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":false,\"requireJustification\":false,\"allowJustification\":true}",
"friendlyName": "Pseudonymized data",
"description": "<p>You might need to re-identify the personal data you transferred, for example for research purposes. In this case, you need to implement specific pseudonymization measures that block the data importer from identifying the individuals to which the data refer. </p><p><br></p>",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"rootVersionId": "fc3a7cf3-ccba-4a21-89cd-509f7b24d86a",
"sequence": 4
},
{
"id": "cad81b20-54dd-4da8-b751-310d9f2ff712",
"content": "Are you transferring data to an importer that is specifically protected in the destination country in such a way to prevent access from public authorities?",
"questionType": "MULTICHOICE",
"options": [
{
"id": "55a2b9e6-81bc-4f2d-8015-fddcd11d09ea",
"option": "Yes, all my data is protected by this exception and is being transferred to a protected recipient",
"sequence": 1,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "3ceb461c-b6f9-4f49-b92b-3df81ae9e5ff",
"option": "Yes, but not all of the data is protected by this exception ",
"sequence": 2,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "b9dcd0bb-6082-4758-802e-9223572439f2",
"option": "NotSure",
"sequence": 3,
"attributes": null,
"hint": null,
"optionType": "NOT_SURE",
"optionKey": null
},
{
"id": "b75c9f55-1652-427c-a0c6-2df1ac216933",
"option": "NotApplicable",
"sequence": 4,
"attributes": null,
"hint": null,
"optionType": "NOT_APPLICABLE",
"optionKey": null
}
],
"required": false,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"requireJustification\":false,\"isMultiSelect\":false,\"displayAnswerType\":\"dropdown\"}",
"friendlyName": "Protected recipient",
"description": "<p>For example, the law protects the recipient with formal and substantial guarantees because it provides medical or legal services. </p>",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"rootVersionId": "5ae166dc-044e-48c0-856f-226489fc4d72",
"sequence": 5
},
{
"id": "024e01b5-2f91-44e3-a6e7-d530d211e06c",
"content": "Can you split the data between two or more importer in different jurisdictions, so that each of them is unable individually to reconstruct the personal data and single-out the data subjects?",
"questionType": "YESNO",
"options": [
{
"id": "74e5dcf4-e5bc-4a44-b9e2-4c5b856efba4",
"option": "Yes",
"sequence": 1,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "642e0c3f-4954-476e-9850-706fa2d4432d",
"option": "No",
"sequence": 2,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "28bc0d71-20a1-42a2-a804-1237118f26b6",
"option": "NotSure",
"sequence": 3,
"attributes": null,
"hint": null,
"optionType": "NOT_SURE",
"optionKey": null
}
],
"required": false,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"requireJustification\":false,\"allowJustification\":true}",
"friendlyName": "Split or multi-party processing",
"description": "<p>This way of transferring data consists in splitting personal data into two or more parts each of which cannot be used to to identify a specific data subject, without the use of the other or of additional information.</p><p>The importers must be in different jurisdictions. </p>",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"rootVersionId": "e11f751b-0260-4a78-a60b-4501386b5ed8",
"sequence": 6
},
{
"id": "c03ea6b5-fa68-4e84-a071-cba7b6f14e69",
"content": "Can the data importer need to access personal data in clear? ",
"questionType": "YESNO",
"options": [
{
"id": "c5006f6d-b294-4e5b-a02f-071e5b8e0df4",
"option": "Yes",
"sequence": 1,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "1b7caef9-3761-4f6d-8c92-6b57def3ebe0",
"option": "No",
"sequence": 2,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null
},
{
"id": "896c3c3e-ce15-460f-b26f-53cc30da907c",
"option": "NotSure",
"sequence": 3,
"attributes": null,
"hint": null,
"optionType": "NOT_SURE",
"optionKey": null
}
],
"required": false,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"requireJustification\":false,\"allowJustification\":true}",
"friendlyName": "Access in clear from data importer",
"description": "<p>For example, does the data importer needs to access data in clear because technically necessary for the provision of a service? If yes, it should be noted that <u>the EDPB considers this scenario as high-risk for the data subject'\''s fundamental rights.</u></p><p><br></p><p>[\"<em>In the given scenarios, where unencrypted personal data is technically necessary for the provision of the service by the processor, transport encryption and data-at-rest encryption even taken together, do not constitute a supplementary measure that ensures an essentially equivalent level of protection if the data importer is in possession of the cryptographic keys\" - </em>EDPB, Use Case 6 Transfer to cloud services providers or other processors which require access to data in the clear, Recommendations 01/2020]</p>",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"rootVersionId": "4bc598d3-3dd4-4647-85e8-f707a6440f01",
"sequence": 7
},
{
"id": "3da1c5b1-da0e-43b3-a929-3ede736001ff",
"content": "What controls are already in place to safeguard this transfer?",
"questionType": "ASSESS_CONTROL",
"required": false,
"attributes": "{\"isQuestionHintEnabled\":false,\"isMultiSelect\":true,\"allowLaws\":true,\"requireJustification\":false}",
"friendlyName": "Additional Controls in place",
"description": "<p>Select the relevant implemented controls that contribute to mitigating personal data processing in the context of cross-border transfer.</p><p>These measures may consist of</p><ul><li><u>Technical Security Safeguards</u></li><li><u>Organizational Controls</u></li><li><u>Contractual Commitments and Obligations</u></li></ul><p><br></p><p>Please attach supporting evidence where possible.</p>",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": true,
"readOnly": false,
"translationIdentifier": "28a0b3a1-ba21-47fa-9347-0e0bf7156c85",
"rootVersionId": "2eff8bf0-88e3-4867-9d46-6b184dfdb941",
"sequence": 8
},
{
"id": "c08c70cb-8f5a-46c5-9852-e8ee101d6a63",
"content": "Based on this section, do the supplementary measures deployed or recommended grant effectiveness in protecting the transfer?",
"questionType": "YESNO",
"options": [
{
"id": "1255e9fd-2130-47e6-9515-6387713a7c34",
"option": "Yes",
"sequence": 1,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null,
"translationIdentifier": "171f2d26-d1cf-4707-a2bc-c352c0a20a71"
},
{
"id": "2126cd49-1b8e-4eb1-bd07-aeb35124ecab",
"option": "No",
"sequence": 2,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null,
"translationIdentifier": "d7f82cc8-857b-4f34-9b46-6d4edeadfde6"
}
],
"required": true,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"requireJustification\":true,\"allowJustification\":true}",
"friendlyName": "Supplementary Measures Effectiveness",
"description": "<p>Please determine whether the supplementary measures selected in this section are sufficiently robust in protecting data in the Third Country.</p><p>If unsure, please refer to the EDPB guidance:</p><p><a href=\"https://edpb.europa.eu/system/files/2021-06/edpb_recommendations_202001vo.2.0_supplementarymeasurestransferstools_en.pdf\" rel=\"noopener noreferrer\" target=\"_blank\">Recommendations 01/2020 on measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data</a></p><p><br></p><p><u>Note</u>: According to some Data Protection Authorities, a risk-based approach is not advisable for performing a TIA. Therefore, if the Third Country presents any risk of undermining data protection with regard to the transfer, the abovementioned measures might not be enough to mitigate them.</p>",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"translationIdentifier": "f1ad97f6-9b77-4e3b-944e-0aec3b028ae5",
"rootVersionId": "cc38f196-98cd-4317-8df2-1cf338addd35",
"sequence": 9
}
]
},
{
"name": "Transfer Impact Assessment Result ",
"invalidQuestionCount": 0,
"id": "00f7a3b3-8515-40d6-8b87-92ef8c3cb422",
"rootVersionId": "5213f662-7a59-4c7a-b252-6cc0a7a0f7d8",
"sequence": 6,
"questions": [
{
"id": "dd388747-13de-467c-95a9-c1a288e1fdf7",
"content": "Based on your previous answers, this transfer can be deemed safe [EEA/Adequacy Decision]",
"questionType": "STATEMENT",
"required": false,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true}",
"description": "<p>You are transferring data to a country inside the European Economic Area or covered by the European Commission Adequacy Decision (complete list <a href=\"https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en\" rel=\"noopener noreferrer\" target=\"_blank\">here</a>).</p><p><br></p><p>Therefore, your transfer shall be considered safe.</p>",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"translationIdentifier": "78f75076-9a55-47a2-989c-2bee66c06b23",
"rootVersionId": "ad709a77-d05d-4733-897f-64f519224687",
"sequence": 1
},
{
"id": "b2593951-626f-4826-827e-b6483f54230c",
"content": "Based on your previous answers, this transfer can be deemed safe [Essential equivalence]",
"questionType": "STATEMENT",
"required": false,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true}",
"description": "<p>Based on your assessment:</p><ul><li>The country of the data importer <strong>is deemed to grant an equivalent level of protection to that of the GDPR</strong>, and no problematic legislation applies to the transfer.</li><li>To comply with Chapter V of GDPR, you shall rely on a <strong>cross-border transfer tool </strong>(Article 46.2 GDPR);</li><li><strong>s<u>upplementary measures are recommended but not mandatory</u></strong> since the Third Country does not encompass any significant intrinsic risks, with a view on its legal framework.</li></ul><p><br></p><p><u>Note</u>: this is a subjective response based on your previous answers; if you have any doubts about the equivalency level, please consider reassessing sections 2 and 3.</p>",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"rootVersionId": "e45d9f31-0fda-4ab4-8e0f-69a0baf70d3a",
"sequence": 2
},
{
"id": "9cf1d7a3-c309-4e77-8ad8-c39589d8ba0d",
"content": "Based on your previous answers, this transfer can be deemed safe [Supplementary measures]",
"questionType": "STATEMENT",
"required": false,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true}",
"description": "<p>Based on your assessment:</p><ul><li>The data importer'\''s country does not grant an <strong>equivalent level of protection to that of the GDPR</strong>,</li><li>To comply with Chapter V of GDPR, you shall rely on a <strong><u>cross-border transfer tool </u></strong>(Article 46.2 GDPR); </li><li><strong><u>Supplementary measures are required </u></strong>since the transfer tool is insufficient to address concerns raised by personal data transfer.</li></ul>",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"translationIdentifier": "b4a446bf-ebc1-46b2-9e07-d4d9d0080246",
"rootVersionId": "09ef5733-764a-47f6-b5ef-248180807c1a",
"sequence": 3
},
{
"id": "3312e036-9db6-4047-9422-3573e59757ed",
"content": "Based on your previous answers, this transfer can be deemed safe [Derogation, article 49 GDPR]",
"questionType": "STATEMENT",
"required": false,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true}",
"description": "<p>Because you are transferring personal data to a country while relying on specific derogations, you don'\''t need to perform any more assessments on the transfer. </p><p>Please consider reviewing this outcome if any of the conditions change.</p>",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"rootVersionId": "11c6c277-3cd6-48d3-b72a-6818141c3aa0",
"sequence": 4
},
{
"id": "d1a329c7-76bf-4e76-8e4b-d0873b0f4864",
"content": "Based on your previous answers, this transfer can be deemed unsafe",
"questionType": "STATEMENT",
"required": false,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true}",
"description": "<p>Based on your assessment:</p><ul><li>The data importer'\''s country does not grant an equivalent level of protection to that of the GDPR,</li><li>Even if combined with supplementary measures, a cross-border transfer tool cannot mitigate the risks posed by the transfer to the Data Importer in the third country.</li></ul><p><br></p><p>Please consider suspending the transfer or changing the conditions under which it shall occur before proceeding further.</p>",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"rootVersionId": "166099df-5eae-419e-85b9-9fb258aaccf3",
"sequence": 5
}
]
},
{
"name": "Final Considerations",
"invalidQuestionCount": 0,
"translationIdentifier": "17602d8a-4b2b-46bf-be27-774260133e77",
"id": "43c24b42-26fc-4d92-bd5e-9fb460ac1d80",
"rootVersionId": "f8fe0598-bff2-48a5-bf6f-8cc17a6fa688",
"sequence": 7,
"questions": [
{
"id": "bd5d71b6-a391-434c-bde6-e252918736d9",
"content": "You'\''re done!",
"questionType": "TEXTBOX",
"options": [
{
"id": "f4048c28-3d03-4b82-9735-d0cb5f6b0911",
"option": "",
"sequence": 1,
"attributes": null,
"hint": null,
"optionType": "DEFAULT",
"optionKey": null,
"translationIdentifier": "d1a936db-d62d-4491-9e61-e4e8b973acde"
}
],
"required": false,
"attributes": "{\"isQuestionHintEnabled\":false,\"requireJustification\":false,\"allowLaws\":true}",
"friendlyName": "Done",
"description": "<p>Please provide any final consideration in the text box below as needed.</p>",
"valid": true,
"prePopulateResponse": false,
"linkAssessmentToInventory": false,
"attachmentRequired": false,
"linkAssessmentToResponseEntity": false,
"readOnly": false,
"translationIdentifier": "9baab504-f046-429e-b19b-8b56d752a166",
"rootVersionId": "1055a282-999d-4d5a-9e49-1b9ac2e845d0",
"sequence": 1
}
]
}
],
"navigations": [],
"showNavigationRules": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "8a95c4bd-52b2-4cab-87fe-59fe268ea6b7",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '\''3dbbc738-a9b4-477d-8ee7-5b9f73af3569'\'' ) && ( @.questionId == '\''877540cb-6ac5-4275-a4d0-8e1073828050'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 2,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 3,
"optionList": null
}
]
}
]
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "8749807b-e8a6-4499-8b3f-1ce1a23c09d4",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '\''3dbbc738-a9b4-477d-8ee7-5b9f73af3569'\'' ) && ( @.questionId == '\''877540cb-6ac5-4275-a4d0-8e1073828050'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 2,
"optionList": null
}
]
}
]
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId == '\''a70fa995-5cd2-48fb-9c9b-7a249a9b6959'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 0,
"optionList": null
}
]
}
]
},
{
"sectionId": "ce0e1775-675d-4686-96e0-2a080a1b0ce3",
"questionId": "4eac414a-5bd7-4900-ad57-7fe7bcaf7a1e",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( ( @.responseId == '\''a70fa995-5cd2-48fb-9c9b-7a249a9b6959'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) || ( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 2,
"optionList": null
}
]
}
]
},
{
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "c08c70cb-8f5a-46c5-9852-e8ee101d6a63",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '\''3dbbc738-a9b4-477d-8ee7-5b9f73af3569'\'' ) && ( @.questionId == '\''877540cb-6ac5-4275-a4d0-8e1073828050'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) || ( ( @.responseId == '\''a70fa995-5cd2-48fb-9c9b-7a249a9b6959'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''fdb288bd-1d21-44dc-87db-ebd5d2ef029e'\'' ) && ( @.questionId == '\''ccb9373b-7ff0-4651-956c-9de1709254bf'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "ccb9373b-7ff0-4651-956c-9de1709254bf"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 2,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 3,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "fdb288bd-1d21-44dc-87db-ebd5d2ef029e",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "ccb9373b-7ff0-4651-956c-9de1709254bf",
"responseCount": null,
"group": 4,
"optionList": null
}
]
}
]
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "4bfe55e4-7928-47da-8a1c-e496688e91ee",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '\''3dbbc738-a9b4-477d-8ee7-5b9f73af3569'\'' ) && ( @.questionId == '\''877540cb-6ac5-4275-a4d0-8e1073828050'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 2,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 3,
"optionList": null
}
]
}
]
},
{
"sectionId": "ce0e1775-675d-4686-96e0-2a080a1b0ce3",
"questionId": "1fa545b5-8c52-4031-8690-55aebf273045",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( ( @.responseId == '\''a70fa995-5cd2-48fb-9c9b-7a249a9b6959'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) || ( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 2,
"optionList": null
}
]
}
]
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "a3edeb53-07bc-4ff0-98d5-d9e522d15b10",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '\''3dbbc738-a9b4-477d-8ee7-5b9f73af3569'\'' ) && ( @.questionId == '\''877540cb-6ac5-4275-a4d0-8e1073828050'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 2,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 3,
"optionList": null
}
]
}
]
},
{
"sectionId": "ce0e1775-675d-4686-96e0-2a080a1b0ce3",
"questionId": "662282e9-4a04-462b-9751-77d8fe231f3d",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( ( @.responseId == '\''a70fa995-5cd2-48fb-9c9b-7a249a9b6959'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) || ( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 2,
"optionList": null
}
]
}
]
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "437d57bc-8f4a-4304-9425-f5800a0cdcf2",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '\''3dbbc738-a9b4-477d-8ee7-5b9f73af3569'\'' ) && ( @.questionId == '\''877540cb-6ac5-4275-a4d0-8e1073828050'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 2,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 3,
"optionList": null
}
]
}
]
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "ccb9373b-7ff0-4651-956c-9de1709254bf",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '\''3dbbc738-a9b4-477d-8ee7-5b9f73af3569'\'' ) && ( @.questionId == '\''877540cb-6ac5-4275-a4d0-8e1073828050'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) || ( ( @.responseId == '\''a70fa995-5cd2-48fb-9c9b-7a249a9b6959'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 2,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 3,
"optionList": null
}
]
}
]
},
{
"sectionId": "ce0e1775-675d-4686-96e0-2a080a1b0ce3",
"questionId": "42d97c55-0e95-4aba-97fa-f1df55ed0f25",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( ( @.responseId == '\''a70fa995-5cd2-48fb-9c9b-7a249a9b6959'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) || ( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 2,
"optionList": null
}
]
}
]
},
{
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "8859e842-ce09-49c5-98ca-f282de4a31e5",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '\''3dbbc738-a9b4-477d-8ee7-5b9f73af3569'\'' ) && ( @.questionId == '\''877540cb-6ac5-4275-a4d0-8e1073828050'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) || ( ( @.responseId == '\''a70fa995-5cd2-48fb-9c9b-7a249a9b6959'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 2,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 3,
"optionList": null
}
]
}
]
},
{
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "cad81b20-54dd-4da8-b751-310d9f2ff712",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '\''3dbbc738-a9b4-477d-8ee7-5b9f73af3569'\'' ) && ( @.questionId == '\''877540cb-6ac5-4275-a4d0-8e1073828050'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) || ( ( @.responseId == '\''a70fa995-5cd2-48fb-9c9b-7a249a9b6959'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 2,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 3,
"optionList": null
}
]
}
]
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "52923d50-2211-49cf-917e-0dc953a17056",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '\''3dbbc738-a9b4-477d-8ee7-5b9f73af3569'\'' ) && ( @.questionId == '\''877540cb-6ac5-4275-a4d0-8e1073828050'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 2,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 3,
"optionList": null
}
]
}
]
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "c0de1bc1-c2cf-48fd-b826-06142ba6783d",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '\''3dbbc738-a9b4-477d-8ee7-5b9f73af3569'\'' ) && ( @.questionId == '\''877540cb-6ac5-4275-a4d0-8e1073828050'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 2,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 3,
"optionList": null
}
]
}
]
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "c65a9cde-8556-4a44-88dc-628932396361",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '\''3dbbc738-a9b4-477d-8ee7-5b9f73af3569'\'' ) && ( @.questionId == '\''877540cb-6ac5-4275-a4d0-8e1073828050'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 2,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 3,
"optionList": null
}
]
}
]
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "08dc64a1-3770-40e5-840c-f7a66f4042c1",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '\''3dbbc738-a9b4-477d-8ee7-5b9f73af3569'\'' ) && ( @.questionId == '\''877540cb-6ac5-4275-a4d0-8e1073828050'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId == '\''a70fa995-5cd2-48fb-9c9b-7a249a9b6959'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 2,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 3,
"optionList": null
}
]
}
]
},
{
"sectionId": "00f7a3b3-8515-40d6-8b87-92ef8c3cb422",
"questionId": "9cf1d7a3-c309-4e77-8ad8-c39589d8ba0d",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '\''fdb288bd-1d21-44dc-87db-ebd5d2ef029e'\'' ) && ( @.questionId == '\''ccb9373b-7ff0-4651-956c-9de1709254bf'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId == '\''1255e9fd-2130-47e6-9515-6387713a7c34'\'' ) && ( @.questionId == '\''c08c70cb-8f5a-46c5-9852-e8ee101d6a63'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
},
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId == '\''1255e9fd-2130-47e6-9515-6387713a7c34'\'' ) && ( @.questionId == '\''c08c70cb-8f5a-46c5-9852-e8ee101d6a63'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "c08c70cb-8f5a-46c5-9852-e8ee101d6a63"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "ccb9373b-7ff0-4651-956c-9de1709254bf"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "fdb288bd-1d21-44dc-87db-ebd5d2ef029e",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "ccb9373b-7ff0-4651-956c-9de1709254bf",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "1255e9fd-2130-47e6-9515-6387713a7c34",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "c08c70cb-8f5a-46c5-9852-e8ee101d6a63",
"responseCount": null,
"group": 1,
"optionList": null
}
]
},
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "1255e9fd-2130-47e6-9515-6387713a7c34",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "c08c70cb-8f5a-46c5-9852-e8ee101d6a63",
"responseCount": null,
"group": 0,
"optionList": null
}
]
}
]
},
{
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "331c2403-0899-4c3a-ade3-d74b7bc66835",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '\''3dbbc738-a9b4-477d-8ee7-5b9f73af3569'\'' ) && ( @.questionId == '\''877540cb-6ac5-4275-a4d0-8e1073828050'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) || ( ( @.responseId == '\''a70fa995-5cd2-48fb-9c9b-7a249a9b6959'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 2,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 3,
"optionList": null
}
]
}
]
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "e1b2cbca-8054-4ffa-8284-a3f92075479b",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '\''3dbbc738-a9b4-477d-8ee7-5b9f73af3569'\'' ) && ( @.questionId == '\''877540cb-6ac5-4275-a4d0-8e1073828050'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 2,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 3,
"optionList": null
}
]
}
]
},
{
"sectionId": "00f7a3b3-8515-40d6-8b87-92ef8c3cb422",
"questionId": "d1a329c7-76bf-4e76-8e4b-d0873b0f4864",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId == '\''32a1c666-2967-4778-a900-d57f549e4187'\'' ) && ( @.questionId == '\''ccb9373b-7ff0-4651-956c-9de1709254bf'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId == '\''2126cd49-1b8e-4eb1-bd07-aeb35124ecab'\'' ) && ( @.questionId == '\''c08c70cb-8f5a-46c5-9852-e8ee101d6a63'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
},
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId == '\''2126cd49-1b8e-4eb1-bd07-aeb35124ecab'\'' ) && ( @.questionId == '\''c08c70cb-8f5a-46c5-9852-e8ee101d6a63'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "c08c70cb-8f5a-46c5-9852-e8ee101d6a63"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "ccb9373b-7ff0-4651-956c-9de1709254bf"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "32a1c666-2967-4778-a900-d57f549e4187",
"optionType": "DEFAULT",
"option": "No",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "ccb9373b-7ff0-4651-956c-9de1709254bf",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "2126cd49-1b8e-4eb1-bd07-aeb35124ecab",
"optionType": "DEFAULT",
"option": "No",
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "c08c70cb-8f5a-46c5-9852-e8ee101d6a63",
"responseCount": null,
"group": 1,
"optionList": null
}
]
},
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "2126cd49-1b8e-4eb1-bd07-aeb35124ecab",
"optionType": "DEFAULT",
"option": "No",
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "c08c70cb-8f5a-46c5-9852-e8ee101d6a63",
"responseCount": null,
"group": 0,
"optionList": null
}
]
}
]
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "1d96fd4d-293f-497b-a337-7ab3ce8c4947",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '\''3dbbc738-a9b4-477d-8ee7-5b9f73af3569'\'' ) && ( @.questionId == '\''877540cb-6ac5-4275-a4d0-8e1073828050'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 2,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 3,
"optionList": null
}
]
}
]
},
{
"sectionId": "c1a12c92-8acd-42de-a6c3-7f43cc76f85a",
"questionId": "54c22bcd-a459-4b2a-bb77-bef138441b3d",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '\''3dbbc738-a9b4-477d-8ee7-5b9f73af3569'\'' ) && ( @.questionId == '\''877540cb-6ac5-4275-a4d0-8e1073828050'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) || ( ( @.responseId == '\''a70fa995-5cd2-48fb-9c9b-7a249a9b6959'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 2,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 3,
"optionList": null
}
]
}
]
},
{
"sectionId": "00f7a3b3-8515-40d6-8b87-92ef8c3cb422",
"questionId": "dd388747-13de-467c-95a9-c1a288e1fdf7",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( ( @.responseId == '\''9b13d90d-4314-42ee-8ff2-97422d090195'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) || ( ( @.responseId == '\''5cde9447-d09a-44ea-96f8-58b0dc33abeb'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) || ( ( @.responseId == '\''a70fa995-5cd2-48fb-9c9b-7a249a9b6959'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId == '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "9b13d90d-4314-42ee-8ff2-97422d090195",
"optionType": "DEFAULT",
"option": "European Economic Area",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "5cde9447-d09a-44ea-96f8-58b0dc33abeb",
"optionType": "DEFAULT",
"option": "Adequate Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 1,
"optionList": null
}
]
}
]
},
{
"sectionId": "00f7a3b3-8515-40d6-8b87-92ef8c3cb422",
"questionId": "b2593951-626f-4826-827e-b6483f54230c",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId == '\''fdb288bd-1d21-44dc-87db-ebd5d2ef029e'\'' ) && ( @.questionId == '\''ccb9373b-7ff0-4651-956c-9de1709254bf'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
},
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId == '\''3dbbc738-a9b4-477d-8ee7-5b9f73af3569'\'' ) && ( @.questionId == '\''877540cb-6ac5-4275-a4d0-8e1073828050'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "ccb9373b-7ff0-4651-956c-9de1709254bf"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "AND",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "AND",
"optionId": "fdb288bd-1d21-44dc-87db-ebd5d2ef029e",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "ccb9373b-7ff0-4651-956c-9de1709254bf",
"responseCount": null,
"group": 0,
"optionList": null
}
]
},
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": null,
"group": 0,
"optionList": null
}
]
}
]
},
{
"sectionId": "ce0e1775-675d-4686-96e0-2a080a1b0ce3",
"questionId": "8f63bb92-f2a1-4e16-a265-8fa14d90addb",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( ( @.responseId == '\''a70fa995-5cd2-48fb-9c9b-7a249a9b6959'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) || ( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 2,
"optionList": null
}
]
}
]
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "4df5d952-6507-4317-8291-ece329137f78",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '\''3dbbc738-a9b4-477d-8ee7-5b9f73af3569'\'' ) && ( @.questionId == '\''877540cb-6ac5-4275-a4d0-8e1073828050'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) || ( ( @.responseId == '\''a70fa995-5cd2-48fb-9c9b-7a249a9b6959'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 2,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 3,
"optionList": null
}
]
}
]
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "6f4f2d51-6d64-4f91-a1e8-6fc5f660b367",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '\''3dbbc738-a9b4-477d-8ee7-5b9f73af3569'\'' ) && ( @.questionId == '\''877540cb-6ac5-4275-a4d0-8e1073828050'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 2,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 3,
"optionList": null
}
]
}
]
},
{
"sectionId": "c1a12c92-8acd-42de-a6c3-7f43cc76f85a",
"questionId": "a089af6d-0f7c-48fa-9aec-8aab693204b3",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '\''3dbbc738-a9b4-477d-8ee7-5b9f73af3569'\'' ) && ( @.questionId == '\''877540cb-6ac5-4275-a4d0-8e1073828050'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) || ( ( @.responseId == '\''a70fa995-5cd2-48fb-9c9b-7a249a9b6959'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 2,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 3,
"optionList": null
}
]
}
]
},
{
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "eb3346d1-c3fe-4a14-a305-1a2df69835ca",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '\''3dbbc738-a9b4-477d-8ee7-5b9f73af3569'\'' ) && ( @.questionId == '\''877540cb-6ac5-4275-a4d0-8e1073828050'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) || ( ( @.responseId == '\''a70fa995-5cd2-48fb-9c9b-7a249a9b6959'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 2,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 3,
"optionList": null
}
]
}
]
},
{
"sectionId": "ce0e1775-675d-4686-96e0-2a080a1b0ce3",
"questionId": "38b5c136-37c8-4b63-8493-21e5553c4e25",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( ( @.responseId == '\''a70fa995-5cd2-48fb-9c9b-7a249a9b6959'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) || ( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 2,
"optionList": null
}
]
}
]
},
{
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "06d8a19c-1710-4a75-b013-fd6c9d084d68",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '\''3dbbc738-a9b4-477d-8ee7-5b9f73af3569'\'' ) && ( @.questionId == '\''877540cb-6ac5-4275-a4d0-8e1073828050'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) || ( ( @.responseId == '\''a70fa995-5cd2-48fb-9c9b-7a249a9b6959'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 2,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 3,
"optionList": null
}
]
}
]
},
{
"sectionId": "00f7a3b3-8515-40d6-8b87-92ef8c3cb422",
"questionId": "3312e036-9db6-4047-9422-3573e59757ed",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId == '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 0,
"optionList": null
}
]
}
]
},
{
"sectionId": "ce0e1775-675d-4686-96e0-2a080a1b0ce3",
"questionId": "9a5b69a6-3246-4aee-b468-d5be58ece7f8",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( ( @.responseId == '\''a70fa995-5cd2-48fb-9c9b-7a249a9b6959'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) || ( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 2,
"optionList": null
}
]
}
]
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "2676127c-01a9-41e7-ac6a-496d029f90e7",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '\''3dbbc738-a9b4-477d-8ee7-5b9f73af3569'\'' ) && ( @.questionId == '\''877540cb-6ac5-4275-a4d0-8e1073828050'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 2,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 3,
"optionList": null
}
]
}
]
},
{
"sectionId": "ce0e1775-675d-4686-96e0-2a080a1b0ce3",
"questionId": "cc2e821c-0f20-4bd2-a1e4-06b8e51ffca6",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( ( @.responseId == '\''a70fa995-5cd2-48fb-9c9b-7a249a9b6959'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) || ( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 2,
"optionList": null
}
]
}
]
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( ( @.responseId == '\''a70fa995-5cd2-48fb-9c9b-7a249a9b6959'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) || ( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 2,
"optionList": null
}
]
}
]
},
{
"sectionId": "ce0e1775-675d-4686-96e0-2a080a1b0ce3",
"questionId": "ecdbab18-bc8c-46a1-81b8-96a954e8869b",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( ( @.responseId == '\''a70fa995-5cd2-48fb-9c9b-7a249a9b6959'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) || ( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 2,
"optionList": null
}
]
}
]
},
{
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "c03ea6b5-fa68-4e84-a071-cba7b6f14e69",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '\''3dbbc738-a9b4-477d-8ee7-5b9f73af3569'\'' ) && ( @.questionId == '\''877540cb-6ac5-4275-a4d0-8e1073828050'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) || ( ( @.responseId == '\''a70fa995-5cd2-48fb-9c9b-7a249a9b6959'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 2,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 3,
"optionList": null
}
]
}
]
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "32b7b8f5-450c-4f64-9332-558801da9a00",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '\''3dbbc738-a9b4-477d-8ee7-5b9f73af3569'\'' ) && ( @.questionId == '\''877540cb-6ac5-4275-a4d0-8e1073828050'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 2,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 3,
"optionList": null
}
]
}
]
},
{
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "3da1c5b1-da0e-43b3-a929-3ede736001ff",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '\''3dbbc738-a9b4-477d-8ee7-5b9f73af3569'\'' ) && ( @.questionId == '\''877540cb-6ac5-4275-a4d0-8e1073828050'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) || ( ( @.responseId == '\''a70fa995-5cd2-48fb-9c9b-7a249a9b6959'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 2,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 3,
"optionList": null
}
]
}
]
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "7b6c2be0-a184-469b-980c-f3cbf1653ae8",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '\''3dbbc738-a9b4-477d-8ee7-5b9f73af3569'\'' ) && ( @.questionId == '\''877540cb-6ac5-4275-a4d0-8e1073828050'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 2,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 3,
"optionList": null
}
]
}
]
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( ( @.responseId == '\''a70fa995-5cd2-48fb-9c9b-7a249a9b6959'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) || ( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 1,
"optionList": null
}
]
}
]
},
{
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "024e01b5-2f91-44e3-a6e7-d530d211e06c",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '\''3dbbc738-a9b4-477d-8ee7-5b9f73af3569'\'' ) && ( @.questionId == '\''877540cb-6ac5-4275-a4d0-8e1073828050'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( ( @.responseId == '\''a20fc718-7cec-4e67-826b-51e8e5ff0ef9'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) || ( ( @.responseId == '\''a70fa995-5cd2-48fb-9c9b-7a249a9b6959'\'' ) && ( @.questionId == '\''c346b4eb-b71e-4701-bce6-8e9d78ca38f8'\'' ) ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''6404cd2c-fedd-4847-907c-e3ca96c48f86'\'' ) && ( @.questionId == '\''17fe032b-96fe-4aee-b598-4af6b681954e'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '\''81e5c256-cbf0-4c9f-bc80-187e284717df'\'' ) && ( @.questionId == '\''fc0ad68e-dba5-4460-9d79-34f310e6e1af'\'' ) )]"
],
"logicalOperator": null,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": null,
"group": 0,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": null,
"group": 1,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": null,
"group": 2,
"optionList": null
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": null,
"group": 3,
"optionList": null
}
]
}
]
}
],
"parentChildQuestionIds": {
"ad43751a-643b-423f-b0c5-90505d2d8adf": [
"662282e9-4a04-462b-9751-77d8fe231f3d",
"17fe032b-96fe-4aee-b598-4af6b681954e",
"ecdbab18-bc8c-46a1-81b8-96a954e8869b",
"1fa545b5-8c52-4031-8690-55aebf273045"
]
},
"actions": [
{
"conditionGroups": [
{
"sectionId": null,
"questionId": null,
"conditions": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "52923d50-2211-49cf-917e-0dc953a17056",
"logicalOperator": "OR",
"comparisonOperator": "EQUAL_TO",
"optionId": null,
"optionType": "DEFAULT",
"responseCount": null,
"option": null,
"optionList": [
{
"optionId": "40225878-2a7c-4e81-9b1f-e57f5b145137",
"option": "Weak",
"optionType": "DEFAULT"
}
],
"dataElements": null,
"dataCategories": null,
"dataSubjects": null
}
],
"logicalOperator": "OR"
},
{
"sectionId": null,
"questionId": null,
"conditions": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "52923d50-2211-49cf-917e-0dc953a17056",
"logicalOperator": "OR",
"comparisonOperator": "EQUAL_TO",
"optionId": null,
"optionType": "DEFAULT",
"responseCount": null,
"option": null,
"optionList": [
{
"optionId": "ab31a9ba-6e42-456d-8215-10ce5aa0c15f",
"option": "NotSure",
"optionType": "NOT_SURE"
}
],
"dataElements": null,
"dataCategories": null,
"dataSubjects": null
}
],
"logicalOperator": "OR"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 4,
"description": null,
"recommendation": null,
"probabilityLevel": "VeryHigh",
"impactLevel": "VeryHigh",
"probabilityLevelId": 4,
"impactLevelId": 4,
"riskScore": 8,
"name": null,
"categories": [],
"controls": null,
"customControls": null,
"riskApprovers": [],
"riskOwners": [],
"threat": null,
"vulnerabilities": null,
"riskOwnerType": null,
"riskApproverType": null,
"riskTemplate": null,
"targetRiskLevel": null,
"attributeValues": {},
"deadlineAfterDays": null,
"reminder": null,
"inventoryTypeAndFieldNameMapForApproverSource": null,
"inventoryTypeAndFieldNameMapForOwnerSource": null
},
"conditionGroupType": "QUESTION_CONDITION",
"actionDetails": [
{
"id": "d5a19c26-78c1-4a81-a334-3c05b31fd862",
"actionRuleId": "88ad1f8a-7561-417f-8a9d-7f9aa0a1f183",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "52923d50-2211-49cf-917e-0dc953a17056"
}
],
"id": "88ad1f8a-7561-417f-8a9d-7f9aa0a1f183",
"sequence": 6,
"rootVersionId": "6b089d47-a881-4e20-b06d-a821a04776e4",
"name": "Third Country - Rule of Law - Weak ",
"active": true
},
{
"conditionGroups": [
{
"sectionId": null,
"questionId": null,
"conditions": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "52923d50-2211-49cf-917e-0dc953a17056",
"logicalOperator": "OR",
"comparisonOperator": "EQUAL_TO",
"optionId": null,
"optionType": "DEFAULT",
"responseCount": null,
"option": null,
"optionList": [
{
"optionId": "71cadb05-bc52-4a08-9e26-2c30c618218b",
"option": "Average",
"optionType": "DEFAULT"
}
],
"dataElements": null,
"dataCategories": null,
"dataSubjects": null
}
],
"logicalOperator": "OR"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 3,
"description": null,
"recommendation": null,
"probabilityLevel": "High",
"impactLevel": "Medium",
"probabilityLevelId": 3,
"impactLevelId": 2,
"riskScore": 5,
"name": null,
"categories": [],
"controls": null,
"customControls": null,
"riskApprovers": [],
"riskOwners": [],
"threat": null,
"vulnerabilities": null,
"riskOwnerType": null,
"riskApproverType": null,
"riskTemplate": null,
"targetRiskLevel": null,
"attributeValues": {},
"deadlineAfterDays": null,
"reminder": null,
"inventoryTypeAndFieldNameMapForApproverSource": null,
"inventoryTypeAndFieldNameMapForOwnerSource": null
},
"conditionGroupType": "QUESTION_CONDITION",
"actionDetails": [
{
"id": "c4f3cff1-514c-42ab-aab7-fd6b263fc753",
"actionRuleId": "131bf94b-43bf-4974-a7ce-f920c50f0ea9",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "52923d50-2211-49cf-917e-0dc953a17056"
}
],
"id": "131bf94b-43bf-4974-a7ce-f920c50f0ea9",
"sequence": 7,
"rootVersionId": "70a1635c-e7bd-4532-8ce7-4159b6c1aec3",
"name": "Third Country - Rule of Law - Average ",
"active": true
},
{
"conditionGroups": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "52923d50-2211-49cf-917e-0dc953a17056",
"conditions": [
{
"sectionId": null,
"questionId": null,
"logicalOperator": "OR",
"comparisonOperator": "EQUAL_TO",
"optionId": "71cadb05-bc52-4a08-9e26-2c30c618218b",
"optionType": "DEFAULT",
"responseCount": null,
"option": "Average",
"optionList": null,
"dataElements": null,
"dataCategories": null,
"dataSubjects": null
}
],
"logicalOperator": "OR"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 1,
"description": null,
"recommendation": null,
"probabilityLevel": "Low",
"impactLevel": "Low",
"probabilityLevelId": 1,
"impactLevelId": 1,
"riskScore": 2,
"name": null,
"categories": [],
"controls": null,
"customControls": null,
"riskApprovers": [],
"riskOwners": [],
"threat": null,
"vulnerabilities": null,
"riskOwnerType": null,
"riskApproverType": null,
"riskTemplate": null,
"targetRiskLevel": null,
"attributeValues": {},
"deadlineAfterDays": null,
"reminder": null,
"inventoryTypeAndFieldNameMapForApproverSource": null,
"inventoryTypeAndFieldNameMapForOwnerSource": null
},
"conditionGroupType": "QUESTION_RESPONSE",
"actionDetails": [
{
"id": "94d3c998-06b9-4720-91cb-7f925589b09e",
"actionRuleId": "6395832e-f4ff-4b23-bf86-3902c1d1b235",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "52923d50-2211-49cf-917e-0dc953a17056"
}
],
"id": "6395832e-f4ff-4b23-bf86-3902c1d1b235",
"sequence": 8,
"rootVersionId": "2efc149c-1d25-48ab-83fc-f1f9d6773f6b",
"name": "Third Country - Rule of Law - Strong",
"active": true
},
{
"conditionGroups": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "a3edeb53-07bc-4ff0-98d5-d9e522d15b10",
"conditions": [
{
"sectionId": null,
"questionId": null,
"logicalOperator": "OR",
"comparisonOperator": "EQUAL_TO",
"optionId": "481766a2-ef26-4523-8313-aa396b22f00a",
"optionType": "DEFAULT",
"responseCount": null,
"option": "Weak",
"optionList": null,
"dataElements": null,
"dataCategories": null,
"dataSubjects": null
}
],
"logicalOperator": "OR"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "a3edeb53-07bc-4ff0-98d5-d9e522d15b10",
"conditions": [
{
"sectionId": null,
"questionId": null,
"logicalOperator": "OR",
"comparisonOperator": "EQUAL_TO",
"optionId": "72b76ac3-64d4-4cea-9658-7ce3fac05bfd",
"optionType": "NOT_SURE",
"responseCount": null,
"option": "NotSure",
"optionList": null,
"dataElements": null,
"dataCategories": null,
"dataSubjects": null
}
],
"logicalOperator": "OR"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 4,
"description": null,
"recommendation": null,
"probabilityLevel": "VeryHigh",
"impactLevel": "VeryHigh",
"probabilityLevelId": 4,
"impactLevelId": 4,
"riskScore": 8,
"name": null,
"categories": [],
"controls": null,
"customControls": null,
"riskApprovers": [],
"riskOwners": [],
"threat": null,
"vulnerabilities": null,
"riskOwnerType": null,
"riskApproverType": null,
"riskTemplate": null,
"targetRiskLevel": null,
"attributeValues": {},
"deadlineAfterDays": null,
"reminder": null,
"inventoryTypeAndFieldNameMapForApproverSource": null,
"inventoryTypeAndFieldNameMapForOwnerSource": null
},
"conditionGroupType": "QUESTION_RESPONSE",
"actionDetails": [
{
"id": "4998e8ec-e081-44fd-8d65-a2f3dc352fa7",
"actionRuleId": "e6644c06-d76a-4eeb-bf08-49b60a414608",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "a3edeb53-07bc-4ff0-98d5-d9e522d15b10"
}
],
"id": "e6644c06-d76a-4eeb-bf08-49b60a414608",
"sequence": 9,
"rootVersionId": "aea7d91c-c5bc-4b02-af93-0061cc7402ef",
"name": "Third Country - Respect for human life - Weak ",
"active": true
},
{
"conditionGroups": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "a3edeb53-07bc-4ff0-98d5-d9e522d15b10",
"conditions": [
{
"sectionId": null,
"questionId": null,
"logicalOperator": "OR",
"comparisonOperator": "EQUAL_TO",
"optionId": "2e8aaac7-0786-4c3a-bdd1-cd722de8377c",
"optionType": "DEFAULT",
"responseCount": null,
"option": "Average",
"optionList": null,
"dataElements": null,
"dataCategories": null,
"dataSubjects": null
}
],
"logicalOperator": "OR"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 3,
"description": null,
"recommendation": null,
"probabilityLevel": "High",
"impactLevel": "Medium",
"probabilityLevelId": 3,
"impactLevelId": 2,
"riskScore": 5,
"name": null,
"categories": [],
"controls": null,
"customControls": null,
"riskApprovers": [],
"riskOwners": [],
"threat": null,
"vulnerabilities": null,
"riskOwnerType": null,
"riskApproverType": null,
"riskTemplate": null,
"targetRiskLevel": null,
"attributeValues": {},
"deadlineAfterDays": null,
"reminder": null,
"inventoryTypeAndFieldNameMapForApproverSource": null,
"inventoryTypeAndFieldNameMapForOwnerSource": null
},
"conditionGroupType": "QUESTION_RESPONSE",
"actionDetails": [
{
"id": "21ce7cd6-0304-419f-a9ee-6296d6f99f75",
"actionRuleId": "0fb1f256-68c7-44d3-9b5c-0f33c36a0d08",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "a3edeb53-07bc-4ff0-98d5-d9e522d15b10"
}
],
"id": "0fb1f256-68c7-44d3-9b5c-0f33c36a0d08",
"sequence": 10,
"rootVersionId": "c008366a-054e-4c95-aef6-e357eba2cff9",
"name": "Third Country - Respect for human life - Average ",
"active": true
},
{
"conditionGroups": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "a3edeb53-07bc-4ff0-98d5-d9e522d15b10",
"conditions": [
{
"sectionId": null,
"questionId": null,
"logicalOperator": "OR",
"comparisonOperator": "EQUAL_TO",
"optionId": "5e40333f-be01-473d-a722-fd299d258c22",
"optionType": "DEFAULT",
"responseCount": null,
"option": "Strong",
"optionList": null,
"dataElements": null,
"dataCategories": null,
"dataSubjects": null
}
],
"logicalOperator": "OR"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 1,
"description": null,
"recommendation": null,
"probabilityLevel": "Low",
"impactLevel": "Low",
"probabilityLevelId": 1,
"impactLevelId": 1,
"riskScore": 2,
"name": null,
"categories": [],
"controls": null,
"customControls": null,
"riskApprovers": [],
"riskOwners": [],
"threat": null,
"vulnerabilities": null,
"riskOwnerType": null,
"riskApproverType": null,
"riskTemplate": null,
"targetRiskLevel": null,
"attributeValues": {},
"deadlineAfterDays": null,
"reminder": null,
"inventoryTypeAndFieldNameMapForApproverSource": null,
"inventoryTypeAndFieldNameMapForOwnerSource": null
},
"conditionGroupType": "QUESTION_RESPONSE",
"actionDetails": [
{
"id": "097b6116-659e-47fd-9618-bdd6d1c4041f",
"actionRuleId": "875c555e-667f-4791-a908-4831e4b78684",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "a3edeb53-07bc-4ff0-98d5-d9e522d15b10"
}
],
"id": "875c555e-667f-4791-a908-4831e4b78684",
"sequence": 11,
"rootVersionId": "5f0ca0a1-1ad2-455b-8b5a-7d16df61d9e4",
"name": "Third Country - Respect for human life - Strong ",
"active": true
},
{
"conditionGroups": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "c65a9cde-8556-4a44-88dc-628932396361",
"conditions": [
{
"sectionId": null,
"questionId": null,
"logicalOperator": "OR",
"comparisonOperator": "EQUAL_TO",
"optionId": "68344b3d-fc68-40eb-8ece-21980b780389",
"optionType": "DEFAULT",
"responseCount": null,
"option": "Weak",
"optionList": null,
"dataElements": null,
"dataCategories": null,
"dataSubjects": null
}
],
"logicalOperator": "OR"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "c65a9cde-8556-4a44-88dc-628932396361",
"conditions": [
{
"sectionId": null,
"questionId": null,
"logicalOperator": "OR",
"comparisonOperator": "EQUAL_TO",
"optionId": "72f197fa-5019-4f9a-8601-8ef440f2a192",
"optionType": "NOT_SURE",
"responseCount": null,
"option": "NotSure",
"optionList": null,
"dataElements": null,
"dataCategories": null,
"dataSubjects": null
}
],
"logicalOperator": "OR"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 4,
"description": null,
"recommendation": null,
"probabilityLevel": "VeryHigh",
"impactLevel": "VeryHigh",
"probabilityLevelId": 4,
"impactLevelId": 4,
"riskScore": 8,
"name": null,
"categories": [],
"controls": null,
"customControls": null,
"riskApprovers": [],
"riskOwners": [],
"threat": null,
"vulnerabilities": null,
"riskOwnerType": null,
"riskApproverType": null,
"riskTemplate": null,
"targetRiskLevel": null,
"attributeValues": {},
"deadlineAfterDays": null,
"reminder": null,
"inventoryTypeAndFieldNameMapForApproverSource": null,
"inventoryTypeAndFieldNameMapForOwnerSource": null
},
"conditionGroupType": "QUESTION_RESPONSE",
"actionDetails": [
{
"id": "b148324d-1b93-4345-a30c-e974f57c18fa",
"actionRuleId": "28983494-01d2-43dc-9efb-bd9d0dcebc0f",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "c65a9cde-8556-4a44-88dc-628932396361"
}
],
"id": "28983494-01d2-43dc-9efb-bd9d0dcebc0f",
"sequence": 12,
"rootVersionId": "31f3ea92-9ec2-4145-b690-cf5c883fae33",
"name": "Third Country - Data protection concepts - Weak ",
"active": true
},
{
"conditionGroups": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "c65a9cde-8556-4a44-88dc-628932396361",
"conditions": [
{
"sectionId": null,
"questionId": null,
"logicalOperator": "OR",
"comparisonOperator": "EQUAL_TO",
"optionId": "60a6b9fc-e304-4ebc-bfe9-724a8724ea11",
"optionType": "DEFAULT",
"responseCount": null,
"option": "Average",
"optionList": null,
"dataElements": null,
"dataCategories": null,
"dataSubjects": null
}
],
"logicalOperator": "OR"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 3,
"description": null,
"recommendation": null,
"probabilityLevel": "High",
"impactLevel": "Medium",
"probabilityLevelId": 3,
"impactLevelId": 2,
"riskScore": 5,
"name": null,
"categories": [],
"controls": null,
"customControls": null,
"riskApprovers": [],
"riskOwners": [],
"threat": null,
"vulnerabilities": null,
"riskOwnerType": null,
"riskApproverType": null,
"riskTemplate": null,
"targetRiskLevel": null,
"attributeValues": {},
"deadlineAfterDays": null,
"reminder": null,
"inventoryTypeAndFieldNameMapForApproverSource": null,
"inventoryTypeAndFieldNameMapForOwnerSource": null
},
"conditionGroupType": "QUESTION_RESPONSE",
"actionDetails": [
{
"id": "d0eca5a6-6cb7-4ccb-ae74-5197e331e62d",
"actionRuleId": "5d18eab1-bbd0-406c-8dcc-131f4e5d727c",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "c65a9cde-8556-4a44-88dc-628932396361"
}
],
"id": "5d18eab1-bbd0-406c-8dcc-131f4e5d727c",
"sequence": 13,
"rootVersionId": "940ff7a3-5db9-4268-ac8c-76f7471a14e4",
"name": "Third Country - Data protection concepts - Average",
"active": true
},
{
"conditionGroups": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "c65a9cde-8556-4a44-88dc-628932396361",
"conditions": [
{
"sectionId": null,
"questionId": null,
"logicalOperator": "OR",
"comparisonOperator": "EQUAL_TO",
"optionId": "60a6b9fc-e304-4ebc-bfe9-724a8724ea11",
"optionType": "DEFAULT",
"responseCount": null,
"option": "Average",
"optionList": null,
"dataElements": null,
"dataCategories": null,
"dataSubjects": null
}
],
"logicalOperator": "OR"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 1,
"description": null,
"recommendation": null,
"probabilityLevel": "Low",
"impactLevel": "Low",
"probabilityLevelId": 1,
"impactLevelId": 1,
"riskScore": 2,
"name": null,
"categories": [],
"controls": null,
"customControls": null,
"riskApprovers": [],
"riskOwners": [],
"threat": null,
"vulnerabilities": null,
"riskOwnerType": null,
"riskApproverType": null,
"riskTemplate": null,
"targetRiskLevel": null,
"attributeValues": {},
"deadlineAfterDays": null,
"reminder": null,
"inventoryTypeAndFieldNameMapForApproverSource": null,
"inventoryTypeAndFieldNameMapForOwnerSource": null
},
"conditionGroupType": "QUESTION_RESPONSE",
"actionDetails": [
{
"id": "aa124ccf-ac07-4add-9e5a-7290c91bfdad",
"actionRuleId": "3bd74717-d6b7-426b-bc88-1d9dff5ad32a",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "c65a9cde-8556-4a44-88dc-628932396361"
}
],
"id": "3bd74717-d6b7-426b-bc88-1d9dff5ad32a",
"sequence": 14,
"rootVersionId": "a9b968ad-02e4-4e68-af80-e532f6a20bf6",
"name": "Third Country - Data protection concepts - Strong ",
"active": true
},
{
"conditionGroups": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "e1b2cbca-8054-4ffa-8284-a3f92075479b",
"conditions": [
{
"sectionId": null,
"questionId": null,
"logicalOperator": "AND",
"comparisonOperator": "EQUAL_TO",
"optionId": "fa57f4e2-2ccb-404d-acd3-9671310f08d7",
"optionType": "DEFAULT",
"responseCount": null,
"option": "No",
"optionList": null,
"dataElements": null,
"dataCategories": null,
"dataSubjects": null
}
],
"logicalOperator": "AND"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "e1b2cbca-8054-4ffa-8284-a3f92075479b",
"conditions": [
{
"sectionId": null,
"questionId": null,
"logicalOperator": "AND",
"comparisonOperator": "EQUAL_TO",
"optionId": "f789cd9f-15f3-426b-a0a2-092c1524f50a",
"optionType": "NOT_SURE",
"responseCount": null,
"option": "NotSure",
"optionList": null,
"dataElements": null,
"dataCategories": null,
"dataSubjects": null
}
],
"logicalOperator": "AND"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 4,
"description": null,
"recommendation": null,
"probabilityLevel": "VeryHigh",
"impactLevel": "VeryHigh",
"probabilityLevelId": 4,
"impactLevelId": 4,
"riskScore": 8,
"name": null,
"categories": [],
"controls": null,
"customControls": null,
"riskApprovers": [],
"riskOwners": [],
"threat": null,
"vulnerabilities": null,
"riskOwnerType": null,
"riskApproverType": null,
"riskTemplate": null,
"targetRiskLevel": null,
"attributeValues": {},
"deadlineAfterDays": null,
"reminder": null,
"inventoryTypeAndFieldNameMapForApproverSource": null,
"inventoryTypeAndFieldNameMapForOwnerSource": null
},
"conditionGroupType": "QUESTION_RESPONSE",
"actionDetails": [
{
"id": "0cdceb46-4c68-4012-8ff6-838d13c52841",
"actionRuleId": "8b492e04-70be-4685-84a1-3e7ac66d8a9a",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "e1b2cbca-8054-4ffa-8284-a3f92075479b"
}
],
"id": "8b492e04-70be-4685-84a1-3e7ac66d8a9a",
"sequence": 15,
"rootVersionId": "388609a2-d44d-4a09-a261-b8b1db2f12a2",
"name": "Third Country - Independent authority - No ",
"active": true
},
{
"conditionGroups": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "e1b2cbca-8054-4ffa-8284-a3f92075479b",
"conditions": [
{
"sectionId": null,
"questionId": null,
"logicalOperator": "AND",
"comparisonOperator": "EQUAL_TO",
"optionId": "95b66494-cc59-467d-aa6c-4c28dcd4575c",
"optionType": "DEFAULT",
"responseCount": null,
"option": "Yes",
"optionList": null,
"dataElements": null,
"dataCategories": null,
"dataSubjects": null
}
],
"logicalOperator": "AND"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 1,
"description": null,
"recommendation": null,
"probabilityLevel": "Low",
"impactLevel": "Low",
"probabilityLevelId": 1,
"impactLevelId": 1,
"riskScore": 2,
"name": null,
"categories": [],
"controls": null,
"customControls": null,
"riskApprovers": [],
"riskOwners": [],
"threat": null,
"vulnerabilities": null,
"riskOwnerType": null,
"riskApproverType": null,
"riskTemplate": null,
"targetRiskLevel": null,
"attributeValues": {},
"deadlineAfterDays": null,
"reminder": null,
"inventoryTypeAndFieldNameMapForApproverSource": null,
"inventoryTypeAndFieldNameMapForOwnerSource": null
},
"conditionGroupType": "QUESTION_RESPONSE",
"actionDetails": [
{
"id": "7ec2fd26-e040-4a75-9df1-aee9a61d5e58",
"actionRuleId": "3d77c583-bbf0-4789-8ed9-04f0170e9099",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "e1b2cbca-8054-4ffa-8284-a3f92075479b"
}
],
"id": "3d77c583-bbf0-4789-8ed9-04f0170e9099",
"sequence": 16,
"rootVersionId": "cd41a9d6-932a-4c1f-abb3-4ae4c57fe702",
"name": "Third Country - Independent authority - Yes",
"active": true
},
{
"conditionGroups": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "7b6c2be0-a184-469b-980c-f3cbf1653ae8",
"conditions": [
{
"sectionId": null,
"questionId": null,
"logicalOperator": "AND",
"comparisonOperator": "EQUAL_TO",
"optionId": "41b1ffd3-5899-40c6-98db-da24b393bfa1",
"optionType": "DEFAULT",
"responseCount": null,
"option": "No",
"optionList": null,
"dataElements": null,
"dataCategories": null,
"dataSubjects": null
}
],
"logicalOperator": "AND"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 4,
"description": null,
"recommendation": null,
"probabilityLevel": "VeryHigh",
"impactLevel": "VeryHigh",
"probabilityLevelId": 4,
"impactLevelId": 4,
"riskScore": 8,
"name": null,
"categories": [],
"controls": null,
"customControls": null,
"riskApprovers": [],
"riskOwners": [],
"threat": null,
"vulnerabilities": null,
"riskOwnerType": null,
"riskApproverType": null,
"riskTemplate": null,
"targetRiskLevel": null,
"attributeValues": {},
"deadlineAfterDays": null,
"reminder": null,
"inventoryTypeAndFieldNameMapForApproverSource": null,
"inventoryTypeAndFieldNameMapForOwnerSource": null
},
"conditionGroupType": "QUESTION_RESPONSE",
"actionDetails": [
{
"id": "fe967666-e7a7-466e-b1f0-52dff43abce0",
"actionRuleId": "9701060c-321a-4b35-afaf-73eab6360007",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "7b6c2be0-a184-469b-980c-f3cbf1653ae8"
}
],
"id": "9701060c-321a-4b35-afaf-73eab6360007",
"sequence": 17,
"rootVersionId": "89f06c9e-677a-46f2-bef9-97081315a8d7",
"name": "Third Country - International commitments - No ",
"active": true
},
{
"conditionGroups": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "7b6c2be0-a184-469b-980c-f3cbf1653ae8",
"conditions": [
{
"sectionId": null,
"questionId": null,
"logicalOperator": "AND",
"comparisonOperator": "EQUAL_TO",
"optionId": "a96e6bf6-6a3a-453b-9ed0-74f9c43c8c9e",
"optionType": "DEFAULT",
"responseCount": null,
"option": "Yes",
"optionList": null,
"dataElements": null,
"dataCategories": null,
"dataSubjects": null
}
],
"logicalOperator": "AND"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 1,
"description": null,
"recommendation": null,
"probabilityLevel": "Low",
"impactLevel": "Low",
"probabilityLevelId": 1,
"impactLevelId": 1,
"riskScore": 2,
"name": null,
"categories": [],
"controls": null,
"customControls": null,
"riskApprovers": [],
"riskOwners": [],
"threat": null,
"vulnerabilities": null,
"riskOwnerType": null,
"riskApproverType": null,
"riskTemplate": null,
"targetRiskLevel": null,
"attributeValues": {},
"deadlineAfterDays": null,
"reminder": null,
"inventoryTypeAndFieldNameMapForApproverSource": null,
"inventoryTypeAndFieldNameMapForOwnerSource": null
},
"conditionGroupType": "QUESTION_RESPONSE",
"actionDetails": [
{
"id": "67d2c589-1658-48a4-8b3a-331dc0b2f0c0",
"actionRuleId": "8d85124e-f2b8-4c38-8327-9f0dc8027572",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "7b6c2be0-a184-469b-980c-f3cbf1653ae8"
}
],
"id": "8d85124e-f2b8-4c38-8327-9f0dc8027572",
"sequence": 18,
"rootVersionId": "e160e03e-ca16-430e-8eeb-62667bc1fa94",
"name": "Third Country - International commitments - Yes",
"active": true
},
{
"conditionGroups": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "ccb9373b-7ff0-4651-956c-9de1709254bf",
"conditions": [
{
"sectionId": null,
"questionId": null,
"logicalOperator": "AND",
"comparisonOperator": "NOT_EQUAL_TO",
"optionId": "fdb288bd-1d21-44dc-87db-ebd5d2ef029e",
"optionType": "DEFAULT",
"responseCount": null,
"option": "Yes",
"optionList": null,
"dataElements": null,
"dataCategories": null,
"dataSubjects": null
}
],
"logicalOperator": "AND"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 4,
"description": "Lack of essential equivalence ",
"recommendation": "You should carefully decide whether or not to proceed with the transfer and/or apply supplementary measures ",
"probabilityLevel": "VeryHigh",
"impactLevel": "VeryHigh",
"probabilityLevelId": 4,
"impactLevelId": 4,
"riskScore": 8,
"name": null,
"categories": [],
"controls": null,
"customControls": null,
"riskApprovers": [],
"riskOwners": [],
"threat": null,
"vulnerabilities": null,
"riskOwnerType": null,
"riskApproverType": null,
"riskTemplate": null,
"targetRiskLevel": null,
"attributeValues": {},
"deadlineAfterDays": null,
"reminder": null,
"inventoryTypeAndFieldNameMapForApproverSource": null,
"inventoryTypeAndFieldNameMapForOwnerSource": null
},
"conditionGroupType": "QUESTION_RESPONSE",
"actionDetails": [
{
"id": "32e54251-6a2c-42fa-8169-92c662b62e3b",
"actionRuleId": "5d93edb8-5fc4-4c9d-832f-7f79b1904087",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "ccb9373b-7ff0-4651-956c-9de1709254bf"
}
],
"id": "5d93edb8-5fc4-4c9d-832f-7f79b1904087",
"sequence": 19,
"rootVersionId": "e51bf639-f50c-4820-bc2e-a38fef849349",
"name": "Third Country - Essential Equivalence",
"active": true
},
{
"conditionGroups": [
{
"sectionId": "c1a12c92-8acd-42de-a6c3-7f43cc76f85a",
"questionId": "a089af6d-0f7c-48fa-9aec-8aab693204b3",
"conditions": [
{
"sectionId": null,
"questionId": null,
"logicalOperator": "AND",
"comparisonOperator": "NOT_EQUAL_TO",
"optionId": "832f28d6-5969-4a8e-aa85-b4842c7cd6ed",
"optionType": "DEFAULT",
"responseCount": null,
"option": "Yes",
"optionList": null,
"dataElements": null,
"dataCategories": null,
"dataSubjects": null
}
],
"logicalOperator": "AND"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 4,
"description": "Having a re-evaluation procedure is necessary to make sure that all new developments in the target countries are accounted for",
"recommendation": "Have a procedure in place to regularly re-assess countries and/or flag new developments ",
"probabilityLevel": "VeryHigh",
"impactLevel": "VeryHigh",
"probabilityLevelId": 4,
"impactLevelId": 4,
"riskScore": 8,
"name": null,
"categories": [],
"controls": null,
"customControls": null,
"riskApprovers": [],
"riskOwners": [],
"threat": null,
"vulnerabilities": null,
"riskOwnerType": null,
"riskApproverType": null,
"riskTemplate": null,
"targetRiskLevel": null,
"attributeValues": {},
"deadlineAfterDays": null,
"reminder": null,
"inventoryTypeAndFieldNameMapForApproverSource": null,
"inventoryTypeAndFieldNameMapForOwnerSource": null
},
"conditionGroupType": "QUESTION_RESPONSE",
"actionDetails": [
{
"id": "df066042-572e-471a-863c-c50b09806424",
"actionRuleId": "fa4cb654-78b3-45e2-9d94-ff63100aa9f6",
"sectionId": "c1a12c92-8acd-42de-a6c3-7f43cc76f85a",
"questionId": "a089af6d-0f7c-48fa-9aec-8aab693204b3"
}
],
"id": "fa4cb654-78b3-45e2-9d94-ff63100aa9f6",
"sequence": 34,
"rootVersionId": "bd647881-17e0-4a0c-9df4-eaaf57483cdf",
"name": "Re-evaluation procedure ",
"active": true
},
{
"conditionGroups": [
{
"sectionId": null,
"questionId": null,
"conditions": [
{
"sectionId": "c1a12c92-8acd-42de-a6c3-7f43cc76f85a",
"questionId": "54c22bcd-a459-4b2a-bb77-bef138441b3d",
"logicalOperator": "AND",
"comparisonOperator": "NOT_EQUAL_TO",
"optionId": null,
"optionType": "DEFAULT",
"responseCount": null,
"option": null,
"optionList": [
{
"optionId": "ba68331e-628d-411d-8960-3b373fe2a6ed",
"option": "Yes",
"optionType": "DEFAULT"
}
],
"dataElements": null,
"dataCategories": null,
"dataSubjects": null
}
],
"logicalOperator": "AND"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 4,
"description": "Having a procedure to suspend transfers is necessary to reduce risks ",
"recommendation": "Have a procedure in place to suspend risky transfers, for example through contractual or technical measures ",
"probabilityLevel": "VeryHigh",
"impactLevel": "VeryHigh",
"probabilityLevelId": 4,
"impactLevelId": 4,
"riskScore": 8,
"name": null,
"categories": [],
"controls": null,
"customControls": null,
"riskApprovers": [],
"riskOwners": [],
"threat": null,
"vulnerabilities": null,
"riskOwnerType": null,
"riskApproverType": null,
"riskTemplate": null,
"targetRiskLevel": null,
"attributeValues": {},
"deadlineAfterDays": null,
"reminder": null,
"inventoryTypeAndFieldNameMapForApproverSource": null,
"inventoryTypeAndFieldNameMapForOwnerSource": null
},
"conditionGroupType": "QUESTION_CONDITION",
"actionDetails": [
{
"id": "031c8bfe-255f-46ad-b566-c26b4d2884e5",
"actionRuleId": "a0aa48ed-6af6-46c2-9dab-ffc59d31c484",
"sectionId": "c1a12c92-8acd-42de-a6c3-7f43cc76f85a",
"questionId": "54c22bcd-a459-4b2a-bb77-bef138441b3d"
}
],
"id": "a0aa48ed-6af6-46c2-9dab-ffc59d31c484",
"sequence": 35,
"rootVersionId": "d4d8eddf-f649-49e0-8c7d-10a98365f64c",
"name": "Data transfers - Suspension",
"active": true
},
{
"conditionGroups": [
{
"sectionId": null,
"questionId": null,
"conditions": [
{
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "c03ea6b5-fa68-4e84-a071-cba7b6f14e69",
"logicalOperator": "OR",
"comparisonOperator": "EQUAL_TO",
"optionId": null,
"optionType": "DEFAULT",
"responseCount": null,
"option": null,
"optionList": [
{
"optionId": "c5006f6d-b294-4e5b-a02f-071e5b8e0df4",
"option": "Yes",
"optionType": "DEFAULT"
}
],
"dataElements": null,
"dataCategories": null,
"dataSubjects": null
}
],
"logicalOperator": "AND"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 4,
"description": "Making data in clear available to a data importer in a third-country creates a high risk for the data subjects. ",
"recommendation": "Adopt measures to pseudonymise, encrypt or protect information. ",
"probabilityLevel": "VeryHigh",
"impactLevel": "VeryHigh",
"probabilityLevelId": 4,
"impactLevelId": 4,
"riskScore": 8,
"name": null,
"categories": [
{
"id": "c402b042-8292-461f-953b-082307a57004"
}
],
"controls": [
{
"id": "69201f20-c2c7-465f-91ef-3d0d5e24ce4b",
"identifier": "1.1.1",
"name": "The personal data is processed using strong encryption before transmission. [Use Case 1: Data storage for backup and other purposes that do not require access to data in the clear]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "747f0a51-8858-41cd-8201-406d28a92000",
"identifier": "1.1.4",
"name": "The encryption algorithm is flawlessly implemented by properly maintained software the conformity of which to the specification of the algorithm chosen has been verified. [Use Case 1: Data storage for backup and other purposes that do not require access to data in the clear]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "30f6a8d4-8ad2-43d9-9198-70a05729d7a6",
"identifier": "1.1.5",
"name": "The keys are reliably managed. [Use Case 1: Data storage for backup and other purposes that do not require access to data in the clear]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "b6c5e4ae-778a-4a5b-9b75-7440d625d69d",
"identifier": "1.1.6",
"name": "The keys are retained solely under the control of the data exporter, or other entities entrusted with this task which reside in the EEA or other jurisdiction in accordance with Article 45. [Use Case 1: Data storage for backup and other purposes that do not require access to data in the clear]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "b2d93439-4b1f-4fdb-909c-aa36081af800",
"identifier": "1.1.2",
"name": "The encryption algorithm and its parameterization conform to the state-of-the-art and can be considered robust against cryptanalysis performed by the public authorities in the recipient country. [Use Case 1: Data storage for backup and other purposes that do not require access to data in the clear]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "4b00ad2e-e1d3-4c81-be08-f4788064ce63",
"identifier": "1.1.3",
"name": "The strength of the encryption takes into account the specific time period during which the confidentiality of the encrypted personal data must be preserved. [Use Case 1: Data storage for backup and other purposes that do not require access to data in the clear]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
}
],
"customControls": null,
"riskApprovers": [],
"riskOwners": [],
"threat": null,
"vulnerabilities": null,
"riskOwnerType": null,
"riskApproverType": null,
"riskTemplate": null,
"targetRiskLevel": null,
"attributeValues": {},
"deadlineAfterDays": null,
"reminder": null,
"inventoryTypeAndFieldNameMapForApproverSource": null,
"inventoryTypeAndFieldNameMapForOwnerSource": null
},
"conditionGroupType": "QUESTION_CONDITION",
"actionDetails": [
{
"id": "c0d812d6-5d43-484e-9b06-459316a4ed3d",
"actionRuleId": "15b759b9-fca3-44bf-a6fc-9a4c24379fcb",
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "c03ea6b5-fa68-4e84-a071-cba7b6f14e69"
}
],
"id": "15b759b9-fca3-44bf-a6fc-9a4c24379fcb",
"sequence": 36,
"rootVersionId": "b91c5409-cbc1-4995-9dab-b7515932b11c",
"name": "Access in clear - Yes ",
"active": true
},
{
"conditionGroups": [
{
"sectionId": null,
"questionId": null,
"conditions": [
{
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "c03ea6b5-fa68-4e84-a071-cba7b6f14e69",
"logicalOperator": "OR",
"comparisonOperator": "NOT_EQUAL_TO",
"optionId": null,
"optionType": "DEFAULT",
"responseCount": null,
"option": null,
"optionList": [
{
"optionId": "c5006f6d-b294-4e5b-a02f-071e5b8e0df4",
"option": "Yes",
"optionType": "DEFAULT"
}
],
"dataElements": null,
"dataCategories": null,
"dataSubjects": null
}
],
"logicalOperator": "AND"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": null,
"description": "Using proper encryption measures provides an effective supplementary measure. (EDPB 01/2020, Use Case 1) ",
"recommendation": "Adopt proper encryption controls ",
"probabilityLevel": null,
"impactLevel": null,
"probabilityLevelId": null,
"impactLevelId": null,
"riskScore": null,
"name": null,
"categories": [],
"controls": [
{
"id": "69201f20-c2c7-465f-91ef-3d0d5e24ce4b",
"identifier": "1.1.1",
"name": "The personal data is processed using strong encryption before transmission. [Use Case 1: Data storage for backup and other purposes that do not require access to data in the clear]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "747f0a51-8858-41cd-8201-406d28a92000",
"identifier": "1.1.4",
"name": "The encryption algorithm is flawlessly implemented by properly maintained software the conformity of which to the specification of the algorithm chosen has been verified. [Use Case 1: Data storage for backup and other purposes that do not require access to data in the clear]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "30f6a8d4-8ad2-43d9-9198-70a05729d7a6",
"identifier": "1.1.5",
"name": "The keys are reliably managed. [Use Case 1: Data storage for backup and other purposes that do not require access to data in the clear]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "b6c5e4ae-778a-4a5b-9b75-7440d625d69d",
"identifier": "1.1.6",
"name": "The keys are retained solely under the control of the data exporter, or other entities entrusted with this task which reside in the EEA or other jurisdiction in accordance with Article 45. [Use Case 1: Data storage for backup and other purposes that do not require access to data in the clear]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "b2d93439-4b1f-4fdb-909c-aa36081af800",
"identifier": "1.1.2",
"name": "The encryption algorithm and its parameterization conform to the state-of-the-art and can be considered robust against cryptanalysis performed by the public authorities in the recipient country. [Use Case 1: Data storage for backup and other purposes that do not require access to data in the clear]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "4b00ad2e-e1d3-4c81-be08-f4788064ce63",
"identifier": "1.1.3",
"name": "The strength of the encryption takes into account the specific time period during which the confidentiality of the encrypted personal data must be preserved. [Use Case 1: Data storage for backup and other purposes that do not require access to data in the clear]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
}
],
"customControls": null,
"riskApprovers": [],
"riskOwners": [],
"threat": null,
"vulnerabilities": null,
"riskOwnerType": null,
"riskApproverType": null,
"riskTemplate": null,
"targetRiskLevel": null,
"attributeValues": {},
"deadlineAfterDays": null,
"reminder": null,
"inventoryTypeAndFieldNameMapForApproverSource": null,
"inventoryTypeAndFieldNameMapForOwnerSource": null
},
"conditionGroupType": "QUESTION_CONDITION",
"actionDetails": [
{
"id": "2da99bee-7c8c-4f3f-bdef-6b13a3e9a79e",
"actionRuleId": "dc17a65e-ce0c-406c-b0ea-a5b77e3c734a",
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "c03ea6b5-fa68-4e84-a071-cba7b6f14e69"
}
],
"id": "dc17a65e-ce0c-406c-b0ea-a5b77e3c734a",
"sequence": 37,
"rootVersionId": "ff33c649-776e-40d4-8465-ba22a88815b8",
"name": "Access in clear - No ",
"active": true
},
{
"conditionGroups": [
{
"sectionId": null,
"questionId": null,
"conditions": [
{
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "06d8a19c-1710-4a75-b013-fd6c9d084d68",
"logicalOperator": "OR",
"comparisonOperator": "NOT_EQUAL_TO",
"optionId": null,
"optionType": "DEFAULT",
"responseCount": null,
"option": null,
"optionList": [
{
"optionId": "45b0f740-1481-410f-ad4b-6e92699a9bd2",
"option": "No",
"optionType": "DEFAULT"
}
],
"dataElements": null,
"dataCategories": null,
"dataSubjects": null
}
],
"logicalOperator": "AND"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 3,
"description": "Pseudonymization mght pose a risk for the data subjects, unless you adopt specific technical and organizational measures. ",
"recommendation": "Adopt specific technical and organizational measures in order to make pseudonymisation effective. ",
"probabilityLevel": "High",
"impactLevel": "High",
"probabilityLevelId": 3,
"impactLevelId": 3,
"riskScore": 6,
"name": null,
"categories": [
{
"id": "c402b042-8292-461f-953b-082307a57004"
}
],
"controls": [
{
"id": "c2311bff-fd55-400d-8718-044c35b9f07d",
"identifier": "1.2.1",
"name": "A data exporter transfers personal data processed in such a manner that the personal data can no longer be attributed to a specific data subject, nor be used to single out the data subject in a larger group, without the use of additional information. [Use Case 2: Transfer of pseudonymised Data]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "85b52e9c-7c37-482a-9516-31714cbf8978",
"identifier": "1.2.2",
"name": "Additional information is held exclusively by the data exporter and kept separately in a Member State or other jurisdiction in accordance with Article 45. [Use Case 2: Transfer of pseudonymised Data]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "48d19975-2d14-461a-b6b2-3a69856020e6",
"identifier": "1.2.5",
"name": "The controller has established that the pseudonymised personal data cannot be attributed to an identified or identifiable natural person even if cross-referenced with such information. [Use Case 2: Transfer of pseudonymised Data]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "637c8406-9d4c-41d3-9c2e-d6ac02126006",
"identifier": "1.2.3",
"name": "Disclosure or unauthorised use of that additional information is prevented by appropriate technical and organisational safeguards. [Use Case 2: Transfer of pseudonymised Data]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "06687014-4817-4e97-bc56-dfbc210a8c45",
"identifier": "1.2.4",
"name": "it is ensured that the data exporter retains sole control of the algorithm or repository that enables re-identification using the additional information. [Use Case 2: Transfer of pseudonymised Data]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
}
],
"customControls": null,
"riskApprovers": [],
"riskOwners": [],
"threat": null,
"vulnerabilities": null,
"riskOwnerType": null,
"riskApproverType": null,
"riskTemplate": null,
"targetRiskLevel": null,
"attributeValues": {},
"deadlineAfterDays": null,
"reminder": null,
"inventoryTypeAndFieldNameMapForApproverSource": null,
"inventoryTypeAndFieldNameMapForOwnerSource": null
},
"conditionGroupType": "QUESTION_CONDITION",
"actionDetails": [
{
"id": "c892433d-5408-4ce5-8bc6-fd66c4e8cb48",
"actionRuleId": "9163f921-d4b3-44b6-a854-c541c922be1b",
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "06d8a19c-1710-4a75-b013-fd6c9d084d68"
}
],
"id": "9163f921-d4b3-44b6-a854-c541c922be1b",
"sequence": 38,
"rootVersionId": "333dbd31-74c2-41b1-af9d-bcd0e16a4d40",
"name": "Pseudonymization ",
"active": true
},
{
"conditionGroups": [
{
"sectionId": null,
"questionId": null,
"conditions": [
{
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "024e01b5-2f91-44e3-a6e7-d530d211e06c",
"logicalOperator": "OR",
"comparisonOperator": "NOT_EQUAL_TO",
"optionId": null,
"optionType": "DEFAULT",
"responseCount": null,
"option": null,
"optionList": [
{
"optionId": "642e0c3f-4954-476e-9850-706fa2d4432d",
"option": "No",
"optionType": "DEFAULT"
}
],
"dataElements": null,
"dataCategories": null,
"dataSubjects": null
}
],
"logicalOperator": "AND"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 4,
"description": "Split or multi party processing may effectively safeguard a transfer, provided you apply specific controls.",
"recommendation": "Apply specific controls to ensure that split/multi party processing is effective. ",
"probabilityLevel": "VeryHigh",
"impactLevel": "VeryHigh",
"probabilityLevelId": 4,
"impactLevelId": 4,
"riskScore": 8,
"name": null,
"categories": [
{
"id": "c402b042-8292-461f-953b-082307a57004"
}
],
"controls": [
{
"id": "91e7fb3c-2643-490e-b246-25a3e398159e",
"identifier": "1.5.4",
"name": "The algorithm used for the shared computation is secure against active adversaries. [Use Case 5: Split or multi-party processing]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "b82fa4bb-9e85-4eb5-b600-3f44fcdba1aa",
"identifier": "1.5.3",
"name": "The processors optionally process the data jointly, e.g. using secure multi-party computation, in a way that no information is revealed to any of them that they do not possess prior to the computation. [Use Case 5: Split or multi-party processing]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "a9b1c50f-fb21-4916-9735-556b73382516",
"identifier": "1.5.6",
"name": "The controller has established that the pieces of personal data it transmits to the processors cannot be attributed to an identified or identifiable natural person even if cross-referenced with such information. [Use Case 5: Split or multi-party processing]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "0aa66946-ea59-421a-bee3-7b17a303631e",
"identifier": "1.5.2",
"name": "Each of the pieces is transferred to a separate processor located in a different jurisdiction. [Use Case 5: Split or multi-party processing]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "5d12fe7d-791b-4fb7-acb8-e23d7af290a3",
"identifier": "1.5.1",
"name": "A data exporter processes personal data in such a manner that it is split into two or more parts each of which can no longer be interpreted or attributed to a specific data subject without the use of additional information. [Use Case 5: Split or multi-party processing]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "ec8ba695-13ba-4750-ba76-e7365cc636c1",
"identifier": "1.5.5",
"name": "There is no evidence of collaboration between the public authorities located in the respective jurisdictions where each of the processors are located, which would allow them access to all sets of personal data held by the processors. [Use Case 5: Split or multi-party processing]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
}
],
"customControls": null,
"riskApprovers": [],
"riskOwners": [],
"threat": null,
"vulnerabilities": null,
"riskOwnerType": null,
"riskApproverType": null,
"riskTemplate": null,
"targetRiskLevel": null,
"attributeValues": {},
"deadlineAfterDays": null,
"reminder": null,
"inventoryTypeAndFieldNameMapForApproverSource": null,
"inventoryTypeAndFieldNameMapForOwnerSource": null
},
"conditionGroupType": "QUESTION_CONDITION",
"actionDetails": [
{
"id": "8e1433ae-b44d-423d-aff9-a1948d7d787c",
"actionRuleId": "7866c51b-1228-4ad5-a206-8e31bca6fbb4",
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "024e01b5-2f91-44e3-a6e7-d530d211e06c"
}
],
"id": "7866c51b-1228-4ad5-a206-8e31bca6fbb4",
"sequence": 41,
"rootVersionId": "3c81235d-6902-446c-88dd-eea99c162b4f",
"name": "Split or multi party processing",
"active": true
},
{
"conditionGroups": [
{
"sectionId": null,
"questionId": null,
"conditions": [
{
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "8859e842-ce09-49c5-98ca-f282de4a31e5",
"logicalOperator": "OR",
"comparisonOperator": "DOES_NOT_CONTAIN",
"optionId": null,
"optionType": "DEFAULT",
"responseCount": null,
"option": null,
"optionList": [
{
"optionId": "84c83cc2-3475-4f2b-a843-0dfec4467fe0",
"option": "In-Transit Encryption",
"optionType": "DEFAULT"
}
],
"dataElements": null,
"dataCategories": null,
"dataSubjects": null
}
],
"logicalOperator": "AND"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 3,
"description": "Data is not encrypted in transit. This might entail a risk for the data subjects, although it shall be evaluated in combination with other controls.",
"recommendation": "Consider adopting one or more risk controls to mitigate this issue.",
"probabilityLevel": "High",
"impactLevel": "Medium",
"probabilityLevelId": 3,
"impactLevelId": 2,
"riskScore": 5,
"name": null,
"categories": [],
"controls": [
{
"id": "2eff9371-e3dc-4ed5-b820-17501415c799",
"identifier": "1.3.3",
"name": "Decryption is only possible outside the third country in question. [Use Case 3: Encrypted data merely transiting third countries]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "ad045f19-3941-4214-8ea2-1affce189a5f",
"identifier": "1.3.9",
"name": "The encryption algorithm is flawlessly implemented by properly maintained software the conformity of which to the specification of the algorithm chosen has been verified, e.g., by certification. [Use Case 3: Encrypted data merely transiting third countries]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "b937173a-d0b1-4e35-8b3a-2d779d93dea5",
"identifier": "1.3.11",
"name": "The keys are reliably managed, by the exporter or by an entity trusted by the exporter under a jurisdiction offering an essentially equivalent level of protection. [Use Case 3: Encrypted data merely transiting third countries]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "a59a4ed2-2d0f-45b6-9050-3b8284ee0b19",
"identifier": "1.3.6",
"name": "In case the transport encryption does not provide appropriate security by itself, personal data is also encrypted end-to-end on the application layer using state-of-the-art encryption methods. [Use Case 3: Encrypted data merely transiting third countries]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "bce50fdf-c0b6-4347-93eb-564a8b550bd5",
"identifier": "1.3.4",
"name": "The parties involved in the communication agree on a trustworthy public-key certification authority or infrastructure. [Use Case 3: Encrypted data merely transiting third countries]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "c7b6a903-08b1-4cd7-bee2-83656610bcc1",
"identifier": "1.3.1",
"name": "A data exporter transfers personal data to a data importer in a jurisdiction ensuring adequate protection. [Use Case 3: Encrypted data merely transiting third countries]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "540db5a9-09da-4e5c-a2f1-a08598e45689",
"identifier": "1.3.7",
"name": "The encryption algorithm and its parameterization conform to the state-of-the-art and can be considered robust against cryptanalysis performed by the public authorities in the transiting country. [Use Case 3: Encrypted data merely transiting third countries]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "20e88098-ffb5-455f-a690-bab33cf4c909",
"identifier": "1.3.2",
"name": "It is ensured that the encryption protocols employed are state-of-the-art and provide effective protection against active and passive attacks with resources known to be available to the public authorities of the third country. [Use Case 3: Encrypted data merely transiting third countries]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "ea9f071a-2957-4e90-9a17-f43bc3dc09b3",
"identifier": "1.3.8",
"name": "The strength of the encryption takes into account the specific time period during which the confidentiality of the encrypted personal data must be preserved. [Use Case 3: Encrypted data merely transiting third countries]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
}
],
"customControls": null,
"riskApprovers": [],
"riskOwners": [],
"threat": null,
"vulnerabilities": null,
"riskOwnerType": null,
"riskApproverType": null,
"riskTemplate": null,
"targetRiskLevel": null,
"attributeValues": {},
"deadlineAfterDays": null,
"reminder": null,
"inventoryTypeAndFieldNameMapForApproverSource": null,
"inventoryTypeAndFieldNameMapForOwnerSource": null
},
"conditionGroupType": "QUESTION_CONDITION",
"actionDetails": [
{
"id": "0cd98284-8342-4d04-90d1-9959e45596b6",
"actionRuleId": "75339ab6-cd4d-4b1e-b76e-b2ff433ad963",
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "8859e842-ce09-49c5-98ca-f282de4a31e5"
}
],
"id": "75339ab6-cd4d-4b1e-b76e-b2ff433ad963",
"sequence": 42,
"rootVersionId": "9b1d8b48-0635-4c62-8d03-63b9bfcfc962",
"name": "In-transit Encryption",
"active": true
}
],
"settings": {
"prepopulateAttributeQuestions": true,
"gettingStartedBannerEnabled": false,
"locked": false,
"conditionType": "SHOW",
"customizeInstructionalMessage": false,
"instructionalMessage": null,
"optOutPrimaryRecordOnAssessmentLaunch": true,
"userRespondentDelegation": false,
"autoAssignPrimaryRecord": false,
"restrictDisplayOfRespondentUserList": false,
"allowMaturityScaleOnTemplate": false,
"allowedAccessOptions": null,
"enableScoreProfile": false
},
"inventoryRelationshipsByQuestionId": {
"ad43751a-643b-423f-b0c5-90505d2d8adf": [
{
"id": "06936e9c-5f9e-493b-8ccc-59b26f36705c",
"relationshipType": "RelatedLinkType",
"sourceInventorySectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"sourceInventoryQuestionId": "ad43751a-643b-423f-b0c5-90505d2d8adf",
"destinationInventorySectionId": "ce0e1775-675d-4686-96e0-2a080a1b0ce3",
"destinationInventoryQuestionId": "4eac414a-5bd7-4900-ad57-7fe7bcaf7a1e"
}
]
},
"responseFilterByQuestionId": null,
"responseFilterWithBusinessKeysByQuestionId": {},
"businessKeyReference": null,
"seedReference": null,
"orgGroupId": "526ac23a-728c-4835-b979-776b0268b6f3",
"welcomeTitle": "Where would you like to begin?",
"frameworkTags": null,
"languageCode": "en-us",
"hasQuestionsWithLibraryLabels": null,
"scoreProfilesConfigured": false
}
}'
import requests
import json
headers = {
'Accept': 'application/json',
'Content-Type': 'application/json',
'Authorization': 'Bearer <token>'
}
url = "https://<hostname>.onetrust.com/api/template/v2/templates/import?matchAttributesByName=true"
payload = json.dumps({
"template": {
"id": "01e74ccf-7c09-434f-aa10-3ff81db117d9",
"rootVersionId": "07a8c92d-a9c9-4dd9-9249-ba119237a883",
"name": "GDPR - Transfer Impact Assessment - 2.1 (TIA)",
"friendlyName": "GDPR TIA ",
"description": "Data exporters subject to the European Union's General Data Protection Regulation should use this questionnaire to assess the lawfulness of any personal data transfer from the EU/EEA to a third country (i.e., destination country), namely, whether the third country provides an essentially equivalent level of data protection as that guaranteed in the EU). This assessment aligns with Step 1 (know your transfers), Step 2 (identify the transfer tools you are relying on), Step 3 (assess whether the Article 46 GDPR transfer tool you are relying on is effective in light of all circumstances of the transfer), and Step 6 (re-evaluate) in the European Data Protection Board's \"Recommendations 01/2020 on measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data.\"",
"templateVersion": 9,
"templateType": "PIA",
"status": "PUBLISHED",
"icon": "ot-desktop",
"welcomeText": "<p><strong>Welcome to the GDPR Transfer Impact Assessment!</strong></p><p><br></p><p>This template consists of a dynamic GDPR Transfer Impact Assessment (TIA) based, in part, on the <a href=\"https://edpb.europa.eu/our-work-tools/documents/public-consultations/2020/recommendations-012020-measures-supplement_en\" rel=\"noopener noreferrer\" target=\"_blank\">Recommendations 01/2020 on measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data</a> (Supplementary Measures Recommendations) issued by the <a href=\"https://edpb.europa.eu/edpb_en\" rel=\"noopener noreferrer\" target=\"_blank\">European Data Protection Board</a> (EDPB).</p><p><br></p><p><strong>Background:</strong></p><p><br></p><p>According to <a href=\"http://curia.europa.eu/juris/document/document.jsf?text=&docid=228677&pageIndex=0&doclang=EN&mode=req&dir=&occ=first&part=1&cid=11549805\" rel=\"noopener noreferrer\" target=\"_blank\">Case C-311/18 - <em>Data Protection Commissioner v Facebook Ireland Ltd and Maximillian Schrems</em></a> (<em>Schrems II</em>), the <a href=\"https://curia.europa.eu/jcms/jcms/j_6/en/\" rel=\"noopener noreferrer\" target=\"_blank\">Court of Justice of the European Union</a> (CJEU) requires data exporters to assess whether the data importer's third country provides essentially equivalent protections to the transferred personal data as guaranteed under the European Union <a href=\"https://eur-lex.europa.eu/eli/reg/2016/679/oj\" rel=\"noopener noreferrer\" target=\"_blank\">General Data Protection Regulation</a> (GDPR) and the <a href=\"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:12012P/TXT\" rel=\"noopener noreferrer\" target=\"_blank\">Charter of the Fundamental Rights of the European Union</a> (Charter). The CJEU stated that it is, above all, for the data exporter to verify, on a case-by-case basis and, where appropriate, in collaboration with the data importer, whether the law of the third country of destination ensures an essentially equivalent level of protection, under EU law, of personal data transferred under standard data protection clauses (i.e., based on <a href=\"https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en\" rel=\"noopener noreferrer\" target=\"_blank\">standard contractual clauses</a> (SCCs), <a href=\"https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/binding-corporate-rules-bcr_en\" rel=\"noopener noreferrer\" target=\"_blank\">binding corporate rules</a> (BCRs), or ad hoc contractual clauses), by providing, where necessary, supplementary measures to those offered by those clauses.</p><p>Finally, On 11 July 2023, the European Commission adopted its <a href=\"https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en\" rel=\"noopener noreferrer\" target=\"_blank\">adequacy decision for the EU-U.S. Data Privacy Framework (DPF)</a>. The EU concluded that the US provides adequate protection for personal data transferred to US companies self-certifying under the new framework. This decision was made after the US implemented new safeguards, pursuant <a href=\"https://www.justice.gov/opcl/executive-order-14086\" rel=\"noopener noreferrer\" target=\"_blank\">the Executive Order 14086</a>, to address concerns raised by the EU Court of Justice in the Schrems II decision. These safeguards ensure that US intelligence agencies only access necessary data in a proportional manner and establish a new specific redress mechanism for handling complaints.</p><p><br></p><p>This TIA aims to help data exporters ensure that the personal data transferred to a third country is afforded a level of protection essentially equivalent to that guaranteed within the EU/EEA in accordance with the following steps in the EDPB's Supplementary Measures Recommendations:</p><p><br></p><ul><li><strong>Step 1:</strong> <u>Understand Your Transfers.</u> The initial step is to ensure comprehensive awareness of all your personal data transfers, verifying that the data is adequate, relevant, and necessary for its intended purpose, in accordance with the GDPR's principle of \"data minimization\". It's important to note that remote access from a third country or data storage on a non-EEA cloud also constitutes a transfer. If using an international cloud infrastructure, you must confirm if your data will be transferred to third countries unless the cloud provider is located in the EEA and guarantees that data won't be processed in third countries.</li><li><strong>Step 2</strong>: <u>Determine Your Transfer Tool</u>. Identify the transfer tool your transfer depends on, as outlined in Chapter V of the GDPR. If the European Commission has deemed the destination of your data as adequate under Article 45 GDPR or the preceding Directive 95/46, provided the decision remains valid, no further steps are necessary except ongoing monitoring of the adequacy decision. If there is no adequacy decision, you need to employ a transfer tool specified in Article 46 GDPR. In some circumstances, you might rely on a derogation in Article 49 of GDPR, which should be applied strictly and not become the standard practice.</li><li><strong>Step 3</strong>: <u>Assess the Effectiveness of Your Transfer Tool</u>. Evaluate if any laws or practices in the third country could impact the effectiveness of your transfer tool in the context of your specific transfer. This assessment should prioritize the third country's legislation relevant to your transfer and the Article 46 GDPR transfer tool you employ. Scrutinizing the third country's public authorities' practices can help verify if your transfer tool's safeguards provide practical, adequate protection for the transferred personal data. This scrutiny is vital when:</li><li class=\"ql-indent-1\">The third country's legislation that meets EU standards is not upheld in practice;</li><li class=\"ql-indent-1\">Practices incompatible with your transfer tool exist due to the absence of relevant legislation in the third country;</li><li class=\"ql-indent-1\">Your transferred data or importer falls or may fall under problematic legislation.</li><li>In the first two scenarios, you must suspend the transfer or implement supplementary measures to proceed. In the last scenario, given the uncertain application of problematic legislation, you can choose to suspend the transfer, implement supplementary measures, or proceed without additional measures if you can justify and document that problematic legislation will not apply to your transferred data and importer.</li><li><strong>Step 4:</strong> <u>Identify Supplementary Measures</u>. If your transfer tool's effectiveness is undermined by the third country's legislation or practices, supplementary measures are required to ensure an EU-equivalent level of data protection. Evaluate the efficacy of these measures in relation to your transfer, considering the third country's laws and practices and the transfer tool you rely on. If no supplementary measure can ensure an equivalent level of protection, the transfer must be suspended or terminated.</li><li><strong>Step 5:</strong> <u>Take Formal Procedural Steps</u>. Depending on the Article 46 GDPR transfer tool employed, you might need to undertake formal procedural steps, which these recommendations specify. Consult your competent supervisory authorities as necessary.</li><li><strong>Step 6:</strong> <u>Continually Re-Evaluate Protection Level</u>. Regularly review the level of protection provided to the personal data you transfer to third countries, monitoring for any developments that might impact it. Data protection requires constant vigilance. Supervisory authorities may request your assessments and will consider the steps you've taken to ensure data protection when investigating complaints or compliance issues.</li></ul><p><br></p><p><u>This template is based on the following resources:</u></p><ul><li>The <a href=\"https://eur-lex.europa.eu/eli/reg/2016/679/oj\" rel=\"noopener noreferrer\" target=\"_blank\">General Data Protection Regulation</a> (Reg. UE 2016/679);</li><li>The Article 29 Working Party's <a href=\"https://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=614108\" rel=\"noopener noreferrer\" target=\"_blank\">Adequacy Referential</a>;</li><li>The EDPB's <a href=\"https://edpb.europa.eu/our-work-tools/our-documents/recommendations/recommendations-012020-measures-supplement-transfer_en\" rel=\"noopener noreferrer\" target=\"_blank\">Recommendations 01/2020 on measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data</a>; and</li><li>The EDPB's <a href=\"https://edpb.europa.eu/our-work-tools/our-documents/recommendations/recommendations-022020-european-essential-guarantees_en\" rel=\"noopener noreferrer\" target=\"_blank\">Recommendations 02/2020 on the European Essential Guarantees for surveillance measures</a> (\"EDPB European Essential Guarantees\").</li><li>The EDPB's <a href=\"https://edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-052021-interplay-between-application-article-3_en\" rel=\"noopener noreferrer\" target=\"_blank\">Guidelines 05/2021 on the Interplay between the application of Article 3 and the provisions on international transfers as per Chapter V of the GDPR</a>.</li></ul><p><br></p><p><br></p><p><strong>Key Terms:</strong></p><ul><li>“<u>Third Country</u>” means any country that is not a Member State of the European Economic Area, which includes the Member States of the European Union and Iceland, Norway, and Liechtenstein. The GDPR applies to the latter by virtue of the EEA Agreement, particularly its Annex XI and Protocol 37.</li><li>“<u>Data Exporter</u>” means the controller or processor within the EEA who transfers personal data to a controller or processor in a third country.</li><li>“<u>Data Importer</u>” means the controller or processor in a third country who receives or gets access to personal data transferred from the EEA.</li><li>\"<u>Data Transfer</u>\" means any disclosure of personal data by a Data exporter subject to the GDPR to a Data importer in a Third Country or an international organization, irrespective of whether the latter is subject to the GDPR.</li></ul><p><br></p><p><strong>Additional Resources:</strong></p><ul><li>General Data Protection Regulation (GDPR) - <a href=\"https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679&from=EN#d1e4227-1-1\" rel=\"noopener noreferrer\" target=\"_blank\">Chapter V - Transfers of personal data to third countries or international organizations</a></li><li>European Commission</li><li class=\"ql-indent-1\"><a href=\"https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en\" rel=\"noopener noreferrer\" target=\"_blank\">Standard Contractual Clauses</a> for Data Transfers between EU and non-EU Countries</li><li class=\"ql-indent-1\"><a href=\"https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/binding-corporate-rules-bcr_en\" rel=\"noopener noreferrer\" target=\"_blank\">Binding Corporate Rules</a> for data transfers within multinational companies</li><li>The Court of Justice of the European Union - <a href=\"https://curia.europa.eu/jcms/upload/docs/application/pdf/2020-07/cp200091en.pdf\" rel=\"noopener noreferrer\" target=\"_blank\">Press Release No 91/20: The Court of Justice invalidates Decision 2016/1250 on the adequacy of the protection provided by the EU-US Data Protection Shield</a></li><li>The European Data Protection Board</li><li class=\"ql-indent-1\"><a href=\"https://edpb.europa.eu/sites/edpb/files/files/file1/20200724_edpb_faqoncjeuc31118_en.pdf\" rel=\"noopener noreferrer\" target=\"_blank\">Frequently Asked Questions on the judgment of the Court of Justice of the European Union in Case C-311/18 - Data Protection Commissioner v Facebook Ireland Ltd and Maximillian Schrems</a>.</li><li class=\"ql-indent-1\"><a href=\"https://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=614108\" rel=\"noopener noreferrer\" target=\"_blank\">Adequacy Referential, WP 254 rev.01</a></li><li>The European Data Protection Supervisor</li><li class=\"ql-indent-1\">\"<a href=\"https://edps.europa.eu/press-publications/press-news/press-releases/2020/edps-statement-following-court-justice-ruling-case_en\" rel=\"noopener noreferrer\" target=\"_blank\">Statement following the Court of Justice ruling in Case C-311/18 Data Protection Commissioner v Facebook Ireland Ltd and Maximilian Schrems (“Schrems II”)</a>\"</li><li class=\"ql-indent-1\"><a href=\"https://edps.europa.eu/sites/edp/files/publication/17-06-01_necessity_toolkit_final_en_0.pdf\" rel=\"noopener noreferrer\" target=\"_blank\">Assessing the necessity of measures that limit the fundamental right to the protection of personal data: A Toolkit</a></li><li class=\"ql-indent-1\"><a href=\"https://edps.europa.eu/sites/edp/files/publication/19-12-19_edps_proportionality_guidelines_en.pdf\" rel=\"noopener noreferrer\" target=\"_blank\">EDPS Guidelines on assessing the proportionality of measures that limit the fundamental rights to privacy and to the protection of personal data</a></li><li>European Union Agency for Fundamental Rights and Council of Europe - <a href=\"https://echr.coe.int/Documents/Handbook_data_protection_ENG.pdf\" rel=\"noopener noreferrer\" target=\"_blank\">Handbook on European data protection law</a> (2018 edition)</li><li>Council of Europe/European Court of Human Rights - <a href=\"https://echr.coe.int/Documents/Guide_Art_8_ENG.pdf\" rel=\"noopener noreferrer\" target=\"_blank\">Guide on Article 8 of the European Convention on Human Rights</a> (31 December 2019)</li><li>Member States of the <a href=\"https://europa.eu/european-union/about-eu/countries_en\" rel=\"noopener noreferrer\" target=\"_blank\">European Union</a> (EU) and countries in the <a href=\"https://ec.europa.eu/eurostat/statistics-explained/index.php/Glossary:European_Economic_Area_(EEA)#:~:text=The%20European%20Economic%20Area%2C%20abbreviated,force%20on%201%20January%201994.\" rel=\"noopener noreferrer\" target=\"_blank\">European Economic Area</a> (EEA)</li><li>The <a href=\"https://legalinstruments.oecd.org/en/instruments/OECD-LEGAL-0487\" rel=\"noopener noreferrer\" target=\"_blank\">OECD Declaration on Government Access to Instruments Personal Data held by Private Sector Entities</a></li><li>Adequacy decision for the <a href=\"https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en\" rel=\"noopener noreferrer\" target=\"_blank\">EU-U.S. Data Privacy Framework (DPF)</a></li></ul><p><br></p><p><strong>For additional information on regulatory updates regarding International Data Transfers, </strong>visit the OneTrust DataGuidance <a href=\"https://www.dataguidance.com/comparisons/data-transfers\" rel=\"noopener noreferrer\" target=\"_blank\">Data Transfers Resources Portal</a>.</p><p><br></p><p><strong>Other FAQs</strong></p><p><em>1. How do I get help?</em></p><p>Commenting capabilities are built into this portal. You can flag certain answers with a \"not sure\" response or add comments, and our team will provide help directly within the questionnaire.</p><p><em>2.. What is OneTrust?</em></p><p>OneTrust is a tool that we use to automate privacy assessments across our organization. Using OneTrust will make it easier for our team to provide timely and relevant feedback on your projects.</p><p><br></p><p>--</p><p>OneTrust products, content and materials are for informational purposes only and not for the purpose of providing legal advice. You should contact your attorney to obtain advice with respect to any particular issue. OneTrust materials do not guarantee compliance with applicable laws and regulations. All trademarks, service marks, trade names, product names and logos appearing herein are the property of their respective owners.</p>",
"valid": True,
"active": None,
"sections": [
{
"name": "Introduction ",
"invalidQuestionCount": 0,
"id": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"rootVersionId": "e338ff0b-4195-45b2-a598-15ca06f59b50",
"sequence": 1,
"questions": [
{
"id": "7f8da3ab-7813-4e48-bae5-a3314220d3dd",
"content": "EDPB Supplementary Measures Recommendations Guidance",
"questionType": "STATEMENT",
"required": False,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":false}",
"description": "<p><strong>Key Guidance from the EDPB's </strong><a href=\"https://edpb.europa.eu/our-work-tools/our-documents/recommendations/recommendations-012020-measures-supplement-transfer_en\" rel=\"noopener noreferrer\" target=\"_blank\"><strong>Recommendations 01/2020 on measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data</strong></a><strong>:</strong></p><p><br></p><ul><li>In the Schrems II judgment, the Court emphasizes the responsibilities of exporters and importers to ensure that the processing of personal data has been and will continue to be carried out in compliance with the level of protection set by EU data protection law and to suspend the transfer and/or terminate the contract where the importer of the data is not, or is no longer, able to comply with standard data protection clauses incorporated in the relevant contract between the exporter and the importer. The controller or processor acting as exporter must ensure that the importers collaborate with the exporter, where appropriate, in its performance of these responsibilities, by keeping it informed, for instance, of any development affecting the level of protection of the personal data received in the importer’s country. These responsibilities are an application of the GDPR principle of accountability to the data transfers.</li></ul><p><br></p><ul><li>An essentially equivalent level of protection to that guaranteed within the EU must accompany the data when it travels to third countries outside the EEA to ensure that the level of protection guaranteed by the GDPR is not undermined, both during and after the transfer.</li></ul><p><br></p><ul><li>The selected Article 46 GDPR transfer tool must be effective in ensuring that the level of protection guaranteed by the GDPR is not undermined by the transfer in practice.</li></ul><p><br></p><ul><li>In particular, the protection afforded to the transferred personal data in the third country must be essentially equivalent to that guaranteed in the EEA by the GDPR, read in light of the Charter of Fundamental Rights of the EU. This is not the case if the data importer is prevented from complying with its obligations under the chosen Article 46 GDPR transfer tool due to the third country’s legislation and practices applicable to the transfer, including during the transit of data from the exporter to the importer’s country.</li></ul><p><br></p><ul><li>You must first assess, where appropriate in collaboration with the importer, if there is anything in the law and/or practices in force in the third country that may impinge on the effectiveness of the appropriate safeguards of the Article 46 GDPR transfer tool you are relying on, in the context of your specific transfer. This implies determining whether your transfer falls within the scope of legislation and/or practices which may impinge on the effectiveness of your Article 46 GDPR transfer tool. The assessment required must be based first and foremost on legislation publicly available.</li></ul><p><br></p><ul><li>This assessment must contain elements concerning access to data by public authorities of the third country of your importer such as:</li></ul><p><br></p><ul><li class=\"ql-indent-1\">Elements on whether public authorities of the third country of your importer may seek to access the data with or without the data importer’s knowledge, in light of legislation, practice and reported precedents;</li></ul><p><br></p><ul><li class=\"ql-indent-1\">Elements on whether public authorities of the third country of your importer may be able to access the data through the data importer or through the telecommunication providers or communication channels in light of legislation, legal powers, technical, financial, and human resources at their disposal and of reported precedents.</li></ul><p><br></p><ul><li>You will need to look into the characteristics of each of your transfers and determine whether the domestic legal order and/or practices in force of the country to which data is transferred (or onward transferred) affect your transfers. The scope of your assessment is thus limited to the legislation and practices relevant to the protection of the specific data you transfer.</li></ul><p><br></p><ul><li>You should in any case pay specific attention to any relevant laws, in particular laws laying down requirements to disclose personal data to public authorities or granting such public authorities powers of access to personal data (for instance for criminal law enforcement, regulatory supervision or national security purposes). If these requirements or powers restrict the fundamental rights of data subjects while respecting their essence and being necessary and proportionate measures in a democratic society to safeguard important objectives as also recognised in Union or EU Member States’ law, they may not impinge on the commitments contained in the Article 46 GDPR transfer tool you are relying on.</li></ul><p><br></p><ul><li>You will need to assess relevant rules and practices of a general nature insofar as they have an impact on the effective application of the safeguards contained in the Article 46 GDPR transfer tool.</li></ul><p><br></p><ul><li>The obligations or powers resulting from such laws and practices will be considered to impinge on/be incompatible with the commitments of the Article 46 GDPR transfer tool if they:</li></ul><p><br></p><ul><li class=\"ql-indent-1\">Do not respect the essence of the fundamental rights and freedoms of the EU Charter of Fundamental Rights, or</li></ul><p><br></p><ul><li class=\"ql-indent-1\">Exceed what is necessary and proportionate in a democratic society to safeguard one of the important objectives as also recognised in Union or member state law such as those listed in Article 23 (1) GDPR.</li></ul>",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"rootVersionId": "01a0922d-da71-4128-ad47-3786d284d3ca",
"sequence": 1
},
{
"id": "bfacd15f-29a6-403a-9d6c-7d42451e8d83",
"content": "GDPR Data Transfer Definition",
"questionType": "STATEMENT",
"required": False,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true}",
"description": "<p>According to the EDPB's <a href=\"https://edpb.europa.eu/system/files/2021-11/edpb_guidelinesinterplaychapterv_article3_adopted_en.pdf\" rel=\"noopener noreferrer\" target=\"_blank\">Guidelines 05/2021 on the Interplay between the application of Article 3 and the provisions on international transfers as per Chapter V of the GDPR</a>, under the GDPR, a <strong>data transfer</strong> occurs when:</p><p><br></p><ol><li>A controller or a processor is <strong>subject to the GDPR</strong> for the given processing.</li><li>This controller or processor (\"exporter\") <strong>discloses by transmission or otherwise makes personal data</strong>, subject to this processing, <strong>available</strong> to another controller, joint controller or processor (\"importer\").</li><li>The importer is <strong>in a third country or is an international organisation</strong>, irrespective of whether or not this importer is subject to the GDPR in respect of the given processing in accordance with Article 3.</li></ol><p><br></p><p><em>Note</em>:</p><ul><li>The second criterion implies that the concept of \"transfer of personal data to a third country or to an international organisation\" only applies to disclosures of personal data where two different (separate) parties (each of them a controller, joint controller or processor) are involved. In order to qualify as a transfer, there must be a controller or processor disclosing the data (the exporter) and a different controller or processor receiving or being given access to the data (the importer).</li></ul>",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"questionLaws": [
{
"name": "EU-GDPR"
}
],
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"rootVersionId": "64e67bce-1a5e-4352-b7ed-9be7af739447",
"sequence": 2
},
{
"id": "ad43751a-643b-423f-b0c5-90505d2d8adf",
"content": "Who are you transferring data to?",
"questionType": "RELATIONSHIP",
"required": True,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"id\":\"c7277f03-8358-4103-92f3-9ca339cd0cf6\",\"name\":\"Data Transfer\",\"nameKey\":\"InventoryLinking.DataTransferNameKey\",\"schemaName\":\"dataTransferSchema\",\"moduleName\":\"InventoryLinking\",\"seeded\":true,\"requireJustification\":false}",
"friendlyName": "Data Transfer",
"description": "<p>Please indicate the relevant transfer occurring between</p><ul><li><strong><u>the Data Exporter</u></strong> - the entity currently undertaking this assessment, which is sending or making data available data;</li><li><strong><u>the Data Importer</u></strong> - the entity to which data will be transferred.</li><li>Whereas possible, also indicate the <strong>processing activity in which context this transfer occurs.</strong></li></ul><p><br></p><p><strong><u>Note</u></strong>: this question presupposes you created records in related inventories for the importer and exporter and, where applicable, the processing activity in scope. If not, please consider starting a record for each entity as a preliminary step.</p><p>If you do not have the proper authorization to do it, please contact the administrator, who shall take this initial step.</p>",
"valid": True,
"prePopulateResponse": True,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": True,
"readOnly": False,
"translationIdentifier": "2c0c87cd-20a4-4b6a-a8c9-50603a745343",
"rootVersionId": "bed815e8-5cc5-49a7-b87a-9bea4c5bff3f",
"sequence": 3
},
{
"id": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"content": "What is the recipient country you are sending data to?",
"questionType": "MULTICHOICE",
"options": [
{
"id": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"option": "United States",
"sequence": 1,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None,
"translationIdentifier": "4e61d055-99b3-461d-9457-f0e22ce2def0"
},
{
"id": "9b13d90d-4314-42ee-8ff2-97422d090195",
"option": "European Economic Area",
"sequence": 2,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None,
"translationIdentifier": "082a6ff9-9b2e-4399-8a80-7fec4e463cf8"
},
{
"id": "5cde9447-d09a-44ea-96f8-58b0dc33abeb",
"option": "Adequate Country",
"sequence": 3,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None,
"translationIdentifier": "b5fb28bd-1b6f-47f7-b254-39727a90a08b"
},
{
"id": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"option": "Other Third Country",
"sequence": 4,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None,
"translationIdentifier": "62e36e56-c9d7-4747-8339-d299f56ef24c"
}
],
"required": True,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"requireJustification\":false,\"displayAnswerType\":\"dropdown\"}",
"friendlyName": "Recipient Country Geographic Area",
"description": "<p><strong><u>Guidance</u></strong></p><ul><li>Thoroughly select the appropriate option below to determine conditional logic on the following sections of this assessment.</li><li>The current list of adequate countries based on the European Commission decisions is available <a href=\"https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en\" rel=\"noopener noreferrer\" target=\"_blank\" style=\"background-color: rgb(255, 255, 255);\"><strong>here</strong></a>.</li><li>Select Other Third Country as a residual option, if none of the others is applicable</li></ul><p><br></p><p><u>Note</u>: In selecting the relevant country, remember it shall be where the data importer is established, either when physically transferring personal data or making them available for remote access outside the data exporter's country.</p>",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"translationIdentifier": "5849a542-2bb8-4466-ae1b-ae226458d35f",
"rootVersionId": "0ddddefc-5e48-4cb7-85cc-aa56f61cf75a",
"sequence": 4
},
{
"id": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"content": "Is the recipient organization self-certified under the EU-US Data Privacy Framework (DPF)?",
"questionType": "YESNO",
"options": [
{
"id": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"option": "Yes",
"sequence": 1,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None,
"translationIdentifier": "08cf8210-4b3e-4d48-9cad-563adbd164c4"
},
{
"id": "1ea0461f-99de-4ac3-8d25-e1e785012832",
"option": "No",
"sequence": 2,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None,
"translationIdentifier": "22e5001c-f7f9-4048-a17e-5a5379f856a9"
},
{
"id": "a5dec21d-d87f-4b2f-93e8-561a5466410f",
"option": "NotApplicable",
"sequence": 3,
"attributes": None,
"hint": None,
"optionType": "NOT_APPLICABLE",
"optionKey": None
}
],
"required": True,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"allowJustification\":true,\"requireJustification\":false}",
"friendlyName": "EU-US Data Privacy Framework",
"description": "<p>On 11 July 2023, the European Commission adopted its <a href=\"https://commission.europa.eu/system/files/2023-07/Adequacy%20decision%20EU-US%20Data%20Privacy%20Framework_en.pdf\" rel=\"noopener noreferrer\" target=\"_blank\">Adequacy Decision on the adequate level of protection of personal data under the EU-US Data Privacy Framework</a>. The decision concludes that the United States ensures an adequate level of protection – compared to that of the EU - for personal data transferred from the EU to US companies participating in the EU-U.S. Data Privacy Framework.</p><p><br></p><p>Eligible US companies can certify their participation in the EU-U.S. Data Privacy Framework by committing to comply with a detailed set of Privacy Principles, including Notice, Choice, Accountability for Onward Transfer, Security, Data Integrity and Purpose Limitation, Access, Recourse, Enforcement and Liability.</p><p><br></p><p>The list of organizations currently participating in the DPF is available at: <a href=\"https://www.dataprivacyframework.gov/s/participant-search\" rel=\"noopener noreferrer\" target=\"_blank\">https://www.dataprivacyframework.gov/s/participant-search</a>.</p>",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"translationIdentifier": "a9a63f87-ac7d-4a1b-bb6b-7da18c008513",
"rootVersionId": "f9a97a71-bc90-416a-b155-8dba90bdc275",
"sequence": 5
},
{
"id": "17fe032b-96fe-4aee-b598-4af6b681954e",
"content": "What cross-border transfer mechanism are you relying on for this transfer?",
"questionType": "ATTRIBUTE",
"options": [
{
"id": "9b913b66-8dd6-4854-904f-39157a329e14",
"option": "NotApplicable",
"sequence": 1,
"attributes": None,
"hint": None,
"optionType": "NOT_APPLICABLE",
"optionKey": None
}
],
"required": True,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"attributeId\":\"96616e43-f4c5-46f4-a896-bffc6028e944\",\"allowJustification\":true,\"attributeType\":\"none\",\"displayAnswerType\":\"dropdown\",\"fieldName\":\"transferMechanism\",\"name\":\"Transfer Mechanism\",\"nameKey\":\"InventoryLinking.TransferMechanism\",\"requireJustification\":false,\"responseType\":\"single-select\",\"showQuestionDetailsLink\":false}",
"friendlyName": "Cross-border Transfer Mechanism",
"description": "<p>Please select the relevant transfer mechanism among the following:</p><ul><li>Standard data protection clauses (SCCs); </li><li>Binding corporate rules (BCRs);</li><li>Codes of conduct;</li><li>Certification mechanisms;</li><li>Ad hoc contractual clauses</li><li>Derogations (article 49 GDPR).</li></ul>",
"parentQuestionId": "ad43751a-643b-423f-b0c5-90505d2d8adf",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"translationIdentifier": "c0a4032b-2d96-47dd-8626-0d303885fc09",
"rootVersionId": "e4c8a64c-e4c9-4c7f-8dd6-9cb1a6b458c8",
"sequence": 6
}
]
},
{
"name": "Context of the Transfer",
"invalidQuestionCount": 0,
"translationIdentifier": "8ca7d6ce-b694-4ce3-8f54-c6a4d08873f9",
"id": "ce0e1775-675d-4686-96e0-2a080a1b0ce3",
"rootVersionId": "49e65348-3e16-4539-bff2-795725b8998b",
"sequence": 2,
"questions": [
{
"id": "8f63bb92-f2a1-4e16-a265-8fa14d90addb",
"content": "What is the purpose for which you are transferring personal data?",
"questionType": "TEXTBOX",
"options": [
{
"id": "e66148a0-056f-4845-a01a-479d5e8ff61c",
"option": "",
"sequence": 1,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None,
"translationIdentifier": "1f985697-4515-458d-b70d-0c7d3f2630b9"
}
],
"required": False,
"attributes": "{\"isQuestionHintEnabled\":false,\"requireJustification\":false,\"allowLaws\":true}",
"friendlyName": "Purpose of transfer",
"description": "<p>Please define the purpose for which you are transferring personal data.</p><p>If you selected a specific activity in which context the transfer happens, under question 1.3, please further elaborate on why the transfer is needed to accomplish that purpose.</p>",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"translationIdentifier": "7f9f483e-de43-41be-b6d0-adede1a1f9c7",
"rootVersionId": "e0069f67-6a3f-410e-aecd-c7630f71bd03",
"sequence": 1
},
{
"id": "4eac414a-5bd7-4900-ad57-7fe7bcaf7a1e",
"content": "Whose and what personal data are you transferring?",
"questionType": "PERSONAL_DATA",
"required": True,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"attributeId\":null,\"requireJustification\":false}",
"friendlyName": "Personal Data",
"description": "<p>Please select the relevant categories of data subjects and the related data elements subject to this transfer operation.</p>",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"translationIdentifier": "8248b94b-1f73-48d8-9d11-9c81e1481c35",
"rootVersionId": "73d60132-fb3d-4100-bde0-12329aa2d47c",
"sequence": 2
},
{
"id": "9a5b69a6-3246-4aee-b468-d5be58ece7f8",
"content": "What is the relationship between the entities transferring data?",
"questionType": "MULTICHOICE",
"options": [
{
"id": "398f7a2a-592d-414a-9910-9984701db013",
"option": "Controller to Processor",
"sequence": 1,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None,
"translationIdentifier": "05ed116b-102b-433c-b2cf-f47c34ffe79f"
},
{
"id": "eb68f7f8-d456-470e-a06f-44f276a28b33",
"option": "Controller to Controller",
"sequence": 2,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None,
"translationIdentifier": "a03dc168-cb22-4a79-a023-726171c34aab"
},
{
"id": "227c7e5a-e130-4261-9494-60054a2ae688",
"option": "Processor to (Sub-)Processor",
"sequence": 3,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None,
"translationIdentifier": "9fe601a1-6437-4a6f-a815-1c188a75a3e1"
},
{
"id": "65f9064b-dcf9-48df-9216-cbf4695464a3",
"option": "Processor to Controller",
"sequence": 4,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None,
"translationIdentifier": "2bfb1925-dcf9-49cf-89c2-7d36eaafdc85"
}
],
"required": False,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"displayAnswerType\":\"dropdown\",\"requireJustification\":false}",
"friendlyName": "Parties Relationship",
"description": "<p>Please select the correct relationship among those listed below.</p><p><br></p><p><u>Note</u>: the 2021 European Commission's Standard Contractual Clauses has a modular approach based on the four scenarios below. </p><p>Select the functional module based on the parties' relationship if you rely on the SCCs as a transfer tool.</p>",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"translationIdentifier": "c5e8a1fc-9129-49c8-8b99-bc3e4819f667",
"rootVersionId": "4e49179d-c09b-462f-ace4-52a8f9e3ccdd",
"sequence": 3
},
{
"id": "1fa545b5-8c52-4031-8690-55aebf273045",
"content": "What is the volume of data you are transferring?",
"questionType": "ATTRIBUTE",
"required": False,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"attributeId\":\"ceb29eeb-e7c1-443c-a799-1b6f6d8fe42d\",\"allowJustification\":false,\"attributeType\":\"none\",\"fieldName\":\"volumeOfData\",\"name\":\"Volume of data\",\"nameKey\":\"InventoryLinking.VolumeOfData\",\"requireJustification\":false,\"responseType\":\"text\",\"showQuestionDetailsLink\":false}",
"friendlyName": "Volume of data",
"description": "<p>Please select the relevant volume of data you are going to transfer.</p>",
"parentQuestionId": "ad43751a-643b-423f-b0c5-90505d2d8adf",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"translationIdentifier": "723a0959-65a7-44db-b7ef-649651d2069b",
"rootVersionId": "75e65505-9e88-4ebc-9d76-576d815d0654",
"sequence": 4
},
{
"id": "ecdbab18-bc8c-46a1-81b8-96a954e8869b",
"content": "What is the frequency of this transfer?",
"questionType": "ATTRIBUTE",
"required": False,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"attributeId\":\"7e1787e3-cdc0-455b-b197-d7614f744632\",\"allowJustification\":false,\"attributeType\":\"none\",\"fieldName\":\"frequencyOfTransfer\",\"name\":\"Frequency of transfer\",\"nameKey\":\"InventoryLinking.FrequencyOfTransfer\",\"requireJustification\":false,\"responseType\":\"text\",\"showQuestionDetailsLink\":false}",
"friendlyName": "Frequency of transfer",
"description": "<p>Please indicate the frequency of this transfer to the best of your knowledge.</p>",
"parentQuestionId": "ad43751a-643b-423f-b0c5-90505d2d8adf",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"translationIdentifier": "01068a35-7ce9-417f-92ba-451d4ef172f7",
"rootVersionId": "92e92f11-b25b-4487-a308-cb193e84cb85",
"sequence": 5
},
{
"id": "662282e9-4a04-462b-9751-77d8fe231f3d",
"content": "What are the applicable surveillance or security laws that may affect this transfer?",
"questionType": "ATTRIBUTE",
"required": False,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"attributeId\":\"873516bf-b2ff-469e-a2f9-1a66cf5c9225\",\"allowJustification\":false,\"attributeType\":\"none\",\"displayAnswerType\":\"button\",\"fieldName\":\"securityLaws\",\"name\":\"Applicable surveillance or security laws\",\"nameKey\":\"InventoryLinking.SecurityLaws\",\"requireJustification\":false,\"responseType\":\"multi-select\",\"showQuestionDetailsLink\":false}",
"friendlyName": "Applicable surveillance or security laws",
"description": "<p>Please select the relevant surveillance or security laws that might affect this transfer as soon as data leave the data exporter.</p>",
"parentQuestionId": "ad43751a-643b-423f-b0c5-90505d2d8adf",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"translationIdentifier": "cba141c1-25da-4e22-8ce9-a19c3a9673b7",
"rootVersionId": "46b90e45-991b-47ba-9f09-1b2464d101bf",
"sequence": 6
},
{
"id": "cc2e821c-0f20-4bd2-a1e4-06b8e51ffca6",
"content": "Do any onward transfers occur?",
"questionType": "TEXTBOX",
"required": False,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true}",
"friendlyName": "Onward Transfers",
"description": "<p>Please indicate any onward transfers you are aware of in collaboration with the data importer.</p><p>Onward transfers shall take place from the data importer's country to further third countries.</p><p><br></p><p><br></p>",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"translationIdentifier": "b563c21b-0e4c-4a75-aed4-9330611daf80",
"rootVersionId": "22405257-b581-41cb-98e9-ac6fc5db4953",
"sequence": 7
},
{
"id": "38b5c136-37c8-4b63-8493-21e5553c4e25",
"content": "Do the parties have entered a legal agreement for processing personal data?",
"questionType": "YESNO",
"options": [
{
"id": "3dc0c1e6-45be-4623-8ece-ac5b5b91d09a",
"option": "Yes",
"sequence": 1,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None,
"translationIdentifier": "0bb5536c-ad54-4406-a49d-d0dd9cf52cd4"
},
{
"id": "9f583c9c-75a2-4e3a-9bac-1c7b4aa5d93b",
"option": "No",
"sequence": 2,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None,
"translationIdentifier": "ee2d650a-aa7f-48bc-8970-52e06b300dd5"
},
{
"id": "fcce2cd7-acd7-40e9-bba6-d66ca21e619f",
"option": "NotApplicable",
"sequence": 3,
"attributes": None,
"hint": None,
"optionType": "NOT_APPLICABLE",
"optionKey": None
}
],
"required": False,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"requireJustification\":false}",
"friendlyName": "Data Processing Agreement",
"description": "<p>Depending on the selected Cross-border transfer mechanism, this agreement may be integrated or replaced by the relevant transfer tool.</p><p><br></p><p><u>Note</u>: If yes, please attach the evidence.</p>",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"translationIdentifier": "d09223cd-55cf-41a3-b4a4-3eeb761f2a9c",
"rootVersionId": "fdb2aef8-29fb-4cf0-8681-6fdba3f4ee6d",
"sequence": 8
},
{
"id": "42d97c55-0e95-4aba-97fa-f1df55ed0f25",
"content": "Does the data importer have previous experience in dealing with such transfers?",
"questionType": "YESNO",
"options": [
{
"id": "d03e0b12-f29c-40bf-a197-03bd7f251126",
"option": "Yes",
"sequence": 1,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None,
"translationIdentifier": "fc4a2ec3-9aad-4920-8e3f-cd52a433bb14"
},
{
"id": "8081f1f1-da36-4007-9d5e-0ef33a35a7db",
"option": "No",
"sequence": 2,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None,
"translationIdentifier": "1f9a44f1-6d32-4a48-9a98-312729e18c87"
},
{
"id": "10764c77-cdb3-447d-9316-1645e884ea05",
"option": "NotSure",
"sequence": 3,
"attributes": None,
"hint": None,
"optionType": "NOT_SURE",
"optionKey": None
}
],
"required": False,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"allowJustification\":true,\"requireJustification\":false}",
"friendlyName": "Documented Practical Experience of the Importer",
"description": "<p><strong><u>Guidance</u></strong></p><p>Answer this question, in collaboration with the data importer in light of the following excerpt from the Recommendation 01/2020 EDPB:</p><ul><li>\"Y<em>ou may also take into consideration </em><strong><em>documented practical experience of the importer with relevant prior instances of requests for access </em></strong><em>received from public authorities in the third country. You will only be able to use the experience of the importer as an additional source of information if the legal framework of the third country does not prohibit the importer to provide information on requests for disclosure from public authorities or on the absence of such requests (and you should also document such an assessment). You must however note that the absence of prior instances of requests received by the importer can never be considered, by itself, as a decisive factor on the effectiveness of the Article 46 GDPR transfer tool that allows the transfer to proceed without supplementary measures. You will be able to consider this information, together with other types of information obtained from other sources, as part of your overall assessment of the laws and practices of the third country in relation to your transfer.</em>\"</li></ul><p><br></p><p>Please consider attaching supporting evidence where possible.</p>",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"translationIdentifier": "f0a83faf-184f-4109-a12f-33e8c36fcf84",
"rootVersionId": "48d10b64-1bd5-4980-9498-abfc70035ae3",
"sequence": 9
}
]
},
{
"name": "Third Country Assessment",
"invalidQuestionCount": 0,
"id": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"rootVersionId": "ddb64a91-a544-49f3-b092-79d6ea0ce646",
"sequence": 3,
"questions": [
{
"id": "877540cb-6ac5-4275-a4d0-8e1073828050",
"content": "Have you, in a previous assessment, deemed the country safe for personal data transfers? ",
"questionType": "YESNO",
"options": [
{
"id": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"option": "Yes",
"sequence": 1,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "fbb62d8f-70de-4c5d-9ac3-a85584cb117a",
"option": "No",
"sequence": 2,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "7f47b5c1-4746-40b5-add8-6915a5890fc0",
"option": "NotSure",
"sequence": 3,
"attributes": None,
"hint": None,
"optionType": "NOT_SURE",
"optionKey": None
}
],
"required": True,
"attributes": "{\"isQuestionHintEnabled\":false,\"requireJustification\":false,\"allowLaws\":true,\"allowJustification\":true}",
"friendlyName": "Previous assessment",
"description": "<p>If you have already assessed the country for a similar transfer, you might not need a new assessment. However, please be reminded that each transfer might be subject to different laws and circumstances.</p><p><br></p><p>Please select <strong>yes</strong> only if you are sure that the circumstances surrounding the country haven't changed.</p>",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"rootVersionId": "8a607b21-4fe1-48d8-ba33-963cc7af05a2",
"sequence": 1
},
{
"id": "4df5d952-6507-4317-8291-ece329137f78",
"content": "EDPB Third Country Assessment Guidance",
"questionType": "STATEMENT",
"required": False,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":false}",
"description": "<p>Your data importer should provide you with the relevant sources and information relating to the third country in which it is established and the laws and practices in force applicable to the transfer.</p><p><br></p><p>In addition to the legal framework of the third country applicable to the transfer, sources and information should be relevant, objective, reliable, verifiable and publicly available or otherwise accessible to determine whether your Article 46 transfer tool can be effectively applied and you will have to assess and document that they are.</p><p><br></p><ul><li class=\"ql-indent-1\"><strong>Relevant:</strong> the information must be relevant to the specific transfer and/or importer and their compliance with the requirements set in EU law and the Article 46 GDPR transfer instrument, and not overly general or abstract.</li><li class=\"ql-indent-1\"><strong>Objective information:</strong> is information supported by empirical evidence based on knowledge gained from the past, not assumptions about potential events and risks.</li><li class=\"ql-indent-1\"><strong>Reliable:</strong> the exporter and the importer must objectively assess the reliability of the source of information and the information itself and evaluate them separately.</li><li class=\"ql-indent-1\"><strong>Verifiable:</strong> information and conclusions should be verifiable or contrastable with other types of information or sources as part of an overall assessment, also to allow the competent supervisory or judicial authority to check the objectivity and reliability of this information if needed.</li><li class=\"ql-indent-1\"><strong>Publicly available or otherwise accessible information:</strong> information should preferably be public or at least accessible to facilitate the verification of the criteria made above and ensure its possible sharing with supervisory authorities, judicial authorities and ultimately, data subjects.</li></ul><p><br></p><p>You may also take into consideration the <u>documented practical experience of the importer </u>with relevant prior instances of requests for access received from public authorities in the third country. You will only be able to use the experience of the importer as an additional source of information if the legal framework of the third country does not prohibit the importer from providing information on requests for disclosure from public authorities or in the absence of such requests (and you should also document such an assessment). You must, however, note that the absence of prior instances of requests received by the importer can never be considered, by itself, as a decisive factor in the effectiveness of the Article 46 GDPR transfer tool that allows the transfer to proceed without supplementary measures. You will be able to consider this information, together with other types of information obtained from other sources, as part of your overall assessment of the laws and practices of the third country concerning your transfer. The relevant and documented experience of the importer should be corroborated and not contradicted by relevant, objective, reliable, verifiable and publicly available or otherwise accessible information on the practical application of the applicable law (e.g. the existence or absence of requests for access received by other actors operating within the same sector and/or related to similar transferred personal data and/or the application of the law in practice, such as case law and reports by independent oversight bodies).</p>",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"rootVersionId": "811241eb-09c1-463c-bebf-586e88da7ff9",
"sequence": 2
},
{
"id": "32b7b8f5-450c-4f64-9332-558801da9a00",
"content": "Possible Sources of Information to Assess a Third Country",
"questionType": "STATEMENT",
"required": False,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":false}",
"description": "<p>Your data importer should be in a position to provide you with relevant sources and information relating to the third country in which it is established, including the laws and the practices applicable to the importer and the data transferred. You and the importer may refer to several sources of information, such as the ones non-exhaustively listed below and presented by order of preference:</p><p><br></p><ul><li>Case-law of the Court of Justice of the European Union (CJEU) and of the European Court of Human Rights (ECtHR) as referred to in the European Essential Guarantees recommendations;</li></ul><p><br></p><ul><li>Adequacy decisions in the country of destination if the transfer relies on a different legal basis;</li></ul><p><br></p><ul><li>Resolutions and reports from intergovernmental organisations, such as the Council of Europe, other regional bodies, and UN bodies and agencies (e.g. UN Human Rights Council, Human Rights Committee);</li></ul><p><br></p><ul><li>Reports and analysis from competent regulatory networks, such as the Global Privacy Assembly (GPA);</li></ul><p><br></p><ul><li>National case-law or decisions taken by independent judicial or administrative authorities competent on data privacy and data protection of third countries;</li></ul><p><br></p><ul><li>Reports of independent oversight or parliamentary bodies;</li></ul><p><br></p><ul><li>Reports based on practical experience with prior instances of requests for disclosure from public authorities, or the absence of such requests, from entities active in the same sector as the importer;</li></ul><p><br></p><ul><li>Warrant canaries of other entities processing data in the same field as the importer;</li></ul><p><br></p><ul><li>Reports produced or commissioned by Chambers of commerce, business, professional and trade associations, governmental diplomatic, trade and investment agencies of the exporter or other third countries exporting to the third country to which the transfer is made;</li></ul><p><br></p><ul><li>Reports from academic institutions, and civil society organizations (e.g. NGOs);</li></ul><p><br></p><ul><li>Reports from private providers of business intelligence on financial, regulatory and reputational risks for companies;</li></ul><p><br></p><ul><li>Warrant canaries of the importer itself;</li></ul><p><br></p><ul><li>Transparency reports, on the condition that they expressly mention the fact that no access requests were received. Transparency reports merely silent on this point would not qualify as sufficient evidence as these reports most often focus on access requests received from law enforcement authorities and provide figures only on this aspect while remaining silent on access requests for national security purposes received. This does not mean that no access requests were received but rather that this information cannot be shared;</li></ul><p><br></p><ul><li>Internal statements or records of the importer expressly indicating that no access requests were received for a sufficiently long period; and with a preference for statements and records engaging the liability of the importer and/or issued by internal positions with some autonomy such as internal auditors, DPOs, etc.</li></ul>",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"rootVersionId": "cd6c93ed-7707-493a-bf34-43bd447aafdd",
"sequence": 3
},
{
"id": "08dc64a1-3770-40e5-840c-f7a66f4042c1",
"content": "United States 🇺🇸 - Third Country Assessment",
"questionType": "STATEMENT",
"required": False,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true}",
"description": "<p class=\"ql-align-justify\"><strong>Rule of Law and Respect for Human Rights in the US</strong></p><p class=\"ql-align-justify\">The United States upholds the rule of law and respects human rights through its <a href=\"https://www.dataguidance.com/legal-research/constitution-united-states\" rel=\"noopener noreferrer\" target=\"_blank\">Constitution</a> and <a href=\"https://www.dataguidance.com/legal-research/bill-rights-1789\" rel=\"noopener noreferrer\" target=\"_blank\">Bill of Rights</a>, securing civil rights, including free speech, peaceful assembly, protection against unreasonable search and seizure, a fair trial, and protection from cruel and unusual punishment. The Fourth Amendment ensures people's security in their persons, houses, papers, and effects against unreasonable searches and seizures. All law enforcement and regulatory activities must conform to applicable law, including the US Constitution, statutes, rules, and regulations. Judicial redress avenues are available for individuals against public authorities processing personal data, open to all individuals irrespective of their nationality. The US also ensures a level of protection for personal data transferred from the Union to the US under the EU-U.S. Data Privacy Framework, with safeguards ensuring that the US signals intelligence activities are necessary and proportionate in the pursuit of defined national security objectives.</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\">Additionally, the US ranks:</p><ul><li class=\"ql-align-justify\">26/128 on the <a href=\"https://worldjusticeproject.org/rule-of-law-index/\" rel=\"noopener noreferrer\" target=\"_blank\">World Justice Project Rule of Law Index</a> 2022</li><li class=\"ql-align-justify\">83/100 on the <a href=\"https://freedomhouse.org/country/united-states/freedom-world/2021\" rel=\"noopener noreferrer\" target=\"_blank\">Freedom House's Freedom in the World Report</a> 2023</li></ul><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong>Comprehensive Privacy Laws in the US</strong></p><p class=\"ql-align-justify\">Several US states have enacted data protection laws, indicative of a growing trend towards comprehensive privacy legislation. The California Consumer Privacy Act of 2018, California Privacy Rights Act, Virginia's Consumer Data Protection Act, and Colorado's Protection of Data Relating to Personal Privacy Act are notable examples. Complementing these state laws is the Federal Privacy Act of 1974, which ensures fair information practices across federal agencies. The US employs a sectoral approach to privacy protection, relying on a mix of legislation, regulation, and self-regulation. The FTC Act's prohibition on unfair or deceptive acts or practices extends protections to foreign consumers, and the EU-U.S. Data Privacy Framework, issued by the US Department of Commerce in collaboration with the European Commission, further safeguards personal data transferred from the Union to the US.</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\">A complete and up-to-date overview of the approved and proposed privacy legislation is accessible <a href=\"https://www.dataguidance.com/comparisons/usa-privacy-laws\" rel=\"noopener noreferrer\" target=\"_blank\">here</a>.</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong>Sectoral Privacy Legislation in the US</strong></p><p class=\"ql-align-justify\">Privacy is further safeguarded by numerous federal laws and regulations that are sector-specific. <a href=\"https://platform.dataguidance.com/legal-research/health-insurance-portability-and-accountability-act-1996\" rel=\"noopener noreferrer\" target=\"_blank\">Health Insurance Portability and Accountability Act of 1996</a> (HIPAA) protects health information, the <a href=\"https://platform.dataguidance.com/legal-research/gramm-leach-bliley-act-1999-glba\" rel=\"noopener noreferrer\" target=\"_blank\">Gramm-Leach-Bliley Act of 1999</a> (GLBA) safeguards financial institutions, and the <a href=\"https://platform.dataguidance.com/legal-research/childrens-online-privacy-protection-act-1998-coppa\" rel=\"noopener noreferrer\" target=\"_blank\">Children's Online Privacy Protection Act of 1998</a> (COPPA) applies to online services directed at children.</p><p class=\"ql-align-justify\">Laws addressing deceptive telemarketing, commercial email regulation, consumer credit reporting, and restrictions on telemarketing calls also exist. Electronic surveillance is regulated by federal and state laws such as the Omnibus Crime Control and Safe Streets Act, Electronic Communications Privacy Act (ECPA), and <a href=\"https://bja.ojp.gov/program/it/privacy-civil-liberties/authorities/statutes/1286\" rel=\"noopener noreferrer\" target=\"_blank\">Foreign Intelligence Surveillance Act</a> (FISA).</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong>Privacy Legislation, Data Protection and Security Rules in the US</strong></p><p class=\"ql-align-justify\">Data protection and privacy regulation in the US consist of a patchwork of federal and state laws, with the FTC Act holding the broadest jurisdiction. The country's intelligence activities are guided by <a href=\"https://www.justice.gov/opcl/executive-order-14086\" rel=\"noopener noreferrer\" target=\"_blank\">Executive Order 14086</a>, which stipulates provisions for personal data collection and processing.</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong>Privacy Concepts and Principles in the US</strong></p><p class=\"ql-align-justify\">US privacy principles resonate with common data protection concepts like lawful and fair processing, purpose limitation, data quality, and retention and security. State laws, such as California's CCPA and CPRA, Virginia's CDPA, and Colorado's CPA, build upon these principles, as do federal laws like HIPAA, GLBA, COPPA, and the Privacy Act of 1974.</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong>Independent Supervisory Authority in the US</strong></p><p class=\"ql-align-justify\">The US does not have a single federal authority for data protection compliance, but it's monitored by a range of agencies such as the FTC, SEC, OCC, the Board, FDIC, NCUA, and CFPB, each overseeing a different sector.</p><p class=\"ql-align-justify\">On a state level, monitoring is usually conducted by the Attorney Generals or District Attorneys.</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong>International Commitments and Obligations of the US</strong></p><p class=\"ql-align-justify\">The US is part of various international commitments, including Mutual Legal Assistance Treaties (MLAT) with many countries, membership in the Budapest Convention on Cybercrime, and adherence to the OECD Privacy Framework. It is also a party to several international agreements safeguarding privacy rights.</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong>Problematic Legislation Subject to Transfers in the US</strong></p><p class=\"ql-align-justify\">Surveillance laws in the US, like the Wiretap Act, Stored Communications Act (SCA), and the Foreign Intelligence Surveillance Act (FISA), regulate electronic surveillance and protect privacy but could potentially impact cross-border data transfers. Evaluating data transfers to the US, therefore, requires an in-depth understanding of the applicable legislation and risks involved.</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong style=\"color: rgb(77, 81, 86);\">European Essential Guarantees for surveillance measures</strong></p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong>EEG A - Adherence to clear, precise, and accessible rules for processing in the US</strong></p><p class=\"ql-align-justify\">Processing in the US adheres to clear, precise, and accessible rules, with comprehensive privacy legislation enacted in several states and sectoral laws like the CCPA, CPRA, CDPA, and CPA providing legal bases. Access to information by US government authorities relies on subpoenas, judicial orders, and search warrants. While there are no specific statutory retention periods, limitations exist on indefinite data storage, and sector-specific laws may impose retention requirements. The Wiretap Act, SCA, and FISA govern the collection and disclosure of communications, with the FTC recommending privacy protections, including data security, reasonable collection limits, retention practices, and data accuracy. The Privacy Act 1974 requires agencies to maintain only relevant and necessary information. Furthermore, based on FISA as complemented by Executive Order 14086, the US also ensures that signals intelligence activities are conducted in a manner that is necessary and proportionate to the validated intelligence priority, with senior-level legal, oversight, and compliance officials conducting periodic oversight of these activities.</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\">Further information concerning the Guarantee A assessment can be found in the <a href=\"https://edpb.europa.eu/system/files/2023-02/edpb_opinion52023_eu-us_dpf_en.pdf\" rel=\"noopener noreferrer\" target=\"_blank\" style=\"background-color: rgb(255, 255, 255);\">EDPB's Opinion 05/2023 on the European Commission Draft Implementing Decision on the adequate protection of personal data under the EU-US Data Privacy Framework</a> (pp. 28-31).</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong>EEG B - Necessity and Proportionality in the US</strong></p><p class=\"ql-align-justify\">In the US legal framework, Executive Order 14086 introduced the concepts of necessity and proportionality, restricting signals intelligence activities to validated intelligence priorities and proportionate to their objectives. Data minimization provisions are included in the FISA, requiring minimal collection, retention, and dissemination of US persons' data. The activities should be as tailored as feasible, taking into account the intrusiveness, duration, and probable contribution of the collection to the objective pursued. Reasonable methods and technical measures are applied to limit the data collected to what is necessary while minimizing the collection of non-pertinent information.</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\">Further information concerning the Guarantee B assessment can be found in the <a href=\"https://edpb.europa.eu/system/files/2023-02/edpb_opinion52023_eu-us_dpf_en.pdf\" rel=\"noopener noreferrer\" target=\"_blank\" style=\"background-color: rgb(255, 255, 255);\">EDPB's Opinion 05/2023 on the European Commission Draft Implementing Decision on the adequate protection of personal data under the EU-US Data Privacy Framework</a> (pp. 31-40).</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong>EEG C - Independent Oversight Mechanism in the US</strong></p><p class=\"ql-align-justify\">US privacy protections are subject to oversight through a variety of mechanisms, including courts, Congress, and executive agencies. Courts approve surveillance tools, and Congress monitors surveillance activities. Several federal agencies enforce sectoral laws, and the CPRA establishes the California Privacy Protection Agency for state-level enforcement. Additionally, each element of the Intelligence Community that collects signals intelligence has senior-level legal, oversight, and compliance officials conducting periodic oversight. The oversight process includes an Inspector General, a Privacy and Civil Liberties Officer, and officers in a designated compliance role. The process is designed to ensure rigorous oversight of signals intelligence activities and includes a redress mechanism for qualifying complaints. The Director of the oversight process and the Attorney General are independent and cannot interfere with the review of qualifying complaints.</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\">Further information concerning the Guarantee C assessment can be found in the <a href=\"https://edpb.europa.eu/system/files/2023-02/edpb_opinion52023_eu-us_dpf_en.pdf\" rel=\"noopener noreferrer\" target=\"_blank\" style=\"background-color: rgb(255, 255, 255);\">EDPB's Opinion 05/2023 on the European Commission Draft Implementing Decision on the adequate protection of personal data under the EU-US Data Privacy Framework</a> (pp. 40-44).</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong>EEG D - Effective Remedies Available to Individuals in the US</strong></p><p class=\"ql-align-justify\">Individuals in the US have effective remedies to uphold their rights when they believe they have not been respected. Various laws like the CCPA, CPA, CPRA, FCRA, COPPA, and Security and Privacy Rules provide data subjects with rights and remedies. Transparency measures, public reporting requirements, and annual transparency reports enhance public scrutiny and accountability. Non-US individuals can invoke safeguards and laws through a redress mechanism introduced by Executive Order 14086. This mechanism allows individuals to submit qualifying complaints about violations of US signals intelligence activities. The Attorney General can designate a country or regional organization as a qualifying state for this mechanism. Appropriate remediation, such as administrative measures to correct procedural or technical errors, is provided if necessary. The Intelligence Community must comply with any remediation determined by the Data Protection Review Court.</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\">Further information concerning the Guarantee D assessment can be found in the <a href=\"https://edpb.europa.eu/system/files/2023-02/edpb_opinion52023_eu-us_dpf_en.pdf\" rel=\"noopener noreferrer\" target=\"_blank\" style=\"background-color: rgb(255, 255, 255);\">EDPB's Opinion 05/2023 on the European Commission Draft Implementing Decision on the adequate protection of personal data under the EU-US Data Privacy Framework</a> (pp. 45-52).</p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong>Final Notes on the European Commission's Adequacy Decision</strong></p><p class=\"ql-align-justify\">On July 11, 2023, <a href=\"https://commission.europa.eu/system/files/2023-07/Adequacy%20decision%20EU-US%20Data%20Privacy%20Framework_en.pdf\" rel=\"noopener noreferrer\" target=\"_blank\">the European Commission declared the Adequacy of the EU-US Data Privacy Framework (DPF)</a> for outbound transfers from the European Economic Area toward the United States. Although the DPF is a voluntary self-certification scheme applicable only to eligible US companies, the elements addressed by the Commission could be considered regardless of the participation in the adequacy mechanism, extending to all companies engaging in transatlantic data flows.</p><p class=\"ql-align-justify\">In summary, it is worth mentioning that the European Commission's decision to establish the Adequacy of the EU-US Data Privacy Framework is rooted in the comprehensive privacy protections in the US. The US employs a sectoral approach to privacy protection, combining legislation, regulation, and self-regulation. The FTC Act provides broad protections, including for foreign consumers, against unfair or deceptive practices. The EU-US Data Privacy Framework, which operates within the larger US privacy landscape, is based on a system of certification where US organizations commit to privacy principles. The US legal system offers multiple judicial redress avenues for individuals, irrespective of their nationality, against public authorities processing personal data. Interference by US public authorities with the fundamental rights of individuals is limited to what is strictly necessary for legitimate objectives, and adequate legal protection against such interference exists. All law enforcement and regulatory activities must conform to applicable laws, including the US Constitution, statutes, rules, and regulations. The Fourth Amendment provides robust protections against unreasonable searches and seizures. Through the Principles issued by the US DoC, the US ensures that signal intelligence activities are necessary and proportionate, strengthening privacy and civil liberties safeguards. These factors shall all be accounted for when assessing the level of protection for personal data transferred from the EU to the US, even if not relying directly on the EU-US DPF.</p>",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"translationIdentifier": "1caee2b7-5ab5-4137-80ba-a745e13833aa",
"rootVersionId": "72988847-a677-48db-a70b-0465230be7a8",
"sequence": 4
},
{
"id": "52923d50-2211-49cf-917e-0dc953a17056",
"content": "Rate the rule of law in the third country.",
"questionType": "MULTICHOICE",
"options": [
{
"id": "40225878-2a7c-4e81-9b1f-e57f5b145137",
"option": "Weak",
"sequence": 1,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "71cadb05-bc52-4a08-9e26-2c30c618218b",
"option": "Average",
"sequence": 2,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "c367b920-4cfb-4829-ac1e-ed9cde4543a1",
"option": "Strong",
"sequence": 3,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "ab31a9ba-6e42-456d-8215-10ce5aa0c15f",
"option": "NotSure",
"sequence": 4,
"attributes": None,
"hint": None,
"optionType": "NOT_SURE",
"optionKey": None
}
],
"required": False,
"attributes": "{\"isQuestionHintEnabled\":true,\"allowLaws\":false,\"requireJustification\":false,\"allowJustification\":true,\"allowOther\":false}",
"friendlyName": "Rule of law",
"description": "<p>Please explain how the country respects the rule of law.</p><p><br></p><p>To help determine the ranking of the third country's rule of law, you might take into account the following resources:</p><ul><li><a href=\"https://worldjusticeproject.org/sites/default/files/documents/WJP-ROLI-2020-Online_0.pdf\" rel=\"noopener noreferrer\" target=\"_blank\">The World Justice Project Rule of Law Index® 2020</a></li><li>Freedom House's <a href=\"https://freedomhouse.org/countries/freedom-world/scores\" rel=\"noopener noreferrer\" target=\"_blank\">Freedom in the World report</a></li></ul><p><br></p>",
"hint": "Article 45(2)(a) of the GDPR.",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"rootVersionId": "6bee35f1-5131-442b-bee0-f60d83f16694",
"sequence": 5
},
{
"id": "a3edeb53-07bc-4ff0-98d5-d9e522d15b10",
"content": "Rate the respect for human rights and fundamental freedoms in the third country.",
"questionType": "MULTICHOICE",
"options": [
{
"id": "481766a2-ef26-4523-8313-aa396b22f00a",
"option": "Weak",
"sequence": 1,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "2e8aaac7-0786-4c3a-bdd1-cd722de8377c",
"option": "Average",
"sequence": 2,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "5e40333f-be01-473d-a722-fd299d258c22",
"option": "Strong",
"sequence": 3,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "72b76ac3-64d4-4cea-9658-7ce3fac05bfd",
"option": "NotSure",
"sequence": 4,
"attributes": None,
"hint": None,
"optionType": "NOT_SURE",
"optionKey": None
}
],
"required": False,
"attributes": "{\"isQuestionHintEnabled\":true,\"allowLaws\":false,\"requireJustification\":false,\"allowJustification\":true}",
"friendlyName": "Respect for human rights and fundamental freedoms",
"description": "<p>Please explain how the country respects international human rights norms and standards.</p><p><br></p><p>To help determine the ranking of the third country's respect for human rights and fundamental freedoms, you might take into account the following resources:</p><ul><li><a href=\"https://worldjusticeproject.org/sites/default/files/documents/WJP-ROLI-2020-Online_0.pdf\" rel=\"noopener noreferrer\" target=\"_blank\">The World Justice Project Rule of Law Index® 2020</a></li><li>Freedom House's <a href=\"https://freedomhouse.org/countries/freedom-world/scores\" rel=\"noopener noreferrer\" target=\"_blank\">Freedom in the World report</a></li></ul><p><br></p>",
"hint": "Article 45(2)(a) of the GDPR.",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"rootVersionId": "27bdc47c-d36a-40e7-9759-f6243a566848",
"sequence": 6
},
{
"id": "6f4f2d51-6d64-4f91-a1e8-6fc5f660b367",
"content": "Indicate which of the following laws and frameworks are present and in force in the country ",
"questionType": "MULTICHOICE",
"options": [
{
"id": "9ef99815-81b9-4308-b93f-18fabdbe7c35",
"option": "General data protection legislation",
"sequence": 1,
"attributes": None,
"hint": "i.e. comprehensive and universal privacy laws, similar to the EU General Data Protection Regulation",
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "4a70daaf-72d3-4d02-8a99-a68a442285b1",
"option": "Sectoral legislation",
"sequence": 2,
"attributes": None,
"hint": "i.e. specific to certain sectors, such as health, finance, etc.",
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "a138ee1a-319a-464f-b9f6-d68ea6de53b8",
"option": "Professional rules ",
"sequence": 3,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "0a753b2b-5e3b-4a5d-8ce3-c9842946b045",
"option": "Security legislation ",
"sequence": 4,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "633bf7bb-bf84-44b7-ae88-e44b9835725a",
"option": "Relevant case-law ",
"sequence": 5,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "b301be95-b7fb-41ee-91ff-f807806abb1d",
"option": "NotSure",
"sequence": 6,
"attributes": None,
"hint": None,
"optionType": "NOT_SURE",
"optionKey": None
},
{
"id": "896b195b-99ce-4376-a266-37bf7675802f",
"option": "Other",
"sequence": 7,
"attributes": None,
"hint": None,
"optionType": "OTHERS",
"optionKey": None
}
],
"required": False,
"attributes": "{\"isQuestionHintEnabled\":true,\"allowLaws\":true,\"requireJustification\":false,\"optionHintEnabled\":true,\"allowOther\":true,\"isMultiSelect\":true,\"allowJustification\":true}",
"friendlyName": "Relevant legislation",
"description": "<p>Please identify the relevant laws and describe their implementation. Include links to official texts.</p>",
"hint": "Article 45(2)(a) of the GDPR.",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"rootVersionId": "e7127ab4-7abd-4520-996a-dac3c64974b5",
"sequence": 7
},
{
"id": "c65a9cde-8556-4a44-88dc-628932396361",
"content": "Rate the third country's overall data protection system taking into consideration the following basic data protection concepts and/or principles",
"questionType": "MULTICHOICE",
"options": [
{
"id": "68344b3d-fc68-40eb-8ece-21980b780389",
"option": "Weak",
"sequence": 1,
"attributes": None,
"hint": "",
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "60a6b9fc-e304-4ebc-bfe9-724a8724ea11",
"option": "Average",
"sequence": 2,
"attributes": None,
"hint": "",
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "e2be9607-374b-4ad0-8841-7832fac6a9b4",
"option": "Strong",
"sequence": 3,
"attributes": None,
"hint": "",
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "72f197fa-5019-4f9a-8601-8ef440f2a192",
"option": "NotSure",
"sequence": 4,
"attributes": None,
"hint": None,
"optionType": "NOT_SURE",
"optionKey": None
}
],
"required": False,
"attributes": "{\"isQuestionHintEnabled\":true,\"allowLaws\":false,\"requireJustification\":false,\"optionHintEnabled\":false,\"allowOther\":false,\"isMultiSelect\":false,\"allowJustification\":true}",
"friendlyName": "Privacy concepts and principles",
"description": "<ul><li><strong>Basic data protection principles</strong></li><li><strong>Lawful and fair processing rules: </strong>for example, provisions requiring data to be processed fairly and based on specific legal bases</li><li><strong>Purpose limitation principles: </strong>for example, provisions requiring data to be processed based on a specific purpose</li><li><strong>Data quality principles: </strong>for example, provisions requiring data to be accurate and kept up to date</li><li><strong>Data retention principles: </strong>for example, provisions requiring data to be kept no longer than what is necessary</li><li><strong>Security and confidentiality principles: </strong>for example, provisions relating to data breaches and confidentiality</li><li><strong>Transparency principles: </strong>for example, provisions requiring controllers to inform data subjects of processing activities</li><li><strong>Right of the data subjects: </strong>for example, provisions allowing data subjects to access, rectify or erase personal data</li><li><strong>Restrictions on onward transfers: </strong>for example, provisions restricting data transfers to third parties</li></ul><p><br></p>",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"rootVersionId": "4e6052cc-f192-4138-bb52-b5d14ac57c06",
"sequence": 8
},
{
"id": "e1b2cbca-8054-4ffa-8284-a3f92075479b",
"content": "Is there an independent supervisory authority able to ensure and enforce data protection rules? ",
"questionType": "YESNO",
"options": [
{
"id": "95b66494-cc59-467d-aa6c-4c28dcd4575c",
"option": "Yes",
"sequence": 1,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "fa57f4e2-2ccb-404d-acd3-9671310f08d7",
"option": "No",
"sequence": 2,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "f789cd9f-15f3-426b-a0a2-092c1524f50a",
"option": "NotSure",
"sequence": 3,
"attributes": None,
"hint": None,
"optionType": "NOT_SURE",
"optionKey": None
}
],
"required": False,
"attributes": "{\"isQuestionHintEnabled\":true,\"allowLaws\":false,\"allowJustification\":true,\"requireJustification\":false}",
"friendlyName": "Independent supervisory authority",
"description": "<p>Please identify these authorities. The authority must possess adequate enforcement powers and independence. </p>",
"hint": "Article 45(2)(b) of the GDPR.",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"rootVersionId": "f9d92447-b183-42a8-9e83-ce9111f276a3",
"sequence": 9
},
{
"id": "7b6c2be0-a184-469b-980c-f3cbf1653ae8",
"content": "The third country has international commitments or other obligations arising from legally binding conventions or instruments, as well as from its participation in multilateral or regional systems, related to personal data protection.",
"questionType": "YESNO",
"options": [
{
"id": "a96e6bf6-6a3a-453b-9ed0-74f9c43c8c9e",
"option": "Yes",
"sequence": 1,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "41b1ffd3-5899-40c6-98db-da24b393bfa1",
"option": "No",
"sequence": 2,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
}
],
"required": False,
"attributes": "{\"isQuestionHintEnabled\":true,\"allowLaws\":false,\"allowJustification\":true,\"requireJustification\":false}",
"friendlyName": "International commitments/obligations",
"description": "<p>Please explain any commitments/obligations.</p><p><br></p><p>For example, determine whether the third country has signed and ratified the <a href=\"https://www.coe.int/en/web/conventions/full-list/-/conventions/treaty/108\" rel=\"noopener noreferrer\" target=\"_blank\">Council of Europe Convention of 28 January 1981 for the Protection of Individuals with regard to the Automatic Processing of Personal Data</a> (i.e., Convention 108) and its <a href=\"https://www.coe.int/en/web/conventions/full-list/-/conventions/treaty/181\" rel=\"noopener noreferrer\" target=\"_blank\">Additional Protocol</a>.</p>",
"hint": "Article 45(2)(c) of the GDPR.",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"rootVersionId": "5d0b4512-7df2-434d-bfe5-be0ba8370ae5",
"sequence": 10
},
{
"id": "2676127c-01a9-41e7-ac6a-496d029f90e7",
"content": "The third country has public security, defence, national security, and/or criminal laws to which the transfer might be subject and that enable public authorities or law enforcement to access the transferred personal data.",
"questionType": "YESNO",
"options": [
{
"id": "4db48c99-00e4-4893-b745-502a23cec980",
"option": "Yes",
"sequence": 1,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "7d5ce03f-65f4-4025-b0bf-fdf5eb9fabaf",
"option": "No",
"sequence": 2,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "0221b2a0-285c-452a-b7bb-51e71a1dc957",
"option": "NotSure",
"sequence": 3,
"attributes": None,
"hint": None,
"optionType": "NOT_SURE",
"optionKey": None
}
],
"required": False,
"attributes": "{\"isQuestionHintEnabled\":true,\"allowLaws\":false,\"allowJustification\":true,\"requireJustification\":false}",
"friendlyName": "Problematic legislation to which the transfer might be subject",
"description": "<p>In other words, the third country's national security laws apply to the transfers to you (e.g., via electronic or digital means) that fall under the scope of that legislation (i.e., are you, along with the data transfers, explicitly subject to the national security laws).</p><p><br></p><p>Please explain the country's legislation concerning public security, defence, and national security, as well as public order and criminal law.</p>",
"hint": "Article 45(2)(a) of the GDPR.",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"rootVersionId": "b13c20e5-5c44-4623-8c35-e0e03f14d9d8",
"sequence": 11
},
{
"id": "437d57bc-8f4a-4304-9425-f5800a0cdcf2",
"content": "EDPB EEG Guidance",
"questionType": "STATEMENT",
"required": False,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":false}",
"description": "<p><br></p><p>The EDPB's <a href=\"https://edpb.europa.eu/sites/edpb/files/files/file1/edpb_recommendations_202002_europeanessentialguaranteessurveillance_en.pdf\" rel=\"noopener noreferrer\" target=\"_blank\">European Essential Guarantees (EEG)</a>:</p><p><br></p><ul><li>Processing should be based on clear, precise and accessible rules</li><li>Necessity and proportionality with regard to the legitimate objectives pursued need to be demonstrated</li><li>An independent oversight mechanism should exist</li><li>Effective remedies need to be available to the individual</li></ul><p><br></p><p>The EDPB European Essential Guarantees (EEG) recommendations provide clarifications on the elements which have to be assessed to determine whether the legal framework governing access to personal data by public authorities in a third country, being national security agencies or law enforcement authorities, can be regarded as a justifiable interference or not. In particular, this should be carefully considered when the legislation governing the access to data by public authorities is ambiguous or not publicly available.</p><p><br></p><p>Applied to the situation of data transfers based on Article 46 transfer tools, the EDPB European Essential Guarantees recommendations can guide the data exporter in assessing whether such powers unjustifiably interfere with the data exporter and importer’s obligations to ensure essential equivalence pursuant to the GDPR or the commitments contained in the transfer tool. The lack of an essentially equivalent level of protection will be especially evident where the legislation and/or practices of the third country relevant to your transfer do not meet the requirements of the European Essential Guarantees. The EDPB reiterates that the European Essential Guarantees are a referential standard when assessing the interference entailed by third-country surveillance measures in the context of international data transfers. These standards stem from EU law and the jurisprudence of the CJEU and the ECtHR, which is binding on EU Member States.</p><p><br></p><p>Your assessment must be based first and foremost on legislation publicly available. Examining also the practices of the third country’s public authorities will allow you to verify if the safeguards contained in the Article 46 GDPR transfer tool can be a sufficient means of ensuring, in practice, the effective protection of the personal data transferred.</p>",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"rootVersionId": "50976a9b-9b08-48e0-a3db-6ee9ba1261a1",
"sequence": 12
},
{
"id": "8a95c4bd-52b2-4cab-87fe-59fe268ea6b7",
"content": "Please indicate whether domestic legislation ensures clear, precise and accessible rules when interfering with individuals' privacy by taking into account the following aspects",
"questionType": "YESNO",
"options": [
{
"id": "8bd5765f-5c84-4198-ba5f-f895713ce31b",
"option": "Yes",
"sequence": 1,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "b5fb3e24-1251-4dab-a20a-4f16c7e5b377",
"option": "No",
"sequence": 2,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "5ca6732b-552b-40ce-90ce-784c68777ed8",
"option": "NotSure",
"sequence": 3,
"attributes": None,
"hint": None,
"optionType": "NOT_SURE",
"optionKey": None
}
],
"required": False,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"requireJustification\":false,\"allowJustification\":true}",
"friendlyName": "EEG A - Processing should be based on clear, precise and accessible rules",
"description": "<p>You should make sure that all the following aspects are taken into account</p><p><br></p><ul><li><strong>Clear, precise and accessible legal bases/purposes to access information</strong>: for example, the law requires specific conditions and legal bases to intercept communications or require data to be handled to public authorities</li><li><strong>Limits on retention of information: </strong>for example, the law forbids storage of information over a certain time limit</li><li><strong>Clear indication of categories of individuals that might be subject to surveillance </strong></li></ul>",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"rootVersionId": "b3b5de76-5939-40b8-8d19-96cc89a4dd5d",
"sequence": 13
},
{
"id": "1d96fd4d-293f-497b-a337-7ab3ce8c4947",
"content": "Indicate whether legislation ensures that the principles of necessity and proportionality are complied with",
"questionType": "YESNO",
"options": [
{
"id": "3dcc7550-bd72-4e73-9928-5bf46b8651fd",
"option": "Yes",
"sequence": 1,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "d878ac70-11bf-477c-84e4-12bdad0cc575",
"option": "No",
"sequence": 2,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "d881997d-30bb-4efc-b0e8-69d5c5cc5f7c",
"option": "NotSure",
"sequence": 3,
"attributes": None,
"hint": None,
"optionType": "NOT_SURE",
"optionKey": None
}
],
"required": False,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"requireJustification\":false,\"allowJustification\":true}",
"friendlyName": "EEG B - Necessity and proportionality",
"description": "<p>You should make sure that all the following aspects are taken into account</p><p><br></p><ul><li><strong>The seriousness of any interference with privacy rights is proportionate to the importance of the public interest objective: </strong>for example, the law should define the scope and limitations of the interference based on the public aim</li><li><strong>The limitations provided by law should be necessary in order to achieve the public interest: </strong>for example, a general authorization to retain all electronic communications wouldn't be compliant with this guarantee </li></ul>",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"rootVersionId": "3cb74c25-bd81-464b-bd6f-d93ffe121d46",
"sequence": 14
},
{
"id": "8749807b-e8a6-4499-8b3f-1ce1a23c09d4",
"content": "Indicate whether the legislation ensures that an independent oversight system exists",
"questionType": "YESNO",
"options": [
{
"id": "26e386f4-05dd-450b-914f-268e1c56434d",
"option": "Yes",
"sequence": 1,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "8841eb10-ec1d-431a-8f51-9d5be480e5c2",
"option": "No",
"sequence": 2,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "a0e16fdf-79b3-41c3-b262-02153d97b183",
"option": "NotSure",
"sequence": 3,
"attributes": None,
"hint": None,
"optionType": "NOT_SURE",
"optionKey": None
}
],
"required": False,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"requireJustification\":false,\"allowJustification\":true}",
"friendlyName": "EEG C - Independent oversight mechanism",
"description": "<p>Any interference with the right to privacy and data protection should be subject to an effective, independent and impartial oversight system provided by a judge or other independent body (such as an administrative authority or parliamentary body).</p><p><br></p><p>In evaluating the effectiveness and independence of the aforementioned body, you should take into account the following aspects: </p><p><br></p><ul><li>measures for effective reviews;</li><li>openness to public scrutiny;</li><li>manner of appointment; and</li><li>legal status.</li></ul><p><br></p>",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"rootVersionId": "251b6017-4b81-4cdb-9f2e-a7dc57738dc3",
"sequence": 15
},
{
"id": "c0de1bc1-c2cf-48fd-b826-06142ba6783d",
"content": "Indicate whether the law makes effective legal remedies available to the individual",
"questionType": "YESNO",
"options": [
{
"id": "f7f6f643-8f1c-4f85-bcb4-c54518691abd",
"option": "Yes",
"sequence": 1,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "3b8f7d98-b024-42ca-9de2-1d268692fd6b",
"option": "No",
"sequence": 2,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "59d1c21d-f2d1-45dc-a9ab-8715aaa468f5",
"option": "NotSure",
"sequence": 3,
"attributes": None,
"hint": None,
"optionType": "NOT_SURE",
"optionKey": None
}
],
"required": False,
"attributes": "{\"isQuestionHintEnabled\":false,\"requireJustification\":false,\"allowLaws\":true,\"allowJustification\":true}",
"friendlyName": "EEG D - Effective remedies available to the individual",
"description": "<p>Individuals should have effective remedies to satisfy their rights when they consider that they are not or have not been respected. Please take into account the following aspects when considering this guarantee: </p><p><br></p><ul><li><strong>Individuals are notified of surveillance measures or provided with equally effective remedies</strong></li><li><strong>Courts providing redress mechanisms are independent and impartial, adopt rules of procedures, include members that held judicial offices or experienced lawyers, have access to all relevant information and powers to remedy non-compliance. </strong></li><li><strong>There is no evidential burden to overcome in order to lodge an application with the courts</strong></li></ul><p><br></p><p>The same level of protection can be provided by non-judicial bodies, as long as they offer equal guarantees. </p>",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"rootVersionId": "5b8a69e3-d785-48f6-9ede-a4caca32264f",
"sequence": 16
},
{
"id": "4bfe55e4-7928-47da-8a1c-e496688e91ee",
"content": "Government access to personal information for national security and law enforcement purposes",
"questionType": "YESNO",
"options": [
{
"id": "24706e40-212b-44cd-8a6a-4812badf7e15",
"option": "Yes",
"sequence": 1,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "f3998414-4997-46d6-8b11-0ed03ad39aad",
"option": "No",
"sequence": 2,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "d264f8d8-9197-4623-97ba-c862e07f4df7",
"option": "NotSure",
"sequence": 3,
"attributes": None,
"hint": None,
"optionType": "NOT_SURE",
"optionKey": None
}
],
"required": False,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"allowJustification\":true,\"requireJustification\":false}",
"friendlyName": "Government access to personal information",
"description": "<p>Please indicate if the government access to personal information <strong>is consistent with democratic values and the rule of law</strong>. This is based on the <a href=\"https://legalinstruments.oecd.org/en/instruments/OECD-LEGAL-0487\" rel=\"noopener noreferrer\" target=\"_blank\">OECD Declaration on Government Access to Instruments Personal Data held by Private Sector Entities</a>.</p><p><br></p><p>You can take into account the following elements:</p><ul><li class=\"ql-align-justify\">Government access supports the pursuit of specified and legitimate aims. Governments do not seek access to personal data for the purpose of suppressing or burdening criticism or dissent; or disadvantaging persons or groups solely on the basis of characteristics including, but not limited to: age, mental or physical disability, ethnicity, indigenous status, gender identity or expression, sexual orientation, or political or religious affiliation.</li><li>Prior approval requirements for government access are established in the third country legal framework</li><li>The legal framework for government access is clear and easily accessible to the public</li><li>There are effective and impartial oversight to ensure that government access complies with the legal framework.</li><li>The legal framework provides individuals with effective judicial and non-judicial redress to identify and remedy violations of the national legal framework.</li></ul>",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"rootVersionId": "68c8050b-dea4-4a0a-a6cd-fb28f2a2d8c8",
"sequence": 17
},
{
"id": "ccb9373b-7ff0-4651-956c-9de1709254bf",
"content": "Based on your responses in the previous sections, does the Third Country provide an essentially equivalent level of data protection as guaranteed by the GDPR in light of the EU Charter of Fundamental Rights?",
"questionType": "YESNO",
"options": [
{
"id": "fdb288bd-1d21-44dc-87db-ebd5d2ef029e",
"option": "Yes",
"sequence": 1,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "32a1c666-2967-4778-a900-d57f549e4187",
"option": "No",
"sequence": 2,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "660a89da-1913-4171-ae6d-f0f62764bc8b",
"option": "NotSure",
"sequence": 3,
"attributes": None,
"hint": None,
"optionType": "NOT_SURE",
"optionKey": None
}
],
"required": True,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":false,\"allowJustification\":true,\"requireJustification\":false}",
"friendlyName": "Essential Equivalence Evaluation",
"description": "<p>You should answer <strong>Yes </strong>only if you have verified that</p><ol><li>Legislation in the third country meets EU standards both formally and substantially</li><li>There are no practices incompatible with the commitments of the transfer tool</li><li>Your transfer does not fall under the scope of problematic legislation that would allow access to data by public authorities without meeting EU standards</li></ol><p><br></p><p>Next Step:</p><ul><li>If you select <strong><u>Yes</u></strong>, the Supplementary Measures evaluation section is optional. </li><li>If you select <strong><u>No</u></strong>, in order to proceed further you need to evaluate the adoption of Supplementary Measures.</li></ul><p><br></p><p>---</p><p><br></p><p><strong>EDPB Supplementary Measures Recommendations</strong></p><p><br></p><ul><li><u>Relevant legislation in the third country may formally meet EU standards on fundamental rights and freedoms and the necessity and proportionality of restrictions thereto.</u></li><li class=\"ql-indent-1\">However, the practices of its public authorities (e.g. accessing personal data held by the private sector or when enforcing -or not- legislation as supervisory or judicial bodies) may clearly indicate that they do not normally apply/comply with the legislation that governs, in principle, their activities. In this case, you must take these practices into account in your assessment and consider that the Article 46 GDPR tool will not be able to effectively ensure, by itself (i.e. without supplementary measures), an essentially equivalent level of protection. In such case, if you wish to proceed with the transfer, you will have to implement adequate supplementary measures.</li></ul><p><br></p><ul><li><u>Relevant legislation in the third country (e.g. on access to personal data held by the private sector) may be lacking.</u></li><li class=\"ql-indent-1\">In this case you cannot automatically infer from this absence of relevant legislation that your Article 46 GDPR transfer tool can be effectively applied. You will have to check if there are indications of practices in force in the country that are incompatible with EU law and the commitments of the Article 46 GDPR transfer tool. If there are incompatible practices, the Article 46 GDPR transfer tool will not be able to effectively ensure, by itself (i.e. without adequate supplementary measures), an essentially equivalent level of protection. In such case, if you wish to proceed with the transfer, you will have to implement adequate supplementary measures.</li></ul><p><br></p><ul><li><u>The assessment may reveal that relevant legislation in the third country may be problematic and that the transferred data and/or the importer at hand fall or might fall within the scope of this problematic legislation.</u></li><li class=\"ql-indent-1\">‘Problematic legislation’ is understood as legislation that 1) imposes on the recipient of personal data from the European Union obligations and/or affect the data transferred in a manner that may impinge on the transfer tools’ contractual guarantee of an essentially equivalent level of protection and 2) does not respect the essence of the fundamental rights and freedoms recognised by the EU Charter of Fundamental Rights or exceeds what is necessary and proportionate in a democratic society to safeguard one of the important objectives as also recognised in Union or EU Member States’ law, such as those listed in Article 23 (1) GDPR.</li></ul>",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"rootVersionId": "ccb48f08-5355-4c5d-a05b-eb7ad3c622b9",
"sequence": 18
}
]
},
{
"name": "Re-Evaluation Procedures",
"invalidQuestionCount": 0,
"id": "c1a12c92-8acd-42de-a6c3-7f43cc76f85a",
"rootVersionId": "5fd23b8d-c103-4828-b918-f33866895dd8",
"sequence": 4,
"questions": [
{
"id": "a089af6d-0f7c-48fa-9aec-8aab693204b3",
"content": "Do you have documented policies and procedures to monitor, on an ongoing basis, and where appropriate in collaboration with the data importer, developments in the third country that could affect your initial assessment of the level of protection and the decisions you may have taken for your transfers?",
"questionType": "YESNO",
"options": [
{
"id": "832f28d6-5969-4a8e-aa85-b4842c7cd6ed",
"option": "Yes",
"sequence": 1,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "8c1904e8-8de6-40dd-a9fe-e3f956f7e984",
"option": "No",
"sequence": 2,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "b22afee7-000a-4d74-845d-bfe44a51c12d",
"option": "NotSure",
"sequence": 3,
"attributes": None,
"hint": None,
"optionType": "NOT_SURE",
"optionKey": None
}
],
"required": False,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":false,\"allowJustification\":true,\"requireJustification\":false}",
"friendlyName": "Re-Evaluation Procedures",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"rootVersionId": "797de92c-da1c-46a3-95fc-681c5776d3ee",
"sequence": 1
},
{
"id": "54c22bcd-a459-4b2a-bb77-bef138441b3d",
"content": "Do you have sufficiently sound mechanisms in place to ensure that you promptly suspend or end transfers where the data importer has breached or is unable to honour the commitments it has taken in the Article 46 GDPR transfer tool?",
"questionType": "YESNO",
"options": [
{
"id": "ba68331e-628d-411d-8960-3b373fe2a6ed",
"option": "Yes",
"sequence": 1,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "54fb81a0-325b-4592-b359-8c010f2cd704",
"option": "No",
"sequence": 2,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "2378ceb8-0a26-4326-a48a-c778b6b93697",
"option": "NotSure",
"sequence": 3,
"attributes": None,
"hint": None,
"optionType": "NOT_SURE",
"optionKey": None
}
],
"required": False,
"attributes": "{\"isQuestionHintEnabled\":false,\"requireJustification\":false,\"allowLaws\":false,\"allowJustification\":true}",
"friendlyName": "Transfer suspension - Importer Breach",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"rootVersionId": "481a2ba8-1203-417e-a302-0a7857d25751",
"sequence": 2
}
]
},
{
"name": "Supplementary Measures Evaluation",
"invalidQuestionCount": 0,
"id": "a7e15759-7464-4282-bdd6-49d825dd1224",
"rootVersionId": "f1e0635b-104e-4b8f-be4e-9e25c004a206",
"sequence": 5,
"questions": [
{
"id": "331c2403-0899-4c3a-ade3-d74b7bc66835",
"content": "Are data to be transferred encrypted at rest?",
"questionType": "YESNO",
"options": [
{
"id": "56a2c69c-fd7a-422e-aa5c-d145beefba1a",
"option": "Yes",
"sequence": 1,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None,
"translationIdentifier": "8bc0073d-ecb3-4a57-af47-807c34b1adf2"
},
{
"id": "1c5a2dce-4849-406a-805a-e906492a9cca",
"option": "No",
"sequence": 2,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None,
"translationIdentifier": "c05afa67-27ff-4cf7-820a-735583474615"
},
{
"id": "4b980a03-040c-4247-864b-5509aea8d489",
"option": "NotApplicable",
"sequence": 3,
"attributes": None,
"hint": None,
"optionType": "NOT_APPLICABLE",
"optionKey": None
}
],
"required": False,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"requireJustification\":false,\"allowJustification\":true}",
"friendlyName": "Encryption at-rest",
"description": "<p>It is a best practice to encrypt data before sharing it with third parties. </p><p>If no, please justify your answer</p>",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"translationIdentifier": "03766654-3c1b-49b0-9ef3-6450c61cd657",
"rootVersionId": "26a0c4d3-3352-4ee4-944e-37698a020bec",
"sequence": 1
},
{
"id": "8859e842-ce09-49c5-98ca-f282de4a31e5",
"content": "Is any further encryption type applicable (in transit, E2EE, homomorphic etc.)?",
"questionType": "MULTICHOICE",
"options": [
{
"id": "84c83cc2-3475-4f2b-a843-0dfec4467fe0",
"option": "In-Transit Encryption",
"sequence": 1,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None,
"translationIdentifier": "fb8ceb2e-1397-41a5-9fe1-d8442dd225cc"
},
{
"id": "8830f9df-875d-42bc-b3fb-24149a051939",
"option": "End-to-end Encryption (E2EE)",
"sequence": 2,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None,
"translationIdentifier": "bbb22426-d2fa-4ef5-b7ec-d40577e6eaef"
},
{
"id": "15422c61-cee5-4b48-916a-5a4ed140ed74",
"option": "Homomorphic Encryption",
"sequence": 3,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None,
"translationIdentifier": "a1cbecd6-219f-42bd-a66f-52390d2d91eb"
},
{
"id": "99a9c3b7-be52-4098-9de2-37cd83e0b48c",
"option": "Other",
"sequence": 4,
"attributes": None,
"hint": None,
"optionType": "OTHERS",
"optionKey": None
},
{
"id": "7606ee1b-fcec-4ddc-a569-45ed5e3c7d67",
"option": "NotApplicable",
"sequence": 5,
"attributes": None,
"hint": None,
"optionType": "NOT_APPLICABLE",
"optionKey": None
}
],
"required": False,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"isMultiSelect\":true,\"requireJustification\":false,\"allowJustification\":true,\"allowOther\":true}",
"friendlyName": "Other Encryption Forms",
"description": "<p>Other forms of encryption shall be advisable based on the circumstantial factors of the transfer. </p><ul><li>It is strongly recommended to adopt <strong>in-transit encryption</strong> to prevent access during personal information transfer.</li><li>Where applicable, <strong>end-to-end encryption (E2EE) </strong>shall also be a golden standard for preventing unauthorised access to personal data.</li><li><strong>Homomorphic encryption </strong>is a form of encryption that permits users to perform computations on its encrypted data without first decrypting it.</li></ul><p><br></p><p>Where applicable, please also specify the suitable protocol or algorithm.</p>",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"translationIdentifier": "7bc63077-3cd6-4cd9-a435-8f09582a9287",
"rootVersionId": "177b742e-62d7-48af-a777-bcfe58337a91",
"sequence": 2
},
{
"id": "eb3346d1-c3fe-4a14-a305-1a2df69835ca",
"content": "Does your organisation, as a data exporter, have exclusive access to encryption keys?",
"questionType": "YESNO",
"options": [
{
"id": "6316572f-6db4-404a-8556-533c53782b44",
"option": "Yes",
"sequence": 1,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None,
"translationIdentifier": "51cfc5e3-89db-4f50-94e9-c7630f0de577"
},
{
"id": "66d44f2d-000d-4cb9-b880-ec794a182c14",
"option": "No",
"sequence": 2,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None,
"translationIdentifier": "48c2d2e0-a65c-4d3c-9fc3-016a40c8d4ea"
},
{
"id": "d1a19f5c-b1ef-431a-a60d-add8d80c5430",
"option": "NotApplicable",
"sequence": 3,
"attributes": None,
"hint": None,
"optionType": "NOT_APPLICABLE",
"optionKey": None
}
],
"required": False,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"requireJustification\":false}",
"friendlyName": "Data Importer-Managed Keys",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"translationIdentifier": "0b068079-eae9-4061-b19f-ecc6618c49cf",
"rootVersionId": "7f7bc6b7-384f-4396-8d64-b7d17bf18111",
"sequence": 3
},
{
"id": "06d8a19c-1710-4a75-b013-fd6c9d084d68",
"content": "Do you intend to transfer pseudonymized data? ",
"questionType": "YESNO",
"options": [
{
"id": "9801f07d-e5f7-4e53-afbc-499c1e80cd04",
"option": "Yes",
"sequence": 1,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "45b0f740-1481-410f-ad4b-6e92699a9bd2",
"option": "No",
"sequence": 2,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "d3737c06-e7b3-4a8b-a9c6-15c75d7e5afd",
"option": "NotSure",
"sequence": 3,
"attributes": None,
"hint": None,
"optionType": "NOT_SURE",
"optionKey": None
}
],
"required": False,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":false,\"requireJustification\":false,\"allowJustification\":true}",
"friendlyName": "Pseudonymized data",
"description": "<p>You might need to re-identify the personal data you transferred, for example for research purposes. In this case, you need to implement specific pseudonymization measures that block the data importer from identifying the individuals to which the data refer. </p><p><br></p>",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"rootVersionId": "fc3a7cf3-ccba-4a21-89cd-509f7b24d86a",
"sequence": 4
},
{
"id": "cad81b20-54dd-4da8-b751-310d9f2ff712",
"content": "Are you transferring data to an importer that is specifically protected in the destination country in such a way to prevent access from public authorities?",
"questionType": "MULTICHOICE",
"options": [
{
"id": "55a2b9e6-81bc-4f2d-8015-fddcd11d09ea",
"option": "Yes, all my data is protected by this exception and is being transferred to a protected recipient",
"sequence": 1,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "3ceb461c-b6f9-4f49-b92b-3df81ae9e5ff",
"option": "Yes, but not all of the data is protected by this exception ",
"sequence": 2,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "b9dcd0bb-6082-4758-802e-9223572439f2",
"option": "NotSure",
"sequence": 3,
"attributes": None,
"hint": None,
"optionType": "NOT_SURE",
"optionKey": None
},
{
"id": "b75c9f55-1652-427c-a0c6-2df1ac216933",
"option": "NotApplicable",
"sequence": 4,
"attributes": None,
"hint": None,
"optionType": "NOT_APPLICABLE",
"optionKey": None
}
],
"required": False,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"requireJustification\":false,\"isMultiSelect\":false,\"displayAnswerType\":\"dropdown\"}",
"friendlyName": "Protected recipient",
"description": "<p>For example, the law protects the recipient with formal and substantial guarantees because it provides medical or legal services. </p>",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"rootVersionId": "5ae166dc-044e-48c0-856f-226489fc4d72",
"sequence": 5
},
{
"id": "024e01b5-2f91-44e3-a6e7-d530d211e06c",
"content": "Can you split the data between two or more importer in different jurisdictions, so that each of them is unable individually to reconstruct the personal data and single-out the data subjects?",
"questionType": "YESNO",
"options": [
{
"id": "74e5dcf4-e5bc-4a44-b9e2-4c5b856efba4",
"option": "Yes",
"sequence": 1,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "642e0c3f-4954-476e-9850-706fa2d4432d",
"option": "No",
"sequence": 2,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "28bc0d71-20a1-42a2-a804-1237118f26b6",
"option": "NotSure",
"sequence": 3,
"attributes": None,
"hint": None,
"optionType": "NOT_SURE",
"optionKey": None
}
],
"required": False,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"requireJustification\":false,\"allowJustification\":true}",
"friendlyName": "Split or multi-party processing",
"description": "<p>This way of transferring data consists in splitting personal data into two or more parts each of which cannot be used to to identify a specific data subject, without the use of the other or of additional information.</p><p>The importers must be in different jurisdictions. </p>",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"rootVersionId": "e11f751b-0260-4a78-a60b-4501386b5ed8",
"sequence": 6
},
{
"id": "c03ea6b5-fa68-4e84-a071-cba7b6f14e69",
"content": "Can the data importer need to access personal data in clear? ",
"questionType": "YESNO",
"options": [
{
"id": "c5006f6d-b294-4e5b-a02f-071e5b8e0df4",
"option": "Yes",
"sequence": 1,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "1b7caef9-3761-4f6d-8c92-6b57def3ebe0",
"option": "No",
"sequence": 2,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None
},
{
"id": "896c3c3e-ce15-460f-b26f-53cc30da907c",
"option": "NotSure",
"sequence": 3,
"attributes": None,
"hint": None,
"optionType": "NOT_SURE",
"optionKey": None
}
],
"required": False,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"requireJustification\":false,\"allowJustification\":true}",
"friendlyName": "Access in clear from data importer",
"description": "<p>For example, does the data importer needs to access data in clear because technically necessary for the provision of a service? If yes, it should be noted that <u>the EDPB considers this scenario as high-risk for the data subject's fundamental rights.</u></p><p><br></p><p>[\"<em>In the given scenarios, where unencrypted personal data is technically necessary for the provision of the service by the processor, transport encryption and data-at-rest encryption even taken together, do not constitute a supplementary measure that ensures an essentially equivalent level of protection if the data importer is in possession of the cryptographic keys\" - </em>EDPB, Use Case 6 Transfer to cloud services providers or other processors which require access to data in the clear, Recommendations 01/2020]</p>",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"rootVersionId": "4bc598d3-3dd4-4647-85e8-f707a6440f01",
"sequence": 7
},
{
"id": "3da1c5b1-da0e-43b3-a929-3ede736001ff",
"content": "What controls are already in place to safeguard this transfer?",
"questionType": "ASSESS_CONTROL",
"required": False,
"attributes": "{\"isQuestionHintEnabled\":false,\"isMultiSelect\":true,\"allowLaws\":true,\"requireJustification\":false}",
"friendlyName": "Additional Controls in place",
"description": "<p>Select the relevant implemented controls that contribute to mitigating personal data processing in the context of cross-border transfer.</p><p>These measures may consist of</p><ul><li><u>Technical Security Safeguards</u></li><li><u>Organizational Controls</u></li><li><u>Contractual Commitments and Obligations</u></li></ul><p><br></p><p>Please attach supporting evidence where possible.</p>",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": True,
"readOnly": False,
"translationIdentifier": "28a0b3a1-ba21-47fa-9347-0e0bf7156c85",
"rootVersionId": "2eff8bf0-88e3-4867-9d46-6b184dfdb941",
"sequence": 8
},
{
"id": "c08c70cb-8f5a-46c5-9852-e8ee101d6a63",
"content": "Based on this section, do the supplementary measures deployed or recommended grant effectiveness in protecting the transfer?",
"questionType": "YESNO",
"options": [
{
"id": "1255e9fd-2130-47e6-9515-6387713a7c34",
"option": "Yes",
"sequence": 1,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None,
"translationIdentifier": "171f2d26-d1cf-4707-a2bc-c352c0a20a71"
},
{
"id": "2126cd49-1b8e-4eb1-bd07-aeb35124ecab",
"option": "No",
"sequence": 2,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None,
"translationIdentifier": "d7f82cc8-857b-4f34-9b46-6d4edeadfde6"
}
],
"required": True,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true,\"requireJustification\":true,\"allowJustification\":true}",
"friendlyName": "Supplementary Measures Effectiveness",
"description": "<p>Please determine whether the supplementary measures selected in this section are sufficiently robust in protecting data in the Third Country.</p><p>If unsure, please refer to the EDPB guidance:</p><p><a href=\"https://edpb.europa.eu/system/files/2021-06/edpb_recommendations_202001vo.2.0_supplementarymeasurestransferstools_en.pdf\" rel=\"noopener noreferrer\" target=\"_blank\">Recommendations 01/2020 on measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data</a></p><p><br></p><p><u>Note</u>: According to some Data Protection Authorities, a risk-based approach is not advisable for performing a TIA. Therefore, if the Third Country presents any risk of undermining data protection with regard to the transfer, the abovementioned measures might not be enough to mitigate them.</p>",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"translationIdentifier": "f1ad97f6-9b77-4e3b-944e-0aec3b028ae5",
"rootVersionId": "cc38f196-98cd-4317-8df2-1cf338addd35",
"sequence": 9
}
]
},
{
"name": "Transfer Impact Assessment Result ",
"invalidQuestionCount": 0,
"id": "00f7a3b3-8515-40d6-8b87-92ef8c3cb422",
"rootVersionId": "5213f662-7a59-4c7a-b252-6cc0a7a0f7d8",
"sequence": 6,
"questions": [
{
"id": "dd388747-13de-467c-95a9-c1a288e1fdf7",
"content": "Based on your previous answers, this transfer can be deemed safe [EEA/Adequacy Decision]",
"questionType": "STATEMENT",
"required": False,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true}",
"description": "<p>You are transferring data to a country inside the European Economic Area or covered by the European Commission Adequacy Decision (complete list <a href=\"https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en\" rel=\"noopener noreferrer\" target=\"_blank\">here</a>).</p><p><br></p><p>Therefore, your transfer shall be considered safe.</p>",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"translationIdentifier": "78f75076-9a55-47a2-989c-2bee66c06b23",
"rootVersionId": "ad709a77-d05d-4733-897f-64f519224687",
"sequence": 1
},
{
"id": "b2593951-626f-4826-827e-b6483f54230c",
"content": "Based on your previous answers, this transfer can be deemed safe [Essential equivalence]",
"questionType": "STATEMENT",
"required": False,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true}",
"description": "<p>Based on your assessment:</p><ul><li>The country of the data importer <strong>is deemed to grant an equivalent level of protection to that of the GDPR</strong>, and no problematic legislation applies to the transfer.</li><li>To comply with Chapter V of GDPR, you shall rely on a <strong>cross-border transfer tool </strong>(Article 46.2 GDPR);</li><li><strong>s<u>upplementary measures are recommended but not mandatory</u></strong> since the Third Country does not encompass any significant intrinsic risks, with a view on its legal framework.</li></ul><p><br></p><p><u>Note</u>: this is a subjective response based on your previous answers; if you have any doubts about the equivalency level, please consider reassessing sections 2 and 3.</p>",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"rootVersionId": "e45d9f31-0fda-4ab4-8e0f-69a0baf70d3a",
"sequence": 2
},
{
"id": "9cf1d7a3-c309-4e77-8ad8-c39589d8ba0d",
"content": "Based on your previous answers, this transfer can be deemed safe [Supplementary measures]",
"questionType": "STATEMENT",
"required": False,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true}",
"description": "<p>Based on your assessment:</p><ul><li>The data importer's country does not grant an <strong>equivalent level of protection to that of the GDPR</strong>,</li><li>To comply with Chapter V of GDPR, you shall rely on a <strong><u>cross-border transfer tool </u></strong>(Article 46.2 GDPR); </li><li><strong><u>Supplementary measures are required </u></strong>since the transfer tool is insufficient to address concerns raised by personal data transfer.</li></ul>",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"translationIdentifier": "b4a446bf-ebc1-46b2-9e07-d4d9d0080246",
"rootVersionId": "09ef5733-764a-47f6-b5ef-248180807c1a",
"sequence": 3
},
{
"id": "3312e036-9db6-4047-9422-3573e59757ed",
"content": "Based on your previous answers, this transfer can be deemed safe [Derogation, article 49 GDPR]",
"questionType": "STATEMENT",
"required": False,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true}",
"description": "<p>Because you are transferring personal data to a country while relying on specific derogations, you don't need to perform any more assessments on the transfer. </p><p>Please consider reviewing this outcome if any of the conditions change.</p>",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"rootVersionId": "11c6c277-3cd6-48d3-b72a-6818141c3aa0",
"sequence": 4
},
{
"id": "d1a329c7-76bf-4e76-8e4b-d0873b0f4864",
"content": "Based on your previous answers, this transfer can be deemed unsafe",
"questionType": "STATEMENT",
"required": False,
"attributes": "{\"isQuestionHintEnabled\":false,\"allowLaws\":true}",
"description": "<p>Based on your assessment:</p><ul><li>The data importer's country does not grant an equivalent level of protection to that of the GDPR,</li><li>Even if combined with supplementary measures, a cross-border transfer tool cannot mitigate the risks posed by the transfer to the Data Importer in the third country.</li></ul><p><br></p><p>Please consider suspending the transfer or changing the conditions under which it shall occur before proceeding further.</p>",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"rootVersionId": "166099df-5eae-419e-85b9-9fb258aaccf3",
"sequence": 5
}
]
},
{
"name": "Final Considerations",
"invalidQuestionCount": 0,
"translationIdentifier": "17602d8a-4b2b-46bf-be27-774260133e77",
"id": "43c24b42-26fc-4d92-bd5e-9fb460ac1d80",
"rootVersionId": "f8fe0598-bff2-48a5-bf6f-8cc17a6fa688",
"sequence": 7,
"questions": [
{
"id": "bd5d71b6-a391-434c-bde6-e252918736d9",
"content": "You're done!",
"questionType": "TEXTBOX",
"options": [
{
"id": "f4048c28-3d03-4b82-9735-d0cb5f6b0911",
"option": "",
"sequence": 1,
"attributes": None,
"hint": None,
"optionType": "DEFAULT",
"optionKey": None,
"translationIdentifier": "d1a936db-d62d-4491-9e61-e4e8b973acde"
}
],
"required": False,
"attributes": "{\"isQuestionHintEnabled\":false,\"requireJustification\":false,\"allowLaws\":true}",
"friendlyName": "Done",
"description": "<p>Please provide any final consideration in the text box below as needed.</p>",
"valid": True,
"prePopulateResponse": False,
"linkAssessmentToInventory": False,
"attachmentRequired": False,
"linkAssessmentToResponseEntity": False,
"readOnly": False,
"translationIdentifier": "9baab504-f046-429e-b19b-8b56d752a166",
"rootVersionId": "1055a282-999d-4d5a-9e49-1b9ac2e845d0",
"sequence": 1
}
]
}
],
"navigations": [],
"showNavigationRules": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "8a95c4bd-52b2-4cab-87fe-59fe268ea6b7",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 2,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 3,
"optionList": None
}
]
}
]
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "8749807b-e8a6-4499-8b3f-1ce1a23c09d4",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 2,
"optionList": None
}
]
}
]
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 0,
"optionList": None
}
]
}
]
},
{
"sectionId": "ce0e1775-675d-4686-96e0-2a080a1b0ce3",
"questionId": "4eac414a-5bd7-4900-ad57-7fe7bcaf7a1e",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 2,
"optionList": None
}
]
}
]
},
{
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "c08c70cb-8f5a-46c5-9852-e8ee101d6a63",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != 'fdb288bd-1d21-44dc-87db-ebd5d2ef029e' ) && ( @.questionId == 'ccb9373b-7ff0-4651-956c-9de1709254bf' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "ccb9373b-7ff0-4651-956c-9de1709254bf"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 2,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 3,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "fdb288bd-1d21-44dc-87db-ebd5d2ef029e",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "ccb9373b-7ff0-4651-956c-9de1709254bf",
"responseCount": None,
"group": 4,
"optionList": None
}
]
}
]
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "4bfe55e4-7928-47da-8a1c-e496688e91ee",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 2,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 3,
"optionList": None
}
]
}
]
},
{
"sectionId": "ce0e1775-675d-4686-96e0-2a080a1b0ce3",
"questionId": "1fa545b5-8c52-4031-8690-55aebf273045",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 2,
"optionList": None
}
]
}
]
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "a3edeb53-07bc-4ff0-98d5-d9e522d15b10",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 2,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 3,
"optionList": None
}
]
}
]
},
{
"sectionId": "ce0e1775-675d-4686-96e0-2a080a1b0ce3",
"questionId": "662282e9-4a04-462b-9751-77d8fe231f3d",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 2,
"optionList": None
}
]
}
]
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "437d57bc-8f4a-4304-9425-f5800a0cdcf2",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 2,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 3,
"optionList": None
}
]
}
]
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "ccb9373b-7ff0-4651-956c-9de1709254bf",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 2,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 3,
"optionList": None
}
]
}
]
},
{
"sectionId": "ce0e1775-675d-4686-96e0-2a080a1b0ce3",
"questionId": "42d97c55-0e95-4aba-97fa-f1df55ed0f25",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 2,
"optionList": None
}
]
}
]
},
{
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "8859e842-ce09-49c5-98ca-f282de4a31e5",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 2,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 3,
"optionList": None
}
]
}
]
},
{
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "cad81b20-54dd-4da8-b751-310d9f2ff712",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 2,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 3,
"optionList": None
}
]
}
]
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "52923d50-2211-49cf-917e-0dc953a17056",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 2,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 3,
"optionList": None
}
]
}
]
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "c0de1bc1-c2cf-48fd-b826-06142ba6783d",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 2,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 3,
"optionList": None
}
]
}
]
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "c65a9cde-8556-4a44-88dc-628932396361",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 2,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 3,
"optionList": None
}
]
}
]
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "08dc64a1-3770-40e5-840c-f7a66f4042c1",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 2,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 3,
"optionList": None
}
]
}
]
},
{
"sectionId": "00f7a3b3-8515-40d6-8b87-92ef8c3cb422",
"questionId": "9cf1d7a3-c309-4e77-8ad8-c39589d8ba0d",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != 'fdb288bd-1d21-44dc-87db-ebd5d2ef029e' ) && ( @.questionId == 'ccb9373b-7ff0-4651-956c-9de1709254bf' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId == '1255e9fd-2130-47e6-9515-6387713a7c34' ) && ( @.questionId == 'c08c70cb-8f5a-46c5-9852-e8ee101d6a63' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
},
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId == '1255e9fd-2130-47e6-9515-6387713a7c34' ) && ( @.questionId == 'c08c70cb-8f5a-46c5-9852-e8ee101d6a63' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "c08c70cb-8f5a-46c5-9852-e8ee101d6a63"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "ccb9373b-7ff0-4651-956c-9de1709254bf"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "fdb288bd-1d21-44dc-87db-ebd5d2ef029e",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "ccb9373b-7ff0-4651-956c-9de1709254bf",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "1255e9fd-2130-47e6-9515-6387713a7c34",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "c08c70cb-8f5a-46c5-9852-e8ee101d6a63",
"responseCount": None,
"group": 1,
"optionList": None
}
]
},
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "1255e9fd-2130-47e6-9515-6387713a7c34",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "c08c70cb-8f5a-46c5-9852-e8ee101d6a63",
"responseCount": None,
"group": 0,
"optionList": None
}
]
}
]
},
{
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "331c2403-0899-4c3a-ade3-d74b7bc66835",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 2,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 3,
"optionList": None
}
]
}
]
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "e1b2cbca-8054-4ffa-8284-a3f92075479b",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 2,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 3,
"optionList": None
}
]
}
]
},
{
"sectionId": "00f7a3b3-8515-40d6-8b87-92ef8c3cb422",
"questionId": "d1a329c7-76bf-4e76-8e4b-d0873b0f4864",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId == '32a1c666-2967-4778-a900-d57f549e4187' ) && ( @.questionId == 'ccb9373b-7ff0-4651-956c-9de1709254bf' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId == '2126cd49-1b8e-4eb1-bd07-aeb35124ecab' ) && ( @.questionId == 'c08c70cb-8f5a-46c5-9852-e8ee101d6a63' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
},
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId == '2126cd49-1b8e-4eb1-bd07-aeb35124ecab' ) && ( @.questionId == 'c08c70cb-8f5a-46c5-9852-e8ee101d6a63' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "c08c70cb-8f5a-46c5-9852-e8ee101d6a63"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "ccb9373b-7ff0-4651-956c-9de1709254bf"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "32a1c666-2967-4778-a900-d57f549e4187",
"optionType": "DEFAULT",
"option": "No",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "ccb9373b-7ff0-4651-956c-9de1709254bf",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "2126cd49-1b8e-4eb1-bd07-aeb35124ecab",
"optionType": "DEFAULT",
"option": "No",
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "c08c70cb-8f5a-46c5-9852-e8ee101d6a63",
"responseCount": None,
"group": 1,
"optionList": None
}
]
},
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "2126cd49-1b8e-4eb1-bd07-aeb35124ecab",
"optionType": "DEFAULT",
"option": "No",
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "c08c70cb-8f5a-46c5-9852-e8ee101d6a63",
"responseCount": None,
"group": 0,
"optionList": None
}
]
}
]
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "1d96fd4d-293f-497b-a337-7ab3ce8c4947",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 2,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 3,
"optionList": None
}
]
}
]
},
{
"sectionId": "c1a12c92-8acd-42de-a6c3-7f43cc76f85a",
"questionId": "54c22bcd-a459-4b2a-bb77-bef138441b3d",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 2,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 3,
"optionList": None
}
]
}
]
},
{
"sectionId": "00f7a3b3-8515-40d6-8b87-92ef8c3cb422",
"questionId": "dd388747-13de-467c-95a9-c1a288e1fdf7",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( ( @.responseId == '9b13d90d-4314-42ee-8ff2-97422d090195' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == '5cde9447-d09a-44ea-96f8-58b0dc33abeb' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId == '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "9b13d90d-4314-42ee-8ff2-97422d090195",
"optionType": "DEFAULT",
"option": "European Economic Area",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "5cde9447-d09a-44ea-96f8-58b0dc33abeb",
"optionType": "DEFAULT",
"option": "Adequate Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 1,
"optionList": None
}
]
}
]
},
{
"sectionId": "00f7a3b3-8515-40d6-8b87-92ef8c3cb422",
"questionId": "b2593951-626f-4826-827e-b6483f54230c",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId == 'fdb288bd-1d21-44dc-87db-ebd5d2ef029e' ) && ( @.questionId == 'ccb9373b-7ff0-4651-956c-9de1709254bf' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
},
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId == '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "ccb9373b-7ff0-4651-956c-9de1709254bf"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "AND",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "AND",
"optionId": "fdb288bd-1d21-44dc-87db-ebd5d2ef029e",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "ccb9373b-7ff0-4651-956c-9de1709254bf",
"responseCount": None,
"group": 0,
"optionList": None
}
]
},
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": None,
"group": 0,
"optionList": None
}
]
}
]
},
{
"sectionId": "ce0e1775-675d-4686-96e0-2a080a1b0ce3",
"questionId": "8f63bb92-f2a1-4e16-a265-8fa14d90addb",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 2,
"optionList": None
}
]
}
]
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "4df5d952-6507-4317-8291-ece329137f78",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 2,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 3,
"optionList": None
}
]
}
]
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "6f4f2d51-6d64-4f91-a1e8-6fc5f660b367",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 2,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 3,
"optionList": None
}
]
}
]
},
{
"sectionId": "c1a12c92-8acd-42de-a6c3-7f43cc76f85a",
"questionId": "a089af6d-0f7c-48fa-9aec-8aab693204b3",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 2,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 3,
"optionList": None
}
]
}
]
},
{
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "eb3346d1-c3fe-4a14-a305-1a2df69835ca",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 2,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 3,
"optionList": None
}
]
}
]
},
{
"sectionId": "ce0e1775-675d-4686-96e0-2a080a1b0ce3",
"questionId": "38b5c136-37c8-4b63-8493-21e5553c4e25",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 2,
"optionList": None
}
]
}
]
},
{
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "06d8a19c-1710-4a75-b013-fd6c9d084d68",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 2,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 3,
"optionList": None
}
]
}
]
},
{
"sectionId": "00f7a3b3-8515-40d6-8b87-92ef8c3cb422",
"questionId": "3312e036-9db6-4047-9422-3573e59757ed",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId == '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 0,
"optionList": None
}
]
}
]
},
{
"sectionId": "ce0e1775-675d-4686-96e0-2a080a1b0ce3",
"questionId": "9a5b69a6-3246-4aee-b468-d5be58ece7f8",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 2,
"optionList": None
}
]
}
]
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "2676127c-01a9-41e7-ac6a-496d029f90e7",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 2,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 3,
"optionList": None
}
]
}
]
},
{
"sectionId": "ce0e1775-675d-4686-96e0-2a080a1b0ce3",
"questionId": "cc2e821c-0f20-4bd2-a1e4-06b8e51ffca6",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 2,
"optionList": None
}
]
}
]
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 2,
"optionList": None
}
]
}
]
},
{
"sectionId": "ce0e1775-675d-4686-96e0-2a080a1b0ce3",
"questionId": "ecdbab18-bc8c-46a1-81b8-96a954e8869b",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 2,
"optionList": None
}
]
}
]
},
{
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "c03ea6b5-fa68-4e84-a071-cba7b6f14e69",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 2,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 3,
"optionList": None
}
]
}
]
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "32b7b8f5-450c-4f64-9332-558801da9a00",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 2,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 3,
"optionList": None
}
]
}
]
},
{
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "3da1c5b1-da0e-43b3-a929-3ede736001ff",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 2,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 3,
"optionList": None
}
]
}
]
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "7b6c2be0-a184-469b-980c-f3cbf1653ae8",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 2,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 3,
"optionList": None
}
]
}
]
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 1,
"optionList": None
}
]
}
]
},
{
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "024e01b5-2f91-44e3-a6e7-d530d211e06c",
"conditionGroupExpressions": [
{
"expressionGroups": [
{
"expressions": [
"$..[?( ( @.responseId != '3dbbc738-a9b4-477d-8ee7-5b9f73af3569' ) && ( @.questionId == '877540cb-6ac5-4275-a4d0-8e1073828050' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( ( @.responseId == 'a20fc718-7cec-4e67-826b-51e8e5ff0ef9' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) || ( ( @.responseId == 'a70fa995-5cd2-48fb-9c9b-7a249a9b6959' ) && ( @.questionId == 'c346b4eb-b71e-4701-bce6-8e9d78ca38f8' ) ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '6404cd2c-fedd-4847-907c-e3ca96c48f86' ) && ( @.questionId == '17fe032b-96fe-4aee-b598-4af6b681954e' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
},
{
"expressions": [
"$..[?( ( @.responseId != '81e5c256-cbf0-4c9f-bc80-187e284717df' ) && ( @.questionId == 'fc0ad68e-dba5-4460-9d79-34f310e6e1af' ) )]"
],
"logicalOperator": None,
"expressionType": "JSONPATH"
}
]
}
],
"anchorQuestionDetails": [
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8"
},
{
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e"
}
],
"conditionGroupDtos": [
{
"logicalOperator": "OR",
"conditions": [
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "3dbbc738-a9b4-477d-8ee7-5b9f73af3569",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "877540cb-6ac5-4275-a4d0-8e1073828050",
"responseCount": None,
"group": 0,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a20fc718-7cec-4e67-826b-51e8e5ff0ef9",
"optionType": "DEFAULT",
"option": "Other Third Country",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "EQUAL_TO",
"logicalOperator": "OR",
"optionId": "a70fa995-5cd2-48fb-9c9b-7a249a9b6959",
"optionType": "DEFAULT",
"option": "United States",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "c346b4eb-b71e-4701-bce6-8e9d78ca38f8",
"responseCount": None,
"group": 1,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "6404cd2c-fedd-4847-907c-e3ca96c48f86",
"optionType": "DEFAULT",
"option": "Derogations",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "17fe032b-96fe-4aee-b598-4af6b681954e",
"responseCount": None,
"group": 2,
"optionList": None
},
{
"comparisonOperator": "NOT_EQUAL_TO",
"logicalOperator": "OR",
"optionId": "81e5c256-cbf0-4c9f-bc80-187e284717df",
"optionType": "DEFAULT",
"option": "Yes",
"sectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"questionId": "fc0ad68e-dba5-4460-9d79-34f310e6e1af",
"responseCount": None,
"group": 3,
"optionList": None
}
]
}
]
}
],
"parentChildQuestionIds": {
"ad43751a-643b-423f-b0c5-90505d2d8adf": [
"662282e9-4a04-462b-9751-77d8fe231f3d",
"17fe032b-96fe-4aee-b598-4af6b681954e",
"ecdbab18-bc8c-46a1-81b8-96a954e8869b",
"1fa545b5-8c52-4031-8690-55aebf273045"
]
},
"actions": [
{
"conditionGroups": [
{
"sectionId": None,
"questionId": None,
"conditions": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "52923d50-2211-49cf-917e-0dc953a17056",
"logicalOperator": "OR",
"comparisonOperator": "EQUAL_TO",
"optionId": None,
"optionType": "DEFAULT",
"responseCount": None,
"option": None,
"optionList": [
{
"optionId": "40225878-2a7c-4e81-9b1f-e57f5b145137",
"option": "Weak",
"optionType": "DEFAULT"
}
],
"dataElements": None,
"dataCategories": None,
"dataSubjects": None
}
],
"logicalOperator": "OR"
},
{
"sectionId": None,
"questionId": None,
"conditions": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "52923d50-2211-49cf-917e-0dc953a17056",
"logicalOperator": "OR",
"comparisonOperator": "EQUAL_TO",
"optionId": None,
"optionType": "DEFAULT",
"responseCount": None,
"option": None,
"optionList": [
{
"optionId": "ab31a9ba-6e42-456d-8215-10ce5aa0c15f",
"option": "NotSure",
"optionType": "NOT_SURE"
}
],
"dataElements": None,
"dataCategories": None,
"dataSubjects": None
}
],
"logicalOperator": "OR"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 4,
"description": None,
"recommendation": None,
"probabilityLevel": "VeryHigh",
"impactLevel": "VeryHigh",
"probabilityLevelId": 4,
"impactLevelId": 4,
"riskScore": 8,
"name": None,
"categories": [],
"controls": None,
"customControls": None,
"riskApprovers": [],
"riskOwners": [],
"threat": None,
"vulnerabilities": None,
"riskOwnerType": None,
"riskApproverType": None,
"riskTemplate": None,
"targetRiskLevel": None,
"attributeValues": {},
"deadlineAfterDays": None,
"reminder": None,
"inventoryTypeAndFieldNameMapForApproverSource": None,
"inventoryTypeAndFieldNameMapForOwnerSource": None
},
"conditionGroupType": "QUESTION_CONDITION",
"actionDetails": [
{
"id": "d5a19c26-78c1-4a81-a334-3c05b31fd862",
"actionRuleId": "88ad1f8a-7561-417f-8a9d-7f9aa0a1f183",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "52923d50-2211-49cf-917e-0dc953a17056"
}
],
"id": "88ad1f8a-7561-417f-8a9d-7f9aa0a1f183",
"sequence": 6,
"rootVersionId": "6b089d47-a881-4e20-b06d-a821a04776e4",
"name": "Third Country - Rule of Law - Weak ",
"active": True
},
{
"conditionGroups": [
{
"sectionId": None,
"questionId": None,
"conditions": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "52923d50-2211-49cf-917e-0dc953a17056",
"logicalOperator": "OR",
"comparisonOperator": "EQUAL_TO",
"optionId": None,
"optionType": "DEFAULT",
"responseCount": None,
"option": None,
"optionList": [
{
"optionId": "71cadb05-bc52-4a08-9e26-2c30c618218b",
"option": "Average",
"optionType": "DEFAULT"
}
],
"dataElements": None,
"dataCategories": None,
"dataSubjects": None
}
],
"logicalOperator": "OR"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 3,
"description": None,
"recommendation": None,
"probabilityLevel": "High",
"impactLevel": "Medium",
"probabilityLevelId": 3,
"impactLevelId": 2,
"riskScore": 5,
"name": None,
"categories": [],
"controls": None,
"customControls": None,
"riskApprovers": [],
"riskOwners": [],
"threat": None,
"vulnerabilities": None,
"riskOwnerType": None,
"riskApproverType": None,
"riskTemplate": None,
"targetRiskLevel": None,
"attributeValues": {},
"deadlineAfterDays": None,
"reminder": None,
"inventoryTypeAndFieldNameMapForApproverSource": None,
"inventoryTypeAndFieldNameMapForOwnerSource": None
},
"conditionGroupType": "QUESTION_CONDITION",
"actionDetails": [
{
"id": "c4f3cff1-514c-42ab-aab7-fd6b263fc753",
"actionRuleId": "131bf94b-43bf-4974-a7ce-f920c50f0ea9",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "52923d50-2211-49cf-917e-0dc953a17056"
}
],
"id": "131bf94b-43bf-4974-a7ce-f920c50f0ea9",
"sequence": 7,
"rootVersionId": "70a1635c-e7bd-4532-8ce7-4159b6c1aec3",
"name": "Third Country - Rule of Law - Average ",
"active": True
},
{
"conditionGroups": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "52923d50-2211-49cf-917e-0dc953a17056",
"conditions": [
{
"sectionId": None,
"questionId": None,
"logicalOperator": "OR",
"comparisonOperator": "EQUAL_TO",
"optionId": "71cadb05-bc52-4a08-9e26-2c30c618218b",
"optionType": "DEFAULT",
"responseCount": None,
"option": "Average",
"optionList": None,
"dataElements": None,
"dataCategories": None,
"dataSubjects": None
}
],
"logicalOperator": "OR"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 1,
"description": None,
"recommendation": None,
"probabilityLevel": "Low",
"impactLevel": "Low",
"probabilityLevelId": 1,
"impactLevelId": 1,
"riskScore": 2,
"name": None,
"categories": [],
"controls": None,
"customControls": None,
"riskApprovers": [],
"riskOwners": [],
"threat": None,
"vulnerabilities": None,
"riskOwnerType": None,
"riskApproverType": None,
"riskTemplate": None,
"targetRiskLevel": None,
"attributeValues": {},
"deadlineAfterDays": None,
"reminder": None,
"inventoryTypeAndFieldNameMapForApproverSource": None,
"inventoryTypeAndFieldNameMapForOwnerSource": None
},
"conditionGroupType": "QUESTION_RESPONSE",
"actionDetails": [
{
"id": "94d3c998-06b9-4720-91cb-7f925589b09e",
"actionRuleId": "6395832e-f4ff-4b23-bf86-3902c1d1b235",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "52923d50-2211-49cf-917e-0dc953a17056"
}
],
"id": "6395832e-f4ff-4b23-bf86-3902c1d1b235",
"sequence": 8,
"rootVersionId": "2efc149c-1d25-48ab-83fc-f1f9d6773f6b",
"name": "Third Country - Rule of Law - Strong",
"active": True
},
{
"conditionGroups": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "a3edeb53-07bc-4ff0-98d5-d9e522d15b10",
"conditions": [
{
"sectionId": None,
"questionId": None,
"logicalOperator": "OR",
"comparisonOperator": "EQUAL_TO",
"optionId": "481766a2-ef26-4523-8313-aa396b22f00a",
"optionType": "DEFAULT",
"responseCount": None,
"option": "Weak",
"optionList": None,
"dataElements": None,
"dataCategories": None,
"dataSubjects": None
}
],
"logicalOperator": "OR"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "a3edeb53-07bc-4ff0-98d5-d9e522d15b10",
"conditions": [
{
"sectionId": None,
"questionId": None,
"logicalOperator": "OR",
"comparisonOperator": "EQUAL_TO",
"optionId": "72b76ac3-64d4-4cea-9658-7ce3fac05bfd",
"optionType": "NOT_SURE",
"responseCount": None,
"option": "NotSure",
"optionList": None,
"dataElements": None,
"dataCategories": None,
"dataSubjects": None
}
],
"logicalOperator": "OR"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 4,
"description": None,
"recommendation": None,
"probabilityLevel": "VeryHigh",
"impactLevel": "VeryHigh",
"probabilityLevelId": 4,
"impactLevelId": 4,
"riskScore": 8,
"name": None,
"categories": [],
"controls": None,
"customControls": None,
"riskApprovers": [],
"riskOwners": [],
"threat": None,
"vulnerabilities": None,
"riskOwnerType": None,
"riskApproverType": None,
"riskTemplate": None,
"targetRiskLevel": None,
"attributeValues": {},
"deadlineAfterDays": None,
"reminder": None,
"inventoryTypeAndFieldNameMapForApproverSource": None,
"inventoryTypeAndFieldNameMapForOwnerSource": None
},
"conditionGroupType": "QUESTION_RESPONSE",
"actionDetails": [
{
"id": "4998e8ec-e081-44fd-8d65-a2f3dc352fa7",
"actionRuleId": "e6644c06-d76a-4eeb-bf08-49b60a414608",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "a3edeb53-07bc-4ff0-98d5-d9e522d15b10"
}
],
"id": "e6644c06-d76a-4eeb-bf08-49b60a414608",
"sequence": 9,
"rootVersionId": "aea7d91c-c5bc-4b02-af93-0061cc7402ef",
"name": "Third Country - Respect for human life - Weak ",
"active": True
},
{
"conditionGroups": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "a3edeb53-07bc-4ff0-98d5-d9e522d15b10",
"conditions": [
{
"sectionId": None,
"questionId": None,
"logicalOperator": "OR",
"comparisonOperator": "EQUAL_TO",
"optionId": "2e8aaac7-0786-4c3a-bdd1-cd722de8377c",
"optionType": "DEFAULT",
"responseCount": None,
"option": "Average",
"optionList": None,
"dataElements": None,
"dataCategories": None,
"dataSubjects": None
}
],
"logicalOperator": "OR"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 3,
"description": None,
"recommendation": None,
"probabilityLevel": "High",
"impactLevel": "Medium",
"probabilityLevelId": 3,
"impactLevelId": 2,
"riskScore": 5,
"name": None,
"categories": [],
"controls": None,
"customControls": None,
"riskApprovers": [],
"riskOwners": [],
"threat": None,
"vulnerabilities": None,
"riskOwnerType": None,
"riskApproverType": None,
"riskTemplate": None,
"targetRiskLevel": None,
"attributeValues": {},
"deadlineAfterDays": None,
"reminder": None,
"inventoryTypeAndFieldNameMapForApproverSource": None,
"inventoryTypeAndFieldNameMapForOwnerSource": None
},
"conditionGroupType": "QUESTION_RESPONSE",
"actionDetails": [
{
"id": "21ce7cd6-0304-419f-a9ee-6296d6f99f75",
"actionRuleId": "0fb1f256-68c7-44d3-9b5c-0f33c36a0d08",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "a3edeb53-07bc-4ff0-98d5-d9e522d15b10"
}
],
"id": "0fb1f256-68c7-44d3-9b5c-0f33c36a0d08",
"sequence": 10,
"rootVersionId": "c008366a-054e-4c95-aef6-e357eba2cff9",
"name": "Third Country - Respect for human life - Average ",
"active": True
},
{
"conditionGroups": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "a3edeb53-07bc-4ff0-98d5-d9e522d15b10",
"conditions": [
{
"sectionId": None,
"questionId": None,
"logicalOperator": "OR",
"comparisonOperator": "EQUAL_TO",
"optionId": "5e40333f-be01-473d-a722-fd299d258c22",
"optionType": "DEFAULT",
"responseCount": None,
"option": "Strong",
"optionList": None,
"dataElements": None,
"dataCategories": None,
"dataSubjects": None
}
],
"logicalOperator": "OR"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 1,
"description": None,
"recommendation": None,
"probabilityLevel": "Low",
"impactLevel": "Low",
"probabilityLevelId": 1,
"impactLevelId": 1,
"riskScore": 2,
"name": None,
"categories": [],
"controls": None,
"customControls": None,
"riskApprovers": [],
"riskOwners": [],
"threat": None,
"vulnerabilities": None,
"riskOwnerType": None,
"riskApproverType": None,
"riskTemplate": None,
"targetRiskLevel": None,
"attributeValues": {},
"deadlineAfterDays": None,
"reminder": None,
"inventoryTypeAndFieldNameMapForApproverSource": None,
"inventoryTypeAndFieldNameMapForOwnerSource": None
},
"conditionGroupType": "QUESTION_RESPONSE",
"actionDetails": [
{
"id": "097b6116-659e-47fd-9618-bdd6d1c4041f",
"actionRuleId": "875c555e-667f-4791-a908-4831e4b78684",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "a3edeb53-07bc-4ff0-98d5-d9e522d15b10"
}
],
"id": "875c555e-667f-4791-a908-4831e4b78684",
"sequence": 11,
"rootVersionId": "5f0ca0a1-1ad2-455b-8b5a-7d16df61d9e4",
"name": "Third Country - Respect for human life - Strong ",
"active": True
},
{
"conditionGroups": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "c65a9cde-8556-4a44-88dc-628932396361",
"conditions": [
{
"sectionId": None,
"questionId": None,
"logicalOperator": "OR",
"comparisonOperator": "EQUAL_TO",
"optionId": "68344b3d-fc68-40eb-8ece-21980b780389",
"optionType": "DEFAULT",
"responseCount": None,
"option": "Weak",
"optionList": None,
"dataElements": None,
"dataCategories": None,
"dataSubjects": None
}
],
"logicalOperator": "OR"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "c65a9cde-8556-4a44-88dc-628932396361",
"conditions": [
{
"sectionId": None,
"questionId": None,
"logicalOperator": "OR",
"comparisonOperator": "EQUAL_TO",
"optionId": "72f197fa-5019-4f9a-8601-8ef440f2a192",
"optionType": "NOT_SURE",
"responseCount": None,
"option": "NotSure",
"optionList": None,
"dataElements": None,
"dataCategories": None,
"dataSubjects": None
}
],
"logicalOperator": "OR"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 4,
"description": None,
"recommendation": None,
"probabilityLevel": "VeryHigh",
"impactLevel": "VeryHigh",
"probabilityLevelId": 4,
"impactLevelId": 4,
"riskScore": 8,
"name": None,
"categories": [],
"controls": None,
"customControls": None,
"riskApprovers": [],
"riskOwners": [],
"threat": None,
"vulnerabilities": None,
"riskOwnerType": None,
"riskApproverType": None,
"riskTemplate": None,
"targetRiskLevel": None,
"attributeValues": {},
"deadlineAfterDays": None,
"reminder": None,
"inventoryTypeAndFieldNameMapForApproverSource": None,
"inventoryTypeAndFieldNameMapForOwnerSource": None
},
"conditionGroupType": "QUESTION_RESPONSE",
"actionDetails": [
{
"id": "b148324d-1b93-4345-a30c-e974f57c18fa",
"actionRuleId": "28983494-01d2-43dc-9efb-bd9d0dcebc0f",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "c65a9cde-8556-4a44-88dc-628932396361"
}
],
"id": "28983494-01d2-43dc-9efb-bd9d0dcebc0f",
"sequence": 12,
"rootVersionId": "31f3ea92-9ec2-4145-b690-cf5c883fae33",
"name": "Third Country - Data protection concepts - Weak ",
"active": True
},
{
"conditionGroups": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "c65a9cde-8556-4a44-88dc-628932396361",
"conditions": [
{
"sectionId": None,
"questionId": None,
"logicalOperator": "OR",
"comparisonOperator": "EQUAL_TO",
"optionId": "60a6b9fc-e304-4ebc-bfe9-724a8724ea11",
"optionType": "DEFAULT",
"responseCount": None,
"option": "Average",
"optionList": None,
"dataElements": None,
"dataCategories": None,
"dataSubjects": None
}
],
"logicalOperator": "OR"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 3,
"description": None,
"recommendation": None,
"probabilityLevel": "High",
"impactLevel": "Medium",
"probabilityLevelId": 3,
"impactLevelId": 2,
"riskScore": 5,
"name": None,
"categories": [],
"controls": None,
"customControls": None,
"riskApprovers": [],
"riskOwners": [],
"threat": None,
"vulnerabilities": None,
"riskOwnerType": None,
"riskApproverType": None,
"riskTemplate": None,
"targetRiskLevel": None,
"attributeValues": {},
"deadlineAfterDays": None,
"reminder": None,
"inventoryTypeAndFieldNameMapForApproverSource": None,
"inventoryTypeAndFieldNameMapForOwnerSource": None
},
"conditionGroupType": "QUESTION_RESPONSE",
"actionDetails": [
{
"id": "d0eca5a6-6cb7-4ccb-ae74-5197e331e62d",
"actionRuleId": "5d18eab1-bbd0-406c-8dcc-131f4e5d727c",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "c65a9cde-8556-4a44-88dc-628932396361"
}
],
"id": "5d18eab1-bbd0-406c-8dcc-131f4e5d727c",
"sequence": 13,
"rootVersionId": "940ff7a3-5db9-4268-ac8c-76f7471a14e4",
"name": "Third Country - Data protection concepts - Average",
"active": True
},
{
"conditionGroups": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "c65a9cde-8556-4a44-88dc-628932396361",
"conditions": [
{
"sectionId": None,
"questionId": None,
"logicalOperator": "OR",
"comparisonOperator": "EQUAL_TO",
"optionId": "60a6b9fc-e304-4ebc-bfe9-724a8724ea11",
"optionType": "DEFAULT",
"responseCount": None,
"option": "Average",
"optionList": None,
"dataElements": None,
"dataCategories": None,
"dataSubjects": None
}
],
"logicalOperator": "OR"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 1,
"description": None,
"recommendation": None,
"probabilityLevel": "Low",
"impactLevel": "Low",
"probabilityLevelId": 1,
"impactLevelId": 1,
"riskScore": 2,
"name": None,
"categories": [],
"controls": None,
"customControls": None,
"riskApprovers": [],
"riskOwners": [],
"threat": None,
"vulnerabilities": None,
"riskOwnerType": None,
"riskApproverType": None,
"riskTemplate": None,
"targetRiskLevel": None,
"attributeValues": {},
"deadlineAfterDays": None,
"reminder": None,
"inventoryTypeAndFieldNameMapForApproverSource": None,
"inventoryTypeAndFieldNameMapForOwnerSource": None
},
"conditionGroupType": "QUESTION_RESPONSE",
"actionDetails": [
{
"id": "aa124ccf-ac07-4add-9e5a-7290c91bfdad",
"actionRuleId": "3bd74717-d6b7-426b-bc88-1d9dff5ad32a",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "c65a9cde-8556-4a44-88dc-628932396361"
}
],
"id": "3bd74717-d6b7-426b-bc88-1d9dff5ad32a",
"sequence": 14,
"rootVersionId": "a9b968ad-02e4-4e68-af80-e532f6a20bf6",
"name": "Third Country - Data protection concepts - Strong ",
"active": True
},
{
"conditionGroups": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "e1b2cbca-8054-4ffa-8284-a3f92075479b",
"conditions": [
{
"sectionId": None,
"questionId": None,
"logicalOperator": "AND",
"comparisonOperator": "EQUAL_TO",
"optionId": "fa57f4e2-2ccb-404d-acd3-9671310f08d7",
"optionType": "DEFAULT",
"responseCount": None,
"option": "No",
"optionList": None,
"dataElements": None,
"dataCategories": None,
"dataSubjects": None
}
],
"logicalOperator": "AND"
},
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "e1b2cbca-8054-4ffa-8284-a3f92075479b",
"conditions": [
{
"sectionId": None,
"questionId": None,
"logicalOperator": "AND",
"comparisonOperator": "EQUAL_TO",
"optionId": "f789cd9f-15f3-426b-a0a2-092c1524f50a",
"optionType": "NOT_SURE",
"responseCount": None,
"option": "NotSure",
"optionList": None,
"dataElements": None,
"dataCategories": None,
"dataSubjects": None
}
],
"logicalOperator": "AND"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 4,
"description": None,
"recommendation": None,
"probabilityLevel": "VeryHigh",
"impactLevel": "VeryHigh",
"probabilityLevelId": 4,
"impactLevelId": 4,
"riskScore": 8,
"name": None,
"categories": [],
"controls": None,
"customControls": None,
"riskApprovers": [],
"riskOwners": [],
"threat": None,
"vulnerabilities": None,
"riskOwnerType": None,
"riskApproverType": None,
"riskTemplate": None,
"targetRiskLevel": None,
"attributeValues": {},
"deadlineAfterDays": None,
"reminder": None,
"inventoryTypeAndFieldNameMapForApproverSource": None,
"inventoryTypeAndFieldNameMapForOwnerSource": None
},
"conditionGroupType": "QUESTION_RESPONSE",
"actionDetails": [
{
"id": "0cdceb46-4c68-4012-8ff6-838d13c52841",
"actionRuleId": "8b492e04-70be-4685-84a1-3e7ac66d8a9a",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "e1b2cbca-8054-4ffa-8284-a3f92075479b"
}
],
"id": "8b492e04-70be-4685-84a1-3e7ac66d8a9a",
"sequence": 15,
"rootVersionId": "388609a2-d44d-4a09-a261-b8b1db2f12a2",
"name": "Third Country - Independent authority - No ",
"active": True
},
{
"conditionGroups": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "e1b2cbca-8054-4ffa-8284-a3f92075479b",
"conditions": [
{
"sectionId": None,
"questionId": None,
"logicalOperator": "AND",
"comparisonOperator": "EQUAL_TO",
"optionId": "95b66494-cc59-467d-aa6c-4c28dcd4575c",
"optionType": "DEFAULT",
"responseCount": None,
"option": "Yes",
"optionList": None,
"dataElements": None,
"dataCategories": None,
"dataSubjects": None
}
],
"logicalOperator": "AND"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 1,
"description": None,
"recommendation": None,
"probabilityLevel": "Low",
"impactLevel": "Low",
"probabilityLevelId": 1,
"impactLevelId": 1,
"riskScore": 2,
"name": None,
"categories": [],
"controls": None,
"customControls": None,
"riskApprovers": [],
"riskOwners": [],
"threat": None,
"vulnerabilities": None,
"riskOwnerType": None,
"riskApproverType": None,
"riskTemplate": None,
"targetRiskLevel": None,
"attributeValues": {},
"deadlineAfterDays": None,
"reminder": None,
"inventoryTypeAndFieldNameMapForApproverSource": None,
"inventoryTypeAndFieldNameMapForOwnerSource": None
},
"conditionGroupType": "QUESTION_RESPONSE",
"actionDetails": [
{
"id": "7ec2fd26-e040-4a75-9df1-aee9a61d5e58",
"actionRuleId": "3d77c583-bbf0-4789-8ed9-04f0170e9099",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "e1b2cbca-8054-4ffa-8284-a3f92075479b"
}
],
"id": "3d77c583-bbf0-4789-8ed9-04f0170e9099",
"sequence": 16,
"rootVersionId": "cd41a9d6-932a-4c1f-abb3-4ae4c57fe702",
"name": "Third Country - Independent authority - Yes",
"active": True
},
{
"conditionGroups": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "7b6c2be0-a184-469b-980c-f3cbf1653ae8",
"conditions": [
{
"sectionId": None,
"questionId": None,
"logicalOperator": "AND",
"comparisonOperator": "EQUAL_TO",
"optionId": "41b1ffd3-5899-40c6-98db-da24b393bfa1",
"optionType": "DEFAULT",
"responseCount": None,
"option": "No",
"optionList": None,
"dataElements": None,
"dataCategories": None,
"dataSubjects": None
}
],
"logicalOperator": "AND"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 4,
"description": None,
"recommendation": None,
"probabilityLevel": "VeryHigh",
"impactLevel": "VeryHigh",
"probabilityLevelId": 4,
"impactLevelId": 4,
"riskScore": 8,
"name": None,
"categories": [],
"controls": None,
"customControls": None,
"riskApprovers": [],
"riskOwners": [],
"threat": None,
"vulnerabilities": None,
"riskOwnerType": None,
"riskApproverType": None,
"riskTemplate": None,
"targetRiskLevel": None,
"attributeValues": {},
"deadlineAfterDays": None,
"reminder": None,
"inventoryTypeAndFieldNameMapForApproverSource": None,
"inventoryTypeAndFieldNameMapForOwnerSource": None
},
"conditionGroupType": "QUESTION_RESPONSE",
"actionDetails": [
{
"id": "fe967666-e7a7-466e-b1f0-52dff43abce0",
"actionRuleId": "9701060c-321a-4b35-afaf-73eab6360007",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "7b6c2be0-a184-469b-980c-f3cbf1653ae8"
}
],
"id": "9701060c-321a-4b35-afaf-73eab6360007",
"sequence": 17,
"rootVersionId": "89f06c9e-677a-46f2-bef9-97081315a8d7",
"name": "Third Country - International commitments - No ",
"active": True
},
{
"conditionGroups": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "7b6c2be0-a184-469b-980c-f3cbf1653ae8",
"conditions": [
{
"sectionId": None,
"questionId": None,
"logicalOperator": "AND",
"comparisonOperator": "EQUAL_TO",
"optionId": "a96e6bf6-6a3a-453b-9ed0-74f9c43c8c9e",
"optionType": "DEFAULT",
"responseCount": None,
"option": "Yes",
"optionList": None,
"dataElements": None,
"dataCategories": None,
"dataSubjects": None
}
],
"logicalOperator": "AND"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 1,
"description": None,
"recommendation": None,
"probabilityLevel": "Low",
"impactLevel": "Low",
"probabilityLevelId": 1,
"impactLevelId": 1,
"riskScore": 2,
"name": None,
"categories": [],
"controls": None,
"customControls": None,
"riskApprovers": [],
"riskOwners": [],
"threat": None,
"vulnerabilities": None,
"riskOwnerType": None,
"riskApproverType": None,
"riskTemplate": None,
"targetRiskLevel": None,
"attributeValues": {},
"deadlineAfterDays": None,
"reminder": None,
"inventoryTypeAndFieldNameMapForApproverSource": None,
"inventoryTypeAndFieldNameMapForOwnerSource": None
},
"conditionGroupType": "QUESTION_RESPONSE",
"actionDetails": [
{
"id": "67d2c589-1658-48a4-8b3a-331dc0b2f0c0",
"actionRuleId": "8d85124e-f2b8-4c38-8327-9f0dc8027572",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "7b6c2be0-a184-469b-980c-f3cbf1653ae8"
}
],
"id": "8d85124e-f2b8-4c38-8327-9f0dc8027572",
"sequence": 18,
"rootVersionId": "e160e03e-ca16-430e-8eeb-62667bc1fa94",
"name": "Third Country - International commitments - Yes",
"active": True
},
{
"conditionGroups": [
{
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "ccb9373b-7ff0-4651-956c-9de1709254bf",
"conditions": [
{
"sectionId": None,
"questionId": None,
"logicalOperator": "AND",
"comparisonOperator": "NOT_EQUAL_TO",
"optionId": "fdb288bd-1d21-44dc-87db-ebd5d2ef029e",
"optionType": "DEFAULT",
"responseCount": None,
"option": "Yes",
"optionList": None,
"dataElements": None,
"dataCategories": None,
"dataSubjects": None
}
],
"logicalOperator": "AND"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 4,
"description": "Lack of essential equivalence ",
"recommendation": "You should carefully decide whether or not to proceed with the transfer and/or apply supplementary measures ",
"probabilityLevel": "VeryHigh",
"impactLevel": "VeryHigh",
"probabilityLevelId": 4,
"impactLevelId": 4,
"riskScore": 8,
"name": None,
"categories": [],
"controls": None,
"customControls": None,
"riskApprovers": [],
"riskOwners": [],
"threat": None,
"vulnerabilities": None,
"riskOwnerType": None,
"riskApproverType": None,
"riskTemplate": None,
"targetRiskLevel": None,
"attributeValues": {},
"deadlineAfterDays": None,
"reminder": None,
"inventoryTypeAndFieldNameMapForApproverSource": None,
"inventoryTypeAndFieldNameMapForOwnerSource": None
},
"conditionGroupType": "QUESTION_RESPONSE",
"actionDetails": [
{
"id": "32e54251-6a2c-42fa-8169-92c662b62e3b",
"actionRuleId": "5d93edb8-5fc4-4c9d-832f-7f79b1904087",
"sectionId": "671ac1af-f16b-4096-81c4-9ce47355b8e0",
"questionId": "ccb9373b-7ff0-4651-956c-9de1709254bf"
}
],
"id": "5d93edb8-5fc4-4c9d-832f-7f79b1904087",
"sequence": 19,
"rootVersionId": "e51bf639-f50c-4820-bc2e-a38fef849349",
"name": "Third Country - Essential Equivalence",
"active": True
},
{
"conditionGroups": [
{
"sectionId": "c1a12c92-8acd-42de-a6c3-7f43cc76f85a",
"questionId": "a089af6d-0f7c-48fa-9aec-8aab693204b3",
"conditions": [
{
"sectionId": None,
"questionId": None,
"logicalOperator": "AND",
"comparisonOperator": "NOT_EQUAL_TO",
"optionId": "832f28d6-5969-4a8e-aa85-b4842c7cd6ed",
"optionType": "DEFAULT",
"responseCount": None,
"option": "Yes",
"optionList": None,
"dataElements": None,
"dataCategories": None,
"dataSubjects": None
}
],
"logicalOperator": "AND"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 4,
"description": "Having a re-evaluation procedure is necessary to make sure that all new developments in the target countries are accounted for",
"recommendation": "Have a procedure in place to regularly re-assess countries and/or flag new developments ",
"probabilityLevel": "VeryHigh",
"impactLevel": "VeryHigh",
"probabilityLevelId": 4,
"impactLevelId": 4,
"riskScore": 8,
"name": None,
"categories": [],
"controls": None,
"customControls": None,
"riskApprovers": [],
"riskOwners": [],
"threat": None,
"vulnerabilities": None,
"riskOwnerType": None,
"riskApproverType": None,
"riskTemplate": None,
"targetRiskLevel": None,
"attributeValues": {},
"deadlineAfterDays": None,
"reminder": None,
"inventoryTypeAndFieldNameMapForApproverSource": None,
"inventoryTypeAndFieldNameMapForOwnerSource": None
},
"conditionGroupType": "QUESTION_RESPONSE",
"actionDetails": [
{
"id": "df066042-572e-471a-863c-c50b09806424",
"actionRuleId": "fa4cb654-78b3-45e2-9d94-ff63100aa9f6",
"sectionId": "c1a12c92-8acd-42de-a6c3-7f43cc76f85a",
"questionId": "a089af6d-0f7c-48fa-9aec-8aab693204b3"
}
],
"id": "fa4cb654-78b3-45e2-9d94-ff63100aa9f6",
"sequence": 34,
"rootVersionId": "bd647881-17e0-4a0c-9df4-eaaf57483cdf",
"name": "Re-evaluation procedure ",
"active": True
},
{
"conditionGroups": [
{
"sectionId": None,
"questionId": None,
"conditions": [
{
"sectionId": "c1a12c92-8acd-42de-a6c3-7f43cc76f85a",
"questionId": "54c22bcd-a459-4b2a-bb77-bef138441b3d",
"logicalOperator": "AND",
"comparisonOperator": "NOT_EQUAL_TO",
"optionId": None,
"optionType": "DEFAULT",
"responseCount": None,
"option": None,
"optionList": [
{
"optionId": "ba68331e-628d-411d-8960-3b373fe2a6ed",
"option": "Yes",
"optionType": "DEFAULT"
}
],
"dataElements": None,
"dataCategories": None,
"dataSubjects": None
}
],
"logicalOperator": "AND"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 4,
"description": "Having a procedure to suspend transfers is necessary to reduce risks ",
"recommendation": "Have a procedure in place to suspend risky transfers, for example through contractual or technical measures ",
"probabilityLevel": "VeryHigh",
"impactLevel": "VeryHigh",
"probabilityLevelId": 4,
"impactLevelId": 4,
"riskScore": 8,
"name": None,
"categories": [],
"controls": None,
"customControls": None,
"riskApprovers": [],
"riskOwners": [],
"threat": None,
"vulnerabilities": None,
"riskOwnerType": None,
"riskApproverType": None,
"riskTemplate": None,
"targetRiskLevel": None,
"attributeValues": {},
"deadlineAfterDays": None,
"reminder": None,
"inventoryTypeAndFieldNameMapForApproverSource": None,
"inventoryTypeAndFieldNameMapForOwnerSource": None
},
"conditionGroupType": "QUESTION_CONDITION",
"actionDetails": [
{
"id": "031c8bfe-255f-46ad-b566-c26b4d2884e5",
"actionRuleId": "a0aa48ed-6af6-46c2-9dab-ffc59d31c484",
"sectionId": "c1a12c92-8acd-42de-a6c3-7f43cc76f85a",
"questionId": "54c22bcd-a459-4b2a-bb77-bef138441b3d"
}
],
"id": "a0aa48ed-6af6-46c2-9dab-ffc59d31c484",
"sequence": 35,
"rootVersionId": "d4d8eddf-f649-49e0-8c7d-10a98365f64c",
"name": "Data transfers - Suspension",
"active": True
},
{
"conditionGroups": [
{
"sectionId": None,
"questionId": None,
"conditions": [
{
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "c03ea6b5-fa68-4e84-a071-cba7b6f14e69",
"logicalOperator": "OR",
"comparisonOperator": "EQUAL_TO",
"optionId": None,
"optionType": "DEFAULT",
"responseCount": None,
"option": None,
"optionList": [
{
"optionId": "c5006f6d-b294-4e5b-a02f-071e5b8e0df4",
"option": "Yes",
"optionType": "DEFAULT"
}
],
"dataElements": None,
"dataCategories": None,
"dataSubjects": None
}
],
"logicalOperator": "AND"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 4,
"description": "Making data in clear available to a data importer in a third-country creates a high risk for the data subjects. ",
"recommendation": "Adopt measures to pseudonymise, encrypt or protect information. ",
"probabilityLevel": "VeryHigh",
"impactLevel": "VeryHigh",
"probabilityLevelId": 4,
"impactLevelId": 4,
"riskScore": 8,
"name": None,
"categories": [
{
"id": "c402b042-8292-461f-953b-082307a57004"
}
],
"controls": [
{
"id": "69201f20-c2c7-465f-91ef-3d0d5e24ce4b",
"identifier": "1.1.1",
"name": "The personal data is processed using strong encryption before transmission. [Use Case 1: Data storage for backup and other purposes that do not require access to data in the clear]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "747f0a51-8858-41cd-8201-406d28a92000",
"identifier": "1.1.4",
"name": "The encryption algorithm is flawlessly implemented by properly maintained software the conformity of which to the specification of the algorithm chosen has been verified. [Use Case 1: Data storage for backup and other purposes that do not require access to data in the clear]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "30f6a8d4-8ad2-43d9-9198-70a05729d7a6",
"identifier": "1.1.5",
"name": "The keys are reliably managed. [Use Case 1: Data storage for backup and other purposes that do not require access to data in the clear]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "b6c5e4ae-778a-4a5b-9b75-7440d625d69d",
"identifier": "1.1.6",
"name": "The keys are retained solely under the control of the data exporter, or other entities entrusted with this task which reside in the EEA or other jurisdiction in accordance with Article 45. [Use Case 1: Data storage for backup and other purposes that do not require access to data in the clear]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "b2d93439-4b1f-4fdb-909c-aa36081af800",
"identifier": "1.1.2",
"name": "The encryption algorithm and its parameterization conform to the state-of-the-art and can be considered robust against cryptanalysis performed by the public authorities in the recipient country. [Use Case 1: Data storage for backup and other purposes that do not require access to data in the clear]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "4b00ad2e-e1d3-4c81-be08-f4788064ce63",
"identifier": "1.1.3",
"name": "The strength of the encryption takes into account the specific time period during which the confidentiality of the encrypted personal data must be preserved. [Use Case 1: Data storage for backup and other purposes that do not require access to data in the clear]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
}
],
"customControls": None,
"riskApprovers": [],
"riskOwners": [],
"threat": None,
"vulnerabilities": None,
"riskOwnerType": None,
"riskApproverType": None,
"riskTemplate": None,
"targetRiskLevel": None,
"attributeValues": {},
"deadlineAfterDays": None,
"reminder": None,
"inventoryTypeAndFieldNameMapForApproverSource": None,
"inventoryTypeAndFieldNameMapForOwnerSource": None
},
"conditionGroupType": "QUESTION_CONDITION",
"actionDetails": [
{
"id": "c0d812d6-5d43-484e-9b06-459316a4ed3d",
"actionRuleId": "15b759b9-fca3-44bf-a6fc-9a4c24379fcb",
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "c03ea6b5-fa68-4e84-a071-cba7b6f14e69"
}
],
"id": "15b759b9-fca3-44bf-a6fc-9a4c24379fcb",
"sequence": 36,
"rootVersionId": "b91c5409-cbc1-4995-9dab-b7515932b11c",
"name": "Access in clear - Yes ",
"active": True
},
{
"conditionGroups": [
{
"sectionId": None,
"questionId": None,
"conditions": [
{
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "c03ea6b5-fa68-4e84-a071-cba7b6f14e69",
"logicalOperator": "OR",
"comparisonOperator": "NOT_EQUAL_TO",
"optionId": None,
"optionType": "DEFAULT",
"responseCount": None,
"option": None,
"optionList": [
{
"optionId": "c5006f6d-b294-4e5b-a02f-071e5b8e0df4",
"option": "Yes",
"optionType": "DEFAULT"
}
],
"dataElements": None,
"dataCategories": None,
"dataSubjects": None
}
],
"logicalOperator": "AND"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": None,
"description": "Using proper encryption measures provides an effective supplementary measure. (EDPB 01/2020, Use Case 1) ",
"recommendation": "Adopt proper encryption controls ",
"probabilityLevel": None,
"impactLevel": None,
"probabilityLevelId": None,
"impactLevelId": None,
"riskScore": None,
"name": None,
"categories": [],
"controls": [
{
"id": "69201f20-c2c7-465f-91ef-3d0d5e24ce4b",
"identifier": "1.1.1",
"name": "The personal data is processed using strong encryption before transmission. [Use Case 1: Data storage for backup and other purposes that do not require access to data in the clear]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "747f0a51-8858-41cd-8201-406d28a92000",
"identifier": "1.1.4",
"name": "The encryption algorithm is flawlessly implemented by properly maintained software the conformity of which to the specification of the algorithm chosen has been verified. [Use Case 1: Data storage for backup and other purposes that do not require access to data in the clear]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "30f6a8d4-8ad2-43d9-9198-70a05729d7a6",
"identifier": "1.1.5",
"name": "The keys are reliably managed. [Use Case 1: Data storage for backup and other purposes that do not require access to data in the clear]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "b6c5e4ae-778a-4a5b-9b75-7440d625d69d",
"identifier": "1.1.6",
"name": "The keys are retained solely under the control of the data exporter, or other entities entrusted with this task which reside in the EEA or other jurisdiction in accordance with Article 45. [Use Case 1: Data storage for backup and other purposes that do not require access to data in the clear]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "b2d93439-4b1f-4fdb-909c-aa36081af800",
"identifier": "1.1.2",
"name": "The encryption algorithm and its parameterization conform to the state-of-the-art and can be considered robust against cryptanalysis performed by the public authorities in the recipient country. [Use Case 1: Data storage for backup and other purposes that do not require access to data in the clear]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "4b00ad2e-e1d3-4c81-be08-f4788064ce63",
"identifier": "1.1.3",
"name": "The strength of the encryption takes into account the specific time period during which the confidentiality of the encrypted personal data must be preserved. [Use Case 1: Data storage for backup and other purposes that do not require access to data in the clear]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
}
],
"customControls": None,
"riskApprovers": [],
"riskOwners": [],
"threat": None,
"vulnerabilities": None,
"riskOwnerType": None,
"riskApproverType": None,
"riskTemplate": None,
"targetRiskLevel": None,
"attributeValues": {},
"deadlineAfterDays": None,
"reminder": None,
"inventoryTypeAndFieldNameMapForApproverSource": None,
"inventoryTypeAndFieldNameMapForOwnerSource": None
},
"conditionGroupType": "QUESTION_CONDITION",
"actionDetails": [
{
"id": "2da99bee-7c8c-4f3f-bdef-6b13a3e9a79e",
"actionRuleId": "dc17a65e-ce0c-406c-b0ea-a5b77e3c734a",
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "c03ea6b5-fa68-4e84-a071-cba7b6f14e69"
}
],
"id": "dc17a65e-ce0c-406c-b0ea-a5b77e3c734a",
"sequence": 37,
"rootVersionId": "ff33c649-776e-40d4-8465-ba22a88815b8",
"name": "Access in clear - No ",
"active": True
},
{
"conditionGroups": [
{
"sectionId": None,
"questionId": None,
"conditions": [
{
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "06d8a19c-1710-4a75-b013-fd6c9d084d68",
"logicalOperator": "OR",
"comparisonOperator": "NOT_EQUAL_TO",
"optionId": None,
"optionType": "DEFAULT",
"responseCount": None,
"option": None,
"optionList": [
{
"optionId": "45b0f740-1481-410f-ad4b-6e92699a9bd2",
"option": "No",
"optionType": "DEFAULT"
}
],
"dataElements": None,
"dataCategories": None,
"dataSubjects": None
}
],
"logicalOperator": "AND"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 3,
"description": "Pseudonymization mght pose a risk for the data subjects, unless you adopt specific technical and organizational measures. ",
"recommendation": "Adopt specific technical and organizational measures in order to make pseudonymisation effective. ",
"probabilityLevel": "High",
"impactLevel": "High",
"probabilityLevelId": 3,
"impactLevelId": 3,
"riskScore": 6,
"name": None,
"categories": [
{
"id": "c402b042-8292-461f-953b-082307a57004"
}
],
"controls": [
{
"id": "c2311bff-fd55-400d-8718-044c35b9f07d",
"identifier": "1.2.1",
"name": "A data exporter transfers personal data processed in such a manner that the personal data can no longer be attributed to a specific data subject, nor be used to single out the data subject in a larger group, without the use of additional information. [Use Case 2: Transfer of pseudonymised Data]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "85b52e9c-7c37-482a-9516-31714cbf8978",
"identifier": "1.2.2",
"name": "Additional information is held exclusively by the data exporter and kept separately in a Member State or other jurisdiction in accordance with Article 45. [Use Case 2: Transfer of pseudonymised Data]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "48d19975-2d14-461a-b6b2-3a69856020e6",
"identifier": "1.2.5",
"name": "The controller has established that the pseudonymised personal data cannot be attributed to an identified or identifiable natural person even if cross-referenced with such information. [Use Case 2: Transfer of pseudonymised Data]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "637c8406-9d4c-41d3-9c2e-d6ac02126006",
"identifier": "1.2.3",
"name": "Disclosure or unauthorised use of that additional information is prevented by appropriate technical and organisational safeguards. [Use Case 2: Transfer of pseudonymised Data]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "06687014-4817-4e97-bc56-dfbc210a8c45",
"identifier": "1.2.4",
"name": "it is ensured that the data exporter retains sole control of the algorithm or repository that enables re-identification using the additional information. [Use Case 2: Transfer of pseudonymised Data]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
}
],
"customControls": None,
"riskApprovers": [],
"riskOwners": [],
"threat": None,
"vulnerabilities": None,
"riskOwnerType": None,
"riskApproverType": None,
"riskTemplate": None,
"targetRiskLevel": None,
"attributeValues": {},
"deadlineAfterDays": None,
"reminder": None,
"inventoryTypeAndFieldNameMapForApproverSource": None,
"inventoryTypeAndFieldNameMapForOwnerSource": None
},
"conditionGroupType": "QUESTION_CONDITION",
"actionDetails": [
{
"id": "c892433d-5408-4ce5-8bc6-fd66c4e8cb48",
"actionRuleId": "9163f921-d4b3-44b6-a854-c541c922be1b",
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "06d8a19c-1710-4a75-b013-fd6c9d084d68"
}
],
"id": "9163f921-d4b3-44b6-a854-c541c922be1b",
"sequence": 38,
"rootVersionId": "333dbd31-74c2-41b1-af9d-bcd0e16a4d40",
"name": "Pseudonymization ",
"active": True
},
{
"conditionGroups": [
{
"sectionId": None,
"questionId": None,
"conditions": [
{
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "024e01b5-2f91-44e3-a6e7-d530d211e06c",
"logicalOperator": "OR",
"comparisonOperator": "NOT_EQUAL_TO",
"optionId": None,
"optionType": "DEFAULT",
"responseCount": None,
"option": None,
"optionList": [
{
"optionId": "642e0c3f-4954-476e-9850-706fa2d4432d",
"option": "No",
"optionType": "DEFAULT"
}
],
"dataElements": None,
"dataCategories": None,
"dataSubjects": None
}
],
"logicalOperator": "AND"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 4,
"description": "Split or multi party processing may effectively safeguard a transfer, provided you apply specific controls.",
"recommendation": "Apply specific controls to ensure that split/multi party processing is effective. ",
"probabilityLevel": "VeryHigh",
"impactLevel": "VeryHigh",
"probabilityLevelId": 4,
"impactLevelId": 4,
"riskScore": 8,
"name": None,
"categories": [
{
"id": "c402b042-8292-461f-953b-082307a57004"
}
],
"controls": [
{
"id": "91e7fb3c-2643-490e-b246-25a3e398159e",
"identifier": "1.5.4",
"name": "The algorithm used for the shared computation is secure against active adversaries. [Use Case 5: Split or multi-party processing]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "b82fa4bb-9e85-4eb5-b600-3f44fcdba1aa",
"identifier": "1.5.3",
"name": "The processors optionally process the data jointly, e.g. using secure multi-party computation, in a way that no information is revealed to any of them that they do not possess prior to the computation. [Use Case 5: Split or multi-party processing]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "a9b1c50f-fb21-4916-9735-556b73382516",
"identifier": "1.5.6",
"name": "The controller has established that the pieces of personal data it transmits to the processors cannot be attributed to an identified or identifiable natural person even if cross-referenced with such information. [Use Case 5: Split or multi-party processing]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "0aa66946-ea59-421a-bee3-7b17a303631e",
"identifier": "1.5.2",
"name": "Each of the pieces is transferred to a separate processor located in a different jurisdiction. [Use Case 5: Split or multi-party processing]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "5d12fe7d-791b-4fb7-acb8-e23d7af290a3",
"identifier": "1.5.1",
"name": "A data exporter processes personal data in such a manner that it is split into two or more parts each of which can no longer be interpreted or attributed to a specific data subject without the use of additional information. [Use Case 5: Split or multi-party processing]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "ec8ba695-13ba-4750-ba76-e7365cc636c1",
"identifier": "1.5.5",
"name": "There is no evidence of collaboration between the public authorities located in the respective jurisdictions where each of the processors are located, which would allow them access to all sets of personal data held by the processors. [Use Case 5: Split or multi-party processing]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
}
],
"customControls": None,
"riskApprovers": [],
"riskOwners": [],
"threat": None,
"vulnerabilities": None,
"riskOwnerType": None,
"riskApproverType": None,
"riskTemplate": None,
"targetRiskLevel": None,
"attributeValues": {},
"deadlineAfterDays": None,
"reminder": None,
"inventoryTypeAndFieldNameMapForApproverSource": None,
"inventoryTypeAndFieldNameMapForOwnerSource": None
},
"conditionGroupType": "QUESTION_CONDITION",
"actionDetails": [
{
"id": "8e1433ae-b44d-423d-aff9-a1948d7d787c",
"actionRuleId": "7866c51b-1228-4ad5-a206-8e31bca6fbb4",
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "024e01b5-2f91-44e3-a6e7-d530d211e06c"
}
],
"id": "7866c51b-1228-4ad5-a206-8e31bca6fbb4",
"sequence": 41,
"rootVersionId": "3c81235d-6902-446c-88dd-eea99c162b4f",
"name": "Split or multi party processing",
"active": True
},
{
"conditionGroups": [
{
"sectionId": None,
"questionId": None,
"conditions": [
{
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "8859e842-ce09-49c5-98ca-f282de4a31e5",
"logicalOperator": "OR",
"comparisonOperator": "DOES_NOT_CONTAIN",
"optionId": None,
"optionType": "DEFAULT",
"responseCount": None,
"option": None,
"optionList": [
{
"optionId": "84c83cc2-3475-4f2b-a843-0dfec4467fe0",
"option": "In-Transit Encryption",
"optionType": "DEFAULT"
}
],
"dataElements": None,
"dataCategories": None,
"dataSubjects": None
}
],
"logicalOperator": "AND"
}
],
"action": "RISK_CREATION",
"actionParameters": {
"level": 3,
"description": "Data is not encrypted in transit. This might entail a risk for the data subjects, although it shall be evaluated in combination with other controls.",
"recommendation": "Consider adopting one or more risk controls to mitigate this issue.",
"probabilityLevel": "High",
"impactLevel": "Medium",
"probabilityLevelId": 3,
"impactLevelId": 2,
"riskScore": 5,
"name": None,
"categories": [],
"controls": [
{
"id": "2eff9371-e3dc-4ed5-b820-17501415c799",
"identifier": "1.3.3",
"name": "Decryption is only possible outside the third country in question. [Use Case 3: Encrypted data merely transiting third countries]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "ad045f19-3941-4214-8ea2-1affce189a5f",
"identifier": "1.3.9",
"name": "The encryption algorithm is flawlessly implemented by properly maintained software the conformity of which to the specification of the algorithm chosen has been verified, e.g., by certification. [Use Case 3: Encrypted data merely transiting third countries]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "b937173a-d0b1-4e35-8b3a-2d779d93dea5",
"identifier": "1.3.11",
"name": "The keys are reliably managed, by the exporter or by an entity trusted by the exporter under a jurisdiction offering an essentially equivalent level of protection. [Use Case 3: Encrypted data merely transiting third countries]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "a59a4ed2-2d0f-45b6-9050-3b8284ee0b19",
"identifier": "1.3.6",
"name": "In case the transport encryption does not provide appropriate security by itself, personal data is also encrypted end-to-end on the application layer using state-of-the-art encryption methods. [Use Case 3: Encrypted data merely transiting third countries]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "bce50fdf-c0b6-4347-93eb-564a8b550bd5",
"identifier": "1.3.4",
"name": "The parties involved in the communication agree on a trustworthy public-key certification authority or infrastructure. [Use Case 3: Encrypted data merely transiting third countries]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "c7b6a903-08b1-4cd7-bee2-83656610bcc1",
"identifier": "1.3.1",
"name": "A data exporter transfers personal data to a data importer in a jurisdiction ensuring adequate protection. [Use Case 3: Encrypted data merely transiting third countries]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "540db5a9-09da-4e5c-a2f1-a08598e45689",
"identifier": "1.3.7",
"name": "The encryption algorithm and its parameterization conform to the state-of-the-art and can be considered robust against cryptanalysis performed by the public authorities in the transiting country. [Use Case 3: Encrypted data merely transiting third countries]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "20e88098-ffb5-455f-a690-bab33cf4c909",
"identifier": "1.3.2",
"name": "It is ensured that the encryption protocols employed are state-of-the-art and provide effective protection against active and passive attacks with resources known to be available to the public authorities of the third country. [Use Case 3: Encrypted data merely transiting third countries]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
},
{
"id": "ea9f071a-2957-4e90-9a17-f43bc3dc09b3",
"identifier": "1.3.8",
"name": "The strength of the encryption takes into account the specific time period during which the confidentiality of the encrypted personal data must be preserved. [Use Case 3: Encrypted data merely transiting third countries]",
"frameworkName": "EDPB Examples of Supplementary Measures for GDPR Data Transfers to Third Countries (Recommendations 01/2020)"
}
],
"customControls": None,
"riskApprovers": [],
"riskOwners": [],
"threat": None,
"vulnerabilities": None,
"riskOwnerType": None,
"riskApproverType": None,
"riskTemplate": None,
"targetRiskLevel": None,
"attributeValues": {},
"deadlineAfterDays": None,
"reminder": None,
"inventoryTypeAndFieldNameMapForApproverSource": None,
"inventoryTypeAndFieldNameMapForOwnerSource": None
},
"conditionGroupType": "QUESTION_CONDITION",
"actionDetails": [
{
"id": "0cd98284-8342-4d04-90d1-9959e45596b6",
"actionRuleId": "75339ab6-cd4d-4b1e-b76e-b2ff433ad963",
"sectionId": "a7e15759-7464-4282-bdd6-49d825dd1224",
"questionId": "8859e842-ce09-49c5-98ca-f282de4a31e5"
}
],
"id": "75339ab6-cd4d-4b1e-b76e-b2ff433ad963",
"sequence": 42,
"rootVersionId": "9b1d8b48-0635-4c62-8d03-63b9bfcfc962",
"name": "In-transit Encryption",
"active": True
}
],
"settings": {
"prepopulateAttributeQuestions": True,
"gettingStartedBannerEnabled": False,
"locked": False,
"conditionType": "SHOW",
"customizeInstructionalMessage": False,
"instructionalMessage": None,
"optOutPrimaryRecordOnAssessmentLaunch": True,
"userRespondentDelegation": False,
"autoAssignPrimaryRecord": False,
"restrictDisplayOfRespondentUserList": False,
"allowMaturityScaleOnTemplate": False,
"allowedAccessOptions": None,
"enableScoreProfile": False
},
"inventoryRelationshipsByQuestionId": {
"ad43751a-643b-423f-b0c5-90505d2d8adf": [
{
"id": "06936e9c-5f9e-493b-8ccc-59b26f36705c",
"relationshipType": "RelatedLinkType",
"sourceInventorySectionId": "9d4ae73c-dac6-4b3f-bbbf-9a2fe895aaeb",
"sourceInventoryQuestionId": "ad43751a-643b-423f-b0c5-90505d2d8adf",
"destinationInventorySectionId": "ce0e1775-675d-4686-96e0-2a080a1b0ce3",
"destinationInventoryQuestionId": "4eac414a-5bd7-4900-ad57-7fe7bcaf7a1e"
}
]
},
"responseFilterByQuestionId": None,
"responseFilterWithBusinessKeysByQuestionId": {},
"businessKeyReference": None,
"seedReference": None,
"orgGroupId": "526ac23a-728c-4835-b979-776b0268b6f3",
"welcomeTitle": "Where would you like to begin?",
"frameworkTags": None,
"languageCode": "en-us",
"hasQuestionsWithLibraryLabels": None,
"scoreProfilesConfigured": False
}
})
response = requests.request("POST", url, headers=headers, data=payload)
print(response.text)
Step 3: Verify Successful Template Import
After receiving a 200 OK response from the Import Template API, navigate to PIA & DPIA Automation > Templates in the OneTrust application to validate that the GDPR - TIA template was added in Draft state. Once verified, perform thorough testing to ensure the template functions as intended.
{
"id": "a1da515e-601f-4102-ba30-587cf93f9fa4",
"rootVersionId": "a1da515e-601f-4102-ba30-587cf93f9fa4",
"templateVersion": 1,
"languageCode": "en-us"
}
Step 4: Monitor for Updates
As OneTrust continues to evolve, it's essential to monitor for updates and enhancements that might address the direct addition of the GDPR - TIA template within the application. This temporary solution serves as a stop-gap measure until a more integrated approach is available.