C.11.3 Enhanced-control triggers (apply stricter controls)
-
Public-sector style engagements (or clients requiring public-sector standards), including transparency and accountability expectations for algorithmic systems.
-
Use of sensitive/restricted data or any workflow resembling profiling or high-impact recommendations/decisions.
-
Any persistent memory/vector store containing personal data, or any fine-tuning/training on private datasets.
-
Any action-taking agentic workflow or integrations that can alter records or trigger communications.