Data and Information Inventory and Attributes

Description — Whether instances of this Data and Information type are subject to data residency or cross-border transfer restrictions, and if so, which jurisdictions impose those restrictions.

Benefit(s) — Surfaces the data types that cannot be freely moved across national boundaries without compliance controls. Directly feeds the Integrations Inventory’s Cross-Border Data Flow attribute — any integration carrying a type with cross-border restrictions must be governed accordingly.

Source — Manual.

Examples — Yes — EU residents’ PII restricted from transfer to non-adequate third countries under GDPR; Yes — Chinese citizen data subject to PIPL localization requirements; No — no cross-border restrictions apply

Notes — When Cross-Border Restriction = Yes, the Cross-Border Transfer Mechanism attribute should be populated to document the legal basis for any permitted transfer.

Description — The legal mechanism under which cross-border transfers of this type are permitted, where Cross-Border Restriction = Yes.

Benefit(s) — Provides the documented legal basis for cross-border data transfer, which is required for regulatory defensibility in most jurisdictions that impose transfer restrictions.

Source — Manual.

Examples — Standard Contractual Clauses (SCCs) under GDPR; Binding Corporate Rules (BCRs); Adequacy Decision (EU-U.S. Data Privacy Framework); Explicit Consent; Not applicable (no restriction)

Notes — Leave empty when Cross-Border Restriction = No.