Resource

Privacy data-flow evidence for medical devices

Map where personal and sensitive data enters, transforms, leaves, and is retained. Tie each flow to explicit controls and verification methods.

Checklist

• Data inventory by workflow and actor.
• Purpose, retention, and minimization decisions.
• Control verification and residual-risk documentation.