pia-review-cadence

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required runtime workflow includes “DPO office subscribes to regulatory update feeds (EDPB, national SAs, sector regulators)” and “Legal team notifies of regulatory changes and enforcement decisions,” which can ingest outsider-authored free text from external feeds/pages into the agent’s LLM context for triage/assessment.