---
title: "Build a privacy-law gap table against the principles that apply"
url: "https://ailawframework.com/practice/privacy-data-protection-and-cyber/build-a-privacy-law-gap-table-against-the-principles-that-apply"
type: "task"
site: "AI Law Framework"
id: "A25-T1-R1"
practice_area: "Privacy, Data Protection & Cyber"
tier: "yellow"
lawyer_review: "required"
last_reviewed: "2026-09-23"
---

# Build a privacy-law gap table against the principles that apply

> Map the client's described practices and policies to the privacy principles the lawyer has listed, and mark missing notices, security measures and retention rules.

Canonical page: https://ailawframework.com/practice/privacy-data-protection-and-cyber/build-a-privacy-law-gap-table-against-the-principles-that-apply  
Last reviewed: 2026-09-23

Site index for agents: https://ailawframework.com/llms.txt

## Key facts

| Fact | Value |
| --- | --- |
| Practice area | [Privacy, Data Protection & Cyber](https://ailawframework.com/practice/privacy-data-protection-and-cyber.md) |
| Human involvement | Yellow: Lawyer and AI draft together |
| How AI is used | Map the client's described practices and policies to the privacy principles the lawyer has listed, and mark missing notices, security measures and retention rules. |
| What the lawyer must review | Confirm whether the client is in scope of the statute Do not treat a template gap as a finding until the facts are verified |
| Written for / versions | 2 jurisdiction versions below |

## Checking plan

**Source-by-source verification**

Trace relied-on content to independent sources and check for relevant material the output has missed.

- What the AI does: Potential support includes preparing preliminary structure or wording and identifying points for review. Confirm the tool’s capability and permitted scope.
- What the lawyer does: Set the scope, verify the evidence, resolve exceptions and approve the final output for its intended use.
- Who reviews: Responsible lawyer with competence in the matter
- Basis: Suggested checking approach based on the task guidance. Complete the assessment for the actual tool, information and jurisdiction.
- Why: The plan reflects the described work and review requirements. Policy colours are not used to determine permission or checking.

## Checks the lawyer makes

1. Open each relied-on authority independently. Confirm its existence, current status, proposition and any quotation or pinpoint reference.
2. Confirm that the wording reflects the client’s instructions and contains no unintended admission, concession or commitment. Check the recipient and tone.
3. Confirm that the actual tool, feature and processing terms permit use of this information, including access, retention, training and disclosure conditions.
4. Verify the applicable jurisdiction and the version of each relevant law, rule or instrument in force at the material time.
5. Confirm the output against the client’s instructions and the complete relevant source material, including omissions or contradictions.
6. Resolve exceptions and record the responsible lawyer’s approval of the exact output and intended use.

## Notes

- Confirm the required checking with the responsible lawyer before work starts. The checking approach does not establish permission to use AI.

## Jurisdiction versions

| Jurisdiction | Level |
| --- | --- |
| [United States](https://ailawframework.com/practice/privacy-data-protection-and-cyber/build-a-privacy-law-gap-table-against-the-principles-that-apply/united-states.md) | Yellow |
| [New Zealand](https://ailawframework.com/practice/privacy-data-protection-and-cyber/build-a-privacy-law-gap-table-against-the-principles-that-apply/new-zealand.md) | Yellow |

*Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*