Jurisdictions

import { JURISDICTIONS, jurisdiction, resolve, knownJurisdictions, AS_OF } from 'ts-prorm-orm';

knownJurisdictions();          // ['EU', 'EU-AT', …, 'US-CA', …, 'TW']
jurisdiction('EU-FR');         // France: GDPR, consent age 15, …
resolve(['EU', 'UK', 'IN']);   // the strictest combination of the three
AS_OF;                         // the month the table was last checked against its sources

Unknown jurisdiction "EU-XX". Known: AE, AR, AU, BR, CA, CH, CN, EU, HK, …
Member states and provinces are written as EU-FR, CA-QC.

interface JurisdictionRule {
  code: string;                    // 'EU', 'US-CA', 'CA-QC'
  name: string;
  law: string[];                   // the instruments it is drawn from

  digitalConsentAge: number;       // below this a parent consents
  minimumAge?: number;             // below this the processing is not permitted at all (rare)

  requiresBasis: 'always' | 'special-only' | 'never';
  lawfulBases: LawfulBasis[];      // the bases this regime recognises
  specialCategories: PersonalCategory[];   // need a basis AND a purpose regardless
  prohibited: PersonalCategory[];  // may not be held without a statutory exemption

  retention: Partial<Record<PersonalCategory | 'default', Duration>>;   // ceilings, where the law states one
  rights: SubjectRight[];
  requestDeadlineDays?: number;
  breachNotificationHours?: number;

  residency: {
    localize: 'none' | 'copy' | 'primary';
    regions: string[];             // 'eu', 'us', … — the vocabulary @Database({ region }) uses
    transferRequires: 'nothing' | 'adequacy' | 'safeguards' | 'consent' | 'approval';
  };

  variants?: Record<string, Partial<Pick<JurisdictionRule, 'name' | 'law' | 'digitalConsentAge' | 'breachNotificationHours'>>>;   // member states, provinces: 'FR', 'QC'
}

import { resolve, durationMs } from 'ts-prorm-orm';

const today = resolve(['EU', 'UK']);
const withIndia = resolve(['EU', 'UK', 'IN']);

withIndia.digitalConsentAge;              // 18: the age gate moves up from 16
withIndia.lawfulBases;                    // ['consent', 'legal-obligation', 'vital-interests', 'public-task']
withIndia.specialCategories;              // ['health', 'biometric', 'genetic', 'protected', 'child']
withIndia.requestDeadlineDays;            // 30: India states none, so the others' stands
withIndia.residency;                      // { localize: 'none', regions: ['eu', 'eea', 'uk', 'gb', 'in'], transferRequires: 'adequacy' }

// Bases that stop working: every field declared on one of these fails to load.
const lost = today.lawfulBases.filter((b) => !withIndia.lawfulBases.includes(b));
// ['contract', 'legitimate-interests']

durationMs('P18M') / 86_400_000;          // 540: months are 30 days, years 365

import { resolve } from 'ts-prorm-orm';

resolve(['EU', 'RU']).residency;           // { localize: 'primary', regions: ['ru'], transferRequires: 'approval' }
resolve(['EU', 'RU']).breachNotificationHours;   // 24

const r = resolve(['EU', 'US-CA']);
r.digitalConsentAge;       // 16
r.requiresBasis;           // 'always'
r.lawfulBases;             // ['consent', 'contract', 'legal-obligation', 'legitimate-interests']
r.rights;                  // GDPR's seven plus CPRA's opt-outs
r.requestDeadlineDays;     // 30
r.breachNotificationHours; // 72