{
  "$schema": "../schemas/ruleset.schema.json",
  "id": "gdpr-strict",
  "version": "1.0.0",
  "display_name": "GDPR — Strict (EU/EEA/UK + non-EU adequacy)",
  "law_references": [
    "Reg. UE 2016/679 (GDPR) Art. 6, 7, 13, 17, 21",
    "Directive 2002/58/EC (ePrivacy) Art. 5(3)",
    "EDPB Guidelines 03/2022 (dark patterns)",
    "EDPB Guidelines 08/2020 (consent)"
  ],
  "applies_to": {
    "countries": [
      "AT", "BE", "BG", "HR", "CY", "CZ", "DK", "EE", "FI", "FR",
      "DE", "GR", "HU", "IE", "IT", "LV", "LT", "LU", "MT", "NL",
      "PL", "PT", "RO", "SK", "SI", "ES", "SE",
      "IS", "LI", "NO",
      "GB", "CH", "AD", "MC", "SM", "VA"
    ]
  },
  "model": "opt-in",
  "native_lang": "en",
  "official_resources_url": [
    "https://edpb.europa.eu/edpb_en",
    "https://eur-lex.europa.eu/eli/reg/2016/679/oj"
  ],
  "signals": {
    "tcf_v22": true,
    "gpp": { "enabled": false, "section": null },
    "gpc_honored": true,
    "gpc_required": false,
    "dnt_honored": true,
    "cmv2": {
      "ad_storage": "denied",
      "analytics_storage": "denied",
      "ad_user_data": "denied",
      "ad_personalization": "denied",
      "personalization_storage": "denied",
      "functionality_storage": "granted",
      "security_storage": "granted"
    }
  },
  "ui": {
    "equal_weight_buttons": true,
    "donotsell_link_required": false,
    "sensitive_separate_optin": false,
    "revisit_widget_required": true,
    "default_categories": {
      "necessary": "granted-locked",
      "functional": "denied",
      "analytics": "denied",
      "marketing": "denied",
      "profiling": "denied"
    }
  },
  "cross_border_notes": null,
  "_meta": {
    "behavior_review_date": "2026-05-20",
    "next_review_due": "2027-05-20",
    "notes": "Default ruleset for EU/EEA/UK + adequacy-decision third countries (CH/AD/MC/SM/VA). EDPB §dark-patterns enforces equal_weight_buttons. CMv2 ad/analytics denied per Garante 2021 (Art. 122 Cod. Priv. + ePrivacy 5(3))."
  }
}