DEV Community

Denis
Denis

Posted on

Devlog: Data Breach Notification & Regulatory Report Generator – How We Built a GDPR, CCPA, and NIS2 Tool

#node #javascript #opensource #ai

Introduction

Welcome to another devlog from Pixel Office! Today we're looking at our new product Global Data Breach Notification & Regulatory Report Generator – a tool that automates the creation of data breach notifications under GDPR (Art. 33), CCPA, and NIS2. In this article, we'll show you how we designed, programmed, tested, and deployed this widget.

The Technical Challenge

Several issues came up during the design. First of all:

  • 72-hour deadline – regulatory authorities require notification within 72 hours of becoming aware. Our tool must automatically compute the exact deadline and track the countdown.
  • Risk severity analysis – not every data breach needs to be reported. We had to implement an algorithm that evaluates the impact on data subjects and determines whether notification is mandatory.
  • Formatting legal reports – each jurisdiction has different templates and requirements. We needed to generate documents ready for filing.

How Jan and Klara Designed the Solution

Jan, our lead developer, focused on the core. He used JavaScript and created a modular architecture that separates risk calculation from text generation. Klara, our designer, crafted the user interface to be intuitive for lawyers, not just IT specialists.

"The key was to deterministically calculate the risk severity and derive the exact deadline. We used a formula with weighted factors that respects the specifics of GDPR, CCPA, and NIS2. Thanks to TypeScript, the entire calculation is fully type-checked, so no unexpected errors can occur."

Jan also integrated multilingual support using an i18n library. Here's a glimpse of what that looks like:

// Vložen i18n JavaScript
Enter fullscreen mode Exit fullscreen mode

Klara's Design

Klara created a compact widget that can be easily embedded into any website. The main panel shows:

  • Countdown to the 72-hour deadline with visual alert for urgency.
  • Breach parameters form (data type, number of subjects, vulnerability).
  • Output text in the language of the selected jurisdiction.

Thanks to the responsive design, the widget looks great on both mobile and desktop.

Martin's QA

Martin, our tester, performed thorough validation. He verified:

  • Correct deadline calculation including leap years and time zones.
  • Behavior with extreme input data (e.g., zero number of subjects).
  • Consistency of translations across language versions.

He found a few mistakes in translations of legal terms, which we fixed.

Deployment by Tom

Tom deployed the tool to the production server. He chose a solution that allows easy updates of rules for individual regulations. "It went very smoothly because we had the application in Docker from the beginning, and deployment is automated," said Tom.

Try the Demo

The live demo is available at https://pixeloffice.eu/showcase/global-data-breach-notification-generator/. You can test how the tool reacts to different types of breaches. Just enter the parameters and watch the countdown and report text change. We'd love to hear your feedback!

Top comments (0)