Data Flow Privacy Review Agent

A new feature sends user emails to a third-party analytics service, and privacy finds out after launch. This agent reads the design documents and diagrams of a new feature and traces where personal data comes from, where it is stored, who or what receives it and how long it is kept. It checks each flow against the privacy policy, the approved vendor list, retention rules and data location limits. It asks the team questions about the gaps, such as which fields are sent. It updates the data flow map with the answers, and runs the checks again. The privacy lead approves the review. Edge case: a diagram shows a log service but not that logs contain emails, so the agent asks about the log fields.