A failed or unresolved gate means no live customer traffic or personal-data processing within the affected scope. Synthetic-data development may continue while issues are resolved. Mark a gate “not applicable” only when the excluded activity is documented and technically disabled.
These gates are proposed purchasing controls; the legal requirements underlying the privacy checks are explained later.
| Gate | Evidence required before live use | Stop condition |
|---|---|---|
| G1. Safety and authority | Competent review of emergency handling; approved scripts; explicit limits on diagnosis, prices and technical commitments | The system invents safety advice, delays the approved emergency route or makes an unauthorised commitment |
| G2. Booking and record integrity | Demonstrated permissions, customer/site matching, availability validation and duplicate prevention appropriate to the permitted actions | The system confirms an appointment it has not successfully recorded, changes the wrong record or bypasses booking restrictions |
| G3. Personal-data governance | Documented purposes and lawful bases; processing-role assessment; appropriate contracts; data-flow map; retention rules; DPIA decision and transfer assessment | Real data would enter an unexplained processor, unauthorised training process or unresolved high-risk processing arrangement |
| G4. Human control and continuity | Working diversion or shutdown control; named exception owner; tested failure routes; clear customer messaging when humans are unavailable | Customers become trapped in the AI interaction, failures go unnoticed or staff cannot stop the workflow |
| G5. Spend and exit control | Written charges, usage limits, alerts and fallback behaviour; access and export arrangements; a bounded pilot commitment | Uncapped exposure, undisclosed material charges or no workable route to recover operations and records |
| G6. Outbound communications | Approved purpose, audience, channel, permission rules and suppression logic for each message sequence | The supplier treats an inbound enquiry as unrestricted permission for future marketing |
For emergency-script review, Gas Safe Register’s guide distinguishes Great Britain: 0800 111 999, Northern Ireland: 0800 002 001, and LPG enquiries, for which it directs users to their supplier. Do not copy one route into every deployment or make an office callback a substitute for the approved emergency response. Have the complete script and geographical handling checked before launch. Never place test calls to emergency numbers. (gassaferegister.co.uk)
Sources cited on this page
- gassaferegister.co.uk ↗www.gassaferegister.co.uk