{
  "version": "3.0",
  "generated": "2026-03-02",
  "terminology": {
    "driver": "Structural Driver (SD)",
    "domain": "Problem Domain (PD)",
    "cycle": "Reinforcement Cycle (RC)",
    "finding": "Cross-Domain Finding (CF)"
  },
  "stats": {
    "totalDrivers": 98,
    "totalDomains": 10,
    "totalCycles": 12,
    "totalFindings": 7,
    "totalPainPoints": 1548,
    "totalJurisdictions": 240,
    "totalCaseStudies": 1619,
    "totalFaqEntries": 134,
    "totalBlogEntries": 173
  },
  "tracks": [
    {
      "name": "PII Communities",
      "color": "#6c8aff",
      "file": "drivers-pii.html"
    },
    {
      "name": "AI Anonymization",
      "color": "#f87171",
      "file": "drivers-ai-anonymization.html"
    },
    {
      "name": "Solutions Market",
      "color": "#fb923c",
      "file": "drivers-solutions-market.html"
    },
    {
      "name": "Re-identification",
      "color": "#fbbf24",
      "file": "drivers-reidentification.html"
    },
    {
      "name": "Enforcement",
      "color": "#34d399",
      "file": "drivers-enforcement.html"
    },
    {
      "name": "User Behavior",
      "color": "#22d3ee",
      "file": "drivers-user-behavior.html"
    },
    {
      "name": "Data Brokers",
      "color": "#60a5fa",
      "file": "drivers-data-brokers.html"
    },
    {
      "name": "Sector Regulations",
      "color": "#c084fc",
      "file": "drivers-sector-regulations.html"
    },
    {
      "name": "Cross-Border",
      "color": "#e879f9",
      "file": "drivers-cross-border.html"
    },
    {
      "name": "AI Training",
      "color": "#fb7185",
      "file": "drivers-ai-training.html"
    },
    {
      "name": "Health & Genomic",
      "color": "#4ade80",
      "file": "drivers-health-genomic.html"
    },
    {
      "name": "Biometric",
      "color": "#f97316",
      "file": "drivers-biometric.html"
    },
    {
      "name": "Children",
      "color": "#38bdf8",
      "file": "drivers-children-education.html"
    },
    {
      "name": "Financial",
      "color": "#a78bfa",
      "file": "drivers-financial.html"
    }
  ],
  "drivers": [
    {
      "id": "SD1.2",
      "index": 0,
      "trackIdx": 0,
      "position": 1,
      "name": "Linkability",
      "track": "PII Communities"
    },
    {
      "id": "SD1.3",
      "index": 1,
      "trackIdx": 0,
      "position": 2,
      "name": "Irreversibility",
      "track": "PII Communities"
    },
    {
      "id": "SD1.4",
      "index": 2,
      "trackIdx": 0,
      "position": 3,
      "name": "Power Asymmetry",
      "track": "PII Communities"
    },
    {
      "id": "SD1.5",
      "index": 3,
      "trackIdx": 0,
      "position": 4,
      "name": "Dual-Use",
      "track": "PII Communities"
    },
    {
      "id": "SD1.6",
      "index": 4,
      "trackIdx": 0,
      "position": 5,
      "name": "Complexity Cascade",
      "track": "PII Communities"
    },
    {
      "id": "SD1.7",
      "index": 5,
      "trackIdx": 0,
      "position": 6,
      "name": "Knowledge Asymmetry",
      "track": "PII Communities"
    },
    {
      "id": "SD1.8",
      "index": 6,
      "trackIdx": 0,
      "position": 7,
      "name": "Jurisdiction Fragmentation",
      "track": "PII Communities"
    },
    {
      "id": "SD2.2",
      "index": 7,
      "trackIdx": 1,
      "position": 1,
      "name": "Statistical Irreducibility",
      "track": "AI Anonymization"
    },
    {
      "id": "SD2.3",
      "index": 8,
      "trackIdx": 1,
      "position": 2,
      "name": "Context Boundedness",
      "track": "AI Anonymization"
    },
    {
      "id": "SD2.4",
      "index": 9,
      "trackIdx": 1,
      "position": 3,
      "name": "Distribution Mismatch",
      "track": "AI Anonymization"
    },
    {
      "id": "SD2.5",
      "index": 10,
      "trackIdx": 1,
      "position": 4,
      "name": "Modality Isolation",
      "track": "AI Anonymization"
    },
    {
      "id": "SD2.6",
      "index": 11,
      "trackIdx": 1,
      "position": 5,
      "name": "Adversarial Unboundedness",
      "track": "AI Anonymization"
    },
    {
      "id": "SD2.7",
      "index": 12,
      "trackIdx": 1,
      "position": 6,
      "name": "Utility-Privacy Duality",
      "track": "AI Anonymization"
    },
    {
      "id": "SD2.8",
      "index": 13,
      "trackIdx": 1,
      "position": 7,
      "name": "Compliance Indeterminacy",
      "track": "AI Anonymization"
    },
    {
      "id": "SD3.2",
      "index": 14,
      "trackIdx": 2,
      "position": 1,
      "name": "Vendor Fragmentation",
      "track": "Solutions Market"
    },
    {
      "id": "SD3.3",
      "index": 15,
      "trackIdx": 2,
      "position": 2,
      "name": "Coverage Incompleteness",
      "track": "Solutions Market"
    },
    {
      "id": "SD3.4",
      "index": 16,
      "trackIdx": 2,
      "position": 3,
      "name": "Cost Exclusion",
      "track": "Solutions Market"
    },
    {
      "id": "SD3.5",
      "index": 17,
      "trackIdx": 2,
      "position": 4,
      "name": "Trust Asymmetry",
      "track": "Solutions Market"
    },
    {
      "id": "SD3.6",
      "index": 18,
      "trackIdx": 2,
      "position": 5,
      "name": "Regulatory Indeterminacy",
      "track": "Solutions Market"
    },
    {
      "id": "SD3.7",
      "index": 19,
      "trackIdx": 2,
      "position": 6,
      "name": "Modality Blindness",
      "track": "Solutions Market"
    },
    {
      "id": "SD3.8",
      "index": 20,
      "trackIdx": 2,
      "position": 7,
      "name": "Formalization Gap",
      "track": "Solutions Market"
    },
    {
      "id": "SD4.2",
      "index": 21,
      "trackIdx": 3,
      "position": 1,
      "name": "Quasi-Identifier Combinatorics",
      "track": "Re-identification"
    },
    {
      "id": "SD4.3",
      "index": 22,
      "trackIdx": 3,
      "position": 2,
      "name": "Auxiliary Data Abundance",
      "track": "Re-identification"
    },
    {
      "id": "SD4.4",
      "index": 23,
      "trackIdx": 3,
      "position": 3,
      "name": "Behavioral Uniqueness",
      "track": "Re-identification"
    },
    {
      "id": "SD4.5",
      "index": 24,
      "trackIdx": 3,
      "position": 4,
      "name": "Structural Invariance",
      "track": "Re-identification"
    },
    {
      "id": "SD4.6",
      "index": 25,
      "trackIdx": 3,
      "position": 5,
      "name": "Temporal Persistence",
      "track": "Re-identification"
    },
    {
      "id": "SD4.7",
      "index": 26,
      "trackIdx": 3,
      "position": 6,
      "name": "Privacy Model Fragility",
      "track": "Re-identification"
    },
    {
      "id": "SD4.8",
      "index": 27,
      "trackIdx": 3,
      "position": 7,
      "name": "Irreversible Disclosure",
      "track": "Re-identification"
    },
    {
      "id": "SD5.2",
      "index": 28,
      "trackIdx": 4,
      "position": 1,
      "name": "Resource Asymmetry",
      "track": "Enforcement"
    },
    {
      "id": "SD5.3",
      "index": 29,
      "trackIdx": 4,
      "position": 2,
      "name": "Jurisdictional Fragmentation",
      "track": "Enforcement"
    },
    {
      "id": "SD5.4",
      "index": 30,
      "trackIdx": 4,
      "position": 3,
      "name": "Accountability Opacity",
      "track": "Enforcement"
    },
    {
      "id": "SD5.5",
      "index": 31,
      "trackIdx": 4,
      "position": 4,
      "name": "Consent Fiction",
      "track": "Enforcement"
    },
    {
      "id": "SD5.6",
      "index": 32,
      "trackIdx": 4,
      "position": 5,
      "name": "Temporal Mismatch",
      "track": "Enforcement"
    },
    {
      "id": "SD5.7",
      "index": 33,
      "trackIdx": 4,
      "position": 6,
      "name": "Structural Capture",
      "track": "Enforcement"
    },
    {
      "id": "SD5.8",
      "index": 34,
      "trackIdx": 4,
      "position": 7,
      "name": "Remedy Inadequacy",
      "track": "Enforcement"
    },
    {
      "id": "SD6.2",
      "index": 35,
      "trackIdx": 5,
      "position": 1,
      "name": "Cognitive Overload",
      "track": "User Behavior"
    },
    {
      "id": "SD6.3",
      "index": 36,
      "trackIdx": 5,
      "position": 2,
      "name": "Hostile Defaults",
      "track": "User Behavior"
    },
    {
      "id": "SD6.4",
      "index": 37,
      "trackIdx": 5,
      "position": 3,
      "name": "Mental Model Failure",
      "track": "User Behavior"
    },
    {
      "id": "SD6.5",
      "index": 38,
      "trackIdx": 5,
      "position": 4,
      "name": "Trust Miscalibration",
      "track": "User Behavior"
    },
    {
      "id": "SD6.6",
      "index": 39,
      "trackIdx": 5,
      "position": 5,
      "name": "Social Coercion",
      "track": "User Behavior"
    },
    {
      "id": "SD6.7",
      "index": 40,
      "trackIdx": 5,
      "position": 6,
      "name": "Exclusion By Design",
      "track": "User Behavior"
    },
    {
      "id": "SD6.8",
      "index": 41,
      "trackIdx": 5,
      "position": 7,
      "name": "Learned Helplessness",
      "track": "User Behavior"
    },
    {
      "id": "SD7.2",
      "index": 42,
      "trackIdx": 6,
      "position": 1,
      "name": "Collection Without Consent",
      "track": "Data Brokers"
    },
    {
      "id": "SD7.3",
      "index": 43,
      "trackIdx": 6,
      "position": 2,
      "name": "Identity Resolution",
      "track": "Data Brokers"
    },
    {
      "id": "SD7.4",
      "index": 44,
      "trackIdx": 6,
      "position": 3,
      "name": "Supply Chain Opacity",
      "track": "Data Brokers"
    },
    {
      "id": "SD7.5",
      "index": 45,
      "trackIdx": 6,
      "position": 4,
      "name": "Opt-Out Futility",
      "track": "Data Brokers"
    },
    {
      "id": "SD7.6",
      "index": 46,
      "trackIdx": 6,
      "position": 5,
      "name": "Regulatory Fragmentation",
      "track": "Data Brokers"
    },
    {
      "id": "SD7.7",
      "index": 47,
      "trackIdx": 6,
      "position": 6,
      "name": "Information Asymmetry",
      "track": "Data Brokers"
    },
    {
      "id": "SD7.8",
      "index": 48,
      "trackIdx": 6,
      "position": 7,
      "name": "Harm Externalization",
      "track": "Data Brokers"
    },
    {
      "id": "SD8.2",
      "index": 49,
      "trackIdx": 7,
      "position": 1,
      "name": "Vertical-Horizontal Collision",
      "track": "Sector Regulations"
    },
    {
      "id": "SD8.3",
      "index": 50,
      "trackIdx": 7,
      "position": 2,
      "name": "Jurisdictional Fragmentation",
      "track": "Sector Regulations"
    },
    {
      "id": "SD8.4",
      "index": 51,
      "trackIdx": 7,
      "position": 3,
      "name": "Cross-Border Transfer Instability",
      "track": "Sector Regulations"
    },
    {
      "id": "SD8.5",
      "index": 52,
      "trackIdx": 7,
      "position": 4,
      "name": "Surveillance-Privacy Contradiction",
      "track": "Sector Regulations"
    },
    {
      "id": "SD8.6",
      "index": 53,
      "trackIdx": 7,
      "position": 5,
      "name": "De-Identification Impossibility",
      "track": "Sector Regulations"
    },
    {
      "id": "SD8.7",
      "index": 54,
      "trackIdx": 7,
      "position": 6,
      "name": "Consent Architecture Failure",
      "track": "Sector Regulations"
    },
    {
      "id": "SD8.8",
      "index": 55,
      "trackIdx": 7,
      "position": 7,
      "name": "Enforcement Asymmetry",
      "track": "Sector Regulations"
    },
    {
      "id": "SD9.2",
      "index": 56,
      "trackIdx": 8,
      "position": 1,
      "name": "Sovereignty Collision",
      "track": "Cross-Border"
    },
    {
      "id": "SD9.3",
      "index": 57,
      "trackIdx": 8,
      "position": 2,
      "name": "Adequacy Fiction",
      "track": "Cross-Border"
    },
    {
      "id": "SD9.4",
      "index": 58,
      "trackIdx": 8,
      "position": 3,
      "name": "Encryption Insufficiency",
      "track": "Cross-Border"
    },
    {
      "id": "SD9.5",
      "index": 59,
      "trackIdx": 8,
      "position": 4,
      "name": "Corporate Arbitrage",
      "track": "Cross-Border"
    },
    {
      "id": "SD9.6",
      "index": 60,
      "trackIdx": 8,
      "position": 5,
      "name": "Surveillance Asymmetry",
      "track": "Cross-Border"
    },
    {
      "id": "SD9.7",
      "index": 61,
      "trackIdx": 8,
      "position": 6,
      "name": "Temporal Fragility",
      "track": "Cross-Border"
    },
    {
      "id": "SD9.8",
      "index": 62,
      "trackIdx": 8,
      "position": 7,
      "name": "Extraterritorial Overreach",
      "track": "Cross-Border"
    },
    {
      "id": "SD10.2",
      "index": 63,
      "trackIdx": 9,
      "position": 1,
      "name": "Memorization Inevitability",
      "track": "AI Training"
    },
    {
      "id": "SD10.3",
      "index": 64,
      "trackIdx": 9,
      "position": 2,
      "name": "Extraction Asymmetry",
      "track": "AI Training"
    },
    {
      "id": "SD10.4",
      "index": 65,
      "trackIdx": 9,
      "position": 3,
      "name": "Provenance Opacity",
      "track": "AI Training"
    },
    {
      "id": "SD10.5",
      "index": 66,
      "trackIdx": 9,
      "position": 4,
      "name": "Scale Incompatibility",
      "track": "AI Training"
    },
    {
      "id": "SD10.6",
      "index": 67,
      "trackIdx": 9,
      "position": 5,
      "name": "Embedding Leakage",
      "track": "AI Training"
    },
    {
      "id": "SD10.7",
      "index": 68,
      "trackIdx": 9,
      "position": 6,
      "name": "Consent Impossibility",
      "track": "AI Training"
    },
    {
      "id": "SD10.8",
      "index": 69,
      "trackIdx": 9,
      "position": 7,
      "name": "Accountability Diffusion",
      "track": "AI Training"
    },
    {
      "id": "SD11.2",
      "index": 70,
      "trackIdx": 10,
      "position": 1,
      "name": "Genomic Immutability",
      "track": "Health & Genomic"
    },
    {
      "id": "SD11.3",
      "index": 71,
      "trackIdx": 10,
      "position": 2,
      "name": "Familial Entanglement",
      "track": "Health & Genomic"
    },
    {
      "id": "SD11.4",
      "index": 72,
      "trackIdx": 10,
      "position": 3,
      "name": "Clinical Context Dependency",
      "track": "Health & Genomic"
    },
    {
      "id": "SD11.5",
      "index": 73,
      "trackIdx": 10,
      "position": 4,
      "name": "Temporal Accumulation",
      "track": "Health & Genomic"
    },
    {
      "id": "SD11.6",
      "index": 74,
      "trackIdx": 10,
      "position": 5,
      "name": "Discriminatory Potential",
      "track": "Health & Genomic"
    },
    {
      "id": "SD11.7",
      "index": 75,
      "trackIdx": 10,
      "position": 6,
      "name": "Research-Privacy Tension",
      "track": "Health & Genomic"
    },
    {
      "id": "SD11.8",
      "index": 76,
      "trackIdx": 10,
      "position": 7,
      "name": "Consent Inadequacy",
      "track": "Health & Genomic"
    },
    {
      "id": "SD12.2",
      "index": 77,
      "trackIdx": 11,
      "position": 1,
      "name": "Biometric Immutability",
      "track": "Biometric"
    },
    {
      "id": "SD12.3",
      "index": 78,
      "trackIdx": 11,
      "position": 2,
      "name": "Capture Asymmetry",
      "track": "Biometric"
    },
    {
      "id": "SD12.4",
      "index": 79,
      "trackIdx": 11,
      "position": 3,
      "name": "Modality Proliferation",
      "track": "Biometric"
    },
    {
      "id": "SD12.5",
      "index": 80,
      "trackIdx": 11,
      "position": 4,
      "name": "Discriminatory Encoding",
      "track": "Biometric"
    },
    {
      "id": "SD12.6",
      "index": 81,
      "trackIdx": 11,
      "position": 5,
      "name": "Consent Impossibility",
      "track": "Biometric"
    },
    {
      "id": "SD12.7",
      "index": 82,
      "trackIdx": 11,
      "position": 6,
      "name": "Database Persistence",
      "track": "Biometric"
    },
    {
      "id": "SD12.8",
      "index": 83,
      "trackIdx": 11,
      "position": 7,
      "name": "Regulatory Fragmentation",
      "track": "Biometric"
    },
    {
      "id": "SD13.2",
      "index": 84,
      "trackIdx": 12,
      "position": 1,
      "name": "Developmental Incapacity",
      "track": "Children"
    },
    {
      "id": "SD13.3",
      "index": 85,
      "trackIdx": 12,
      "position": 2,
      "name": "Compulsory Participation",
      "track": "Children"
    },
    {
      "id": "SD13.4",
      "index": 86,
      "trackIdx": 12,
      "position": 3,
      "name": "Temporal Permanence",
      "track": "Children"
    },
    {
      "id": "SD13.5",
      "index": 87,
      "trackIdx": 12,
      "position": 4,
      "name": "Proxy Failure",
      "track": "Children"
    },
    {
      "id": "SD13.6",
      "index": 88,
      "trackIdx": 12,
      "position": 5,
      "name": "Ecosystem Opacity",
      "track": "Children"
    },
    {
      "id": "SD13.7",
      "index": 89,
      "trackIdx": 12,
      "position": 6,
      "name": "Exploitative Design",
      "track": "Children"
    },
    {
      "id": "SD13.8",
      "index": 90,
      "trackIdx": 12,
      "position": 7,
      "name": "Regulatory Inadequacy",
      "track": "Children"
    },
    {
      "id": "SD14.2",
      "index": 91,
      "trackIdx": 13,
      "position": 1,
      "name": "Transaction Ubiquity",
      "track": "Financial"
    },
    {
      "id": "SD14.3",
      "index": 92,
      "trackIdx": 13,
      "position": 2,
      "name": "Pattern Identifiability",
      "track": "Financial"
    },
    {
      "id": "SD14.4",
      "index": 93,
      "trackIdx": 13,
      "position": 3,
      "name": "Regulatory Fragmentation",
      "track": "Financial"
    },
    {
      "id": "SD14.5",
      "index": 94,
      "trackIdx": 13,
      "position": 4,
      "name": "Real-Time Exposure",
      "track": "Financial"
    },
    {
      "id": "SD14.6",
      "index": 95,
      "trackIdx": 13,
      "position": 5,
      "name": "Pseudonymity Fragility",
      "track": "Financial"
    },
    {
      "id": "SD14.7",
      "index": 96,
      "trackIdx": 13,
      "position": 6,
      "name": "Economic Coercion",
      "track": "Financial"
    },
    {
      "id": "SD14.8",
      "index": 97,
      "trackIdx": 13,
      "position": 7,
      "name": "Systemic Concentration",
      "track": "Financial"
    }
  ],
  "domains": [
    {
      "id": "PD1",
      "oldId": "MC1",
      "name": "Immutability & Irreversibility",
      "shortName": "Immutability",
      "description": "Once PII is exposed, collected, or encoded, it cannot be undone. Biometrics, genomics, and AI model weights create permanent vulnerability.",
      "driverIds": [
        "SD1.3",
        "SD4.6",
        "SD4.8",
        "SD11.2",
        "SD12.2",
        "SD12.6",
        "SD13.4",
        "SD10.2"
      ],
      "driverCount": 8,
      "color": "#f87171",
      "evidenceCount": 634,
      "relevantRegulations": [
        "GDPR Art. 9 (biometric/genetic)",
        "BIPA (Illinois)",
        "CCPA/CPRA"
      ],
      "relevantTracks": [
        "Biometric",
        "Health & Genomic"
      ]
    },
    {
      "id": "PD2",
      "oldId": "MC2",
      "name": "Linkability & Re-identification",
      "shortName": "Linkability",
      "description": "Data points that seem anonymous can be linked to individuals through combinatorial analysis, behavioral patterns, or auxiliary data sources.",
      "driverIds": [
        "SD1.2",
        "SD4.2",
        "SD4.3",
        "SD4.4",
        "SD4.5",
        "SD7.3",
        "SD13.3",
        "SD10.7",
        "SD8.7"
      ],
      "driverCount": 9,
      "color": "#fb923c",
      "evidenceCount": 634,
      "relevantRegulations": [
        "GDPR Art. 5(1)(a) purpose limitation",
        "GDPR Art. 89 research exemptions",
        "HIPAA Safe Harbor"
      ],
      "relevantTracks": [
        "Re-identification",
        "Data Brokers"
      ]
    },
    {
      "id": "PD3",
      "oldId": "MC3",
      "name": "Regulatory Fragmentation",
      "shortName": "Regulation",
      "description": "Privacy protection is fragmented across jurisdictions, sectors, and legal regimes. No unified framework exists, creating gaps that are systematically exploited.",
      "driverIds": [
        "SD1.8",
        "SD5.3",
        "SD7.6",
        "SD8.2",
        "SD8.3",
        "SD8.4",
        "SD9.2",
        "SD9.8",
        "SD12.8",
        "SD14.2",
        "SD3.6",
        "SD2.8"
      ],
      "driverCount": 12,
      "color": "#fbbf24",
      "evidenceCount": 1048,
      "relevantRegulations": [
        "GDPR",
        "CCPA/CPRA",
        "LGPD (Brazil)",
        "PIPA (South Korea)",
        "DPDPA (India)",
        "PIPL (China)",
        "APPI (Japan)"
      ],
      "relevantTracks": [
        "Cross-Border",
        "Enforcement",
        "Sector Regulations"
      ]
    },
    {
      "id": "PD4",
      "oldId": "MC4",
      "name": "Power & Resource Asymmetry",
      "shortName": "Power Asymmetry",
      "description": "The entity collecting PII designs the system, profits from collection, writes the rules, and lobbies the legal framework. Individuals cannot match this structural advantage.",
      "driverIds": [
        "SD1.4",
        "SD5.2",
        "SD5.7",
        "SD7.8",
        "SD8.8",
        "SD9.5",
        "SD9.7",
        "SD10.4",
        "SD12.3",
        "SD14.8"
      ],
      "driverCount": 10,
      "color": "#34d399",
      "evidenceCount": 934,
      "relevantRegulations": [
        "GDPR Art. 80 representative actions",
        "EU Digital Services Act",
        "US state privacy laws"
      ],
      "relevantTracks": [
        "PII Communities",
        "Data Brokers"
      ]
    },
    {
      "id": "PD5",
      "oldId": "MC5",
      "name": "Consent Failure",
      "shortName": "Consent",
      "description": "Consent mechanisms are fundamentally broken — impossible to give meaningfully, impossible to withdraw, or structurally coerced.",
      "driverIds": [
        "SD5.5",
        "SD7.2",
        "SD8.6",
        "SD10.6",
        "SD10.8",
        "SD11.8",
        "SD12.7",
        "SD13.2",
        "SD13.5"
      ],
      "driverCount": 9,
      "color": "#c084fc",
      "evidenceCount": 600,
      "relevantRegulations": [
        "GDPR Art. 7 consent conditions",
        "ePrivacy Directive",
        "COPPA (children)",
        "FERPA (education)"
      ],
      "relevantTracks": [
        "User Behavior",
        "Children & Education"
      ]
    },
    {
      "id": "PD6",
      "oldId": "MC6",
      "name": "Opacity & Information Asymmetry",
      "shortName": "Opacity",
      "description": "Individuals cannot see what data is collected about them, how it flows, who holds it, or what decisions it drives.",
      "driverIds": [
        "SD1.7",
        "SD5.4",
        "SD7.4",
        "SD7.7",
        "SD10.5",
        "SD11.3",
        "SD13.6",
        "SD6.4"
      ],
      "driverCount": 8,
      "color": "#60a5fa",
      "evidenceCount": 734,
      "relevantRegulations": [
        "GDPR Art. 13-14 transparency",
        "GDPR Art. 22 automated decisions",
        "EU AI Act"
      ],
      "relevantTracks": [
        "AI Anonymization",
        "AI Training"
      ]
    },
    {
      "id": "PD7",
      "oldId": "MC7",
      "name": "Dual-Use & Utility-Privacy Tension",
      "shortName": "Dual-Use",
      "description": "The same technologies that enable beneficial functionality simultaneously enable surveillance. This tension cannot be resolved at the technical level.",
      "driverIds": [
        "SD1.5",
        "SD2.7",
        "SD8.5",
        "SD9.4",
        "SD11.7",
        "SD14.3"
      ],
      "driverCount": 6,
      "color": "#22d3ee",
      "evidenceCount": 734,
      "relevantRegulations": [
        "EU AI Act risk classification",
        "GDPR Art. 35 DPIA",
        "US CLOUD Act"
      ],
      "relevantTracks": [
        "AI Anonymization",
        "Solutions Market"
      ]
    },
    {
      "id": "PD8",
      "oldId": "MC8",
      "name": "Behavioral Exploitation & Coercion",
      "shortName": "Exploitation",
      "description": "Users are manipulated through dark patterns, hostile defaults, social pressure, and economic necessity into surrendering PII.",
      "driverIds": [
        "SD6.2",
        "SD6.3",
        "SD6.5",
        "SD6.6",
        "SD6.7",
        "SD6.8",
        "SD7.5",
        "SD13.3",
        "SD13.7",
        "SD14.4"
      ],
      "driverCount": 10,
      "color": "#e879f9",
      "evidenceCount": 300,
      "relevantRegulations": [
        "GDPR Art. 5(1)(a) fairness",
        "EU Digital Markets Act",
        "FTC Section 5"
      ],
      "relevantTracks": [
        "User Behavior",
        "Financial"
      ]
    },
    {
      "id": "PD9",
      "oldId": "MC9",
      "name": "Technical Complexity & Detection Limits",
      "shortName": "Tech Complexity",
      "description": "PII detection and anonymization face fundamental technical limits — statistical irreducibility, modality gaps, adversarial attacks. No tool can guarantee completeness.",
      "driverIds": [
        "SD1.6",
        "SD2.2",
        "SD2.3",
        "SD2.4",
        "SD2.5",
        "SD2.6",
        "SD3.3",
        "SD3.7",
        "SD3.8",
        "SD4.7"
      ],
      "driverCount": 10,
      "color": "#818cf8",
      "evidenceCount": 548,
      "relevantRegulations": [
        "GDPR Art. 25 privacy by design",
        "GDPR Art. 32 security measures",
        "ISO 27701",
        "ISO 27001"
      ],
      "relevantTracks": [
        "Solutions Market",
        "AI Anonymization"
      ]
    },
    {
      "id": "PD10",
      "oldId": "MC10",
      "name": "Market & Structural Failures",
      "shortName": "Market Failures",
      "description": "Market incentives, temporal mismatches, and structural inadequacies prevent effective privacy protection even when technical solutions exist.",
      "driverIds": [
        "SD3.2",
        "SD3.4",
        "SD3.5",
        "SD5.6",
        "SD5.8",
        "SD9.3",
        "SD9.6",
        "SD11.4",
        "SD11.5",
        "SD11.6",
        "SD12.4",
        "SD12.5",
        "SD13.8",
        "SD14.4",
        "SD14.6",
        "SD14.7"
      ],
      "driverCount": 16,
      "color": "#f472b6",
      "evidenceCount": 614,
      "relevantRegulations": [
        "GDPR Art. 83 penalties",
        "EU Data Governance Act",
        "CCPA private right of action"
      ],
      "relevantTracks": [
        "Enforcement",
        "Solutions Market"
      ]
    }
  ],
  "cycles": [
    {
      "id": "RC1",
      "oldId": "L1",
      "name": "The Consent-Coercion Spiral",
      "chain": [
        "Consent Fiction",
        "Hostile Defaults",
        "Learned Helplessness",
        "Collection Without Consent",
        "Consent Fiction"
      ],
      "chainStr": "Consent Fiction → Hostile Defaults → Learned Helplessness → Collection Without Consent → Consent Fiction",
      "mechanism": "Broken consent mechanisms enable hostile defaults. Users develop learned helplessness. Passive users enable consent-free collection. Mass collection normalizes consent fiction. Each revolution produces more passive users.",
      "tracks": "Enforcement, User Behavior, Data Brokers",
      "length": 4
    },
    {
      "id": "RC2",
      "oldId": "L2",
      "name": "The Regulatory Arbitrage Engine",
      "chain": [
        "Jurisdiction Fragmentation",
        "Corporate Arbitrage",
        "Regulatory Fragmentation",
        "Enforcement Asymmetry",
        "Resource Asymmetry",
        "Jurisdiction Fragmentation"
      ],
      "chainStr": "Jurisdiction Fragmentation → Corporate Arbitrage → Regulatory Fragmentation → Enforcement Asymmetry → Resource Asymmetry → Jurisdiction Fragmentation",
      "mechanism": "Fragmented jurisdictions create gaps. Corporations exploit those gaps. Fragmented regulation prevents coordinated response. Weak enforcement emboldens arbitrage. Under-resourced regulators cannot close gaps.",
      "tracks": "PII Communities, Cross-Border, Data Brokers, Sector Regulations, Enforcement",
      "length": 5
    },
    {
      "id": "RC3",
      "oldId": "L3",
      "name": "The Irreversibility Ratchet",
      "chain": [
        "Linkability",
        "Identity Resolution",
        "Database Persistence",
        "Memorization Inevitability",
        "Irreversible Disclosure",
        "Linkability"
      ],
      "chainStr": "Linkability → Identity Resolution → Database Persistence → Memorization Inevitability → Irreversible Disclosure → Linkability",
      "mechanism": "Linkable data feeds identity resolution. Resolved identities persist in databases. Databases feed AI training. Models memorize PII permanently. Memorized PII enables new linkage attacks. The ratchet never loosens.",
      "tracks": "PII Communities, Data Brokers, Biometric, AI Training, Re-identification",
      "length": 5
    },
    {
      "id": "RC4",
      "oldId": "L4",
      "name": "The Opacity-Helplessness Cascade",
      "chain": [
        "Supply Chain Opacity",
        "Information Asymmetry",
        "Mental Model Failure",
        "Cognitive Overload",
        "Opt-Out Futility",
        "Supply Chain Opacity"
      ],
      "chainStr": "Supply Chain Opacity → Information Asymmetry → Mental Model Failure → Cognitive Overload → Opt-Out Futility → Supply Chain Opacity",
      "mechanism": "Opaque supply chains prevent understanding. Asymmetry creates wrong mental models. Wrong models overwhelm users. Overwhelmed users cannot opt out. Failed opt-outs keep supply chains unchanged.",
      "tracks": "Data Brokers, User Behavior",
      "length": 5
    },
    {
      "id": "RC5",
      "oldId": "L5",
      "name": "The Technical Impossibility Trap",
      "chain": [
        "Statistical Irreducibility",
        "Coverage Incompleteness",
        "Privacy Model Fragility",
        "De-Identification Impossibility",
        "Compliance Indeterminacy",
        "Formalization Gap",
        "Statistical Irreducibility"
      ],
      "chainStr": "Statistical Irreducibility → Coverage Incompleteness → Privacy Model Fragility → De-Identification Impossibility → Compliance Indeterminacy → Formalization Gap → Statistical Irreducibility",
      "mechanism": "NLP models cannot detect all PII. Incomplete detection leaves gaps. Gaps break privacy models. Broken models prove de-identification impossible. Compliance becomes indeterminate. Requirements cannot be formally verified.",
      "tracks": "AI Anonymization, Solutions Market, Re-identification, Sector Regulations",
      "length": 6
    },
    {
      "id": "RC6",
      "oldId": "L6",
      "name": "The Immutable PII Cascade",
      "chain": [
        "Genomic Immutability",
        "Biometric Immutability",
        "Temporal Permanence",
        "Irreversibility",
        "Familial Entanglement",
        "Genomic Immutability"
      ],
      "chainStr": "Genomic Immutability → Biometric Immutability → Temporal Permanence → Irreversibility → Familial Entanglement → Genomic Immutability",
      "mechanism": "Genomic data is permanent. Biometric data shares this permanence. Both create lifelong shadows over children. All immutable PII is irreversible once exposed. Exposure of one family member exposes relatives. No technical solution exists.",
      "tracks": "Health & Genomic, Biometric, Children, PII Communities",
      "length": 5
    },
    {
      "id": "RC7",
      "oldId": "L7",
      "name": "The Power Concentration Vortex",
      "chain": [
        "Power Asymmetry",
        "Structural Capture",
        "Harm Externalization",
        "Systemic Concentration",
        "Resource Asymmetry",
        "Power Asymmetry"
      ],
      "chainStr": "Power Asymmetry → Structural Capture → Harm Externalization → Systemic Concentration → Resource Asymmetry → Power Asymmetry",
      "mechanism": "Power asymmetry enables regulatory capture. Captured regulators allow harm externalization. Externalized harms concentrate data in fewer entities. Concentrated entities have overwhelming resources. Resource asymmetry reinforces power asymmetry.",
      "tracks": "PII Communities, Enforcement, Data Brokers, Financial",
      "length": 5
    },
    {
      "id": "RC8",
      "oldId": "L8",
      "name": "The Surveillance Enablement Circuit",
      "chain": [
        "Dual-Use",
        "Surveillance-Privacy Contradiction",
        "Surveillance Asymmetry",
        "Extraterritorial Overreach",
        "Encryption Insufficiency",
        "Dual-Use"
      ],
      "chainStr": "Dual-Use → Surveillance-Privacy Contradiction → Surveillance Asymmetry → Extraterritorial Overreach → Encryption Insufficiency → Dual-Use",
      "mechanism": "Legitimate technologies enable surveillance. Government mandates formalize the contradiction. Intelligence agencies exploit beyond legal frameworks. Agencies claim extraterritorial authority. Encryption cannot protect against compulsion at endpoints.",
      "tracks": "PII Communities, Sector Regulations, Cross-Border",
      "length": 5
    },
    {
      "id": "RC9",
      "oldId": "L9",
      "name": "The Exploitation-Exclusion Trap",
      "chain": [
        "Economic Coercion",
        "Compulsory Participation",
        "Exploitative Design",
        "Exclusion By Design",
        "Social Coercion",
        "Economic Coercion"
      ],
      "chainStr": "Economic Coercion → Compulsory Participation → Exploitative Design → Exclusion By Design → Social Coercion → Economic Coercion",
      "mechanism": "Financial systems require PII. Schools mandate platforms. Platforms use exploitative design. Systems exclude privacy-conscious users. Social pressure forces participation. This loop traps vulnerable populations in mandatory surveillance.",
      "tracks": "Financial, Children, User Behavior",
      "length": 5
    },
    {
      "id": "RC10",
      "oldId": "L10",
      "name": "The AI Training Flywheel",
      "chain": [
        "Collection Without Consent",
        "Provenance Opacity",
        "Scale Incompatibility",
        "Consent Impossibility",
        "Accountability Diffusion",
        "Collection Without Consent"
      ],
      "chainStr": "Collection Without Consent → Provenance Opacity → Scale Incompatibility → Consent Impossibility → Accountability Diffusion → Collection Without Consent",
      "mechanism": "Data brokers collect without consent. Opaque provenance launders the data. Scale makes consent structurally impossible. Retroactive consent is meaningless. Diffused accountability means no entity is responsible. Unconsented collection continues.",
      "tracks": "Data Brokers, AI Training",
      "length": 5
    },
    {
      "id": "RC11",
      "oldId": "L11",
      "name": "The Detection Arms Race",
      "chain": [
        "Adversarial Unboundedness",
        "Modality Proliferation",
        "Behavioral Uniqueness",
        "Auxiliary Data Abundance",
        "Quasi-Identifier Combinatorics",
        "Statistical Irreducibility",
        "Adversarial Unboundedness"
      ],
      "chainStr": "Adversarial Unboundedness → Modality Proliferation → Behavioral Uniqueness → Auxiliary Data Abundance → Quasi-Identifier Combinatorics → Statistical Irreducibility → Adversarial Unboundedness",
      "mechanism": "Adversaries evolve faster than detection. New biometric modalities create attack surfaces. Behavioral patterns create unique fingerprints. Auxiliary data multiplies linkage opportunities. Combinatorial explosion makes anonymization intractable. Statistical limits create openings for new attacks.",
      "tracks": "AI Anonymization, Biometric, Re-identification",
      "length": 6
    },
    {
      "id": "RC12",
      "oldId": "L12",
      "name": "The Trust Collapse Spiral",
      "chain": [
        "Trust Miscalibration",
        "Adequacy Fiction",
        "Consent Architecture Failure",
        "Accountability Opacity",
        "Trust Asymmetry",
        "Trust Miscalibration"
      ],
      "chainStr": "Trust Miscalibration → Adequacy Fiction → Consent Architecture Failure → Accountability Opacity → Trust Asymmetry → Trust Miscalibration",
      "mechanism": "Users misplace trust. Adequacy decisions create false trust. Failed consent leverages misplaced trust. Opacity prevents verification. Privacy tools face trust deficits. This spiral erodes the social contract underlying all privacy frameworks.",
      "tracks": "User Behavior, Cross-Border, Sector Regulations, Enforcement, Solutions Market",
      "length": 5
    }
  ],
  "findings": [
    {
      "id": "CF1",
      "oldId": "Pattern1",
      "title": "Regulatory Fragmentation is the Most Pervasive Dynamic",
      "description": "MC3 spans 8 of 14 tracks with 12 structural drivers — more than any other problem domain. The absence of a unified global privacy framework is the single most enabling condition for PII exploitation.",
      "supportingEvidence": 6
    },
    {
      "id": "CF2",
      "oldId": "Pattern2",
      "title": "Immutability Creates Permanent Vulnerability",
      "description": "The combination of MC1 and MC2 means PII exposure is a one-way function. Biometric, genomic, and behavioral data cannot be reset after a breach. This is the only meta-pattern with zero technical mitigation.",
      "supportingEvidence": 2
    },
    {
      "id": "CF3",
      "oldId": "Pattern3",
      "title": "Consent is Structurally Impossible at Scale",
      "description": "MC5 appears across 6 tracks with 3 distinct failure modes: developmental incapacity (children), scale incompatibility (billions of subjects), and retroactive impossibility (AI training). The dominant legal basis for privacy law is built on a foundation that cannot exist at modern scale.",
      "supportingEvidence": 6
    },
    {
      "id": "CF4",
      "oldId": "Pattern4",
      "title": "Opacity is Self-Reinforcing",
      "description": "MC6 creates a feedback loop with MC8: opacity prevents understanding, which prevents resistance, which allows opacity to persist. Unlike other dynamics, opacity is actively maintained by entities that benefit from it.",
      "supportingEvidence": 0
    },
    {
      "id": "CF5",
      "oldId": "Pattern5",
      "title": "The Technical-Legal Gap is Unbridgeable",
      "description": "MC9 and MC3 interact destructively: technical solutions cannot prove compliance, and legal requirements cannot specify what 'anonymous' means. Law and computer science define 'identifiable' using incompatible frameworks.",
      "supportingEvidence": 0
    },
    {
      "id": "CF6",
      "oldId": "Pattern6",
      "title": "Power Asymmetry is the Root Enabler",
      "description": "MC4 appears in 7 tracks and drives Loops 2, 7, and 8. The entity collecting PII designs the collection mechanism, consent interface, deletion process, and lobbies for the legal framework. This is not a bug — it is the business model.",
      "supportingEvidence": 4
    },
    {
      "id": "CF7",
      "oldId": "Pattern7",
      "title": "Children and Vulnerable Populations Bear Disproportionate Impact",
      "description": "Tracks 13, 11, and 14 converge on populations with the least ability to protect themselves. Loop 9 shows how these populations are trapped in mandatory surveillance systems with no exit.",
      "supportingEvidence": 15
    }
  ],
  "jurisdictionCoverage": [
    {
      "domainId": "PD1",
      "domainName": "Immutability & Irreversibility",
      "affectedJurisdictions": [
        "Albania",
        "Andorra",
        "Armenia",
        "Austria",
        "Azerbaijan",
        "Belarus",
        "Belgium",
        "Bosnia and Herzegovina",
        "Bulgaria",
        "Croatia",
        "Cyprus",
        "Czechia",
        "Denmark",
        "Estonia",
        "Faroe Islands",
        "Finland",
        "France",
        "French Guiana",
        "French Polynesia",
        "French Southern Territories",
        "Georgia",
        "Germany",
        "Gibraltar",
        "Greece",
        "Guadeloupe",
        "Guernsey",
        "Hungary",
        "Iceland",
        "Ireland",
        "Isle of Man",
        "Italy",
        "Jersey",
        "Kosovo",
        "Latvia",
        "Liechtenstein",
        "Lithuania",
        "Luxembourg",
        "Malta",
        "Martinique",
        "Mayotte",
        "Monaco",
        "Montenegro",
        "Netherlands (Kingdom of the)",
        "New Caledonia",
        "North Macedonia",
        "Norway",
        "Poland",
        "Portugal",
        "Romania",
        "Réunion",
        "Saint Barthélemy",
        "Saint Martin",
        "Saint Pierre and Miquelon",
        "San Marino",
        "Serbia",
        "Slovakia",
        "Slovenia",
        "Spain",
        "Sweden",
        "Switzerland",
        "Ukraine",
        "United Kingdom of Great Britain and Northern Ireland",
        "Vatican City",
        "Wallis and Futuna",
        "Åland Islands"
      ],
      "jurisdictionCount": 65,
      "regulations": [
        "GDPR Art. 9 (biometric/genetic)",
        "BIPA (Illinois)",
        "CCPA/CPRA"
      ]
    },
    {
      "domainId": "PD2",
      "domainName": "Linkability & Re-identification",
      "affectedJurisdictions": [
        "Albania",
        "Andorra",
        "Armenia",
        "Austria",
        "Azerbaijan",
        "Belarus",
        "Belgium",
        "Bosnia and Herzegovina",
        "Bulgaria",
        "Croatia",
        "Cyprus",
        "Czechia",
        "Denmark",
        "Estonia",
        "Faroe Islands",
        "Finland",
        "France",
        "French Guiana",
        "French Polynesia",
        "French Southern Territories",
        "Georgia",
        "Germany",
        "Gibraltar",
        "Greece",
        "Guadeloupe",
        "Guernsey",
        "Hungary",
        "Iceland",
        "Ireland",
        "Isle of Man",
        "Italy",
        "Jersey",
        "Kosovo",
        "Latvia",
        "Liechtenstein",
        "Lithuania",
        "Luxembourg",
        "Malta",
        "Martinique",
        "Mayotte",
        "Monaco",
        "Montenegro",
        "Netherlands (Kingdom of the)",
        "New Caledonia",
        "North Macedonia",
        "Norway",
        "Poland",
        "Portugal",
        "Romania",
        "Réunion",
        "Saint Barthélemy",
        "Saint Martin",
        "Saint Pierre and Miquelon",
        "San Marino",
        "Serbia",
        "Slovakia",
        "Slovenia",
        "Spain",
        "Sweden",
        "Switzerland",
        "Ukraine",
        "United Kingdom of Great Britain and Northern Ireland",
        "Vatican City",
        "Wallis and Futuna",
        "Åland Islands"
      ],
      "jurisdictionCount": 65,
      "regulations": [
        "GDPR Art. 5(1)(a) purpose limitation",
        "GDPR Art. 89 research exemptions",
        "HIPAA Safe Harbor"
      ]
    },
    {
      "domainId": "PD3",
      "domainName": "Regulatory Fragmentation",
      "affectedJurisdictions": [
        "Albania",
        "Andorra",
        "Armenia",
        "Austria",
        "Azerbaijan",
        "Belarus",
        "Belgium",
        "Bosnia and Herzegovina",
        "Brazil",
        "Bulgaria",
        "China",
        "Croatia",
        "Cyprus",
        "Czechia",
        "Denmark",
        "Estonia",
        "Faroe Islands",
        "Finland",
        "France",
        "French Guiana",
        "French Polynesia",
        "French Southern Territories",
        "Georgia",
        "Germany",
        "Gibraltar",
        "Greece",
        "Guadeloupe",
        "Guernsey",
        "Hungary",
        "Iceland",
        "Ireland",
        "Isle of Man",
        "Italy",
        "Japan",
        "Jersey",
        "Kosovo",
        "Latvia",
        "Liechtenstein",
        "Lithuania",
        "Luxembourg",
        "Malta",
        "Martinique",
        "Mayotte",
        "Monaco",
        "Montenegro",
        "Netherlands (Kingdom of the)",
        "New Caledonia",
        "North Macedonia",
        "Norway",
        "Poland",
        "Portugal",
        "Romania",
        "Réunion",
        "Saint Barthélemy",
        "Saint Martin",
        "Saint Pierre and Miquelon",
        "San Marino",
        "Serbia",
        "Slovakia",
        "Slovenia",
        "Spain",
        "Sweden",
        "Switzerland",
        "Ukraine",
        "United Kingdom of Great Britain and Northern Ireland",
        "Vatican City",
        "Wallis and Futuna",
        "Åland Islands"
      ],
      "jurisdictionCount": 68,
      "regulations": [
        "GDPR",
        "CCPA/CPRA",
        "LGPD (Brazil)",
        "PIPA (South Korea)",
        "DPDPA (India)",
        "PIPL (China)",
        "APPI (Japan)"
      ]
    },
    {
      "domainId": "PD4",
      "domainName": "Power & Resource Asymmetry",
      "affectedJurisdictions": [
        "Albania",
        "Andorra",
        "Armenia",
        "Austria",
        "Azerbaijan",
        "Belarus",
        "Belgium",
        "Bosnia and Herzegovina",
        "Bulgaria",
        "Croatia",
        "Cyprus",
        "Czechia",
        "Denmark",
        "Estonia",
        "Faroe Islands",
        "Finland",
        "France",
        "French Guiana",
        "French Polynesia",
        "French Southern Territories",
        "Georgia",
        "Germany",
        "Gibraltar",
        "Greece",
        "Guadeloupe",
        "Guernsey",
        "Hungary",
        "Iceland",
        "Ireland",
        "Isle of Man",
        "Italy",
        "Jersey",
        "Kosovo",
        "Latvia",
        "Liechtenstein",
        "Lithuania",
        "Luxembourg",
        "Malta",
        "Martinique",
        "Mayotte",
        "Monaco",
        "Montenegro",
        "Netherlands (Kingdom of the)",
        "New Caledonia",
        "North Macedonia",
        "Norway",
        "Poland",
        "Portugal",
        "Romania",
        "Réunion",
        "Saint Barthélemy",
        "Saint Martin",
        "Saint Pierre and Miquelon",
        "San Marino",
        "Serbia",
        "Slovakia",
        "Slovenia",
        "Spain",
        "Sweden",
        "Switzerland",
        "Ukraine",
        "United Kingdom of Great Britain and Northern Ireland",
        "Vatican City",
        "Wallis and Futuna",
        "Åland Islands"
      ],
      "jurisdictionCount": 65,
      "regulations": [
        "GDPR Art. 80 representative actions",
        "EU Digital Services Act",
        "US state privacy laws"
      ]
    },
    {
      "domainId": "PD5",
      "domainName": "Consent Failure",
      "affectedJurisdictions": [
        "Albania",
        "Andorra",
        "Armenia",
        "Austria",
        "Azerbaijan",
        "Belarus",
        "Belgium",
        "Bosnia and Herzegovina",
        "Bulgaria",
        "Croatia",
        "Cyprus",
        "Czechia",
        "Denmark",
        "Estonia",
        "Faroe Islands",
        "Finland",
        "France",
        "French Guiana",
        "French Polynesia",
        "French Southern Territories",
        "Georgia",
        "Germany",
        "Gibraltar",
        "Greece",
        "Guadeloupe",
        "Guernsey",
        "Hungary",
        "Iceland",
        "Ireland",
        "Isle of Man",
        "Italy",
        "Jersey",
        "Kosovo",
        "Latvia",
        "Liechtenstein",
        "Lithuania",
        "Luxembourg",
        "Malta",
        "Martinique",
        "Mayotte",
        "Monaco",
        "Montenegro",
        "Netherlands (Kingdom of the)",
        "New Caledonia",
        "North Macedonia",
        "Norway",
        "Poland",
        "Portugal",
        "Romania",
        "Réunion",
        "Saint Barthélemy",
        "Saint Martin",
        "Saint Pierre and Miquelon",
        "San Marino",
        "Serbia",
        "Slovakia",
        "Slovenia",
        "Spain",
        "Sweden",
        "Switzerland",
        "Ukraine",
        "United Kingdom of Great Britain and Northern Ireland",
        "Vatican City",
        "Wallis and Futuna",
        "Åland Islands"
      ],
      "jurisdictionCount": 65,
      "regulations": [
        "GDPR Art. 7 consent conditions",
        "ePrivacy Directive",
        "COPPA (children)",
        "FERPA (education)"
      ]
    },
    {
      "domainId": "PD6",
      "domainName": "Opacity & Information Asymmetry",
      "affectedJurisdictions": [
        "Albania",
        "Andorra",
        "Armenia",
        "Austria",
        "Azerbaijan",
        "Belarus",
        "Belgium",
        "Bosnia and Herzegovina",
        "Bulgaria",
        "Croatia",
        "Cyprus",
        "Czechia",
        "Denmark",
        "Estonia",
        "Faroe Islands",
        "Finland",
        "France",
        "French Guiana",
        "French Polynesia",
        "French Southern Territories",
        "Georgia",
        "Germany",
        "Gibraltar",
        "Greece",
        "Guadeloupe",
        "Guernsey",
        "Hungary",
        "Iceland",
        "Ireland",
        "Isle of Man",
        "Italy",
        "Jersey",
        "Kosovo",
        "Latvia",
        "Liechtenstein",
        "Lithuania",
        "Luxembourg",
        "Malta",
        "Martinique",
        "Mayotte",
        "Monaco",
        "Montenegro",
        "Netherlands (Kingdom of the)",
        "New Caledonia",
        "North Macedonia",
        "Norway",
        "Poland",
        "Portugal",
        "Romania",
        "Réunion",
        "Saint Barthélemy",
        "Saint Martin",
        "Saint Pierre and Miquelon",
        "San Marino",
        "Serbia",
        "Slovakia",
        "Slovenia",
        "Spain",
        "Sweden",
        "Switzerland",
        "Ukraine",
        "United Kingdom of Great Britain and Northern Ireland",
        "Vatican City",
        "Wallis and Futuna",
        "Åland Islands"
      ],
      "jurisdictionCount": 65,
      "regulations": [
        "GDPR Art. 13-14 transparency",
        "GDPR Art. 22 automated decisions",
        "EU AI Act"
      ]
    },
    {
      "domainId": "PD7",
      "domainName": "Dual-Use & Utility-Privacy Tension",
      "affectedJurisdictions": [
        "Albania",
        "Andorra",
        "Armenia",
        "Austria",
        "Azerbaijan",
        "Belarus",
        "Belgium",
        "Bosnia and Herzegovina",
        "Bulgaria",
        "Croatia",
        "Cyprus",
        "Czechia",
        "Denmark",
        "Estonia",
        "Faroe Islands",
        "Finland",
        "France",
        "French Guiana",
        "French Polynesia",
        "French Southern Territories",
        "Georgia",
        "Germany",
        "Gibraltar",
        "Greece",
        "Guadeloupe",
        "Guernsey",
        "Hungary",
        "Iceland",
        "Ireland",
        "Isle of Man",
        "Italy",
        "Jersey",
        "Kosovo",
        "Latvia",
        "Liechtenstein",
        "Lithuania",
        "Luxembourg",
        "Malta",
        "Martinique",
        "Mayotte",
        "Monaco",
        "Montenegro",
        "Netherlands (Kingdom of the)",
        "New Caledonia",
        "North Macedonia",
        "Norway",
        "Poland",
        "Portugal",
        "Romania",
        "Réunion",
        "Saint Barthélemy",
        "Saint Martin",
        "Saint Pierre and Miquelon",
        "San Marino",
        "Serbia",
        "Slovakia",
        "Slovenia",
        "Spain",
        "Sweden",
        "Switzerland",
        "Ukraine",
        "United Kingdom of Great Britain and Northern Ireland",
        "Vatican City",
        "Wallis and Futuna",
        "Åland Islands"
      ],
      "jurisdictionCount": 65,
      "regulations": [
        "EU AI Act risk classification",
        "GDPR Art. 35 DPIA",
        "US CLOUD Act"
      ]
    },
    {
      "domainId": "PD8",
      "domainName": "Behavioral Exploitation & Coercion",
      "affectedJurisdictions": [
        "Albania",
        "Andorra",
        "Armenia",
        "Austria",
        "Azerbaijan",
        "Belarus",
        "Belgium",
        "Bosnia and Herzegovina",
        "Bulgaria",
        "Croatia",
        "Cyprus",
        "Czechia",
        "Denmark",
        "Estonia",
        "Faroe Islands",
        "Finland",
        "France",
        "French Guiana",
        "French Polynesia",
        "French Southern Territories",
        "Georgia",
        "Germany",
        "Gibraltar",
        "Greece",
        "Guadeloupe",
        "Guernsey",
        "Hungary",
        "Iceland",
        "Ireland",
        "Isle of Man",
        "Italy",
        "Jersey",
        "Kosovo",
        "Latvia",
        "Liechtenstein",
        "Lithuania",
        "Luxembourg",
        "Malta",
        "Martinique",
        "Mayotte",
        "Monaco",
        "Montenegro",
        "Netherlands (Kingdom of the)",
        "New Caledonia",
        "North Macedonia",
        "Norway",
        "Poland",
        "Portugal",
        "Romania",
        "Réunion",
        "Saint Barthélemy",
        "Saint Martin",
        "Saint Pierre and Miquelon",
        "San Marino",
        "Serbia",
        "Slovakia",
        "Slovenia",
        "Spain",
        "Sweden",
        "Switzerland",
        "Ukraine",
        "United Kingdom of Great Britain and Northern Ireland",
        "Vatican City",
        "Wallis and Futuna",
        "Åland Islands"
      ],
      "jurisdictionCount": 65,
      "regulations": [
        "GDPR Art. 5(1)(a) fairness",
        "EU Digital Markets Act",
        "FTC Section 5"
      ]
    },
    {
      "domainId": "PD9",
      "domainName": "Technical Complexity & Detection Limits",
      "affectedJurisdictions": [
        "Albania",
        "Andorra",
        "Armenia",
        "Austria",
        "Azerbaijan",
        "Belarus",
        "Belgium",
        "Bosnia and Herzegovina",
        "Bulgaria",
        "Croatia",
        "Cyprus",
        "Czechia",
        "Denmark",
        "Estonia",
        "Faroe Islands",
        "Finland",
        "France",
        "French Guiana",
        "French Polynesia",
        "French Southern Territories",
        "Georgia",
        "Germany",
        "Gibraltar",
        "Greece",
        "Guadeloupe",
        "Guernsey",
        "Hungary",
        "Iceland",
        "Ireland",
        "Isle of Man",
        "Italy",
        "Jersey",
        "Kosovo",
        "Latvia",
        "Liechtenstein",
        "Lithuania",
        "Luxembourg",
        "Malta",
        "Martinique",
        "Mayotte",
        "Monaco",
        "Montenegro",
        "Netherlands (Kingdom of the)",
        "New Caledonia",
        "North Macedonia",
        "Norway",
        "Poland",
        "Portugal",
        "Romania",
        "Réunion",
        "Saint Barthélemy",
        "Saint Martin",
        "Saint Pierre and Miquelon",
        "San Marino",
        "Serbia",
        "Slovakia",
        "Slovenia",
        "Spain",
        "Sweden",
        "Switzerland",
        "Ukraine",
        "United Kingdom of Great Britain and Northern Ireland",
        "Vatican City",
        "Wallis and Futuna",
        "Åland Islands"
      ],
      "jurisdictionCount": 65,
      "regulations": [
        "GDPR Art. 25 privacy by design",
        "GDPR Art. 32 security measures",
        "ISO 27701",
        "ISO 27001"
      ]
    },
    {
      "domainId": "PD10",
      "domainName": "Market & Structural Failures",
      "affectedJurisdictions": [
        "Albania",
        "Andorra",
        "Armenia",
        "Austria",
        "Azerbaijan",
        "Belarus",
        "Belgium",
        "Bosnia and Herzegovina",
        "Bulgaria",
        "Croatia",
        "Cyprus",
        "Czechia",
        "Denmark",
        "Estonia",
        "Faroe Islands",
        "Finland",
        "France",
        "French Guiana",
        "French Polynesia",
        "French Southern Territories",
        "Georgia",
        "Germany",
        "Gibraltar",
        "Greece",
        "Guadeloupe",
        "Guernsey",
        "Hungary",
        "Iceland",
        "Ireland",
        "Isle of Man",
        "Italy",
        "Jersey",
        "Kosovo",
        "Latvia",
        "Liechtenstein",
        "Lithuania",
        "Luxembourg",
        "Malta",
        "Martinique",
        "Mayotte",
        "Monaco",
        "Montenegro",
        "Netherlands (Kingdom of the)",
        "New Caledonia",
        "North Macedonia",
        "Norway",
        "Poland",
        "Portugal",
        "Romania",
        "Réunion",
        "Saint Barthélemy",
        "Saint Martin",
        "Saint Pierre and Miquelon",
        "San Marino",
        "Serbia",
        "Slovakia",
        "Slovenia",
        "Spain",
        "Sweden",
        "Switzerland",
        "Ukraine",
        "United Kingdom of Great Britain and Northern Ireland",
        "Vatican City",
        "Wallis and Futuna",
        "Åland Islands"
      ],
      "jurisdictionCount": 65,
      "regulations": [
        "GDPR Art. 83 penalties",
        "EU Data Governance Act",
        "CCPA private right of action"
      ]
    }
  ],
  "products": [
    {
      "name": "cloak.business",
      "description": "390+ entities, 317 custom regex, image OCR — deepest detection layer",
      "domainRefs": [
        "PD9",
        "PD1",
        "PD2"
      ],
      "coverageNote": "Air-gapped option eliminates network-based power asymmetry entirely"
    },
    {
      "name": "anonym.legal",
      "description": "260+ entities, 3-layer detection, Chrome extension — broadest access",
      "domainRefs": [
        "PD9",
        "PD5",
        "PD6"
      ],
      "coverageNote": "6 platforms including browser extension; €3 entry price addresses MC10 cost exclusion"
    },
    {
      "name": "anonym.plus",
      "description": "200+ entities, Ed25519 licensing, 100% local processing",
      "domainRefs": [
        "PD4",
        "PD9",
        "PD7"
      ],
      "coverageNote": "Offline desktop shifts power to individual; zero-knowledge architecture means even vendor cannot access data"
    },
    {
      "name": "anonymize.solutions",
      "description": "Umbrella platform, 42 pages, 3 deployment models",
      "domainRefs": [
        "PD10",
        "PD9",
        "PD3"
      ],
      "coverageNote": "SaaS/Managed/Self-Managed tiers address vendor fragmentation and cost exclusion across organization sizes"
    }
  ],
  "categories": [
    {
      "name": "Legal Advocacy",
      "count": 10
    },
    {
      "name": "Policy / Lobbying",
      "count": 10
    },
    {
      "name": "Data Deletion Rights",
      "count": 10
    },
    {
      "name": "Surveillance Watchdog",
      "count": 10
    },
    {
      "name": "Education / Awareness",
      "count": 10
    },
    {
      "name": "Digital Security Helpline",
      "count": 10
    },
    {
      "name": "Regional Digital Rights",
      "count": 10
    },
    {
      "name": "Anonymous Browsing / Network",
      "count": 10
    },
    {
      "name": "Secure Communications / E2EE",
      "count": 10
    },
    {
      "name": "Browser Privacy / Anti-Tracking",
      "count": 10
    },
    {
      "name": "Infrastructure / OS Security",
      "count": 10
    },
    {
      "name": "Whistleblower Protection",
      "count": 10
    },
    {
      "name": "PII Detection / Anonymization Tools",
      "count": 10
    },
    {
      "name": "Differential Privacy / Synthetic Data",
      "count": 10
    },
    {
      "name": "Research / Academia",
      "count": 10
    },
    {
      "name": "General Developer Communities",
      "count": 10
    },
    {
      "name": "NER Detection Accuracy",
      "count": 10
    },
    {
      "name": "Multilingual & Cross-Cultural",
      "count": 10
    },
    {
      "name": "Context & Coreference Resolution",
      "count": 10
    },
    {
      "name": "Domain Adaptation & Transfer Learning",
      "count": 10
    },
    {
      "name": "False Positives & Over-Redaction",
      "count": 10
    },
    {
      "name": "Multimodal & Unstructured Data",
      "count": 10
    },
    {
      "name": "Adversarial Attacks & Edge Cases",
      "count": 10
    },
    {
      "name": "Scalability & Performance",
      "count": 10
    },
    {
      "name": "Re-identification & Privacy Guarantees",
      "count": 10
    },
    {
      "name": "Production Deployment & Compliance",
      "count": 10
    },
    {
      "name": "Commercial Tool Limitations",
      "count": 10
    },
    {
      "name": "Open-Source Ecosystem Gaps",
      "count": 10
    },
    {
      "name": "Cost & Accessibility Barriers",
      "count": 10
    },
    {
      "name": "Integration & Pipeline Fragmentation",
      "count": 10
    },
    {
      "name": "Multilingual & Cross-Cultural Failures",
      "count": 10
    },
    {
      "name": "Document & Multimodal Gaps",
      "count": 10
    },
    {
      "name": "Cloud Trust & Data Sovereignty",
      "count": 10
    },
    {
      "name": "Regulatory Compliance Gaps",
      "count": 10
    },
    {
      "name": "Domain-Specific Failures",
      "count": 10
    },
    {
      "name": "Market Architecture Deficiencies",
      "count": 10
    },
    {
      "name": "Quasi-Identifier Linkage",
      "count": 10
    },
    {
      "name": "Auxiliary Data Exploitation",
      "count": 10
    },
    {
      "name": "Temporal & Behavioral Correlation",
      "count": 10
    },
    {
      "name": "Network & Graph De-anonymization",
      "count": 10
    },
    {
      "name": "Machine Learning Re-identification",
      "count": 10
    },
    {
      "name": "Genomic & Biometric Re-identification",
      "count": 10
    },
    {
      "name": "Location & Mobility Tracking",
      "count": 10
    },
    {
      "name": "Aggregate & Statistical Inference",
      "count": 10
    },
    {
      "name": "Text & Document De-anonymization",
      "count": 10
    },
    {
      "name": "Synthetic & Generative Data Attacks",
      "count": 10
    },
    {
      "name": "Fine Deterrence Failure",
      "count": 10
    },
    {
      "name": "DPO Authority & Independence Gaps",
      "count": 10
    },
    {
      "name": "Consent Mechanism Theater",
      "count": 10
    },
    {
      "name": "Cross-Border Enforcement Gaps",
      "count": 10
    },
    {
      "name": "Audit & Certification Limitations",
      "count": 10
    },
    {
      "name": "Regulatory Capture & Industry Lobbying",
      "count": 10
    },
    {
      "name": "Breach Notification Failures",
      "count": 10
    },
    {
      "name": "Children's Privacy Enforcement",
      "count": 10
    },
    {
      "name": "Algorithmic Accountability Gaps",
      "count": 10
    },
    {
      "name": "Class Action & Litigation Barriers",
      "count": 10
    },
    {
      "name": "Privacy Tool UX Friction",
      "count": 10
    },
    {
      "name": "Default Settings & Dark Patterns",
      "count": 10
    },
    {
      "name": "Mental Model Mismatches",
      "count": 10
    },
    {
      "name": "Trust Calibration Failures",
      "count": 10
    },
    {
      "name": "Privacy Fatigue & Learned Helplessness",
      "count": 10
    },
    {
      "name": "Technical Literacy Barriers",
      "count": 10
    },
    {
      "name": "Mobile Privacy Complexity",
      "count": 10
    },
    {
      "name": "Password & Authentication Friction",
      "count": 10
    },
    {
      "name": "Social Pressure & Network Effects",
      "count": 10
    },
    {
      "name": "Accessibility & Inclusion Gaps",
      "count": 10
    },
    {
      "name": "Data Collection Scale & Scope",
      "count": 10
    },
    {
      "name": "Broker Aggregation & Profiling",
      "count": 10
    },
    {
      "name": "People-Search Site Proliferation",
      "count": 10
    },
    {
      "name": "Ad-Tech Pipeline Opacity",
      "count": 10
    },
    {
      "name": "Shadow Profiles & Inferred Data",
      "count": 10
    },
    {
      "name": "Government Procurement of Broker Data",
      "count": 10
    },
    {
      "name": "Data Marketplace Regulation Gaps",
      "count": 10
    },
    {
      "name": "Cross-Device & Cross-Platform Tracking",
      "count": 10
    },
    {
      "name": "Opt-Out Mechanism Failures",
      "count": 10
    },
    {
      "name": "International Data Broker Arbitrage",
      "count": 10
    },
    {
      "name": "Financial Sector PII Regulations",
      "count": 10
    },
    {
      "name": "Government & Public Sector PII Regulations",
      "count": 10
    },
    {
      "name": "Healthcare PII Regulations",
      "count": 10
    },
    {
      "name": "Education Sector PII Regulations",
      "count": 10
    },
    {
      "name": "Technology & Development Sector PII Regulations",
      "count": 10
    },
    {
      "name": "Business & Enterprise PII Regulations",
      "count": 10
    },
    {
      "name": "Energy & Utilities PII Regulations",
      "count": 10
    },
    {
      "name": "Telecommunications PII Regulations",
      "count": 10
    },
    {
      "name": "Cross-Border & Trade PII Regulations",
      "count": 10
    },
    {
      "name": "Emerging & Sector-Specific PII Regulations",
      "count": 10
    },
    {
      "name": "EU-US Transfer Mechanisms",
      "count": 10
    },
    {
      "name": "Data Localization Mandates",
      "count": 10
    },
    {
      "name": "CLOUD Act & Government Access",
      "count": 10
    },
    {
      "name": "Adequacy Decisions & Fragility",
      "count": 10
    },
    {
      "name": "Transfer Impact Assessments",
      "count": 10
    },
    {
      "name": "Binding Corporate Rules & Certification",
      "count": 10
    },
    {
      "name": "Cloud Provider Jurisdiction Shopping",
      "count": 10
    },
    {
      "name": "Surveillance State Access",
      "count": 10
    },
    {
      "name": "Cross-Border Enforcement Cooperation",
      "count": 10
    },
    {
      "name": "Emerging Frameworks & Digital Trade",
      "count": 10
    },
    {
      "name": "Training Data Memorization & Extraction",
      "count": 10
    },
    {
      "name": "Model Inversion & Attribute Inference",
      "count": 10
    },
    {
      "name": "Synthetic Data Privacy Illusions",
      "count": 10
    },
    {
      "name": "Federated Learning Privacy Gaps",
      "count": 10
    },
    {
      "name": "Embedding Space Identity Leakage",
      "count": 10
    },
    {
      "name": "Data Poisoning & Privacy Attacks",
      "count": 10
    },
    {
      "name": "Consent & Provenance in Training Pipelines",
      "count": 10
    },
    {
      "name": "Foundation Model PII Propagation",
      "count": 10
    },
    {
      "name": "Fine-Tuning & Transfer Learning Leakage",
      "count": 10
    },
    {
      "name": "Regulatory & Accountability Gaps",
      "count": 10
    },
    {
      "name": "Genomic Re-identification",
      "count": 10
    },
    {
      "name": "Clinical Data De-identification Failure",
      "count": 10
    },
    {
      "name": "Medical Device & Wearable Data Leakage",
      "count": 10
    },
    {
      "name": "Mental Health & Behavioral Data Sensitivity",
      "count": 10
    },
    {
      "name": "Familial & Hereditary Information Spillover",
      "count": 10
    },
    {
      "name": "Biobank & Research Data Governance",
      "count": 10
    },
    {
      "name": "Pharmaceutical & Clinical Trial Privacy",
      "count": 10
    },
    {
      "name": "Health Insurance & Discrimination Risk",
      "count": 10
    },
    {
      "name": "Cross-Border Health Data Flows",
      "count": 10
    },
    {
      "name": "AI Diagnostics & Predictive Health Privacy",
      "count": 10
    },
    {
      "name": "Facial Recognition & Mass Surveillance",
      "count": 10
    },
    {
      "name": "Voice & Speaker Recognition",
      "count": 10
    },
    {
      "name": "Fingerprint & Palmprint Systems",
      "count": 10
    },
    {
      "name": "Iris & Retinal Scanning",
      "count": 10
    },
    {
      "name": "Gait, Behavior & Movement Analysis",
      "count": 10
    },
    {
      "name": "DNA & Genomic Identifiers",
      "count": 10
    },
    {
      "name": "Biometric Database Breaches",
      "count": 10
    },
    {
      "name": "Consent & Opt-Out Impossibility",
      "count": 10
    },
    {
      "name": "Bias & Discrimination",
      "count": 10
    },
    {
      "name": "Regulatory Fragmentation",
      "count": 10
    },
    {
      "name": "EdTech Surveillance & School Devices",
      "count": 10
    },
    {
      "name": "COPPA Enforcement Failures",
      "count": 10
    },
    {
      "name": "Age Verification Paradox",
      "count": 10
    },
    {
      "name": "Social Media & Minors",
      "count": 10
    },
    {
      "name": "Parental Consent Theater",
      "count": 10
    },
    {
      "name": "Student Data Broker Market",
      "count": 10
    },
    {
      "name": "Behavioral Profiling of Children",
      "count": 10
    },
    {
      "name": "Gaming & Virtual World Data",
      "count": 10
    },
    {
      "name": "Child Identity Theft",
      "count": 10
    },
    {
      "name": "Regulatory Gaps",
      "count": 10
    },
    {
      "name": "Payment Card & Account Number Exposure",
      "count": 10
    },
    {
      "name": "Transaction Pattern Profiling",
      "count": 10
    },
    {
      "name": "Credit Scoring & Financial Profiling",
      "count": 10
    },
    {
      "name": "Open Banking & API Data Leakage",
      "count": 10
    },
    {
      "name": "Cryptocurrency & Blockchain Pseudonymity Failures",
      "count": 10
    },
    {
      "name": "Financial Fraud & Identity Theft Vectors",
      "count": 10
    },
    {
      "name": "Insurance & Actuarial Data Discrimination",
      "count": 10
    },
    {
      "name": "FinTech & Embedded Finance Data Practices",
      "count": 10
    },
    {
      "name": "Cross-Border Financial Data Compliance",
      "count": 10
    },
    {
      "name": "Wealth & Income Inference Attacks",
      "count": 10
    },
    {
      "name": "Multi-Language Support (48 Languages)",
      "count": 6
    },
    {
      "name": "MCP Server Integration",
      "count": 6
    },
    {
      "name": "GDPR / ISO 27001 Compliance",
      "count": 6
    },
    {
      "name": "Zero-Knowledge Authentication",
      "count": 5
    },
    {
      "name": "Hybrid Recognizer (Regex + NLP + Transformers)",
      "count": 5
    },
    {
      "name": "Office Add-in (Word & Excel)",
      "count": 5
    },
    {
      "name": "Desktop Application (Offline / Air-Gapped)",
      "count": 5
    },
    {
      "name": "Chrome Extension (JIT Anonymization)",
      "count": 5
    },
    {
      "name": "Reversible Encryption (AES-256-GCM)",
      "count": 5
    },
    {
      "name": "260+ Entity Types (75+ Countries)",
      "count": 5
    },
    {
      "name": "Custom Entity Creation",
      "count": 5
    },
    {
      "name": "Token-Based Pricing with Free Tier",
      "count": 4
    },
    {
      "name": "Batch Processing (1–5,000 Files)",
      "count": 4
    },
    {
      "name": "Presets System",
      "count": 4
    },
    {
      "name": "Multi-Format Document Support",
      "count": 4
    },
    {
      "name": "Text-Based Image PII Detection",
      "count": 4
    },
    {
      "name": "Cross-Platform Consistency",
      "count": 4
    },
    {
      "name": "Microsoft Presidio Foundation",
      "count": 3
    },
    {
      "name": "Real-Time Detection",
      "count": 3
    }
  ],
  "comparisonAudit": {
    "clusters": [
      {
        "oldId": "MC1",
        "oldName": "Immutability & Irreversibility",
        "newId": "PD1",
        "newName": "Immutability & Irreversibility",
        "status": "preserved",
        "driverCount": 8
      },
      {
        "oldId": "MC2",
        "oldName": "Linkability & Re-identification",
        "newId": "PD2",
        "newName": "Linkability & Re-identification",
        "status": "preserved",
        "driverCount": 9
      },
      {
        "oldId": "MC3",
        "oldName": "Regulatory Fragmentation",
        "newId": "PD3",
        "newName": "Regulatory Fragmentation",
        "status": "preserved",
        "driverCount": 12
      },
      {
        "oldId": "MC4",
        "oldName": "Power & Resource Asymmetry",
        "newId": "PD4",
        "newName": "Power & Resource Asymmetry",
        "status": "preserved",
        "driverCount": 10
      },
      {
        "oldId": "MC5",
        "oldName": "Consent Failure",
        "newId": "PD5",
        "newName": "Consent Failure",
        "status": "preserved",
        "driverCount": 9
      },
      {
        "oldId": "MC6",
        "oldName": "Opacity & Information Asymmetry",
        "newId": "PD6",
        "newName": "Opacity & Information Asymmetry",
        "status": "preserved",
        "driverCount": 8
      },
      {
        "oldId": "MC7",
        "oldName": "Dual-Use & Utility-Privacy Tension",
        "newId": "PD7",
        "newName": "Dual-Use & Utility-Privacy Tension",
        "status": "preserved",
        "driverCount": 6
      },
      {
        "oldId": "MC8",
        "oldName": "Behavioral Exploitation & Coercion",
        "newId": "PD8",
        "newName": "Behavioral Exploitation & Coercion",
        "status": "preserved",
        "driverCount": 10
      },
      {
        "oldId": "MC9",
        "oldName": "Technical Complexity & Detection Limits",
        "newId": "PD9",
        "newName": "Technical Complexity & Detection Limits",
        "status": "preserved",
        "driverCount": 10
      },
      {
        "oldId": "MC10",
        "oldName": "Market & Structural Failures",
        "newId": "PD10",
        "newName": "Market & Structural Failures",
        "status": "preserved",
        "driverCount": 16
      }
    ],
    "loops": [
      {
        "oldId": "L1",
        "oldName": "The Consent-Coercion Spiral",
        "newId": "RC1",
        "newName": "The Consent-Coercion Spiral",
        "status": "preserved"
      },
      {
        "oldId": "L2",
        "oldName": "The Regulatory Arbitrage Engine",
        "newId": "RC2",
        "newName": "The Regulatory Arbitrage Engine",
        "status": "preserved"
      },
      {
        "oldId": "L3",
        "oldName": "The Irreversibility Ratchet",
        "newId": "RC3",
        "newName": "The Irreversibility Ratchet",
        "status": "preserved"
      },
      {
        "oldId": "L4",
        "oldName": "The Opacity-Helplessness Cascade",
        "newId": "RC4",
        "newName": "The Opacity-Helplessness Cascade",
        "status": "preserved"
      },
      {
        "oldId": "L5",
        "oldName": "The Technical Impossibility Trap",
        "newId": "RC5",
        "newName": "The Technical Impossibility Trap",
        "status": "preserved"
      },
      {
        "oldId": "L6",
        "oldName": "The Immutable PII Cascade",
        "newId": "RC6",
        "newName": "The Immutable PII Cascade",
        "status": "preserved"
      },
      {
        "oldId": "L7",
        "oldName": "The Power Concentration Vortex",
        "newId": "RC7",
        "newName": "The Power Concentration Vortex",
        "status": "preserved"
      },
      {
        "oldId": "L8",
        "oldName": "The Surveillance Enablement Circuit",
        "newId": "RC8",
        "newName": "The Surveillance Enablement Circuit",
        "status": "preserved"
      },
      {
        "oldId": "L9",
        "oldName": "The Exploitation-Exclusion Trap",
        "newId": "RC9",
        "newName": "The Exploitation-Exclusion Trap",
        "status": "preserved"
      },
      {
        "oldId": "L10",
        "oldName": "The AI Training Flywheel",
        "newId": "RC10",
        "newName": "The AI Training Flywheel",
        "status": "preserved"
      },
      {
        "oldId": "L11",
        "oldName": "The Detection Arms Race",
        "newId": "RC11",
        "newName": "The Detection Arms Race",
        "status": "preserved"
      },
      {
        "oldId": "L12",
        "oldName": "The Trust Collapse Spiral",
        "newId": "RC12",
        "newName": "The Trust Collapse Spiral",
        "status": "preserved"
      }
    ],
    "patterns": [
      {
        "oldId": "Pattern1",
        "oldName": "Regulatory Fragmentation is the Most Pervasive Dynamic",
        "newId": "CF1",
        "newName": "Regulatory Fragmentation is the Most Pervasive Dynamic",
        "status": "preserved"
      },
      {
        "oldId": "Pattern2",
        "oldName": "Immutability Creates Permanent Vulnerability",
        "newId": "CF2",
        "newName": "Immutability Creates Permanent Vulnerability",
        "status": "preserved"
      },
      {
        "oldId": "Pattern3",
        "oldName": "Consent is Structurally Impossible at Scale",
        "newId": "CF3",
        "newName": "Consent is Structurally Impossible at Scale",
        "status": "preserved"
      },
      {
        "oldId": "Pattern4",
        "oldName": "Opacity is Self-Reinforcing",
        "newId": "CF4",
        "newName": "Opacity is Self-Reinforcing",
        "status": "preserved"
      },
      {
        "oldId": "Pattern5",
        "oldName": "The Technical-Legal Gap is Unbridgeable",
        "newId": "CF5",
        "newName": "The Technical-Legal Gap is Unbridgeable",
        "status": "preserved"
      },
      {
        "oldId": "Pattern6",
        "oldName": "Power Asymmetry is the Root Enabler",
        "newId": "CF6",
        "newName": "Power Asymmetry is the Root Enabler",
        "status": "preserved"
      },
      {
        "oldId": "Pattern7",
        "oldName": "Children and Vulnerable Populations Bear Disproportionate Impact",
        "newId": "CF7",
        "newName": "Children and Vulnerable Populations Bear Disproportionate Impact",
        "status": "preserved"
      }
    ]
  }
}