Review the definition and exclusions of “Confidential Information” in the NDA against [PolicyName] and mapped [DataCategories] (e.g., Restricted, Internal, Public). For each category, specify how disclosure, handling, storage, and return/destruction obligations should be reflected contractually for [BusinessUnit]. Address carve-outs (e.g., public domain, independently developed, compelled disclosure) and align with [Regulation] requirements.
Output:
• Mapping Table (Markdown) with columns: Policy Classification, NDA Clause Reference, Handling Requirements, Minimum Security Controls, Breach Consequences, Exception Process ([ExceptionProcess]).
• Clause Language Recommendations (bullet points) with tracked drafting notes.
• Decision Log capturing trade-offs, including business rationales and risk sign-offs.
• Testing Scenarios (3–5) to validate practical applicability (e.g., mixed datasets).
Conclude with measurable acceptance criteria (e.g., 100% alignment of high-risk categories) and a plan to socialize updates.