# Conflicting Laws Management Record — Zenith Global Enterprises

## Conflict Register

| ID | Category | Jurisdictions | Conflict Description | Resolution | Risk | Review |
|----|----------|--------------|---------------------|------------|------|--------|
| CON-001 | Data localisation | China, EU | CIIO data must stay in PRC; EU HQ needs access | Local storage + CAC-approved transfer | Medium | Mar 2027 |
| CON-002 | Consent standards | China, EU, Korea | Consent default (PIPL) vs legitimate interest (GDPR) | Global consent + legitimate interest where available | Low | Mar 2027 |
| CON-003 | Children's age | India, EU, China, Korea, Thailand | Age thresholds 10-18 | Global 18 threshold | Low | Mar 2027 |
| CON-004 | Breach timelines | EU, Singapore, Australia | 72h vs 30-day assessment | Two-track notification | Low | Mar 2027 |
| CON-005 | Legitimate interest | EU, China, India, Singapore | Available vs not available | Dual-basis approach | Medium | Mar 2027 |

## Resolution Decision Log

| Date | Conflict | Decision | Decision Maker | Legal Review |
|------|----------|----------|---------------|-------------|
| 1 Jan 2026 | CON-001 | Implement local PRC storage with CAC transfer mechanism | CPO | PRC counsel approved |
| 1 Jan 2026 | CON-003 | Apply age 18 globally | Privacy Steering Committee | Multi-jurisdiction counsel reviewed |
| 1 Jan 2026 | CON-004 | Implement two-track breach notification | CPO | Global counsel approved |

## Next Review: September 2026