Fides: Relax Legal Basis for Transfers (#4049)

CHANGELOG.md

@@ -21,6 +21,7 @@ The types of changes are:
 
 - Added new Performance-related nox commands and included them as part of the CI suite [#3997](https://github.com/ethyca/fides/pull/3997)
 - Added dictionary suggestions for data uses [4035](https://github.com/ethyca/fides/pull/4035)
+- Relax system legal basis for transfers to be any string [#4049](https://github.com/ethyca/fides/pull/4049)
 
 ## [2.19.0](https://github.com/ethyca/fides/compare/2.18.0...2.19.0)
 

clients/admin-ui/src/features/system/SystemInformationFormSelectOptions.ts

@@ -7,11 +7,16 @@ export const legalBasisForProfilingOptions = [
   label: opt,
 }));
 
+// Backend technically allows any string
 export const legalBasisForTransferOptions = [
   {
     value: "Adequacy Decision",
     label: "Adequacy decision",
   },
+  {
+    value: "Supplementary measures",
+    label: "Supplementary measures",
+  },
   {
     value: "SCCs",
     label: "Standard contractual clauses",

requirements.txt

@@ -12,7 +12,7 @@ expandvars==0.9.0
 fastapi[all]==0.89.1
 fastapi-caching[redis]==0.3.0
 fastapi-pagination[sqlalchemy]==0.11.4
-fideslang==1.4.5
+fideslang==1.4.6
 fideslog==1.2.10
 firebase-admin==5.3.0
 GitPython==3.1.35

tests/ctl/core/test_api.py

@@ -1061,7 +1061,12 @@ def system_update_request_body_with_new_dictionary_fields(
             uses_profiling=True,
             legal_basis_for_profiling=["Authorised by law", "Contract"],
             does_international_transfers=True,
-            legal_basis_for_transfers=["Adequacy Decision", "BCRs"],
+            legal_basis_for_transfers=[
+                "Adequacy Decision",
+                "BCRs",
+                "Supplementary Measures",
+                "Unknown legal basis",
+            ],
             requires_data_protection_assessments=True,
             dpa_location="https://www.example.com/dpa",
             dpa_progress="pending",
@@ -1491,7 +1496,12 @@ def test_system_update_dictionary_fields(
         assert system.uses_profiling is True
         assert system.legal_basis_for_profiling == ["Authorised by law", "Contract"]
         assert system.does_international_transfers is True
-        assert system.legal_basis_for_transfers == ["Adequacy Decision", "BCRs"]
+        assert system.legal_basis_for_transfers == [
+            "Adequacy Decision",
+            "BCRs",
+            "Supplementary Measures",
+            "Unknown legal basis",
+        ]
         assert system.requires_data_protection_assessments is True
         assert system.dpa_location == "https://www.example.com/dpa"
         assert system.dpa_progress == "pending"