Confidentiality Declarations

Confidentiality declarations are a legal prerequisite for driver honoraria at Blindeforbundet and a broader compliance need across organizations handling personal data on behalf of vulnerable members. Today these declarations are paper-based and chronically out of sync with active volunteer rosters, creating real GDPR exposure. Digitising the declaration alongside the expense flow guarantees a current signed declaration exists before any sensitive-data-bearing reimbursement is processed, gives admins an auditable trail per volunteer and per declaration version, and prevents payouts to volunteers who have not (re)accepted the active declaration.

Implement a versioned declaration document model - admin uploads new declaration text and bumps the version; each user acceptance is stored with user_id, declaration version, timestamp, and IP/device context for audit. The mobile app prompts the user to accept the active version when it differs from what they last accepted, gating relevant expense-related flows until acceptance is recorded. Acceptance records are immutable; revoking is modeled as a new event rather than a delete. The declaration is co-located in the expense-reimbursement module because driver-honorarium claims are the primary trigger.