{
  "summary": "DLP can now automatically detect the 9 GDPR Article 9/10 \"special category\" personal-data types (health, biometric, genetic, ethnic origin, political opinion, religious belief, trade union membership, sexual orientation, criminal record) via new built-in keyword detectors, complementing the existing checksum-validated ones (email, national ID, financial); each hit is verified by Allod VRM's own local AI before ever reaching a DPO's review queue, so the underlying keyword match's higher false-positive rate never floods that queue with noise. The DLP rule editor's Tag field is now directly editable from the UI instead of only via hand-edited config, including the \"PII:category_key\" granular-subtag convention that lets Allod VRM turn a recognized tag into a reviewed RoPA suggestion. Allod VRM's AI-assisted Informationstaggar page can now manage custom YARA rules over a dedicated peer-authenticated API without needing an admin session, and a system's approved-data-tag policy is now enforced in real time at transfer time - a mismatched upload or download is blocked immediately instead of only being flagged by VRM's periodic risk-engine sweep hours later. The firewall admin UI gains a rule type for matching on Suricata's own signature classification, and custom Suricata/YARA rule content management moves to API-only, with the engine's on/off toggle relocated to Settings > Proxy. Also exposes the existing match:yara_rule DLP condition in the rule editor and removes a stale ASHFP1 inspect option that no longer does anything."
}