16. Governance, Compliance & Standards¶

16.1 Data Governance — Property Domain¶

Area	Policy
Data Classification	Public (zoning maps), Internal (applications), Confidential (ownership records, financials), Top Secret (court orders)
Data Retention	Property records: permanent (legal register); Transactions: 25 years; Applications: 10 years; Logs: 3 years
Data Residency	All property PII stored exclusively in KRG-controlled datacenters
Consent Management	Explicit consent for data sharing; property ownership is public record per Iraqi law
Right to Access	Property owners can download their ownership history and application records via the portal
Anonymization	All analytics and ML training use anonymized/pseudonymized datasets
Spatial Data	Cadastral geometries are public; individual owner identities are not exposed on public map layers

Requirement	Scope	Implementation
Iraqi Property Registration Law	Title deeds, transfers, encumbrances	Digital workflow mirrors all legal requirements; paper deed issuance retained during transition
Iraqi Civil Code (property provisions)	Ownership types, inheritance rules	System enforces legal ownership rules; inheritance requires court document
KRG Land Reform directives	Agricultural land restrictions	Zoning + transaction rules enforce reform constraints
Anti-money laundering (AML)	High-value transactions	Automatic flags on transactions above threshold; reports to financial authority
Tax compliance	Property transfer tax	Auto-calculate and collect before completing transfer
Notary requirements	Legal witnessing	System tracks notary involvement; digital signatures via EJBCA

Standard	Scope
ISO 27001:2022	Information security management
ISO 9001:2015	Quality management for service delivery
ISO 19152 (LADM)	Land Administration Domain Model — data model alignment
WCAG 2.2 AA	Web accessibility
OpenAPI 3.1	API specification standard
OGC WMS/WFS/WMTS	Geospatial service standards
INSPIRE	Spatial data infrastructure principles (adapted)
BPMN 2.0	Business process modeling

Rule	Policy
Display numerals	Western Arabic numerals (0-9) used across all interfaces, all languages
Language codes	`ckb` = Kurdish Sorani, `kmr` = Kurdish Kurmanji, `ar` = Arabic, `en` = English
Text direction	RTL for Sorani (Arabic script), RTL for Arabic, LTR for Kurmanji (Latin script), LTR for English
Phone numbers	Stored and displayed in E.164 international format with Western digits
Monetary amounts	Displayed with Western digits, comma grouping (e.g., 1,500,000 IQD)
National ID numbers	Western digits only (0-9), consistent across all language UIs
Date format	ISO 8601 in storage (YYYY-MM-DD); display adapts per locale but always uses Western digits
Input normalization	If a user enters Eastern Arabic numerals (٠-٩), the system normalizes to Western (0-9) before storage
Parcel numbers	Western digits, consistent format across all languages

Area	Requirement	Implementation
Web (WCAG 2.2 AA)	All portal pages must pass WCAG 2.2 AA audit	axe-core in CI/CD; manual audit quarterly
Mobile App	Screen reader support, dynamic text sizing, high contrast	Flutter Semantics widgets, `MediaQuery` text scaling
Map Components	Keyboard navigation, screen reader descriptions for parcels	OpenLayers a11y plugin, text alternatives for map data
Kiosks	Audio assistance, adjustable height, physical accessibility	Audio jack with guided prompts, wheelchair-height design
Service Centers	Wheelchair access, hearing loop, priority queue for disabled citizens	Physical standards in all service center blueprints
Documents	All generated PDFs and certificates must be tagged/accessible	PDF/UA compliance for all generated documents
Language	Interface fully functional in all 4 variants	Complete translation coverage enforced by CI check