/**
 * NHS Data Security and Protection Toolkit (DSPT) Compliance Pack
 *
 * Regulation:
 *   NHS England / NHS Digital — Data Security and Protection Toolkit
 *   National Data Guardian (NDG) ten data security standards
 *   NHS Digital Care Records Service operating model
 *   Caldicott Principles (eight, 2020 revision)
 *   Common Law Duty of Confidentiality (clinical record context)
 *
 * Jurisdiction: GB — England (devolved equivalents Scotland / Wales /
 *   Northern Ireland have parallel toolkits but DSPT is the England standard
 *   used as the de-facto UK NHS baseline by suppliers).
 *
 * Regulator: NHS England (DSPT submission portal; assertion-based
 *   self-assessment with mandatory third-party assurance for "Standards Met"
 *   status). The Information Commissioner's Office (ICO) reviews the
 *   underlying personal-data handling under UK GDPR. Care Quality Commission
 *   (CQC) inspectors use DSPT submission status as a regulated-activity
 *   benchmark.
 *
 * Required of:
 *   - Every NHS organisation
 *   - Every supplier processing NHS clinical data, NHS numbers, or
 *     NHS-network-connected health data ("NHS data partner") — including
 *     AI agents that touch any NHS-tagged signal
 *
 * Key obligations encoded in this pack:
 *   1. NHS Number detection + minimum-necessary handling (NDG #1, #4)
 *   2. SNOMED-CT + ICD-10 clinical-code detection (clinical context flag)
 *   3. 8-year retention for adult clinical records (Records Management
 *      Code of Practice 2021); 25 years post-care for paediatric records;
 *      30 years for maternity records.
 *   4. Cross-NHS-trust transfer human-in-the-loop gate (NDG #4 lawful basis)
 *   5. Annual data security training assertion (NDG #3)
 *   6. Continuity / cyber-attack response posture (NDG #6, #7, #9)
 *   7. Supplier contractual flow-down (NDG #10)
 *   8. Caldicott Guardian sign-off for non-routine clinical data sharing
 *
 * Out of scope for this pack (handled by sibling packs when added):
 *   - DCB0129 / DCB0160 clinical safety case (separate pack)
 *   - MHRA SaMD UKCA marking (separate pack)
 *   - Cyber Essentials / CE+ technical control evidence (separate pack)
 *
 * Distinction from UK GDPR pack:
 *   UK GDPR governs personal-data handling at the Article-based level. NHS
 *   DSPT layers on top with NHS-specific data classes (NHS Number, clinical
 *   codes), NHS-specific retention windows, NHS-specific incident reporting
 *   (CareCERT / NHS England), and the Caldicott Guardian role. A processor
 *   handling NHS data needs BOTH packs active.
 *
 * Status: ACTIVE (Wave 1 Pack 5 of TIER 10-UK; first dependency unblocking
 *   DCB0129 / DTAC / MHRA packs per F-NEW-TIER-10-UK-WAVE1-ROADMAP).
 *
 * @connexum/ai-governance
 */
import { CompliancePack } from './index';
import { CategoryClassifiers } from '../classification/pack-driven-classifier';
/**
 * NHS DSPT category classifiers.
 *
 * NHS_NUMBER: 10 digits with mod-11 check digit. We accept the surface form
 * (10 contiguous digits OR 3-3-4 spaced grouping) without verifying the
 * check digit at the classifier layer; downstream redactor can validate.
 *
 * SNOMED_CT: numeric concept IDs (6 to 18 digits). Surface form is highly
 * ambiguous on its own, so we require a co-located clinical context cue
 * ("snomed", "concept id", "code") to avoid false-positives on any long
 * integer.
 *
 * ICD_10: A-Z + 2 digits + optional `.X` extension (e.g. `J45.901`, `R51`).
 * Stricter pattern than the SNOMED catch-anything-numeric approach.
 *
 * CLINICAL_RECORD: free-text clinical-record indicators ("patient",
 * "diagnosis", "encounter", "consultation", "discharge summary"). Flagged
 * because NHS records are subject to the 8-year retention and Caldicott
 * sign-off rules even when no NHS Number is present.
 */
export declare const NHS_DSPT_CATEGORY_CLASSIFIERS: CategoryClassifiers;
export declare const NHS_DSPT_PACK: CompliancePack & {
    categoryClassifiers: CategoryClassifiers;
};
//# sourceMappingURL=nhs-dspt.d.ts.map