101filers, current period
58the period before
43controls it touches
33frameworks
The long view
Filings containing this phrase, every month since 2008. The last
point is the current month and is still filling, so it always looks lower than it will be.
2008
peak 110 in February 2024
2026
Share this finding
The card carries the whole thing, so it makes sense to somebody who never clicks through.
That is the point of it.
Who disclosed it
From SEC full-text search over 8-K filings. Every row links to the filing itself.
| Company | Form | Filed | |
|---|
| Atlas Energy Solutions Inc. AESI | 10-Q | 2026-05-05 | filing |
| F5, INC. FFIV | 8-K | 2026-04-28 | filing |
| GLACIER BANCORP, INC. GBCI | 8-K | 2026-05-05 | filing |
| Braze, Inc. BRZE | 8-K | 2026-04-28 | filing |
| Leonardo DRS, Inc. DRS | 8-K | 2026-07-17 | filing |
| PROGRESS SOFTWARE CORP /MA PRGS | 8-K | 2026-07-22 | filing |
| CARDINAL HEALTH INC CAH | 10-Q | 2026-04-30 | filing |
| TREASURE GLOBAL INC TGL | 8-K | 2026-06-03 | filing |
| AMERICAN TOWER CORP /MA/ AMT | 8-K | 2026-04-28 | filing |
| CAMDEN NATIONAL CORP CAC | 8-K | 2026-06-18 | filing |
| DOMO, INC. DOMO | 8-K | 2026-07-22 | filing |
| Atlassian Corp TEAM | 8-K | 2026-04-30 | filing |
| OCULUS INC. OVTZ | 10-Q | 2026-05-12 | filing |
| Kyndryl Holdings, Inc. KD | 8-K | 2026-05-06 | filing |
| Amerant Bancorp Inc. AMTB | 8-K | 2026-05-26 | filing |
| QXO, Inc. | 8-K | 2026-07-09 | filing |
The full search on EDGAR
Which industries file it
Companies grouped by the industry classification on their own filing. A count, not a
survey.
| Industry | | Companies |
|---|
| Software and IT services | | 33 |
| Chemicals and pharmaceuticals | | 9 |
| Electronics and electrical equipment | | 7 |
| Banking | | 6 |
| Instruments and medical devices | | 5 |
| Securities and investment | | 4 |
| Services and entertainment | | 4 |
| Retail | | 4 |
| Health services | | 3 |
| Wholesale trade | | 3 |
What it obligates
Our corpus holds 43 controls across
33 frameworks whose text speaks to this. Not a judgement:
these controls say so, and each is one lookup from its source document. Ordered by how much each
framework has to say about it, so the one that will cost you the most work is first. Every name
opens that framework in the corpus.
What an auditor will ask you to produce
The artefacts named on those controls, most frequently cited first.
- DPO appointment letter and reporting line
- Records of processing activities
- DPIA register and templates
- Privacy by design checklist for projects
- DGB charter
- Member roster
- Meeting minutes
- Dataset cards
How it usually fails
Recorded when each control was verified against its source. This is where programmes
that think they are covered turn out not to be.
- ROPA incomplete or stale
- DPIAs not triggered for high-risk processing
- DPO independence not documented
- Privacy by design treated as afterthought
- DGB exists in name only
- Unknown provenance
Where this comes from
The left half is public record: SEC full-text search over 8-K filings, counted across a
14 day window against the equivalent window before it. You can check
every row.
The right half is ours: 723 frameworks and
20,473 controls, 531 of those frameworks verified against
their source documents, with the auditor evidence and common failure modes recorded control by
control. Controls appear here because their own text names this term.
Today's edition ·
How programmes fail ·
The obligation index