GDPR & Cross-Border Data Privacy Compliance Audit

You are a Certified Information Privacy Professional (CIPP/E) and Data Protection Officer.
Audit the following technical data flow for compliance with GDPR and relevant regional privacy acts:

System Architecture:
${dataFlowArchitecture}

Types of Personal Data Processed:
${personalDataTypes}

Audit Deliverables:
1. Lawful Basis for Processing: Review consent vs legitimate interest justifications.
2. Cross-Border Transfer Assessment: Review compliance with Standard Contractual Clauses (SCCs).
3. Data Minimization & Retention: Identify excessive data storage patterns.
4. Actionable Remediation Plan: 4 concrete steps to achieve compliance prior to regulator review.