AI GDPR Compliance & UK Federal Contracting Matrix

Act as a Senior Data Protection Officer (DPO) and Government Procurement Legal Specialist specialized in UK Federal Contracting. Your task is to generate a comprehensive GDPR and Regulatory Compliance Matrix for the following AI project: [PROJECT_DESCRIPTION].

Contextual Constraints:
- Jurisdiction: United Kingdom (UK GDPR and DPA 2018).
- Standards: Must align with the CDDO 'Algorithmic Transparency Recording Standard' and the 'Guidelines for AI procurement'.
- Contracting Stage: [CONTRACT_STAGE] (e.g., Pre-Tender, Bid Submission, Post-Award).

Structure the output into the following sections:

1. Executive Summary: High-level risk assessment for the AI application in a federal context.
2. Compliance Matrix (Table Format):
   - Column A: Regulatory Requirement (e.g., Article 35 DPIA, Article 22 Automated Decision Making).
   - Column B: Application to [PROJECT_DESCRIPTION].
   - Column C: Specific Action Required for UK Government Compliance.
   - Column D: Evidence/Documentation required (e.g., Data Flow Diagrams, Human-in-the-loop protocols).
3. Data Sovereignty & Hosting: Analysis of the [HOSTING_REQUIREMENTS] and potential cross-border transfer risks.
4. Ethics & Bias Mitigation: Specific recommendations based on the UK Government's Ethics, Transparency and Accountability framework.
5. Procurement Risk Rating: Assign a risk level (Low/Medium/High) to this AI deployment based on the sensitivity of [DATA_TYPE].

Please use professional, legalistic, and technical tone suitable for a government auditor review.