Confidentiality Declarations

Handling personal information about vulnerable individuals without a formal confidentiality agreement creates legal exposure for organizations under GDPR and Norwegian privacy law. Blindeforbundet explicitly raised the need for driver confidentiality declarations as a compliance requirement tied to their peer mentor program. Digitizing this declaration removes the risk of unsigned paper forms being lost, ensures every relevant activity is covered, and creates an auditable record that can be produced on demand during inspections or funding reviews. For the platform as a whole, building this as a configurable module means other organizations with similar legal obligations can adopt it without custom development.

The declaration flow is implemented as an interstitial screen that appears after the expense type selection step when the selected type is configured to require a declaration (e.g. driver honorarium). Declaration text is stored as versioned content in the backend so that organizations can update the legal text without a client release; the app always fetches and displays the current version for the user's organization. The acknowledgement action records a declarations table entry with user_id, activity_id or assignment_id, declaration_version, and accepted_at timestamp. Flutter renders the declaration text in a scrollable container with a checkbox and confirm button that is disabled until the user has scrolled to the bottom, reducing the risk of accidental acceptance. The feature is entirely suppressed for organizations whose module configuration does not include declaration requirements.