Privacy and GDPR

Provides combined DPIA and AI Act conformity assessment template with integrated risk scoring matrix.

mukul975/Privacy-Data-Protection-Skills

Managing privacy risks from AI-driven inferences about individuals including derived data classification, profiling under GDPR Art.

mukul975/Privacy-Data-Protection-Skills

Classifies sensitive data in AI/ML training datasets including bias detection for Art.

mukul975/Privacy-Data-Protection-Skills

Assesses lawful basis for AI training data processing per EDPB April 2025 report on LLMs and general-purpose AI.

mukul975/Privacy-Data-Protection-Skills

Guides management of cross-border data transfers under Asia-Pacific regulatory frameworks including APEC CBPR, ASEAN Model Contractual Clauses, Japan APPI supplementary rules, South Korea PIPA…

mukul975/Privacy-Data-Protection-Skills

Guides APEC Cross-Border Privacy Rules system certification process including self-assessment against the APEC Privacy Framework principles, accountability agent selection, intake questionnaire…

mukul975/Privacy-Data-Protection-Skills

Systematic application of the eight privacy design patterns per Hoepman: minimize, hide, separate, abstract, inform, control, enforce, and demonstrate.

mukul975/Privacy-Data-Protection-Skills

Guides privacy audit evidence collection processes including evidence planning, sampling strategies, documentation standards, chain of custody, interview techniques, system walkthrough procedures…

mukul975/Privacy-Data-Protection-Skills

Guides privacy audit report writing including executive summary drafting, findings classification (critical, high, medium, low), evidence referencing, root cause analysis documentation…

mukul975/Privacy-Data-Protection-Skills

Guides privacy audit risk assessment including risk universe development, inherent and residual risk scoring, control effectiveness evaluation, risk-based audit planning, heat map generation, risk…

mukul975/Privacy-Data-Protection-Skills

Guides privacy audit sampling methodology including statistical and non-statistical sampling, sample size determination, stratification techniques, attribute sampling for compliance testing…

mukul975/Privacy-Data-Protection-Skills

Guides compliance with Australia's Privacy Act 1988 including the 2024 reform amendments.

mukul975/Privacy-Data-Protection-Skills

Manages privacy compliance for employee background checks including criminal record processing under Art.

mukul975/Privacy-Data-Protection-Skills

Guides development and approval of Binding Corporate Rules under GDPR Article 47 for intra-group international data transfers.

mukul975/Privacy-Data-Protection-Skills

Executes the GDPR Article 33 mandatory breach notification to the supervisory authority within 72 hours of becoming aware of a personal data breach.

mukul975/Privacy-Data-Protection-Skills

Coordinates credit monitoring and identity theft protection services for individuals affected by a data breach.

mukul975/Privacy-Data-Protection-Skills

Maintains the GDPR Article 33(5) breach register documenting all personal data breaches regardless of whether supervisory authority notification was required.

mukul975/Privacy-Data-Protection-Skills

Manages coordinated breach notification across multiple legal jurisdictions including EU member states (72-hour GDPR deadline), US state breach notification laws (varying timelines from 30 to 90…

mukul975/Privacy-Data-Protection-Skills

Conducts structured post-breach remediation using a lessons learned framework covering root cause remediation, control gap closure, policy updates, training modifications, monitoring enhancements…

mukul975/Privacy-Data-Protection-Skills

Designs and executes tabletop breach simulation exercises for testing organizational breach response capabilities.

mukul975/Privacy-Data-Protection-Skills

Manages direct communication to affected data subjects following a personal data breach under GDPR Article 34 when the breach is likely to result in a high risk to their rights and freedoms.

mukul975/Privacy-Data-Protection-Skills

Implements BYOD privacy compliance frameworks for personal device use in the workplace.

mukul975/Privacy-Data-Protection-Skills

Executes breach notification under California Civil Code Section 1798.82 (California data breach notification law).

mukul975/Privacy-Data-Protection-Skills

California consumer privacy rights workflow implementation under CCPA/CPRA.

mukul975/Privacy-Data-Protection-Skills

Guides compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA, S.C.

mukul975/Privacy-Data-Protection-Skills

Manages California Consumer Privacy Act (CCPA) consumer rights requests under Civil Code sections 1798.100-125, covering the right to know, right to delete, right to opt-out of sale, and…

mukul975/Privacy-Data-Protection-Skills

Implements profiling restrictions for children under GDPR Recital 71, Article 22, UK AADC Standard 12, and COPPA.

mukul975/Privacy-Data-Protection-Skills

Guides DPIA for migrating personal data to cloud infrastructure covering controller-processor analysis under Art.

mukul975/Privacy-Data-Protection-Skills

Cloud service provider privacy assessment framework. An agent skill from mukul975/Privacy-Data-Protection-Skills.

mukul975/Privacy-Data-Protection-Skills

Colorado Privacy Act (CPA) compliance implementation. An agent skill from mukul975/Privacy-Data-Protection-Skills.

mukul975/Privacy-Data-Protection-Skills

Compares PIA/DPIA methodologies: CNIL PIA tool, ICO DPIA template, NIST Privacy Framework, and ISO 29134.

mukul975/Privacy-Data-Protection-Skills

Complete guide to LINDDUN privacy threat modeling methodology covering seven threat categories: Linking, Identifying, Non-repudiation, Detecting, Data Disclosure, Unawareness, and Non-compliance.

mukul975/Privacy-Data-Protection-Skills

Guide for obtaining explicit consent for international data transfers under GDPR Article 49(1)(a).

mukul975/Privacy-Data-Protection-Skills

Framework for evaluating and selecting Consent Management Platforms (CMPs).

mukul975/Privacy-Data-Protection-Skills

Creates GDPR Article 30(1) Records of Processing Activities (RoPA) for data controllers with all seven mandatory fields: controller identity and contact details, processing purposes, data subject…

mukul975/Privacy-Data-Protection-Skills

Comprehensive methodology for auditing website cookies and tracking technologies.

mukul975/Privacy-Data-Protection-Skills

Methodology for auditing A/B testing of consent banners to ensure compliance with equal ease of acceptance and rejection.

mukul975/Privacy-Data-Protection-Skills

Implements Children's Online Privacy Protection Act (COPPA) compliance under 16 CFR Part 312.

mukul975/Privacy-Data-Protection-Skills

CPRA §1798.121 sensitive personal information restrictions and compliance.

mukul975/Privacy-Data-Protection-Skills

Handles GDPR Art. An agent skill from mukul975/Privacy-Data-Protection-Skills.

mukul975/Privacy-Data-Protection-Skills

Implements data lineage tracking for privacy compliance including origin tracking, transformation logging, access auditing, deletion verification, and cross-system lineage graphs.

mukul975/Privacy-Data-Protection-Skills

Executes GDPR Article 20 data portability requests, covering machine-readable format requirements (JSON, CSV, XML), direct controller-to-controller transfer mechanisms, and scope limitations to data…

mukul975/Privacy-Data-Protection-Skills

Delaware Personal Data Privacy Act (DPPA) compliance implementation.

mukul975/Privacy-Data-Protection-Skills

Provides GDPR Article 13 information at the point of direct data collection, covering all required elements under Art.

mukul975/Privacy-Data-Protection-Skills

GDPR-compliant Data Processing Agreement drafting per Article 28(3).

mukul975/Privacy-Data-Protection-Skills

Conducts a Data Protection Impact Assessment for automated decision-making and profiling systems under GDPR Article 35(3)(a), covering algorithmic transparency, meaningful human oversight…

mukul975/Privacy-Data-Protection-Skills

Conducts Data Protection Impact Assessments for biometric identification and authentication systems under GDPR Article 35 and Article 9 special category rules.

mukul975/Privacy-Data-Protection-Skills

Guides data subject and stakeholder consultation requirements during Data Protection Impact Assessments under GDPR Article 35(9).

mukul975/Privacy-Data-Protection-Skills