Agent skill

Privacy Law Gap Analysis

by mukul975 in mukul975/Privacy-Data-Protection-Skills

Guides conducting privacy law gap analysis for market entry into new jurisdictions.

Apache-2.0Auto-check passedLegal & Compliance

Install Privacy Law Gap Analysis

skills CLI
$ npx skills add mukul975/Privacy-Data-Protection-Skills --skill privacy-law-gap-analysis -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install mukul975/Privacy-Data-Protection-Skills privacy-law-gap-analysis --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/mukul975/Privacy-Data-Protection-Skills.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/privacy/privacy-law-gap-analysis .claude/skills/privacy-law-gap-analysis && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
privacy-law-gap-analysis
GitHub stars
301
Token cost
~2.3k tokens
SKILL.md length
965 words
Files
5 (incl. scripts, references, assets)
Skills in repo
280
Repo updated
First seen
Licence
Apache-2.0

At a glance

Guides conducting privacy law gap analysis for market entry into new jurisdictions.

  • Works in 5 steps: Target Jurisdiction Assessment → Existing Compliance Mapping → Gap Identification and Prioritisation → …
  • Tasks that involve Privacy and GDPR
  • SKILL.md covers Overview, Gap Analysis Methodology, Example: Zenith Global… and Gap Analysis Governance
  • Runs Python scripts from its folder

What it does

Privacy Law Gap Analysis is an agent skill from mukul975/Privacy-Data-Protection-Skills. Guides conducting privacy law gap analysis for market entry into new jurisdictions. Covers target jurisdiction assessment, existing compliance mapping, remediation effort estimation, and implementation timeline planning. Keywords: gap analysis, market entry, jurisdiction assessment, remediation planning, compliance mapping.

Its SKILL.md is about 2.3k tokens, which your agent loads only when the skill is triggered. The skill folder holds 7 other files, including scripts, reference files and assets (for example `assets/template.md`, `references/standards.md` and `references/workflows.md`).

It sits in Legal & Compliance, covering Privacy and GDPR and Go-to-market strategy. The repository describes itself as: 282+ structured privacy & data protection skills for AI agents. GDPR, CCPA, EU AI Act, HIPAA, LGPD, PIPL, DPDP Act. The licence is Apache-2.0.

When your agent uses it

  • Tasks that involve Privacy and GDPR
  • Tasks that involve Go-to-market strategy

Example prompts

  • “Use the privacy-law-gap-analysis skill to guide conducting privacy law gap analysis for market entry into new jurisdictions”
  • “/privacy-law-gap-analysis”

Requirements

  • Python 3

Workflow steps

5 steps, taken from the step headings in SKILL.md.

  1. Target Jurisdiction Assessment
  2. Existing Compliance Mapping
  3. Gap Identification and Prioritisation
  4. Remediation Planning
  5. Timeline Planning

What it can do on your machine

Read from SKILL.md and the folder at commit 9b2ef9e. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Ships 1 file in scripts/ (Python), which the agent can run.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Privacy Law Gap Analysis loads about 2.3k tokens when it runs, and up to ~3.9k if it reads all its reference files. Until then it costs about 88 tokens; SKILL.md has 965 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~88
When it runs · the whole SKILL.md, loaded when a task matches
~2.3k
With references · SKILL.md plus every file in references/, read only if the agent opens them
~3.9k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.

SKILL.md

The full file from mukul975/Privacy-Data-Protection-Skills at commit 9b2ef9e, republished under its Apache-2.0 licence (© mukul975). 965 words, ~2,310 tokens.

Download SKILL.mdSave it as .claude/skills/privacy-law-gap-analysis/SKILL.md (or your agent's skills folder). This skill also uses 4 other files; get the full folder from GitHub.
name
privacy-law-gap-analysis
description
Guides conducting privacy law gap analysis for market entry into new jurisdictions. Covers target jurisdiction assessment, existing compliance mapping, remediation effort estimation, and implementation timeline planning. Keywords: gap analysis, market entry, jurisdiction assessment, remediation planning, compliance mapping.
license
Apache-2.0
metadata.author
mukul975
metadata.version
1.0
metadata.domain
privacy
metadata.subdomain
global-privacy-regulations
metadata.tags
gap-analysis, market-entry, jurisdiction-assessment, remediation-planning, compliance-mapping

Privacy Law Gap Analysis for Market Entry

Overview

When an organisation enters a new market, it must assess the target jurisdiction's privacy requirements against its existing compliance posture. A structured gap analysis identifies what additional controls, policies, and procedures are needed to achieve compliance before commencing operations. This skill provides a repeatable methodology for conducting such assessments, estimating remediation effort, and planning implementation timelines.

Gap Analysis Methodology

Phase 1: Target Jurisdiction Assessment
Step 1 — Regulatory Landscape Mapping
Assessment ElementQuestions to Answer
Primary data protection lawWhat is the comprehensive data protection statute? When was it enacted and last amended?
RegulatorWhich authority enforces the law? What is its enforcement track record?
ScopeDoes the law have extraterritorial reach? What activities trigger applicability?
Registration/notificationIs regulatory registration or notification required before processing?
Local representativeIs a local representative or establishment required?
DPO requirementMust a Data Protection Officer be appointed? What qualifications are needed?
Sector-specific rulesAre there additional sector-specific requirements (financial, health, telecom)?
Step 2 — Requirement Extraction

Extract detailed requirements across 12 compliance domains:

  1. Lawful basis: Available bases; consent requirements; legitimate interest availability
  2. Individual rights: Catalogue of rights; response deadlines; format requirements
  3. Consent management: Form requirements; withdrawal mechanism; children's consent; sensitive data consent
  4. Notice and transparency: Content requirements; language requirements; timing; format
  5. Cross-border transfers: Mechanisms; adequacy status; data localisation requirements
  6. DPO and governance: Appointment criteria; qualifications; reporting structure
  7. Breach notification: Timeline; threshold; content; authority and individual notification
  8. Impact assessment: Triggers; content; retention; review frequency
  9. Security safeguards: Minimum standards; encryption requirements; access control
  10. Retention and deletion: Limitation principles; destruction timelines; methods
  11. Enforcement and penalties: Administrative fines; criminal penalties; civil liability
  12. Record-keeping: Processing records; consent records; transfer records; breach records
Phase 2: Existing Compliance Mapping
Step 1 — Inventory Current Controls
Control CategoryInventory Items
PoliciesPrivacy policy, cookie policy, employee privacy notice, vendor privacy requirements
ProceduresDSR response, breach notification, DPIA, consent management, data deletion
Technical controlsEncryption, access control, logging, DLP, anonymisation/pseudonymisation
Organisational controlsDPO, privacy team, training programme, governance committee
Contractual controlsDPA templates, SCC templates, vendor agreements, intra-group agreements
RecordsProcessing register, consent records, transfer register, breach log
Step 2 — Map Current Controls to Target Requirements

For each target jurisdiction requirement, assess:

  • Fully met: Existing control satisfies the requirement without modification
  • Partially met: Existing control addresses the requirement but needs enhancement
  • Not met: No existing control addresses the requirement; new control needed
  • Not applicable: Requirement does not apply to the organisation's planned activities
Phase 3: Gap Identification and Prioritisation
Gap Classification
ClassificationDefinitionPriorityRemediation Timeline
CriticalLegal requirement with no existing control; enforcement risk is highP1Before market entry
SignificantLegal requirement partially met; enhancement needed to avoid enforcement riskP2Within 90 days of market entry
MinorBest practice or low-enforcement-risk requirement not fully metP3Within 180 days of market entry
EnhancementExisting control meets requirement but could be optimisedP4Next annual review cycle
Phase 4: Remediation Planning
Remediation Effort Estimation
Effort CategorySmallMediumLarge
Policy drafting/update1-2 weeks2-4 weeks4-8 weeks
Procedure development1-2 weeks2-6 weeks6-12 weeks
Technical implementation2-4 weeks4-8 weeks8-16 weeks
Training development and delivery1-2 weeks2-4 weeks4-8 weeks
Vendor/contract update2-4 weeks4-8 weeks8-16 weeks
Regulatory registration/filing1-4 weeks4-8 weeks8-24 weeks
Phase 5: Timeline Planning
Show full SKILL.md (406 more words)Show less
Standard Market Entry Privacy Timeline
WeekActivityDeliverable
1-2Regulatory landscape mappingJurisdiction assessment report
3-4Requirement extractionDetailed requirements document
5-6Current control mappingControl inventory and mapping
7-8Gap analysisGap report with classifications
9-10Remediation planningRemediation plan with effort estimates
11-14P1 critical gap remediationUpdated policies, procedures, technical controls
15-18P2 significant gap remediationEnhanced controls and procedures
19-20Training and awarenessStaff training completion
21-22Pre-launch compliance reviewCompliance readiness assessment
23-24Go-live with monitoringMarket entry with active compliance monitoring

Example: Zenith Global Enterprises — Vietnam Market Entry

Jurisdiction Assessment Summary
ElementDetail
LawDecree 13/2023/ND-CP on Personal Data Protection (effective 1 July 2023)
RegulatorMinistry of Public Security (MPS) — Department of Cybersecurity and Hi-tech Crime Prevention
ScopeAll personal data processing in Vietnam; extraterritorial for activities targeting Vietnamese individuals
DPO requirementRequired for certain processors (large-scale sensitive data processing)
Cross-border transferMandatory impact assessment dossier; file with MPS before first transfer
Breach notification72 hours to MPS
Key unique requirementsTransfer impact assessment dossier filed with MPS; consent required as primary basis
Gap Analysis Results
DomainCurrent StatusGap ClassificationRemediation
Lawful basisGDPR-compliant consent frameworkPartially met — Vietnam consent requirements differP2: Adapt consent forms for Vietnam-specific requirements
Individual rightsGlobal DSR portalPartially met — Vietnamese language requiredP2: Add Vietnamese language support
Cross-border transferEU SCCs in placeNot met — Vietnam requires MPS-filed impact dossierP1: Prepare and file transfer impact assessment dossier
DPOGlobal DPO structurePartially met — local representative may be neededP2: Assess and appoint local privacy contact
Breach notification72-hour global standardFully metNo gap
Privacy noticeMulti-language noticesPartially met — Vietnamese language neededP2: Translate and localise privacy notice
SecurityISO 27001 certifiedFully metNo gap
TrainingAnnual global programmeNot met — Vietnam-specific content neededP2: Develop Vietnam PDPD module
Remediation Timeline
WeekActivityPriority
1-2Prepare transfer impact assessment dossierP1
3-4File dossier with MPSP1
5-6Adapt consent forms and privacy notice (Vietnamese)P2
7-8Add Vietnamese to DSR portalP2
9-10Appoint local privacy contactP2
11-12Develop and deliver Vietnam training moduleP2
13-14Pre-launch compliance reviewFinal check

Gap Analysis Governance

ElementDetail
Gap analysis ownerChief Privacy Officer
ApprovalPrivacy Steering Committee sign-off on remediation plan
TrackingGap remediation tracked in GRC platform
ReviewPost-entry review at 90 days to verify all gaps remediated
ReuseGap analysis template stored for future market entries

© mukul975, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 4 other files (scripts, references, assets) in skills/privacy/privacy-law-gap-analysis of mukul975/Privacy-Data-Protection-Skills.

  • SKILL.md
  • assets/template.md
  • references/standards.md
  • references/workflows.md
  • scripts/process.py

Open the folder on GitHubat commit 9b2ef9e

Compare with similar skills

Privacy Law Gap Analysis next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Privacy Law Gap Analysis compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Privacy Law Gap Analysis this skillmukul975/Privacy-Data-Protection-Skills301—~2.3kAutomated safety check: PassApache-2.0
Saudi Arabia GrcSushegaad/Claude-Skills-Governance-Risk-and-Compliance946—~2kAutomated safety check: PassMIT
Uae GrcSushegaad/Claude-Skills-Governance-Risk-and-Compliance946—~2.3kAutomated safety check: PassMIT
Product Marketing Context Globalminhnv0807/ai-business-skills609—~2.1kAutomated safety check: PassMIT
Preparing Launch AssetsGTM-Strategist/gtm-strategist-skills264—~5kAutomated safety check: PassMIT
SEO Analiticaricneves-ai/flowgrammers-skills115—~2.3kAutomated safety check: PassMIT

Similar skills

  • Saudi Arabia Grc

    Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

    Saudi Arabia Governance, Risk & Compliance advisor — a compliance router that first determines WHICH Saudi regulations apply (NCA ECC-2:2024, Saudi PDPL, NCA Cloud Cybersecurity Controls, SAMA Cyber…

    946 GitHub stars~2k tokensUpdated yesterday
    Legal & ComplianceAuto-check passed
  • Uae Grc

    Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

    United Arab Emirates Governance, Risk & Compliance advisor — a jurisdiction-first compliance router.

    946 GitHub stars~2.3k tokensUpdated yesterday
    Legal & ComplianceAuto-check passed
  • Product Marketing Context Global

    minhnv0807/ai-business-skills

    A skill your agent uses when starting work on a new product, client, or market — this skill creates the file .agents/product-marketing-context-global.md that 60+ other global skills read before they…

    609 GitHub stars~2.1k tokensUpdated 28 days ago
    Marketing & SEOAuto-check passed
  • Preparing Launch Assets

    GTM-Strategist/gtm-strategist-skills

    A skill your agent uses when the user needs to build launch assets like a website, pitch deck, press release, product demo, or media kit.

    264 GitHub stars~5k tokensUpdated 2 mo ago
    Business, Finance & HRAuto-check passed
  • SEO Analitica

    ricneves-ai/flowgrammers-skills

    Skills para otimização de SEO técnico, análise de dados, criação de dashboards e inteligência de negócio para empresas brasileiras.

    115 GitHub stars~2.3k tokensUpdated 15 days ago
    Legal & ComplianceAuto-check passed
  • C15t

    c15t/c15t

    Work with c15t consent management docs, APIs, and integrations for Next.js, React, and JavaScript.

    1.9k GitHub starsUsed in 1 repo~1.6k tokens
    Legal & ComplianceAuto-check passed

More from mukul975/Privacy-Data-Protection-Skills

All 280 skills in this repo
  • Age Gating Services

    mukul975/Privacy-Data-Protection-Skills

    Implements age-gating mechanisms for online services to restrict access based on user age.

    301 GitHub stars~3.7k tokensUpdated 6 mo ago
    Auto-check passed
  • AI Data Retention

    mukul975/Privacy-Data-Protection-Skills

    Manages AI model retention and machine unlearning requirements.

    301 GitHub stars~1.9k tokensUpdated 6 mo ago
    Auto-check passed
  • AI Dpia

    mukul975/Privacy-Data-Protection-Skills

    Conducts Data Protection Impact Assessments for AI and ML systems per EDPB Guidelines 04/2025 on AI processing.

    301 GitHub stars~3.4k tokensUpdated 6 mo ago
    Auto-check passed
  • Dpia Mitigation Plan

    mukul975/Privacy-Data-Protection-Skills

    Structures risk mitigation planning and residual risk tracking for Data Protection Impact Assessments under GDPR Article 35(7)(d).

    301 GitHub stars~846 tokensUpdated 6 mo ago
    Auto-check passed
  • Gdpr Accountability

    mukul975/Privacy-Data-Protection-Skills

    Guides implementation of the GDPR accountability principle under Articles 5(2) and 24, including documentation requirements for policies, DPIAs, RoPA, training records, and breach logs.

    301 GitHub stars~1.9k tokensUpdated 6 mo ago
    Auto-check passed
  • Pia Threshold Screening

    mukul975/Privacy-Data-Protection-Skills

    Conducts pre-DPIA threshold screening to determine whether a full Data Protection Impact Assessment is required under GDPR Article 35.

    301 GitHub stars~880 tokensUpdated 6 mo ago
    Auto-check passed

Questions about Privacy Law Gap Analysis

What does Privacy Law Gap Analysis do?

Guides conducting privacy law gap analysis for market entry into new jurisdictions. Privacy Law Gap Analysis is an agent skill from mukul975/Privacy-Data-Protection-Skills. Guides conducting privacy law gap analysis for market entry into new jurisdictions.

When should I use Privacy Law Gap Analysis?

Privacy Law Gap Analysis fits situations like: tasks that involve Privacy and GDPR; tasks that involve Go-to-market strategy.

How do I install Privacy Law Gap Analysis in Claude Code?

Run `npx skills add mukul975/Privacy-Data-Protection-Skills --skill privacy-law-gap-analysis -a claude-code`. Or copy the skill folder (skills/privacy/privacy-law-gap-analysis in mukul975/Privacy-Data-Protection-Skills) into .claude/skills/privacy-law-gap-analysis in your project. Claude Code loads it when a task matches its description.

How do I install Privacy Law Gap Analysis in Codex?

Run `npx skills add mukul975/Privacy-Data-Protection-Skills --skill privacy-law-gap-analysis -a codex`. Or copy the skill folder (skills/privacy/privacy-law-gap-analysis in mukul975/Privacy-Data-Protection-Skills) into .agents/skills/privacy-law-gap-analysis in your project. Codex loads it when a task matches its description.

Can I use Privacy Law Gap Analysis in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add mukul975/Privacy-Data-Protection-Skills --skill privacy-law-gap-analysis -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/privacy-law-gap-analysis, .gemini/skills/privacy-law-gap-analysis, .github/skills/privacy-law-gap-analysis and .opencode/skills/privacy-law-gap-analysis in your project.

What does Privacy Law Gap Analysis need to run?

Going by SKILL.md and its folder, Privacy Law Gap Analysis needs Python for the scripts in its folder. Our summary lists: Python 3.

Does Privacy Law Gap Analysis access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Privacy Law Gap Analysis safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.

What licence does Privacy Law Gap Analysis use?

Privacy Law Gap Analysis is published under the Apache-2.0 licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Privacy Law Gap Analysis use?

About 2.3k tokens (SKILL.md is roughly 9.2k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 1.6k tokens, read only when the agent opens those files.

What are the alternatives to Privacy Law Gap Analysis?

Skills that share tags, products or a category with Privacy Law Gap Analysis: Saudi Arabia Grc (Sushegaad/Claude-Skills-Governance-Risk-and-Compliance, 946 stars), Uae Grc (Sushegaad/Claude-Skills-Governance-Risk-and-Compliance, 946 stars), Product Marketing Context Global (minhnv0807/ai-business-skills, 609 stars) and Preparing Launch Assets (GTM-Strategist/gtm-strategist-skills, 264 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Privacy Law Gap Analysis?

mukul975 (a GitHub user) maintains it in mukul975/Privacy-Data-Protection-Skills, which has 301 GitHub stars. The repository holds 280 skills in this directory. The repository was last updated on March 16, 2026.

Source: mukul975/Privacy-Data-Protection-Skills on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.