mukul975/privacy-data-protection-skills

gdpr-eu-representative

- Guides appointment of GDPR Article 27 EU representative for non-EU controllers or processors.

Vedi sorgente

Come usare

  1. Copia il comando e controlla il pacchetto prima di installarlo nel tuo ambiente agente.
  2. Controlla strumenti, credenziali e ambienti richiesti nel documento originale.
  3. Descrivi input e risultato desiderato; confronta l’output con le fonti.
npx skills add https://github.com/mukul975/privacy-data-protection-skills --skill gdpr-eu-representative

Prima di iniziare

  • L’installazione non include abbonamenti, quote API o accesso ai file.
  • Stelle e installazioni indicano attività, non un test indipendente di qualità o sicurezza.
Documento Skill originale

Contenuto dal repository con titoli, esempi, codice, tabelle, link e immagini preservati.

Appointing EU Representative

Overview

Article 27 requires controllers or processors not established in the Union but subject to GDPR under Art. 3(2) to designate a representative in a Member State where affected data subjects are located.

Implementation Approach

Phase 1: Assessment

  1. Review current state against applicable GDPR articles.
  2. Identify gaps between current practices and requirements.
  3. Classify gaps by severity and regulatory risk.
  4. Document the assessment with evidence references.

Phase 2: Design

  1. Design measures to address identified gaps.
  2. Align measures with organisational capacity and risk appetite.
  3. Obtain DPO and stakeholder review of proposed measures.
  4. Create implementation timeline with milestones.

Phase 3: Implementation

  1. Execute the implementation plan according to priority.
  2. Document all measures implemented with evidence.
  3. Train relevant staff on new procedures and requirements.
  4. Validate implementation through testing or review.

Phase 4: Maintenance

  1. Schedule periodic reviews (minimum annual).
  2. Monitor for regulatory changes affecting the scope.
  3. Update measures in response to audit findings or incidents.
  4. Report on compliance status to the governance structure.

Correlati per attività

dallo stesso repository

Altri Skills

Tutti gli Skills
mukul975
Community

applying-privacy-design-patterns

- Systematic application of the eight privacy design patterns per Hoepman: minimize, hide, separate, abstract, inform, control, enforce, and demonstrate. Covers pattern selection methodology per processing activity, mapping to GDPR principles, and practical implementation guidance for privacy-by-design system architecture.

installazioni
1
GitHub Stars
315
Aggiornato
16 mar
mukul975
Community

brazil-lgpd

- Guides compliance with Brazil's Lei Geral de Proteção de Dados (LGPD, Lei 13.709/2018). Covers the 10 lawful bases under Art. 7, DPO appointment, ANPD enforcement, data subject rights under Arts. 17-22, and international transfer mechanisms. Keywords: LGPD, Brazil data protection, ANPD, lawful bases, data subject rights, international transfers.

installazioni
1
GitHub Stars
315
Aggiornato
16 mar
mukul975
Community

adequacy-assessment

- Guides assessment of third-country adequacy decisions under GDPR Article 45 for international data transfers. Covers the current EC adequacy decisions list, adequacy assessment criteria, partial adequacy handling, and monitoring of adequacy decision reviews. Keywords: adequacy decision, Article 45, third country, adequate protection, EC adequacy list.

installazioni
1
GitHub Stars
295
Aggiornato
16 mar
mukul975
Community

age-gating-services

- Implements age-gating mechanisms for online services to restrict access based on user age. Covers hard gates versus soft gates, neutral age prompts, re-verification triggers, circumvention prevention, and regulatory requirements under GDPR, COPPA, UK Online Safety Act, and DSA. Keywords: age gate, age restriction, neutral prompt, children, online services, access control.

installazioni
1
GitHub Stars
295
Aggiornato
16 mar