mukul975/privacy-data-protection-skills

gdpr-self-assessment

- Guides comprehensive controller self-assessment covering GDPR Articles 5-49 with scoring methodology and reporting format.

ソースを見る

使い方

  1. インストールコマンドをコピーし、自分の環境へ導入する前にソースを確認します。
  2. 必要なツール、認証情報、対応環境を原文で確認します。
  3. 入力と成果物を指定し、出力を資料と照合します。
npx skills add https://github.com/mukul975/privacy-data-protection-skills --skill gdpr-self-assessment

開始前の確認

  • 導入にはモデル契約、API枠、ファイルへのアクセス許可は含まれません。
  • スター数や導入数は活動の指標であり、独立した品質・安全性試験ではありません。
リポジトリの原文

見出し、例、コード、表、リンク、参照画像を含む原文を表示しています。

Performing GDPR Controller Self-Assessment

Overview

A controller self-assessment provides structured internal review of GDPR compliance using a standardised questionnaire with scoring, enabling organisations to identify strengths, weaknesses, and maturity trends.

Implementation Approach

Phase 1: Assessment

  1. Review current state against applicable GDPR articles.
  2. Identify gaps between current practices and requirements.
  3. Classify gaps by severity and regulatory risk.
  4. Document the assessment with evidence references.

Phase 2: Design

  1. Design measures to address identified gaps.
  2. Align measures with organisational capacity and risk appetite.
  3. Obtain DPO and stakeholder review of proposed measures.
  4. Create implementation timeline with milestones.

Phase 3: Implementation

  1. Execute the implementation plan according to priority.
  2. Document all measures implemented with evidence.
  3. Train relevant staff on new procedures and requirements.
  4. Validate implementation through testing or review.

Phase 4: Maintenance

  1. Schedule periodic reviews (minimum annual).
  2. Monitor for regulatory changes affecting the scope.
  3. Update measures in response to audit findings or incidents.
  4. Report on compliance status to the governance structure.

タスクに関連する項目

同じリポジトリから

関連する Skills

すべての Skills
mukul975
コミュニティ

applying-privacy-design-patterns

- Systematic application of the eight privacy design patterns per Hoepman: minimize, hide, separate, abstract, inform, control, enforce, and demonstrate. Covers pattern selection methodology per processing activity, mapping to GDPR principles, and practical implementation guidance for privacy-by-design system architecture.

導入数
1
GitHub Stars
315
更新日
3月16日
mukul975
コミュニティ

brazil-lgpd

- Guides compliance with Brazil's Lei Geral de Proteção de Dados (LGPD, Lei 13.709/2018). Covers the 10 lawful bases under Art. 7, DPO appointment, ANPD enforcement, data subject rights under Arts. 17-22, and international transfer mechanisms. Keywords: LGPD, Brazil data protection, ANPD, lawful bases, data subject rights, international transfers.

導入数
1
GitHub Stars
315
更新日
3月16日
mukul975
コミュニティ

adequacy-assessment

- Guides assessment of third-country adequacy decisions under GDPR Article 45 for international data transfers. Covers the current EC adequacy decisions list, adequacy assessment criteria, partial adequacy handling, and monitoring of adequacy decision reviews. Keywords: adequacy decision, Article 45, third country, adequate protection, EC adequacy list.

導入数
1
GitHub Stars
295
更新日
3月16日
mukul975
コミュニティ

age-gating-services

- Implements age-gating mechanisms for online services to restrict access based on user age. Covers hard gates versus soft gates, neutral age prompts, re-verification triggers, circumvention prevention, and regulatory requirements under GDPR, COPPA, UK Online Safety Act, and DSA. Keywords: age gate, age restriction, neutral prompt, children, online services, access control.

導入数
1
GitHub Stars
295
更新日
3月16日