mukul975
278 skills with substantive source documentation and an official publisher or observed installation demand. Read each skill’s original documentation through its card.
mukul975hipaa-employee-training
- Implements HIPAA workforce training requirements under 45 CFR §164.530(b) (Privacy Rule) and 45 CFR §164.308(a)(5) (Security Rule). Covers initial onboarding training, periodic refresher cadence, role-based content differentiation, documentation of training completion, and sanction policy integration. Keywords: HIPAA training, workforce training, security awareness, privacy training, §164.530(b), §164.308(a)(5).
- instalacje
- 1
- GitHub Stars
- 295
- Aktualizacja
- 16 mar
mukul975hipaa-interoperability
- Addresses HIPAA privacy and security requirements for health data interoperability under the 21st Century Cures Act, ONC Health IT Certification Program, and CMS Interoperability and Patient Access Final Rule. Covers information blocking prohibitions, FHIR API patient access, TEFCA exchange purposes, and privacy safeguards for health information exchange. Keywords: interoperability, information blocking, FHIR, TEFCA, Cures Act, patient access API, health information exchange.
- instalacje
- 1
- GitHub Stars
- 295
- Aktualizacja
- 16 mar
mukul975hipaa-minimum-necessary
- Implements HIPAA minimum necessary standard under 45 CFR §164.502(b). Covers role-based access policies per workforce member category, routine vs non-routine disclosure protocols, reasonable reliance doctrine, documentation requirements, and HITECH amendments. Keywords: minimum necessary, role-based access, workforce, routine disclosure, HIPAA.
- instalacje
- 1
- GitHub Stars
- 295
- Aktualizacja
- 16 mar
mukul975hipaa-mobile-health
- Addresses HIPAA compliance for mobile health (mHealth) applications, wearable devices, and remote patient monitoring. Covers OCR guidance on mobile device PHI, FDA-regulated mobile medical applications, FTC Health Breach Notification Rule for non-HIPAA apps, BYOD policies, and encryption requirements for ePHI on mobile platforms. Keywords: mHealth, mobile health, HIPAA mobile, wearable, remote monitoring, BYOD, mobile device management, app privacy.
- instalacje
- 1
- GitHub Stars
- 295
- Aktualizacja
- 16 mar
mukul975hipaa-phi-inventory
- Conducts comprehensive inventory of protected health information across the enterprise per HIPAA Security Rule requirements at 45 CFR §164.308(a)(1)(ii)(A) and §164.310(d). Covers identification of all ePHI repositories, data flow mapping, classification of PHI by sensitivity, and integration with risk analysis. Keywords: PHI inventory, ePHI, data mapping, information asset, data flow, HIPAA risk analysis, designated record set.
- instalacje
- 1
- GitHub Stars
- 295
- Aktualizacja
- 16 mar
mukul975hipaa-privacy-rule
- Implements HIPAA Privacy Rule requirements under 45 CFR §164.500-534 for covered entities and business associates. Covers minimum necessary standard, treatment-payment-operations exceptions, directory opt-out, personal representative rules, and authorization requirements. Keywords: HIPAA Privacy Rule, PHI, minimum necessary, TPO, authorization, covered entity.
- instalacje
- 1
- GitHub Stars
- 295
- Aktualizacja
- 16 mar
mukul975hipaa-research-privacy
- Implements HIPAA Privacy Rule requirements for research uses of protected health information under 45 CFR §164.512(i). Covers IRB and Privacy Board waivers of authorization, individual authorization for research, limited data set and data use agreements, preparatory to research provisions, and decedent research provisions. Keywords: HIPAA research, IRB waiver, Privacy Board, authorization, limited data set, preparatory research, de-identification, Common Rule.
- instalacje
- 1
- GitHub Stars
- 295
- Aktualizacja
- 16 mar
mukul975hitech-act-privacy
- Implements HITECH Act privacy and security requirements including breach notification expansion, four-tier penalty structure, state attorney general enforcement authority, EHR meaningful use privacy conditions, and business associate direct liability. Keywords: HITECH Act, breach notification, penalty tiers, state AG enforcement, meaningful use, EHR privacy.
- instalacje
- 1
- GitHub Stars
- 295
- Aktualizacja
- 16 mar
mukul975implementing-data-minimization-architecture
- Architecture patterns for GDPR Article 5(1)(c) data minimization and Article 25(1) data protection by design. Covers field-level encryption, data masking, aggregation, pseudonymization per Article 4(5), and anonymization per Recital 26. Includes ENISA pseudonymization techniques and a data minimization assessment matrix.
- instalacje
- 1
- GitHub Stars
- 295
- Aktualizacja
- 16 mar
mukul975implementing-data-protection-by-default
- Technical implementation of GDPR Article 25(2) data protection by default. Covers strictest privacy settings as default configuration, minimum data collection, limited storage duration, restricted accessibility, and opt-in rather than opt-out patterns. Includes implementation checklist and system design requirements.
- instalacje
- 1
- GitHub Stars
- 295
- Aktualizacja
- 16 mar
mukul975implementing-homomorphic-encryption
- Guide to implementing homomorphic encryption for privacy-preserving computation under GDPR. Covers scheme selection (BFV, BGV, CKKS, TFHE), Microsoft SEAL, IBM HELib, and Google FHE transpiler. Includes performance benchmarks, parameter tuning, and basic HE example code for encrypted arithmetic operations.
- instalacje
- 1
- GitHub Stars
- 295
- Aktualizacja
- 16 mar
mukul975implementing-secure-multi-party-computation
- Implementation guide for secure multi-party computation enabling privacy-preserving analytics across organizations. Covers secret sharing, garbled circuits, reference frameworks MP-SPDZ and CrypTen, practical deployment patterns, and GDPR alignment for joint controller analytics without revealing individual party inputs.
- instalacje
- 1
- GitHub Stars
- 295
- Aktualizacja
- 16 mar
mukul975india-dpdp-act
- Guides compliance with India's Digital Personal Data Protection Act 2023. Covers consent manager registration, data fiduciary obligations under Sections 4-7, significant data fiduciary requirements under Section 10, data principal rights, and Board enforcement framework. Keywords: DPDP Act, India data protection, consent manager, data fiduciary, significant data fiduciary, data principal rights.
- instalacje
- 1
- GitHub Stars
- 295
- Aktualizacja
- 16 mar
mukul975indirect-collection-notice
- Provides GDPR Article 14 information for personal data obtained from sources other than the data subject, covering timing requirements (within reasonable period, max one month), source disclosure, all required elements, and exemptions under Art. 14(5). Activate for Art. 14, indirect collection, third-party data source, indirect data notice queries.
- instalacje
- 1
- GitHub Stars
- 295
- Aktualizacja
- 16 mar
mukul975iowa-consumer-privacy
- Iowa Consumer Data Protection Act (ICDPA) compliance. Effective January 1, 2025. Covers consumer rights (access, delete, opt-out), controller thresholds at 100,000 consumers, sensitive data opt-in consent, 90-day cure period, and AG-only enforcement. Iowa Code Chapter 715D.
- instalacje
- 1
- GitHub Stars
- 295
- Aktualizacja
- 16 mar
mukul975iso-27701-pims
- Guides ISO 27701 Privacy Information Management System implementation extending ISO 27001/27002. Covers Clause 5 PIMS-specific requirements, Clause 6 PIMS guidance for ISO 27002, Clause 7 PII controller guidance (Annex A), Clause 8 PII processor guidance (Annex B), gap assessment, and certification path. Keywords: ISO 27701, PIMS, privacy management system, ISO 27001 extension, certification, Annex A, Annex B.
- instalacje
- 1
- GitHub Stars
- 295
- Aktualizacja
- 16 mar
mukul975japan-appi
- Guides compliance with Japan's Act on the Protection of Personal Information (APPI, 2022 amendments). Covers individual rights expansion, cross-border transfer restrictions including pre-transfer information requirements, PPC enforcement, and pseudonymised and anonymously processed information. Keywords: APPI, Japan data protection, PPC, cross-border transfer, pseudonymised information, individual rights.
- instalacje
- 1
- GitHub Stars
- 295
- Aktualizacja
- 16 mar
mukul975joint-controller-art26
- Guides the establishment and management of joint controller arrangements under GDPR Article 26, including determination of joint controllership, allocation of responsibilities, and transparency obligations. Activate when two or more controllers jointly determine purposes and means of processing, or when evaluating shared data platforms. Keywords: joint controller, Article 26, shared responsibility, arrangement, joint determination.
- instalacje
- 1
- GitHub Stars
- 295
- Aktualizacja
- 16 mar
mukul975kentucky-kppa
- Kentucky Consumer Privacy Protection Act (KPPA) compliance. Effective January 1, 2026. Covers consumer rights, controller thresholds at 100,000 consumers, sensitive data processing consent, cure period provisions, and AG enforcement framework.
- instalacje
- 1
- GitHub Stars
- 295
- Aktualizacja
- 16 mar
mukul975korea-pipa
- Guides compliance with South Korea's Personal Information Protection Act (PIPA, 개인정보 보호법). Covers pseudonymisation framework, notification requirements, PIPC enforcement, consent standards, and cross-border transfer rules under the 2023 amendments. Keywords: PIPA, Korea data protection, PIPC, pseudonymisation, consent, cross-border transfers.
- instalacje
- 1
- GitHub Stars
- 295
- Aktualizacja
- 16 mar
mukul975lawful-basis-assessment
- Guides determination of the correct lawful basis under GDPR Article 6(1)(a)-(f) for each processing activity. Includes decision tree logic for consent vs legitimate interest vs contract necessity. Activate when evaluating legal grounds for processing or reviewing lawful basis selections. Keywords: lawful basis, Article 6, consent, legitimate interest, legal obligation, contract.
- instalacje
- 1
- GitHub Stars
- 295
- Aktualizacja
- 16 mar
mukul975legit-interest-vs-consent
- Decision framework for choosing between consent and legitimate interest as the lawful basis for processing. Covers power imbalance indicators, conditionality prohibition under Article 7(4), granularity requirements, the three-part LIA test (purpose, necessity, balancing), and practical decision trees for common scenarios.
- instalacje
- 1
- GitHub Stars
- 295
- Aktualizacja
- 16 mar
mukul975legitimate-interest-lia
- Guides the three-part Legitimate Interest Assessment (LIA) required under GDPR Article 6(1)(f): purpose test, necessity test, and balancing test. Activate when evaluating legitimate interest as a lawful basis, conducting LIA reviews, or documenting proportionality analysis. Keywords: LIA, legitimate interest, balancing test, necessity test, purpose test, Article 6(1)(f).
- instalacje
- 1
- GitHub Stars
- 295
- Aktualizacja
- 16 mar
mukul975linddun-threat-model
- Conduct LINDDUN privacy threat modeling across all seven categories: Linking, Identifying, Non-repudiation, Detecting, Data Disclosure, Unawareness, and Non-compliance. Includes DFD-based analysis, threat trees, privacy-specific mitigation strategies, and integration with STRIDE security threat modeling.
- instalacje
- 1
- GitHub Stars
- 295
- Aktualizacja
- 16 mar