mukul975/privacy-data-protection-skills

gdpr-self-assessment

- Guides comprehensive controller self-assessment covering GDPR Articles 5-49 with scoring methodology and reporting format.

Ver código-fonte

Como usar

  1. Copie o comando e verifique o pacote antes de instalar no seu ambiente de agente.
  2. Consulte no original as ferramentas, credenciais e ambientes necessários.
  3. Descreva os dados de entrada e a entrega esperada; confira a saída com as fontes.
npx skills add https://github.com/mukul975/privacy-data-protection-skills --skill gdpr-self-assessment

Antes de começar

  • A instalação não inclui assinatura de modelo, franquia API ou acesso aos seus arquivos.
  • Estrelas e instalações indicam atividade, não um teste independente de qualidade ou segurança.
Documento original do Skill

Renderizado do repositório de origem, preservando títulos, exemplos, código, tabelas, links e imagens.

Performing GDPR Controller Self-Assessment

Overview

A controller self-assessment provides structured internal review of GDPR compliance using a standardised questionnaire with scoring, enabling organisations to identify strengths, weaknesses, and maturity trends.

Implementation Approach

Phase 1: Assessment

  1. Review current state against applicable GDPR articles.
  2. Identify gaps between current practices and requirements.
  3. Classify gaps by severity and regulatory risk.
  4. Document the assessment with evidence references.

Phase 2: Design

  1. Design measures to address identified gaps.
  2. Align measures with organisational capacity and risk appetite.
  3. Obtain DPO and stakeholder review of proposed measures.
  4. Create implementation timeline with milestones.

Phase 3: Implementation

  1. Execute the implementation plan according to priority.
  2. Document all measures implemented with evidence.
  3. Train relevant staff on new procedures and requirements.
  4. Validate implementation through testing or review.

Phase 4: Maintenance

  1. Schedule periodic reviews (minimum annual).
  2. Monitor for regulatory changes affecting the scope.
  3. Update measures in response to audit findings or incidents.
  4. Report on compliance status to the governance structure.

Relacionados por tarefa

do mesmo repositório

Mais Skills

Todos os Skills
mukul975
Comunidade

applying-privacy-design-patterns

- Systematic application of the eight privacy design patterns per Hoepman: minimize, hide, separate, abstract, inform, control, enforce, and demonstrate. Covers pattern selection methodology per processing activity, mapping to GDPR principles, and practical implementation guidance for privacy-by-design system architecture.

instalações
1
GitHub Stars
315
Atualizado
16 de mar.
mukul975
Comunidade

brazil-lgpd

- Guides compliance with Brazil's Lei Geral de Proteção de Dados (LGPD, Lei 13.709/2018). Covers the 10 lawful bases under Art. 7, DPO appointment, ANPD enforcement, data subject rights under Arts. 17-22, and international transfer mechanisms. Keywords: LGPD, Brazil data protection, ANPD, lawful bases, data subject rights, international transfers.

instalações
1
GitHub Stars
315
Atualizado
16 de mar.
mukul975
Comunidade

adequacy-assessment

- Guides assessment of third-country adequacy decisions under GDPR Article 45 for international data transfers. Covers the current EC adequacy decisions list, adequacy assessment criteria, partial adequacy handling, and monitoring of adequacy decision reviews. Keywords: adequacy decision, Article 45, third country, adequate protection, EC adequacy list.

instalações
1
GitHub Stars
295
Atualizado
16 de mar.
mukul975
Comunidade

age-gating-services

- Implements age-gating mechanisms for online services to restrict access based on user age. Covers hard gates versus soft gates, neutral age prompts, re-verification triggers, circumvention prevention, and regulatory requirements under GDPR, COPPA, UK Online Safety Act, and DSA. Keywords: age gate, age restriction, neutral prompt, children, online services, access control.

instalações
1
GitHub Stars
295
Atualizado
16 de mar.