Data protection legal-AI skills in Cross-jurisdiction

70 legal AI skills for data protection in Cross-jurisdiction.

Doc Drafter

Apache-2.0Cross-jurisdictionData protection

[JURISDICTION] Genera borradores de terminos y condiciones, politica de tratamiento de datos, aviso de privacidad, acuerdo de encargo y manual interno a partir del pack de la jurisdiccion. Usar cuando ya existe el pack del pais y hacen falta los documentos concretos para operar.

DPA Checklist Review

Apache-2.0Cross-jurisdictionData protection

Use when the user provides a Data Processing Agreement, Data Processing Addendum, or HIPAA Business Associate Agreement and asks whether it contains the terms required under the applicable data-protection regime. Produces a structured checklist scoring each required term as present, partial, missing, or unclear, with clause references and recommended language for any gaps. Supports GDPR Article 28, US state privacy laws (CCPA/CPRA, VCDPA, CPA, CTDPA, and similar), HIPAA BAAs, and general commercial DPAs without a specified regime.

DPA Checklist Review

Apache-2.0Cross-jurisdictionData protection

Use when the user provides a Data Processing Agreement, Data Processing Addendum, or HIPAA Business Associate Agreement and asks whether it contains the terms required under the applicable data-protection regime. Produces a structured checklist scoring each required term as present, partial, missing, or unclear, with clause references and recommended language for any gaps. Supports GDPR Article 28, US state privacy laws (CCPA/CPRA, VCDPA, CPA, CTDPA, and similar), HIPAA BAAs, and general commercial DPAs without a specified regime.

DPIA-Sentinel Skill

MITCross-jurisdictionData protection

Data Protection Impact Assessment support for GDPR-style necessity, proportionality, risk identification, mitigation, and residual-risk review. Use for privacy impact assessments, DPIAs, sensitive data processing, and legal-privacy analysis.

DSAR Form

Apache-2.0Cross-jurisdictionData protection

Drafts a GDPR- and CCPA-compliant Data Subject Access Request (DSAR) intake form for collecting requester information and processing privacy rights. Use when drafting DSAR forms, privacy rights request templates, or data subject rights workflows for EU/US-regulated organizations.

EU AI Act Readiness

MITCross-jurisdictionData protection

Build a preliminary, evidence-based EU AI Act readiness assessment across AI-system inventory, territorial scope, operator roles, prohibited-practice screening, risk classification, transparency, high-risk controls, general-purpose AI obligations, governance, and implementation milestones. Use when an organization needs to triage an AI use case, vendor, model, product, or portfolio for Regulation (EU) 2024/1689; prepare an AI inventory, gap register, implementation roadmap, or counsel briefing; assess provider, deployer, importer, distributor, product-manufacturer, authorised-representative, or GPAI-provider responsibilities; or re-check readiness after regulatory or product changes.

Evaluating Consent Management Platforms

Apache-2.0Cross-jurisdictionData protection

Framework for evaluating and selecting Consent Management Platforms (CMPs). Covers TCF v2.2 certification requirements, Global Privacy Control support, multi-regulation compliance (GDPR, CCPA, LGPD), A/B testing capabilities, API integration options, reporting features, and a structured vendor comparison methodology.

/frontend-privacy/consentimiento — Auditoría de Consentimiento

MITCross-jurisdictionData protection

Audita el flujo de consentimiento de un sistema — formularios de registro, checkboxes, granularidad por finalidad, revocación y registro de consentimiento. Produce un reporte focalizado con hallazgos de UI/UX, risk score parcial FE (0–50) y acciones concretas. Úsala cuando quieras revisar específicamente cómo tu sistema pide y gestiona el consentimiento del usuario.

GDPR — Reglamento General de Protección de Datos

MITCross-jurisdictionData protection

Usa este skill cuando el software procese datos personales de usuarios. Aunque GDPR es legislación de la UE, este skill se aplica como estándar de protección de datos para cualquier software independientemente de la ubicación geográfica de los usuarios. Cubre sistema de consentimiento granular, derechos del interesado (ARCO+), encriptación y pseudonimización, política de retención, cookie banner, y checklist de cumplimiento.

Implementing GDPR Data Subject Access Request (DSAR) Workflow

Apache-2.0Cross-jurisdictionData protection

Automates GDPR Data Subject Access Request (DSAR) workflows including identity verification, PII discovery across databases and files using regex and NER, data mapping, response templating per Article 15 requirements, deadline tracking, and audit logging. Covers ICO/EDPB guidance compliance, exemption handling, and scalable batch processing. Use when building or auditing DSAR response capabilities under GDPR/UK GDPR.

Key principles

MITCross-jurisdictionData protection

Use this skill when implementing GDPR or CCPA compliance, designing consent management, conducting DPIAs, or managing data processing agreements. Triggers on GDPR, CCPA, data privacy, consent management, DPIA, data subject rights, privacy policy, cookie consent, and any task requiring privacy regulation compliance or data protection design.

KVKK & GDPR Compliance Patterns

MITCross-jurisdictionData protection

KVKK and GDPR compliance patterns - consent management, right to erasure, breach notification, audit logging, cookie consent, and data classification.

Legal Compliance Skill

MITCross-jurisdictionData protection

Multi-framework compliance gap analysis. Use for GDPR, CCPA, ADA or WCAG, PCI-DSS, SOC 2, HIPAA, Colorado Privacy Act, Colorado AI Act, CJIS, applicability assessment, controls, and remediation plans.

Legal Document Generation & Compliance

MITCross-jurisdictionData protection

Legal document generation and compliance guidance for indie Apple developers. Covers privacy policies, terms of service, EULAs, GDPR/CCPA/DPDP compliance, and Apple App Store legal requirements. Use when user needs legal documents or compliance guidance.

Ley 25.326 — Auditoría de Cumplimiento (Argentina)

MITCross-jurisdictionData protection

Auditoría Ley 25.326 (Argentina): detecta el sector y entrega informe con score, estado por artículo, issues priorizados y sanciones. Sub-skill de /privacidad, también invocable sola.

LFPDPPP — Auditoría de Cumplimiento (México)

MITCross-jurisdictionData protection

Auditoría LFPDPPP y su Reglamento (México): detecta el sector y entrega informe con score, estado por artículo, issues priorizados y sanciones. Sub-skill de /privacidad, también invocable sola.

LGPD — Auditoría de Cumplimiento (Lei 13.709/2018, Brasil)

MITCross-jurisdictionData protection

Auditoría LGPD (Lei 13.709/2018, Brasil): detecta el sector y entrega informe con score, estado por artículo, issues priorizados y sanciones en BRL. Sub-skill de /privacidad, también invocable sola.

LGPD — Lei Geral de Proteção de Dados

MITCross-jurisdictionData protection

Usa este skill cuando desarrolles software que recolecte, procese o almacene datos personales y necesites implementar protección de datos conforme a LGPD. Aunque LGPD es legislación brasileña, este skill se aplica como estándar de protección de datos para cualquier software independientemente de la ubicación geográfica de los usuarios. Cubre las 10 bases legales de tratamiento, consentimiento granular, derechos del titular (Art. 18), RIPD (evaluación de impacto), notificación de incidentes a la ANPD y modelo de datos Prisma.

LGPD — Lei Geral de Proteção de Dados

MITCross-jurisdictionData protection

Use this skill when developing software that collects, processes, or stores personal data and you need to implement data protection per LGPD. Although LGPD is Brazilian legislation, this skill applies as a data protection standard for any software regardless of the geographic location of its users. Covers the 10 legal bases for processing, granular consent, data subject rights (Art. 18), RIPD (impact assessment), ANPD incident notification, and Prisma data model.

Maestro Compliance Check

Apache-2.0Cross-jurisdictionData protection

Run a Maestro-style regulatory compliance review for GDPR/CCPA, cookie consent, data handling, and licensing

Managing APAC Cross-Border Transfers

Apache-2.0Cross-jurisdictionData protection

Guides management of cross-border data transfers under Asia-Pacific regulatory frameworks including APEC CBPR, ASEAN Model Contractual Clauses, Japan APPI supplementary rules, South Korea PIPA provisions, and Thailand/Singapore PDPA mechanisms. Keywords: APEC CBPR, ASEAN MCCs, APPI, PIPA, PDPA, APAC transfers.

Managing Conflicting Privacy Requirements

Apache-2.0Cross-jurisdictionData protection

Guides managing conflicting privacy requirements across jurisdictions. Covers data localisation vs transfer freedom, consent standards variation, age thresholds, breach timelines, and resolution frameworks for incompatible obligations. Keywords: conflicting laws, data localisation, consent variation, age thresholds, resolution framework.

Managing Consent for Children

Apache-2.0Cross-jurisdictionData protection

Guide for managing consent for children's personal data under GDPR Article 8 and COPPA. Covers parental consent mechanisms, age verification methods, country-specific age thresholds (ranging from 13 to 16), parental authorization workflows, and age-appropriate design per the UK ICO Children's Code.

Managing Multi-Jurisdiction Breach Notification

Apache-2.0Cross-jurisdictionData protection

Manages coordinated breach notification across multiple legal jurisdictions including EU member states (72-hour GDPR deadline), US state breach notification laws (varying timelines from 30 to 90 days), and other international regimes. Covers conflict resolution when notification timelines differ, lead supervisory authority determination, and parallel notification execution. Keywords: multi-jurisdiction, cross-border breach, notification coordination, GDPR, US state laws, international breach notification.