Data protection legal-AI skills in Cross-jurisdiction

70 legal AI skills for data protection in Cross-jurisdiction.

/matriz-normativa — Comparativa de Leyes LATAM vs GDPR/CCPA

MITCross-jurisdictionData protection

Compara leyes de protección de datos de LATAM (Colombia, México, Brasil, Chile, Argentina, Perú, Ecuador) contra el GDPR europeo y el CCPA californiano en una dimensión específica. Úsala cuando un dev o CTO necesite entender las diferencias normativas concretas antes de diseñar un sistema multi-país o expandirse a mercados internacionales.

nFADP / revDSG — Auditoría de Cumplimiento (Suiza)

MITCross-jurisdictionData protection

Auditoría nFADP/revDSG (Suiza, vigente desde el 1/9/2023): detecta el sector y entrega informe con score, estado por artículo, issues priorizados y sanciones en CHF. Sub-skill de /privacidad, también invocable sola.

/privacy-check — Auditoría de Privacidad de Software

MITCross-jurisdictionData protection

Audita un feature, endpoint de API, esquema de base de datos o flujo de integración para detectar incumplimientos de privacidad según las leyes LATAM y estándares internacionales. Produce un reporte con hallazgos, severidad y acciones correctivas. Úsala antes de hacer merge o deploy de código que involucre datos de usuarios.

Privacy Impact Assessment for Health Data

Apache-2.0Cross-jurisdictionData protection

Conducts Privacy Impact Assessment for health data processing under GDPR Article 9, HIPAA, and sector-specific health privacy regulations. Covers special category data safeguards, clinical research data, patient portals, health wearables, genetic data, and cross-border health data transfers. Keywords: health data PIA, DPIA, Article 9, HIPAA, special category data, clinical research, patient privacy, genetic data.

Privacy Law Change Monitoring and Impact Assessment

Apache-2.0Cross-jurisdictionData protection

Guides privacy law change monitoring and impact assessment for multi-jurisdiction organisations. Covers regulatory tracking sources, change classification, impact scoring methodology, and implementation prioritisation. Keywords: law monitoring, regulatory tracking, change management, impact assessment, implementation priority.

Privacy Law Updates

Apache-2.0Cross-jurisdictionData protection

Generates structured privacy and data protection law briefings across US, EU, UK, and other jurisdictions. Organizes by jurisdiction with compliance deadlines, enforcement actions, and legislative changes. Use when preparing privacy law briefings, compliance updates, regulatory change summaries, or data protection landscape reviews.

Privacy Policy

MITCross-jurisdictionData protection

When the user needs to draft, review, or update a privacy policy for their product, or needs to understand data privacy obligations across jurisdictions.

Privacy Policy Drafter

MITCross-jurisdictionData protection

Draft and audit external privacy policies, collection notices, employee notices, child-facing notices, just-in-time notices, and layered disclosures. Use when notices must match verified processing, legal bases, sharing, transfers, retention, automated decisions, rights, and contact routes, including when Codex should inspect a website or application project and derive the processing inventory from its code, configuration, and dependencies.

Privacy Policy Drafting

MITCross-jurisdictionData protection

Draft privacy-policy language and a review checklist tailored to a business model, data practices, and relevant jurisdictions. Use when the user requests a privacy policy or needs to map disclosures for GDPR, CCPA, or similar frameworks; do not use it to guarantee legal compliance.

Privacy Policy Generator

MITCross-jurisdictionData protection

Generates comprehensive privacy policies by scanning websites for data collection signals including cookies, forms, payment processors, and third-party scripts. Use when launching a website or app that collects user data and needs GDPR/CCPA compliance. Trigger with "/privacy-generator" or "create a privacy policy for my website".

Privacy Policy & Legal Document Generator

MITCross-jurisdictionData protection

Generate privacy policies, terms of service, and EULAs for Apple platform apps. Detects data collection patterns, third-party SDKs, and generates region-specific legal documents with Apple Privacy Nutrition Label mapping. Use when user needs legal documents or data collection disclosure for App Store submission.

RGPD — Auditoría de Cumplimiento (Reglamento UE 2016/679)

MITCross-jurisdictionData protection

Auditoría RGPD/GDPR (Reglamento UE 2016/679): detecta el sector y el estado miembro con sus variaciones nacionales y entrega informe con score, estado por artículo, issues priorizados y sanciones. Sub-skill de /privacidad, también invocable sola.

SaaS Legal Drafting Assistant

MITCross-jurisdictionData protection

Create an attorney-review-ready SaaS legal drafting package from an evidence-based data and product inventory. Use whenever the user needs a privacy notice, terms of service, cookie notice, acceptable use policy, DPA, CCPA/CPRA notice, vendor disclosure, or a gap analysis of existing legal pages. This skill flags issues and drafts language for review.

SafeAI ASEAN Data Protection — System Instructions

MITCross-jurisdictionData protection

ASEAN data protection compliance engine — VN, SG, TH, MY, ID, PH regulatory frameworks. (v5.0.0)

Student Data Privacy

MITCross-jurisdictionData protection

Privacy engineering for K-12 and higher-ed student data under FERPA (US), LGPD-educational (BR), and COPPA (US under-13). Covers parental consent state machine, age-gate enforcement, minimum-necessary collection, purpose limitation, directory-information opt-out lifecycle, SIS roster integrity, and PII handling in grade exports. Use when designing signup, SSO, roster sync, export/portability, or any endpoint that serves student records. Combines with consent-lifecycle (lgpd reference) and pii-data-flow (lgpd reference) for cross-regime consent and data mapping.

UK GDPR + PECR — Auditoría de Cumplimiento

MITCross-jurisdictionData protection

Auditoría UK GDPR y PECR 2003 (Reino Unido tras el Brexit): detecta el sector y entrega informe con score, estado por artículo, issues priorizados y sanciones en GBP. Sub-skill de /privacidad, también invocable sola.

Use case triage

Apache-2.0Cross-jurisdictionData protection

Quickly determine whether a processing activity needs a PIA, a RIPD (Relatório de Impacto à Proteção de Dados — LGPD art. 38 / art. 5º, XVII) or GDPR DPIA when triggered, or can proceed — surfaces privacy policy conflicts and routes to the right next step. Use when the user asks "does this need a PIA", "triage this feature", "privacy check on X", "is this okay from a privacy perspective", or describes a new data processing activity, product feature, or vendor relationship.

Use this skill when

MITCross-jurisdictionData protection

Draft privacy policies, terms of service, disclaimers, and legal notices. Creates GDPR-compliant texts, cookie policies, and data processing agreements. Use PROACTIVELY for legal documentation, compliance texts, or regulatory requirements.

Use this skill when

MITCross-jurisdictionData protection

Draft privacy policies, terms of service, disclaimers, and legal notices. Creates GDPR-compliant texts, cookie policies, and data processing agreements.

Workflow

Apache-2.0Cross-jurisdictionData protection

Run a Maestro-style regulatory compliance review for GDPR/CCPA, cookie consent, data handling, and licensing

Workplace Email Privacy

Apache-2.0Cross-jurisdictionData protection

Implements email and internet monitoring compliance in the workplace per Barbulescu v Romania (ECHR Grand Chamber), EDPB guidance, and national labour law. Covers acceptable use policies, legitimate expectation of privacy, proportionality testing, and content vs metadata monitoring. Keywords: email monitoring, Barbulescu, workplace privacy, internet monitoring, acceptable use policy, ECHR, proportionality.

Write Privacy Policy

MITCross-jurisdictionData protection

Use when drafting or updating a privacy policy to comply with GDPR, CCPA, and general best practices