Data protection legal-AI skills in General

286 legal AI skills for data protection in General.

Privacy Audit Sampling Methods

Apache-2.0GeneralData protection

Guides privacy audit sampling methodology including statistical and non-statistical sampling, sample size determination, stratification techniques, attribute sampling for compliance testing, confidence level selection, tolerable deviation rates, and extrapolation of results to the population. Keywords: audit sampling, statistical sampling, attribute testing, sample size, confidence level, stratified sampling, privacy audit.

Privacy Check Skill

MITGeneralData protection

Use to assess Privacy by Design compliance and GDPR/data protection alignment for a feature or system.

Privacy Engineering

MITGeneralData protection

Use when implementing or auditing privacy controls in products, infrastructure, analytics, or data flows; translate privacy principles into classification, minimization, consent, subject-rights, retention, vendor, and deletion evidence.

Privacy Guideline

MITGeneralData protection

Privacy and data protection - GDPR, CCPA, consent. Use when handling user data.

Privacy Impact Assessment

MITGeneralData protection

Use when conducting a privacy impact assessment (PIA) or data protection impact assessment (DPIA) for a new project, system, or product that processes personal data. Identifies privacy risks, assesses necessity and proportionality, evaluates safeguards, and recommends mitigating measures. MENA-aware: covers GDPR Article 35 requirements alongside UAE Personal Data Protection Law, KSA Personal Data Protection Law, and Lebanon's data protection framework.

Privacy Impact Assessment for Large-Scale Monitoring

Apache-2.0GeneralData protection

Conducts Privacy Impact Assessment for large-scale systematic monitoring under GDPR Article 35(3)(c). Covers CCTV and video surveillance, employee monitoring, location tracking, internet monitoring, and behavioural analytics. Applies EDPB WP248rev.01 criteria for systematic monitoring of publicly accessible areas. Keywords: DPIA, large-scale monitoring, CCTV, employee monitoring, systematic monitoring, surveillance, location tracking.

Privacy Impact Assessment for Vendor Processing

Apache-2.0GeneralData protection

Conducts Privacy Impact Assessment for vendor and third-party data processing arrangements. Covers processor due diligence, Data Processing Agreement (DPA) requirements under GDPR Article 28, sub-processor management, cross-border vendor transfers, cloud service provider assessments, and ongoing vendor monitoring. Keywords: vendor PIA, processor assessment, DPA, Article 28, sub-processor, cloud privacy, third-party risk.

Privacy Law Gap Analysis for Market Entry

Apache-2.0GeneralData protection

Guides conducting privacy law gap analysis for market entry into new jurisdictions. Covers target jurisdiction assessment, existing compliance mapping, remediation effort estimation, and implementation timeline planning. Keywords: gap analysis, market entry, jurisdiction assessment, remediation planning, compliance mapping.

Privacy Maturity Model Assessment

Apache-2.0GeneralData protection

Guides privacy program maturity assessment using the AICPA/CIPT Privacy Maturity Model with five levels: Ad Hoc, Repeating, Defined, Managed, and Optimized. Covers assessment methodology across ten privacy domains, scoring criteria, gap analysis, maturity roadmap generation, and benchmarking against industry peers. Keywords: privacy maturity, AICPA, maturity model, assessment, roadmap, benchmarking.

Privacy Metrics Dashboard

Apache-2.0GeneralData protection

Build privacy KPI dashboards tracking DSAR volume and response time, breach count and severity, DPIA completion rate, training coverage, and consent rates. Includes metric definitions, data collection patterns, visualization designs, and executive reporting templates for privacy program measurement.

Privacy Policy

MITGeneralData protection

Use when drafting a public-facing privacy policy — the notice to users and data subjects explaining how personal data is collected, used, shared, retained, and protected. Covers GDPR (EU/UK), KSA PDPL, UAE PDPL (Federal Decree-Law 45/2021), and EG PDPL (Law 151/2020), with jurisdiction-specific legal-basis requirements, DPO obligations, international-transfer mechanisms, and subject-rights disclosures. Triggers on "privacy policy", "data protection notice", "data privacy statement", "cookie policy", or "personal data disclosure" requests.

Privacy Policy

MITGeneralData protection

Use when a lawyer or compliance officer needs to draft a comprehensive privacy policy for a company operating across one or more jurisdictions. Covers data collection, legal bases, retention, individual rights, international transfers, cookies, and privacy contact information. Particularly useful for MENA-operating businesses navigating UAE Federal Decree-Law No. 45 of 2021, Saudi PDPL, Lebanese data-protection norms, DIFC/ADGM Data Protection Law, and EU GDPR as applicable.

Privacy Policy Generator

MITGeneralData protection

Draft a detailed privacy policy covering data types, jurisdiction, GDPR and compliance considerations, and clauses needing legal review. Use when creating a privacy policy, updating data protection documentation, or preparing for compliance.

Privacy Policy Generator (Public Tool)

MITGeneralData protection

Use when a business needs to generate a privacy policy, cookie policy, ROPA, or DPIA template through a guided form. Supports KSA PDPL, UAE PDPL, DIFC DP Law, Bahrain PDPL, Egypt PDPL, GDPR, and CCPA — with jurisdiction-specific addenda for multi-jurisdictional businesses. Outputs DOCX and PDF; includes a ROPA template and DPIA template as add-ons. Free public tool with email-capture; designed for SMEs, startups, and app developers needing compliant privacy documentation without external counsel for standard use cases.

Privacy policy paperclipai

MITGeneralData protection

Draft a detailed privacy policy covering data types, jurisdiction, GDPR and compliance considerations, and clauses needing legal review

Privacy-Preserving Data Sharing Platform

Apache-2.0GeneralData protection

Build privacy-preserving data sharing platforms using synthetic data generation with the SDV library, data clean rooms, secure enclaves, and utility measurement. Covers end-to-end architecture for sharing analytical datasets while preserving individual privacy guarantees.

Privacy-Preserving Record Linkage

Apache-2.0GeneralData protection

Implement privacy-preserving record linkage across datasets using Bloom filter encoding, secure hash matching, threshold tuning for precision and recall, and false positive management. Enables entity resolution without exposing raw personally identifiable information between parties.

Privacy Program Effectiveness Metrics

Apache-2.0GeneralData protection

Guides privacy program effectiveness measurement including leading and lagging indicators, KPI definition, benchmarking methodology, executive reporting formats, board-level privacy dashboards, and metric-driven program improvement. Covers operational, compliance, risk, and strategic privacy metrics across the program lifecycle. Keywords: privacy metrics, KPIs, benchmarking, executive reporting, dashboard, program effectiveness.

Processing Data Subject Access Requests

Apache-2.0GeneralData protection

Guides AI agents through the complete GDPR Data Subject Access Request (DSAR) workflow under Article 15, including identity verification, 30-day deadline calculation with extensions, response formatting, exemptions, and fee provisions. Activate when handling DSAR, access request, subject access, Art. 15, or SAR queries.

Processing Right to Rectification

Apache-2.0GeneralData protection

Processes GDPR Article 16 right to rectification requests, covering verification of corrected data accuracy, notification to recipients under Article 19, timeline management, and completion of incomplete data. Activate for rectification, correction request, inaccurate data, Art. 16, data correction queries.

Processor RoPA Creation

Apache-2.0GeneralData protection

Creates GDPR Article 30(2) Records of Processing Activities for data processors with all four mandatory fields: processor and controller names and contact details, categories of processing, third country transfers, and security measures description. Activate for processor RoPA, Art. 30(2), processor records, sub-processor documentation.

Providing Direct Collection Information

Apache-2.0GeneralData protection

Provides GDPR Article 13 information at the point of direct data collection, covering all required elements under Art. 13(1)(a)-(f) and Art. 13(2)(a)-(g), layered notice design, and timing requirements. Activate for Art. 13, direct collection notice, privacy notice at collection, data collection information queries.

Providing Indirect Collection Information

Apache-2.0GeneralData protection

Provides GDPR Article 14 information for personal data obtained from sources other than the data subject, covering timing requirements (within reasonable period, max one month), source disclosure, all required elements, and exemptions under Art. 14(5). Activate for Art. 14, indirect collection, third-party data source, indirect data notice queries.

Pseudonymised vs Anonymised Data Classification

Apache-2.0GeneralData protection

Classifies data as pseudonymised or anonymised using Recital 26 reasonably likely test, Breyer ruling C-582/14, motivated intruder test, and WP29 Opinion 05/2014 on anonymisation techniques. Covers singling out, linkability, and inference tests. Keywords: pseudonymisation, anonymisation, Recital 26, re-identification, k-anonymity, differential privacy, WP29 Opinion 05/2014.