Legal-AI skills in General

1765 skills, across 35 practice areas.

HIPAA Minimum Necessary Standard — 45 CFR §164.502(b)

Apache-2.0GeneralData protection

Implements HIPAA minimum necessary standard under 45 CFR §164.502(b). Covers role-based access policies per workforce member category, routine vs non-routine disclosure protocols, reasonable reliance doctrine, documentation requirements, and HITECH amendments. Keywords: minimum necessary, role-based access, workforce, routine disclosure, HIPAA.

HIPAA Mobile Health — mHealth Privacy and Security

Apache-2.0GeneralData protection

Addresses HIPAA compliance for mobile health (mHealth) applications, wearable devices, and remote patient monitoring. Covers OCR guidance on mobile device PHI, FDA-regulated mobile medical applications, FTC Health Breach Notification Rule for non-HIPAA apps, BYOD policies, and encryption requirements for ePHI on mobile platforms. Keywords: mHealth, mobile health, HIPAA mobile, wearable, remote monitoring, BYOD, mobile device management, app privacy.

HIPAA PHI Inventory — ePHI Asset Identification and Data Flow Mapping

Apache-2.0GeneralData protection

Conducts comprehensive inventory of protected health information across the enterprise per HIPAA Security Rule requirements at 45 CFR §164.308(a)(1)(ii)(A) and §164.310(d). Covers identification of all ePHI repositories, data flow mapping, classification of PHI by sensitivity, and integration with risk analysis. Keywords: PHI inventory, ePHI, data mapping, information asset, data flow, HIPAA risk analysis, designated record set.

HIPAA Risk Analysis — 45 CFR §164.308(a)(1)

Apache-2.0GeneralData protection

Conducts HIPAA risk analysis per 45 CFR §164.308(a)(1) following OCR guidance methodology. Covers threat identification, vulnerability assessment, likelihood and impact determination, risk scoring, and mitigation planning for electronic protected health information. Keywords: HIPAA risk analysis, OCR guidance, threat assessment, vulnerability, risk management, ePHI.

Hiring Review

MITGeneralEmployment

Review an offer letter and any restrictive covenants — jurisdiction check included.

HR System Privacy Configuration

Apache-2.0GeneralData protection

Configures privacy settings for enterprise HR systems including SAP SuccessFactors, Workday, and BambooHR. Covers role-based access controls, automated data retention enforcement, cross-border transfer configurations, audit logging, data subject rights facilitation, and field-level security. Keywords: HR system, SAP SuccessFactors, Workday, BambooHR, RBAC, retention automation, cross-border transfer, privacy configuration.

Human Rights Case Summary

Apache-2.0GeneralLitigation

Produces structured, citation-ready summaries of human rights decisions. Trigger when the user requests a human rights case summary, tribunal decision summary, or analysis involving ICCPR, ICESCR, ICERD, CAT, CRC, ACHR, ECHR, African Charter, UN treaty body views, or regional human rights court rulings.

IAB TCF v2.2 Implementation

Apache-2.0GeneralData protection

Implementing the IAB Transparency and Consent Framework v2.2 for programmatic advertising consent management. Covers CMP registration, Global Vendor List integration, TC String encoding, publisher restrictions, and compliance validation.

ICD-10 / CPT Code Normalization

Apache-2.0GeneralPersonal injury

Normalizes diagnostic and procedure codes from medical records into clean, attorney-readable form. Cross-walks ICD-9 to ICD-10-CM, expands ICD-10 codes to narrative descriptions, expands CPT codes to procedure descriptions, and flags bundling or unbundling oddities relevant to billing disputes. Use this skill any time medical codes appear in records being summarized for litigation use, including medical chronologies, demand letters, and billing review. Also use when the user asks what a specific medical code means.

Icij offshore leaks

MITGeneralWhite collar

Search a person or company against the ICIJ Offshore Leaks Database for free - the Panama Papers, Paradise Papers, Pandora Papers, Bahamas Leaks and Offshore Leaks records of offshore entities, officers and intermediaries, for enhanced due diligence. Use for offshore-structure red-flags and the offshore leg of an enhanced-DD / EDD / KYC / AML workflow. Trigger on: 'offshore leaks', 'Panama Papers', 'Pandora Papers', 'Paradise Papers', 'offshore entities', 'is this person in the offshore leaks', 'offshore structure', 'ICIJ', 'shell company search', 'enhanced due diligence'. This is a leak-data red-flag lane, NOT a company registry and NOT proof of wrongdoing - a match is a prompt to dig deeper, never a conclusion; no API key required.

Image Rights Checker

MITGeneralEntertainment

Reviews the details of a specific image and flags potential rights clearance issues before publication, identifying which permissions you likely need and which questions to bring to your legal or picture desk.

Implementing Breach Detection System

Apache-2.0GeneralData protection

Implements technical breach detection capabilities including SIEM integration, DLP alert configuration, anomaly detection rules, and insider threat monitoring. Provides a breach classification taxonomy across confidentiality, integrity, and availability dimensions. Covers detection tool selection, alert tuning, and integration with privacy incident response workflows. Keywords: breach detection, SIEM, DLP, anomaly detection, insider threat, classification.

Implementing Consent Withdrawal

Apache-2.0GeneralData protection

Implementation guide for GDPR Article 7(3) consent withdrawal mechanisms. Covers the equal ease requirement ensuring withdrawal is as easy as giving consent, one-click withdrawal implementation, cascading effects on downstream processing, third-party notification workflows, and technical architecture for real-time consent revocation.

Implementing CPRA Opt-Out Preference Signals

Apache-2.0GeneralData protection

Implements CPRA Section 1798.135 opt-out preference signal handling, covering Global Privacy Control (GPC) technical detection, automated signal honoring, cross-device consistency, and the relationship between browser signals and explicit consumer choices. Activate for GPC, opt-out preference signal, CPRA 1798.135, browser privacy signal, Do Not Sell queries.

Implementing Data Localization Requirements

Apache-2.0GeneralData protection

Guides compliance with country-specific data localization requirements across key jurisdictions including Russia (242-FZ), China (PIPL Art. 40, CAC measures), India (DPDP Act), Turkey, Vietnam, and Indonesia. Covers localization assessment, architecture design, and exemption procedures. Keywords: data localization, data residency, PIPL, 242-FZ, cross-border restrictions.

Implementing Data Minimization Architecture

Apache-2.0GeneralData protection

Architecture patterns for GDPR Article 5(1)(c) data minimization and Article 25(1) data protection by design. Covers field-level encryption, data masking, aggregation, pseudonymization per Article 4(5), and anonymization per Recital 26. Includes ENISA pseudonymization techniques and a data minimization assessment matrix.

Implementing Data Protection by Default

Apache-2.0GeneralData protection

Technical implementation of GDPR Article 25(2) data protection by default. Covers strictest privacy settings as default configuration, minimum data collection, limited storage duration, restricted accessibility, and opt-in rather than opt-out patterns. Includes implementation checklist and system design requirements.

Implementing Data Protection Certification

Apache-2.0GeneralData protection

Guides implementation of GDPR Article 42-43 data protection certification mechanisms including accredited certification bodies, criteria development, and periodic review. Activate when pursuing privacy certifications, evaluating certification bodies, or developing certification criteria. Keywords: certification, Article 42, Article 43, accreditation, seal, privacy mark.

Implementing Double Opt-In Email

Apache-2.0GeneralData protection

Implementation guide for ePrivacy Directive compliant double opt-in email consent. Covers confirmation email workflow design, token expiration handling, record-keeping requirements, suppression list management, and integration with CAN-SPAM Act and CASL requirements for multi-jurisdiction compliance.

Implementing GDPR Accountability Framework

Apache-2.0GeneralData protection

Guides implementation of the GDPR accountability principle under Articles 5(2) and 24, including documentation requirements for policies, DPIAs, RoPA, training records, and breach logs. Activate when establishing or reviewing accountability measures, preparing evidence portfolios, or demonstrating compliance to supervisory authorities. Keywords: accountability, Article 5(2), Article 24, documentation, compliance evidence, governance.

Implementing GDPR-Valid Consent

Apache-2.0GeneralData protection

Guide for implementing GDPR-valid consent under Article 7 conditions and Article 4(11) definition. Covers five core requirements: freely given, specific, informed, unambiguous, and clear affirmative action. Includes pre-ticked boxes prohibition per Planet49 CJEU C-673/17, consent form audit checklist, and practical implementation patterns.

Implementing Homomorphic Encryption

Apache-2.0GeneralData protection

Guide to implementing homomorphic encryption for privacy-preserving computation under GDPR. Covers scheme selection (BFV, BGV, CKKS, TFHE), Microsoft SEAL, IBM HELib, and Google FHE transpiler. Includes performance benchmarks, parameter tuning, and basic HE example code for encrypted arithmetic operations.

Implementing Lawful Basis Assessment

Apache-2.0GeneralData protection

Guides determination of the correct lawful basis under GDPR Article 6(1)(a)-(f) for each processing activity. Includes decision tree logic for consent vs legitimate interest vs contract necessity. Activate when evaluating legal grounds for processing or reviewing lawful basis selections. Keywords: lawful basis, Article 6, consent, legitimate interest, legal obligation, contract.

Implementing NIST Privacy Framework IDENTIFY Function

Apache-2.0GeneralData protection

Guides implementation of the NIST Privacy Framework IDENTIFY function covering ID.BE business environment, ID.DA data actions, ID.IM improvement, and ID.RA risk assessment subcategories. Maps NIST PF controls to GDPR requirements for dual-framework compliance. Keywords: NIST Privacy Framework, IDENTIFY function, ID.BE, ID.DA, ID.IM, ID.RA, privacy risk assessment, data actions.