๋ณธ๋ฌธ์œผ๋กœ ๊ฑด๋„ˆ๋›ฐ๊ธฐ
cccskills

Mahipal

@mukul975

๐Ÿ” Cybersecurity | ๐Ÿ’ป Dev | ๐Ÿ“ท Street Photographer ๐ŸŽ“ MSc | ๐Ÿ“š Research & AI Security

์Šคํ‚ฌ 588๊ฐœ์ €์žฅ์†Œ 3๊ฐœ 3.5๋งŒ

์Šคํ‚ฌ(588)

๊ฒ€์ƒ‰์—์„œ ์ขํžˆ๊ธฐ

vendor-breach-cascade

๋ฌด๋ฃŒ

Vendor breach notification cascade management per GDPR Article 33(2). Covers processor-to-controller notification without undue delay, escalation paths, coordinated multi-party breach response, liability allocation, and regulatory notification coordination.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

universal-opt-out

๋ฌด๋ฃŒ

Universal opt-out mechanism implementation across US state privacy laws. Covers Global Privacy Control (GPC) signal technical implementation, state-by-state recognition requirements, browser detection methods, authenticated vs unauthenticated handling, and compliance testing.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

supplementary-measures

๋ฌด๋ฃŒ

Guides implementation of technical, contractual, and organisational supplementary measures for international data transfers per EDPB Recommendations 01/2020. Covers encryption, pseudonymisation, split processing, audit rights, transparency obligations, and internal policies. Keywords: supplementary measures, encryption, pseudonymisation, EDPB recommendations, transfer safeguards.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

telehealth-privacy

๋ฌด๋ฃŒ

Implements telehealth privacy compliance covering HIPAA requirements for virtual care, state licensing and recording consent laws, platform security with BAA requirements for telehealth vendors, cross-state prescribing rules, and OCR enforcement discretion during public health emergencies. Keywords: telehealth privacy, virtual care, HIPAA, recording consent, platform BAA, cross-state licensing, OCR enforcement.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

sub-processor-management

๋ฌด๋ฃŒ

GDPR Article 28(2) sub-processor approval workflow management. Covers prior specific and general authorization mechanisms, change notification procedures, objection windows, flow-down obligation enforcement, and sub-processor chain risk monitoring.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

state-law-tracker

๋ฌด๋ฃŒ

Tracks and monitors US state privacy legislation across all 50 states, DC, and territories. Covers enacted comprehensive privacy laws (California CCPA/CPRA, Virginia VCDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA, and subsequent enactments), pending bills, effective dates, and key requirement differences. Keywords: state privacy law, CCPA, CPRA, VCDPA, CPA, CTDPA, UCPA, multi-state.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

special-category-data

๋ฌด๋ฃŒ

Identifies and classifies GDPR Art. 9 special category data including racial origin, political opinions, religious beliefs, trade union membership, genetic, biometric, health, and sexual orientation data. Covers processing conditions under Art. 9(2)(a)-(j). Keywords: special category, Art 9, sensitive data, biometric, genetic, health data, explicit consent.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

south-africa-popia

๋ฌด๋ฃŒ

Implements compliance with South Africa's Protection of Personal Information Act (POPIA), Act No. 4 of 2013. Covers conditions for lawful processing, data subject rights, cross-border transfer restrictions, Information Regulator enforcement, and responsible party obligations. Keywords: POPIA, South Africa, Information Regulator, responsible party, operator, prior authorisation.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

soc2-privacy-audit

๋ฌด๋ฃŒ

Guides SOC 2 Type II Privacy Trust Services Criteria preparation and audit execution. Covers AICPA TSP Section 100 Privacy criteria P1-P8 including notice, choice/consent, collection, use/retention/disposal, access, disclosure, security, and quality. Includes evidence collection, control testing, and report review. Keywords: SOC 2, privacy criteria, TSP, AICPA, Type II, trust services.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

server-side-tracking

๋ฌด๋ฃŒ

Implementing server-side tracking with privacy controls using Google Tag Manager server containers. Covers first-party data collection, IP anonymization, consent-aware event forwarding, and reducing client-side third-party cookie exposure.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

uae-pdp-law

๋ฌด๋ฃŒ

Implements compliance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDP Law) and its Executive Regulations. Covers data controller and processor obligations, data subject rights, cross-border transfer requirements, sensitive data processing, and UAE Data Office enforcement. Keywords: UAE PDP, Federal Decree-Law 45, UAE Data Office, DIFC, ADGM, cross-border transfer.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

uk-aadc-implementation

๋ฌด๋ฃŒ

Implements the UK Age Appropriate Design Code (Children's Code) 15 standards under the Data Protection Act 2018 Section 123. Covers best interests assessment, age-appropriate application, transparency, data minimization, geolocation restrictions, and profiling defaults. Keywords: AADC, Children's Code, ICO, age appropriate design, UK.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

texas-tdpsa-compliance

๋ฌด๋ฃŒ

Texas Data Privacy and Security Act (TDPSA) compliance. No revenue threshold applies to all businesses. Covers data broker registration requirements, biometric identifier provisions under CUBI, consumer rights, AG enforcement, and 30-day cure period. Effective July 1, 2024.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

thailand-pdpa

๋ฌด๋ฃŒ

Guides compliance with Thailand's Personal Data Protection Act B.E. 2562 (2019). Covers consent framework, DPO requirements, PDPC enforcement, lawful bases for processing, cross-border transfer mechanisms, and data subject rights under the PDPA. Keywords: Thailand PDPA, PDPC, consent, DPO, cross-border transfers, data subject rights.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

state-law-applicability

๋ฌด๋ฃŒ

US state privacy law applicability assessment tool. Evaluates revenue thresholds, data volume thresholds, business exemptions (GLBA, HIPAA, nonprofits), employee data carve-outs, and SBA small business determinations across all enacted state privacy laws.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

vendor-monitoring-program

๋ฌด๋ฃŒ

Ongoing vendor privacy compliance monitoring program. Covers annual reassessment procedures, continuous monitoring signals, contract renewal privacy triggers, performance metrics, KPIs, and vendor governance reporting dashboards.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

us-privacy-federal

๋ฌด๋ฃŒ

Maps the US federal privacy landscape including sectoral laws (HIPAA, GLBA, FERPA, COPPA, FCRA, ECPA, VPPA), FTC Section 5 enforcement, proposed federal comprehensive legislation, and the interaction between federal and state privacy regimes. Keywords: federal privacy, HIPAA, GLBA, FERPA, COPPA, FCRA, FTC, sectoral, preemption.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

Guides the post-Schrems II Transfer Impact Assessment process following EDPB Recommendations 01/2020 six-step methodology. Covers destination country surveillance law assessment, European Essential Guarantees evaluation, and supplementary measures determination. Keywords: TIA, transfer impact assessment, Schrems II, EDPB recommendations, supplementary measures.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

uk-transfer-mechanisms

๋ฌด๋ฃŒ

Guides implementation of UK international data transfer mechanisms post-Brexit including the International Data Transfer Agreement (IDTA), UK Addendum to EU SCCs, UK adequacy assessments, and ICO transfer risk assessment tool. Keywords: UK IDTA, UK addendum, ICO TRA, post-Brexit transfers, UK GDPR.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

vcdpa-compliance

๋ฌด๋ฃŒ

Virginia Consumer Data Protection Act (VCDPA) compliance implementation. Covers 5 consumer rights, controller obligations, processor requirements, opt-in for sensitive data, data protection impact assessments, AG enforcement, and cure period provisions. Effective January 1, 2023.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

transfer-records

๋ฌด๋ฃŒ

Guides maintenance of cross-border transfer registers, audit trails, and compliance documentation under GDPR Art. 30 and Art. 46, EDPB record-keeping guidance, and supervisory authority expectations. Keywords: transfer register, audit trail, Art. 30, Art. 46, documentation, compliance records.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

ropa-dpia-linkage

๋ฌด๋ฃŒ

Links RoPA entries to Data Protection Impact Assessments and lawful basis assessments. Covers cross-reference systems, dependency tracking, and update cascade triggers between RoPA, DPIA register, and lawful basis documentation. Activate for RoPA-DPIA link, cross-reference, dependency tracking, impact assessment linkage, cascade updates.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

ropa-maintenance-workflow

๋ฌด๋ฃŒ

Establishes ongoing RoPA maintenance processes including update triggers, change management integration, version control, stakeholder review cycles, and completeness verification procedures. Activate for RoPA updates, record maintenance, change management, version history, review scheduling.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

Comprehensive PET selection guide covering differential privacy, homomorphic encryption, secure multi-party computation, federated learning, zero-knowledge proofs, and trusted execution environments. Includes use-case matching matrix, performance comparison, and GDPR alignment assessment for each technology.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

๋ณธ์ธ ๊ณ„์ •์ธ๊ฐ€์š”? GitHub๋ฅผ ์—ฐ๋™ํ•˜๋ฉด ํฌ๋ฆฌ์—์ดํ„ฐ ํŽ˜์ด์ง€์— ๋ชจ์„ ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค (์ผ๋ณธ์–ด)