๋ณธ๋ฌธ์œผ๋กœ ๊ฑด๋„ˆ๋›ฐ๊ธฐ
cccskills

Mahipal

@mukul975

๐Ÿ” Cybersecurity | ๐Ÿ’ป Dev | ๐Ÿ“ท Street Photographer ๐ŸŽ“ MSc | ๐Ÿ“š Research & AI Security

์Šคํ‚ฌ 588๊ฐœ์ €์žฅ์†Œ 3๊ฐœ 3.5๋งŒ

์Šคํ‚ฌ(588)

๊ฒ€์ƒ‰์—์„œ ์ขํžˆ๊ธฐ

privacy-data-sharing

๋ฌด๋ฃŒ

Build privacy-preserving data sharing platforms using synthetic data generation with the SDV library, data clean rooms, secure enclaves, and utility measurement. Covers end-to-end architecture for sharing analytical datasets while preserving individual privacy guarantees.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

privacy-api-design

๋ฌด๋ฃŒ

Design privacy API patterns including data subject API for DSAR endpoints, consent API for preference management, deletion API with cascading delete orchestration, and audit API for compliance reporting. Provides OpenAPI specifications, error handling, rate limiting, and authentication patterns.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

prior-consultation-dpa

๋ฌด๋ฃŒ

Guides the Art. 36 prior consultation process when a DPIA indicates high residual risk that cannot be mitigated. Covers required documentation per Art. 36(3), the 8-week DPA response timeline, outcome management, and interaction protocols with supervisory authorities. Keywords: prior consultation, Art. 36, supervisory authority, DPA, high residual risk, DPIA escalation, consultation documentation.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

Comprehensive PET selection guide covering differential privacy, homomorphic encryption, secure multi-party computation, federated learning, zero-knowledge proofs, and trusted execution environments. Includes use-case matching matrix, performance comparison, and GDPR alignment assessment for each technology.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

privacy-law-monitoring

๋ฌด๋ฃŒ

Guides privacy law change monitoring and impact assessment for multi-jurisdiction organisations. Covers regulatory tracking sources, change classification, impact scoring methodology, and implementation prioritisation. Keywords: law monitoring, regulatory tracking, change management, impact assessment, implementation priority.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

scc-implementation

๋ฌด๋ฃŒ

Guides implementation of EU Standard Contractual Clauses under Commission Decision 2021/914 across all four modules (C2C, C2P, P2P, P2C). Covers clause-by-clause completion, Annex I-III drafting, and SCC module selection. Keywords: SCCs, standard contractual clauses, module selection, data transfers, Annex completion.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

pii-detection-pipeline

๋ฌด๋ฃŒ

Build automated PII detection and redaction pipelines using spaCy NER, Microsoft Presidio, and AWS Macie integration. Includes confidence scoring, custom entity type definitions, batch processing workflows, and multi-format document scanning for structured and unstructured data sources.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

saas-vendor-inventory

๋ฌด๋ฃŒ

SaaS vendor data processing inventory management. Covers shadow IT discovery, API-based data flow detection, processing purpose mapping, contract status tracking, and continuous inventory reconciliation for cloud service providers.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

ropa-tool-integration

๋ฌด๋ฃŒ

Integrates Records of Processing Activities with privacy management platforms including OneTrust, TrustArc, Collibra, and DataGrail. Covers API-based synchronization, data mapping import, and automated RoPA population from enterprise tools. Activate for RoPA tool setup, OneTrust integration, TrustArc sync, privacy platform configuration.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

Preparation guide for ISO 31700 privacy by design for consumer goods certification. Covers the 30 requirements across design, production, and disposal phases. Includes gap assessment methodology, remediation planning, and mapping to GDPR Article 25 data protection by design obligations for consumer-facing products and services.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

privacy-record-linkage

๋ฌด๋ฃŒ

Implement privacy-preserving record linkage across datasets using Bloom filter encoding, secure hash matching, threshold tuning for precision and recall, and false positive management. Enables entity resolution without exposing raw personally identifiable information between parties.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

secure-data-destruction

๋ฌด๋ฃŒ

Implements NIST SP 800-88 Rev. 1 media sanitization procedures including Clear, Purge, and Destroy methods for all media types. Covers certificate of destruction generation, verification procedures, vendor management for third-party destruction, and chain of custody documentation. Activate for data destruction, media sanitization, secure erasure, certificate of destruction queries.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

pseudonymization-risk

๋ฌด๋ฃŒ

Assessment of pseudonymization techniques and re-identification risk. Covers tokenization, hashing, encryption-based pseudonymization, and hybrid approaches. Includes re-identification risk scoring using the motivated intruder test, quantitative metrics (marketer, journalist, prosecutor models), and linkage attack resilience evaluation. References ENISA 2019 pseudonymization report.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

pii-in-unstructured

๋ฌด๋ฃŒ

Detects PII in unstructured data including emails, documents, images, and logs using NER-based detection with spaCy and Microsoft Presidio, regex patterns, OCR integration, and confidence scoring. Keywords: PII detection, unstructured data, NER, spaCy, Presidio, OCR, regex, email scanning, document scanning.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

purpose-based-access

๋ฌด๋ฃŒ

Design and implement Purpose-Based Access Control (PBAC) architecture including purpose ontology definition, policy engine configuration, audit logging of purpose verification at query time, and integration with existing IAM systems. Enforces GDPR Article 5(1)(b) purpose limitation technically.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

pia-vendor-processing

๋ฌด๋ฃŒ

Conducts Privacy Impact Assessment for vendor and third-party data processing arrangements. Covers processor due diligence, Data Processing Agreement (DPA) requirements under GDPR Article 28, sub-processor management, cross-border vendor transfers, cloud service provider assessments, and ongoing vendor monitoring. Keywords: vendor PIA, processor assessment, DPA, Article 28, sub-processor, cloud privacy, third-party risk.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

pia-review-cadence

๋ฌด๋ฃŒ

Guides the periodic DPIA review lifecycle including trigger identification for regulatory changes, new data categories, technology changes, and breach incidents. Covers version control, stakeholder sign-off procedures, and DPIA register management per Art. 35(11). Keywords: DPIA review, PIA update, review cadence, version control, Art. 35(11), periodic review, trigger events, stakeholder sign-off.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

pia-large-scale-monitor

๋ฌด๋ฃŒ

Conducts Privacy Impact Assessment for large-scale systematic monitoring under GDPR Article 35(3)(c). Covers CCTV and video surveillance, employee monitoring, location tracking, internet monitoring, and behavioural analytics. Applies EDPB WP248rev.01 criteria for systematic monitoring of publicly accessible areas. Keywords: DPIA, large-scale monitoring, CCTV, employee monitoring, systematic monitoring, surveillance, location tracking.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

pia-health-data

๋ฌด๋ฃŒ

Conducts Privacy Impact Assessment for health data processing under GDPR Article 9, HIPAA, and sector-specific health privacy regulations. Covers special category data safeguards, clinical research data, patient portals, health wearables, genetic data, and cross-border health data transfers. Keywords: health data PIA, DPIA, Article 9, HIPAA, special category data, clinical research, patient privacy, genetic data.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

personal-data-test

๋ฌด๋ฃŒ

Classifies personal vs non-personal data per GDPR Art. 4(1) definition test with decision tree for borderline cases. References Breyer v Germany CJEU C-582/14 dynamic IP ruling and WP29 Opinion 4/2007. Keywords: personal data, GDPR Art 4, data classification, Breyer ruling, identifiability test, PII.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

ropa-dpia-linkage

๋ฌด๋ฃŒ

Links RoPA entries to Data Protection Impact Assessments and lawful basis assessments. Covers cross-reference systems, dependency tracking, and update cascade triggers between RoPA, DPIA register, and lawful basis documentation. Activate for RoPA-DPIA link, cross-reference, dependency tracking, impact assessment linkage, cascade updates.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

nist-privacy-identify

๋ฌด๋ฃŒ

Guides implementation of the NIST Privacy Framework IDENTIFY function covering ID.BE business environment, ID.DA data actions, ID.IM improvement, and ID.RA risk assessment subcategories. Maps NIST PF controls to GDPR requirements for dual-framework compliance. Keywords: NIST Privacy Framework, IDENTIFY function, ID.BE, ID.DA, ID.IM, ID.RA, privacy risk assessment, data actions.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

nist-pf-protect

๋ฌด๋ฃŒ

Implement the NIST Privacy Framework PROTECT function covering PR.AC access control, PR.DS data security, and PR.PO protective policies. Provides technical control implementation guidance, encryption standards, access management architectures, and security-privacy integration patterns.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

health-data-dpia

๋ฌด๋ฃŒ

Guides DPIA for health and medical data processing covering Art. 9(2)(h)-(j) exemptions, HIPAA crosswalk for transatlantic operations, clinical trial data protection under EU CTR 536/2014, and genetic data specifics under Art. 9(1). Activate for healthcare systems, clinical research, health apps, or medical device data. Keywords: health data, DPIA, Art. 9, clinical trial, genetic data, HIPAA, medical records, special category.

ํ•œ๊ตญ์–ด ์š”์•ฝ์€ ์ค€๋น„ ์ค‘์ž…๋‹ˆ๋‹ค. ์›๋ฌธ ์„ค๋ช…์„ ํ‘œ์‹œํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

mukul975/Privacy-Data-Protection-Skills3162026๋…„ 3์›” 17์ผ ์—…๋ฐ์ดํŠธ

๋ณธ์ธ ๊ณ„์ •์ธ๊ฐ€์š”? GitHub๋ฅผ ์—ฐ๋™ํ•˜๋ฉด ํฌ๋ฆฌ์—์ดํ„ฐ ํŽ˜์ด์ง€์— ๋ชจ์„ ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค (์ผ๋ณธ์–ด)