'gdpr' 검색 결과

Review startup contracts and investment terms to identify risky clauses, prepare negotiation proposals, and organize questions for qualified attorneys. It also covers intellectual property ownership and regulatory exposure, helping founders prepare for legal review.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Checking contract risks before signing
• Reviewing investment terms and founder dilution
• Auditing intellectual property ownership and open source licenses

Review an AI system's EU AI Act readiness through six structured questions. Produce an article-cited assessment covering risk classification, conformity checks, organizational obligations, transparency, and general-purpose models, with gaps and three prioritized actions.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing a new or materially changed AI system
• Checking readiness before an EU launch
• Refreshing an annual compliance assessment

Prepare for ISO 27001 audits by reviewing six areas of an information security management system: audit coverage, risks, access, suppliers, incidents, and management reviews. Summarize evidence gaps, readiness, and three priority actions with owners and timelines.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Prepare evidence for an annual internal audit
• Check readiness before certification or surveillance audits
• Review audit scope after business or system changes

Set up a privacy legal plugin through an interview and existing documents. Capture applicable regulations, data processing agreement positions, and privacy impact assessment formats in shared settings, with options to resume setup or recheck integrations.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Setting up the privacy plugin for the first time
• Capturing team standards from existing privacy documents
• Resuming or revising an incomplete setup interview

Handle personal data access, deletion, portability, and correction requests through a structured checklist. Guide identity checks, data searches, legal exceptions, and deadlines, then draft separate acknowledgment and substantive response letters for attorney review and human delivery.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Preparing a response to a personal data access request
• Organizing checks for deletion and portability requests
• Tracking data searches across internal systems

Compare new or changed privacy regulations with current policies and practices. Identify whether the rules apply, list missing requirements, and produce a prioritized remediation plan with owners and due dates, documenting compliant areas as well.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Assess whether a new privacy law applies to the company
• Identify gaps between regulatory guidance and current practices
• Plan corrective actions with owners and deadlines

Review terms of service and privacy policies from a consumer's perspective. Identify risks involving subscriptions, data use, liability, and content rights, then produce a structured report with supporting passages, severity assessments, and practical actions.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Checking subscription renewal and cancellation terms
• Reviewing data collection and sharing permissions
• Examining platform rights over posted content

Golang everyday observability — the always-on signals in production. Covers structured logging with slog, Prometheus metrics, OpenTelemetry distributed tracing, continuous profiling with pprof/Pyroscope, server-side RUM event tracking, alerting, and Grafana dashboards. Apply when instrumenting Go services for production monitoring, setting up metrics or alerting, adding OpenTelemetry tracing, correlating logs with traces, migrating legacy loggers (zap/logrus/zerolog) to slog, adding observability to new features, or implementing GDPR/CCPA-compliant tracking with Customer Data Platforms (CDP). Not for temporary deep-dive performance investigation (→ See `samber/cc-skills-golang@golang-benchmark` and `samber/cc-skills-golang@golang-performance` skills).

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Assesses and improves how personal data is collected, used, shared, and retained — data mapping, lawful basis, consent, processor agreements, subject rights, and breach obligations. Use this before launching anything that handles personal data, when adding a vendor that will process it, when a data subject request arrives, when assessing exposure under GDPR or US state privacy laws, or when preparing for a privacy review.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Expert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks. Masters vulnerability assessment, threat modeling, secure authentication (OAuth2/OIDC), OWASP standards, cloud security, and security automation. Handles DevSecOps integration, compliance (GDPR/HIPAA/SOC2), and incident response. Use PROACTIVELY for security audits, DevSecOps, or compliance implementation.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

You are a compliance expert specializing in regulatory requirements for software systems including GDPR, HIPAA, SOC2, PCI-DSS, and other industry standards. Perform compliance audits and provide implementation guidance.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Draft privacy policies, terms of service, disclaimers, and legal notices. Creates GDPR-compliant texts, cookie policies, and data processing agreements. Use PROACTIVELY for legal documentation, compliance texts, or regulatory requirements.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Generates complete, GDPR/CCPA-compliant Terms of Service for a website or SaaS product, with plain English summaries for each section

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Generate a prioritised compliance checklist for GDPR, SOC 2, ISO 27001, FCA, HIPAA, or other frameworks with a gap analysis. Use when asked for a compliance checklist, gap analysis, readiness assessment, or audit preparation for any regulatory framework. Produces a structured checklist with prioritised gaps, quick wins, and evidence requirements. Optimised for Opus 4.7 and newer models. Not a substitute for legal or compliance professional advice.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) compliance advisor — business threshold analysis, consumer rights fulfillment (access, delete, correct, opt-out of sale/sharing, limit SPI, ADMT opt-out), privacy notice drafting, service provider vs. contractor vs. third-party classification, sensitive personal information (SPI) handling, data minimization, opt-out mechanisms (including GPC), cybersecurity audits and risk assessments (live since Jan 1, 2026), ADMT obligations (effective 2026, deadline Jan 1, 2027), CPPA enforcement (Disney $2.75M, PlayOn $1.1M, Ford $375K), penalty exposure, GDPR comparison, and gap assessments for businesses operating in or targeting California residents.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Expert third-party risk management (TPRM) advisor — a vendor risk analyst for the full lifecycle: risk-based vendor tiering, tailored due-diligence questionnaires (SIG-style or mapped to ISO 27001, SOC 2, DORA, NIS2, HIPAA), SOC 2 Type II report review (exceptions, carve-outs, CUECs, bridge letters), DPA and sub-processor review under GDPR Art. 28, contract security addenda (DORA Art. 30 provisions), ongoing monitoring programmes, and vendor offboarding. Use this skill whenever a user mentions vendor risk, supplier due diligence, third-party assessments, security questionnaires, reviewing a vendor's SOC 2 report, vendor tiering, fourth parties or sub-processors, supply chain security requirements, DORA ICT third-party rules, business associate agreements, or exit/termination of a vendor. Also trigger for 'a customer sent us a questionnaire' and 'how do I assess this vendor' style requests.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Expert LGPD compliance advisor for Brazil's Lei Geral de Proteção de Dados (Law 13,709/2018). Use this skill whenever a user asks about LGPD, Brazilian data protection, ANPD, personal data processing in Brazil, data subject rights under Brazilian law, legal bases for processing, sensitive data handling, DPO appointment in Brazil, data breach notification to ANPD, LGPD penalties (fines up to 2% of revenue / R$50M), international data transfers from Brazil, Brazil-EU mutual adequacy (January 2026 — SCCs/BCRs no longer needed for Brazil-EU transfers), LGPD gap assessments, privacy policy drafting for Brazilian operations, DPIA under LGPD, consent management, or comparing LGPD with GDPR. Trigger for any Brazil privacy or data protection question even if LGPD is not named explicitly.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Expert ISO 27701 Privacy Information Management System (PIMS) compliance advisor. Use this skill whenever a user asks about ISO/IEC 27701:2025, ISO/IEC 27701:2019, privacy information management, PIMS certification, PII controller or processor obligations, privacy risk assessment, Statement of Applicability for privacy, privacy by design, data subject rights, DPIA, records of processing activities, transitioning from ISO 27701:2019, GDPR alignment with ISO 27701, or any privacy management system topic. Also trigger for questions about Annex A.1 (controller controls), A.2 (processor controls), A.3 (shared security controls), or implementing a standalone PIMS without ISO 27001. When in doubt, use this skill — it covers the full ISO 27701 lifecycle from gap assessment through certification.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Expert India Digital Personal Data Protection Act, 2023 (DPDPA) compliance advisor. Use this skill whenever a user asks about the DPDPA, DPDP Act, DPDP Rules 2025, India data privacy law, Data Fiduciary obligations, Data Principal rights, Significant Data Fiduciary, Data Protection Board of India, consent under DPDPA, notice requirements, breach notification India, children's data India, cross-border data transfer India, India privacy compliance, DPDPA gap analysis, DPDPA vs GDPR, or any obligation under India's personal data protection framework. Also trigger for: "Section 6 consent", "Section 7 legitimate uses", "Section 9 children's data", "Section 10 SDF", "Section 16 cross-border", "Rule 6 breach notification", "Rule 13 SDF obligations", "Data Protection Board complaint", "verifiable parental consent India", "DPDPA compliance roadmap", or "India privacy law global company".

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

EU AI Act (Regulation (EU) 2024/1689) compliance advisor — risk classification across all four tiers, all 9 prohibited practices (Art. 5, including the nudification/CSAM prohibition from Dec 2, 2026), all 8 Annex III high-risk use case areas, provider and deployer obligations (Arts. 9–17, 26), GPAI model obligations including the July 2025 Code of Practice (Arts. 51–55), conformity assessment and CE marking (Arts. 43–48), EU AI database registration, Art. 50 transparency (chatbots, synthetic media, AI-generated content), governance (AI Office, AI Board), penalties (Art. 99), confirmed phase-in timeline (Digital Omnibus, Reg. (EU) 2026/1744, in force July 27, 2026: Annex III deferred to Dec 2, 2027; Annex I to Aug 2, 2028), and cross-framework mapping to ISO 42001, NIST AI RMF, and GDPR. Use for any EU AI regulation, AI system classification, or AI compliance question. Current as of August 2026. GPAI enforcement powers active since August 2, 2026.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Data breach incident response with ENISA severity scoring, notification timelines, and compliance tracking. Use for breach assessment and response.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Security leadership for growth-stage companies. Use when building security programs, selecting compliance frameworks (SOC 2, ISO 27001, HIPAA, GDPR), managing incidents, or assessing vendor risk.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Generate business documents — contracts, proposals, SOWs, NDAs, MSAs — with jurisdiction-aware clauses for US, EU, UK, and DACH. Use when starting client engagements, writing proposals, drafting agreements, or needing GDPR-compliant DPAs.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Use when an application or system — including one built quickly with AI coding agents — needs a security review with regulatory grounding: a STRIDE threat model, a LINDDUN privacy threat model, a dependency exposure screen against live CVE / CISA-KEV / EPSS data, or a selected, non-exhaustive screen of which EU security obligations (GDPR, NIS2, Cyber Resilience Act, AI Act) may apply and which need determination. Orchestrates the server-enforced threat-modeling workflows of the Ansvar Gateway MCP connector and grounds every regulatory statement in officially published text fetched at answer time — scope, role, and application-date limits stated, never a compliance verdict. Never simulates a workflow and never answers legal questions from model memory.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.