跳到正文
cccskills
免费在 GitHub 公开

gdpr-policy-framework

Guides creation of organisational privacy policy hierarchy aligned to GDPR chapters including top-level policy, supporting procedures, operational guidelines, and training materials. Activate when building or updating policy frameworks. Keywords: policy framework, privacy policy, procedures, guidelines, policy hierarchy.

中文简介正在准备中。当前显示原文说明。

查看安装方法

包含的文件(5)

  • SKILL.md1.9 KB
  • assets/template.md2.1 KB
  • references/standards.md1.1 KB
  • references/workflows.md1.5 KB
  • scripts/process.py3.0 KB

SKILL.md(原文)

安装前可以查看交给 AI 代理的指令内容。

Developing GDPR Policy Framework

Overview

A GDPR policy framework provides the documented governance structure underpinning operational compliance, comprising strategic policies, operational procedures, practical guidelines, and training materials aligned to specific GDPR requirements.

Implementation Approach

Phase 1: Assessment

  1. Review current state against applicable GDPR articles.
  2. Identify gaps between current practices and requirements.
  3. Classify gaps by severity and regulatory risk.
  4. Document the assessment with evidence references.

Phase 2: Design

  1. Design measures to address identified gaps.
  2. Align measures with organisational capacity and risk appetite.
  3. Obtain DPO and stakeholder review of proposed measures.
  4. Create implementation timeline with milestones.

Phase 3: Implementation

  1. Execute the implementation plan according to priority.
  2. Document all measures implemented with evidence.
  3. Train relevant staff on new procedures and requirements.
  4. Validate implementation through testing or review.

Phase 4: Maintenance

  1. Schedule periodic reviews (minimum annual).
  2. Monitor for regulatory changes affecting the scope.
  3. Update measures in response to audit findings or incidents.
  4. Report on compliance status to the governance structure.

评价

还没有评价。欢迎分享你的使用感受。

评论

无需登录即可发表。欢迎分享使用感受、提问,或说明在哪些环境下无法运行。

还没有评论。来写第一条吧。

提交后会立即公开。请勿填写邮箱、电话等个人信息。URL 最多 2 个。

0 / 1000 字

此表单受 reCAPTCHA 保护,适用 Google 的隐私权政策和服务条款。

同一仓库的技能

Implements 42 CFR Part 2 protections for substance use disorder patient records. Covers written consent requirements stricter than HIPAA, re-disclosure prohibition, court order procedures, qualified service organization agreements, and 2024 amendments aligning Part 2 with HIPAA. Keywords: 42 CFR Part 2, substance use disorder, SUD records, re-disclosure, consent, Part 2 amendments.

中文简介正在准备中。当前显示原文说明。

mukul975/Privacy-Data-Protection-Skills3162026年3月17日 更新

Guides assessment of third-country adequacy decisions under GDPR Article 45 for international data transfers. Covers the current EC adequacy decisions list, adequacy assessment criteria, partial adequacy handling, and monitoring of adequacy decision reviews. Keywords: adequacy decision, Article 45, third country, adequate protection, EC adequacy list.

中文简介正在准备中。当前显示原文说明。

mukul975/Privacy-Data-Protection-Skills3162026年3月17日 更新

Implements age-gating mechanisms for online services to restrict access based on user age. Covers hard gates versus soft gates, neutral age prompts, re-verification triggers, circumvention prevention, and regulatory requirements under GDPR, COPPA, UK Online Safety Act, and DSA. Keywords: age gate, age restriction, neutral prompt, children, online services, access control.

中文简介正在准备中。当前显示原文说明。

mukul975/Privacy-Data-Protection-Skills3162026年3月17日 更新

Evaluates and implements age estimation and verification technologies for online services. Covers facial age estimation, digital ID verification, self-declaration with risk assessment, AI-based age estimation, and the accuracy versus privacy tradeoff. Includes ICO guidance and euCONSENT framework. Keywords: age verification, age estimation, facial analysis, digital ID, children, online safety.

中文简介正在准备中。当前显示原文说明。

mukul975/Privacy-Data-Protection-Skills3162026年3月17日 更新

Preparing EU AI Act compliance documentation for high-risk AI systems. Covers Annex III classification, technical documentation under Art. 11, conformity assessment, risk management systems, and CE marking requirements. Keywords: EU AI Act, high-risk AI, Annex III, conformity assessment, CE marking.

中文简介正在准备中。当前显示原文说明。

mukul975/Privacy-Data-Protection-Skills3162026年3月17日 更新

Implements GDPR Art. 22 automated decision-making and AI Act Art. 14 human oversight requirements for AI systems. Covers identification of solely automated decisions, meaningful human intervention design, logic explanation mechanisms, and contestation procedures. Keywords: Art. 22, automated decision, human oversight, AI Act, profiling, contestation.

中文简介正在准备中。当前显示原文说明。

mukul975/Privacy-Data-Protection-Skills3162026年3月17日 更新

查看 mukul975 的全部技能

报告此技能的问题