Agent skill · data analytics · aiskillstore
data-privacy-compliance
Data privacy and regulatory compliance specialist for GDPR, CCPA, HIPAA, and international data protection laws. Use when implementing privacy controls, conducting data protection impact assessments, ensuring regulatory compliance, or managing data subject rights. Expert in consent management, data minimization, and privacy-by-design principles.
Why this skill is useful
Provides specific implementation scripts for handling data subject rights that are not commonly known or documented.
What it needs
About 9k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
Data Privacy Compliance Comprehensive guidance for implementing data privacy compliance across GDPR, CCPA, HIPAA, and other global data protection regulations. When to Use This Skill Use this skill when: Implementing GDPR, CCPA, or HIPAA compliance Conducting Data Protection Impact Assessments (DPIA) Managing data subject rights (access, deletion, portability) Implementing consent management systems Drafting privacy policies and notices Handling data breaches and incident response Designing privacy-by-design systems Conducting privacy audits and assessments Key Regulations Overview GDPR (General Data Protection Regulation) Scope: EU residents' data, regardless of where company is located Key Requirements: Lawful basis for processing (consent, contract, legitimate interest, etc.) Data subject rights (access, deletion, portability, objection) Data Protection Impact Assessments for high-risk processing 72-hour breach notification requirement Records of processing activities Privacy by design and by default Penalties: Up to €20M or 4% of global annual revenue CCPA/CPRA (California Consumer Privacy Act) Scope: California residents' data Key Requirements: Right to know what data is collected Right to delete personal information Right to opt-out of sale/sharing Right to correct inaccurate information Right to limit use of sensitive personal information Penalties: Up to $7,500 per intentional violation HIPAA (Health Insurance Portability and Accountability Act) Scope: Protected Health Information (PHI) in the US Key Requirements: Privacy Rule (patient rights and information uses) Security Rule (safeguards for ePHI) Breach Notification Rule (60-day notification) Business Associate Agreements (BAAs) Penalties: Up to $1.5M per violation category per year Data Subject Rights Implementation 1. Right to Access (GDPR Art. 15 / CCPA § 1798.100) Request Handler: Response Timeline: GDPR: 1 month (extendable to 3 months) CCPA: 45 days (extendable to 90 days) 2. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/data-privacy-compliance