[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6ADRMKPSAWZF4P10HJBJKTE":3,"skill-same:01M6ADRMKPSAWZF4P10HJBJKTE":92},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":23,"publishedAt":38,"linkOnly":39,"markdownContent":40,"markdownBody":41,"frontMatter":42,"refName":47,"commitSha":48,"skillDirectory":49,"forksCount":50,"repositoryHtmlUrl":51,"repositoryHomepageUrl":6,"ownerHtmlUrl":52,"ownerBlogUrl":53,"ownerDescription":54,"updatedAt":55,"install":56,"resources":69},"01M6ADRMKPSAWZF4P10HJBJKTE","consent-platform-eval",null,"Framework for evaluating and selecting Consent Management Platforms (CMPs). Covers TCF v2.2 certification requirements, Global Privacy Control support, multi-regulation compliance (GDPR, CCPA, LGPD), A\u002FB testing capabilities, API integration options, reporting features, and a structured vendor comparison methodology.","mukul975\u002FPrivacy-Data-Protection-Skills","mukul975","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F42860185?v=4","01M6ADEQR8T5M4EEG6C67BQCWF","Mahipal","01M6ADNKWX1HF4Q5DKEXT5M774",338,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fplugins\u002Fconsent-management-skills\u002Fskills\u002Fconsent-platform-eval\u002FSKILL.md",[18],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000037","律师与法务","PROFESSION","适用职业",[24,25,26,27,28,29,30,31,32,33,34,35,36,37],"consent platform eval","testing","support","vendor comparison","capabilities","framework","integration","reporting","compliance","ccpa","gdpr","lgpd","privacy","Evaluation","2026-11-10 10:12:30",false,"---\nname: consent-platform-eval\ndescription: >-\n  Framework for evaluating and selecting Consent Management Platforms (CMPs). Covers\n  TCF v2.2 certification requirements, Global Privacy Control support, multi-regulation\n  compliance (GDPR, CCPA, LGPD), A\u002FB testing capabilities, API integration options,\n  reporting features, and a structured vendor comparison methodology.\nlicense: Apache-2.0\nmetadata:\n  author: mukul975\n  version: \"1.0\"\n  domain: privacy\n  subdomain: consent-management\n  tags: \"consent-management-platform, cmp-evaluation, tcf-certification, vendor-selection, cmp-comparison\"\n---\n\n# Evaluating Consent Management Platforms\n\n## Overview\n\nA Consent Management Platform (CMP) is the technology layer that handles cookie consent collection, preference management, consent record storage, and signal propagation to downstream systems. Selecting the right CMP is critical for compliance with GDPR, ePrivacy, CCPA\u002FCPRA, LGPD, and other regulations. The IAB Transparency and Consent Framework (TCF) v2.2 certification is a key differentiator for CMPs operating in the EU advertising ecosystem.\n\n## Evaluation Criteria\n\n### Category 1: Regulatory Compliance (Weight: 30%)\n\n| Criterion | Description | Scoring |\n|-----------|-------------|---------|\n| TCF v2.2 Certification | CMP is registered with IAB Europe and passes compliance audits | Required for EU advertising |\n| GDPR Compliance | Supports Art. 7 consent requirements, Art. 7(3) withdrawal, Art. 7(1) records | Mandatory for EU operations |\n| CCPA\u002FCPRA Support | Supports \"Do Not Sell\" opt-out, GPC signal detection, CPRA requirements | Required for US operations |\n| LGPD Support | Brazilian data protection law consent requirements | Required for Brazil operations |\n| GPC Support | Detects and honors Global Privacy Control (Sec-GPC: 1) signal | Required for CA, CO, CT, MT, TX, OR |\n| CNIL Compliance | Equal prominence accept\u002Freject, 6-month reconsent, no cookie walls | Required for French operations |\n| Multi-Jurisdiction | Ability to apply different consent rules based on user location | Critical for global operations |\n| Cookie Scanning | Automated scanning to detect and classify all cookies on the site | Important for completeness |\n\n### Category 2: Technical Capabilities (Weight: 25%)\n\n| Criterion | Description | Scoring |\n|-----------|-------------|---------|\n| API Integration | RESTful API for consent state queries from backend systems | Critical for server-side enforcement |\n| Tag Manager Integration | Native integration with Google Tag Manager, Tealium, Segment | Reduces implementation effort |\n| SDK Availability | Mobile SDKs (iOS, Android) and server-side SDKs | Required for mobile apps |\n| Performance | Page load impact (target: \u003C100ms additional latency) | Critical for UX |\n| Customization | UI customization (colors, layout, language, button text) | Important for brand consistency |\n| A\u002FB Testing | Built-in consent banner experimentation (within compliance boundaries) | Important for optimization |\n| Geolocation | Accurate user location detection for jurisdiction-specific rules | Critical for multi-region |\n| TC String Generation | Generates IAB TC String for ad tech ecosystem integration | Required for advertising |\n\n### Category 3: Consent Record Management (Weight: 20%)\n\n| Criterion | Description | Scoring |\n|-----------|-------------|---------|\n| Consent Receipts | Generates audit-ready consent receipts per Art. 7(1) | Critical for compliance |\n| Version Control | Tracks consent text versions with change history | Important for audit trail |\n| Consent History | Full history per user (grants, withdrawals, re-consents) | Critical for DSAR support |\n| Data Export | Export consent records in standard formats (JSON, CSV) | Important for portability |\n| Retention Controls | Configurable consent record retention periods | Important for data minimization |\n| Search and Query | Search consent records by user, purpose, date range | Important for DPA inquiries |\n| Proof of Consent | Can generate evidence packages for regulatory inquiries | Critical for enforcement defense |\n\n### Category 4: Reporting and Analytics (Weight: 15%)\n\n| Criterion | Description | Scoring |\n|-----------|-------------|---------|\n| Consent Rate Dashboard | Real-time consent\u002Fopt-out rates by purpose and region | Important for monitoring |\n| Trend Analysis | Historical consent rate trends over time | Important for strategy |\n| Compliance Reporting | Pre-built reports aligned with GDPR, CCPA requirements | Important for DPO |\n| Custom Reports | Ability to create custom reports and dashboards | Nice to have |\n| Alerting | Alerts for anomalous consent patterns (sudden drops, spikes) | Important for incident detection |\n| GPC Reporting | Reports on GPC signal detection rates and actions taken | Required for CPRA compliance |\n\n### Category 5: Vendor and Support (Weight: 10%)\n\n| Criterion | Description | Scoring |\n|-----------|-------------|---------|\n| Data Processing Agreement | GDPR-compliant DPA available | Mandatory |\n| Data Residency | EU data hosting available (for consent records) | Required for EU operations |\n| Sub-Processors | Transparent sub-processor list | Required per Art. 28 |\n| SLA | Uptime SLA (target: 99.9%+) | Critical for availability |\n| Support | Dedicated support, privacy expertise, implementation guidance | Important |\n| Pricing Model | Transparent pricing (per pageview, per domain, flat rate) | Important for budgeting |\n\n## Vendor Comparison Matrix\n\n| Feature | OneTrust | Cookiebot | Usercentrics | Didomi | Quantcast Choice |\n|---------|----------|-----------|-------------|--------|-----------------|\n| **TCF v2.2 Certified** | Yes | Yes | Yes | Yes | Yes |\n| **GDPR Compliance** | Full | Full | Full | Full | Full |\n| **CCPA\u002FCPRA Support** | Yes | Yes | Yes | Yes | Yes |\n| **GPC Detection** | Yes | Yes | Yes | Yes | Yes |\n| **LGPD Support** | Yes | Limited | Yes | Yes | Limited |\n| **CNIL Compliance** | Yes | Yes | Yes | Yes | Yes |\n| **Multi-Jurisdiction** | 100+ countries | 50+ countries | 50+ countries | 40+ countries | 30+ countries |\n| **Cookie Scanner** | Automated | Automated | Automated | Automated | Automated |\n| **API** | REST + GraphQL | REST | REST | REST + GraphQL | REST |\n| **Mobile SDKs** | iOS + Android | Limited | iOS + Android | iOS + Android | Limited |\n| **GTM Integration** | Native | Native | Native | Native | Native |\n| **A\u002FB Testing** | Built-in | Via API | Built-in | Built-in | Limited |\n| **Performance** | ~80ms | ~60ms | ~70ms | ~75ms | ~50ms |\n| **Consent Receipts** | Kantara-aligned | Basic | Detailed | Detailed | Basic |\n| **Version Control** | Yes | Yes | Yes | Yes | Yes |\n| **Data Export** | JSON, CSV, API | CSV | JSON, CSV, API | JSON, CSV | CSV |\n| **Consent Dashboard** | Advanced | Basic | Advanced | Advanced | Basic |\n| **EU Data Hosting** | Yes (Frankfurt) | Yes (Copenhagen) | Yes (Munich) | Yes (Paris) | Yes (Amsterdam) |\n| **DPA Available** | Standard | Standard | Standard | Standard | Standard |\n| **SLA** | 99.99% | 99.9% | 99.95% | 99.9% | 99.9% |\n| **Pricing Model** | Per session | Per domain | Per session | Per pageview | Free (basic) |\n| **Starting Price** | ~EUR 300\u002Fmonth | ~EUR 9\u002Fmonth | ~EUR 50\u002Fmonth | ~EUR 50\u002Fmonth | Free tier |\n\n## Selection Process\n\n### Step 1: Requirements Gathering\n\nIdentify must-have requirements based on:\n- Jurisdictions where your organization operates\n- Number of domains and mobile apps\n- Advertising ecosystem participation (need TCF v2.2?)\n- Backend integration needs (API requirements)\n- Budget constraints\n\n### Step 2: Shortlist (3-4 Vendors)\n\nApply mandatory criteria as filters:\n- TCF v2.2 certification (if operating in EU ad tech)\n- GPC support (if serving US consumers)\n- EU data hosting (if required by data residency policy)\n\n### Step 3: Proof of Concept (2 Weeks per Vendor)\n\nFor each shortlisted vendor:\n- Implement on a staging environment\n- Test all consent flows (accept, refuse, manage, withdraw)\n- Measure page load impact\n- Test API integration with backend systems\n- Verify consent records meet Art. 7(1) requirements\n- Test multi-jurisdiction logic (EU vs US vs Brazil)\n\n### Step 4: Scoring and Selection\n\nScore each vendor against the weighted criteria. Calculate weighted total score. Select the vendor with the highest score that meets all mandatory requirements.\n\n## CloudVault SaaS Inc. Selection\n\nAfter evaluating five vendors, CloudVault SaaS Inc. selected **Usercentrics** based on:\n- Full TCF v2.2 certification\n- Native iOS and Android SDKs (critical for CloudVault mobile app)\n- Built-in A\u002FB testing within CNIL compliance boundaries\n- Strong API for server-side consent state queries\n- EU data hosting in Munich (same jurisdiction as key customers)\n- Competitive pricing for the pageview volume\n\n## Key Regulatory References\n\n- IAB TCF v2.2 Specification — CMP certification and requirements\n- GDPR Article 7 — Conditions for consent (CMP must support)\n- GDPR Article 28 — Processor requirements (CMP as processor)\n- CPRA Section 1798.135(e) — GPC signal recognition\n- CNIL Deliberation 2020-091 — Cookie consent technical requirements\n- LGPD (Lei 13.709\u002F2018) — Brazilian consent requirements\n- ePrivacy Directive Article 5(3) — Cookie consent basis\n","# Evaluating Consent Management Platforms\n\n## Overview\n\nA Consent Management Platform (CMP) is the technology layer that handles cookie consent collection, preference management, consent record storage, and signal propagation to downstream systems. Selecting the right CMP is critical for compliance with GDPR, ePrivacy, CCPA\u002FCPRA, LGPD, and other regulations. The IAB Transparency and Consent Framework (TCF) v2.2 certification is a key differentiator for CMPs operating in the EU advertising ecosystem.\n\n## Evaluation Criteria\n\n### Category 1: Regulatory Compliance (Weight: 30%)\n\n| Criterion | Description | Scoring |\n|-----------|-------------|---------|\n| TCF v2.2 Certification | CMP is registered with IAB Europe and passes compliance audits | Required for EU advertising |\n| GDPR Compliance | Supports Art. 7 consent requirements, Art. 7(3) withdrawal, Art. 7(1) records | Mandatory for EU operations |\n| CCPA\u002FCPRA Support | Supports \"Do Not Sell\" opt-out, GPC signal detection, CPRA requirements | Required for US operations |\n| LGPD Support | Brazilian data protection law consent requirements | Required for Brazil operations |\n| GPC Support | Detects and honors Global Privacy Control (Sec-GPC: 1) signal | Required for CA, CO, CT, MT, TX, OR |\n| CNIL Compliance | Equal prominence accept\u002Freject, 6-month reconsent, no cookie walls | Required for French operations |\n| Multi-Jurisdiction | Ability to apply different consent rules based on user location | Critical for global operations |\n| Cookie Scanning | Automated scanning to detect and classify all cookies on the site | Important for completeness |\n\n### Category 2: Technical Capabilities (Weight: 25%)\n\n| Criterion | Description | Scoring |\n|-----------|-------------|---------|\n| API Integration | RESTful API for consent state queries from backend systems | Critical for server-side enforcement |\n| Tag Manager Integration | Native integration with Google Tag Manager, Tealium, Segment | Reduces implementation effort |\n| SDK Availability | Mobile SDKs (iOS, Android) and server-side SDKs | Required for mobile apps |\n| Performance | Page load impact (target: \u003C100ms additional latency) | Critical for UX |\n| Customization | UI customization (colors, layout, language, button text) | Important for brand consistency |\n| A\u002FB Testing | Built-in consent banner experimentation (within compliance boundaries) | Important for optimization |\n| Geolocation | Accurate user location detection for jurisdiction-specific rules | Critical for multi-region |\n| TC String Generation | Generates IAB TC String for ad tech ecosystem integration | Required for advertising |\n\n### Category 3: Consent Record Management (Weight: 20%)\n\n| Criterion | Description | Scoring |\n|-----------|-------------|---------|\n| Consent Receipts | Generates audit-ready consent receipts per Art. 7(1) | Critical for compliance |\n| Version Control | Tracks consent text versions with change history | Important for audit trail |\n| Consent History | Full history per user (grants, withdrawals, re-consents) | Critical for DSAR support |\n| Data Export | Export consent records in standard formats (JSON, CSV) | Important for portability |\n| Retention Controls | Configurable consent record retention periods | Important for data minimization |\n| Search and Query | Search consent records by user, purpose, date range | Important for DPA inquiries |\n| Proof of Consent | Can generate evidence packages for regulatory inquiries | Critical for enforcement defense |\n\n### Category 4: Reporting and Analytics (Weight: 15%)\n\n| Criterion | Description | Scoring |\n|-----------|-------------|---------|\n| Consent Rate Dashboard | Real-time consent\u002Fopt-out rates by purpose and region | Important for monitoring |\n| Trend Analysis | Historical consent rate trends over time | Important for strategy |\n| Compliance Reporting | Pre-built reports aligned with GDPR, CCPA requirements | Important for DPO |\n| Custom Reports | Ability to create custom reports and dashboards | Nice to have |\n| Alerting | Alerts for anomalous consent patterns (sudden drops, spikes) | Important for incident detection |\n| GPC Reporting | Reports on GPC signal detection rates and actions taken | Required for CPRA compliance |\n\n### Category 5: Vendor and Support (Weight: 10%)\n\n| Criterion | Description | Scoring |\n|-----------|-------------|---------|\n| Data Processing Agreement | GDPR-compliant DPA available | Mandatory |\n| Data Residency | EU data hosting available (for consent records) | Required for EU operations |\n| Sub-Processors | Transparent sub-processor list | Required per Art. 28 |\n| SLA | Uptime SLA (target: 99.9%+) | Critical for availability |\n| Support | Dedicated support, privacy expertise, implementation guidance | Important |\n| Pricing Model | Transparent pricing (per pageview, per domain, flat rate) | Important for budgeting |\n\n## Vendor Comparison Matrix\n\n| Feature | OneTrust | Cookiebot | Usercentrics | Didomi | Quantcast Choice |\n|---------|----------|-----------|-------------|--------|-----------------|\n| **TCF v2.2 Certified** | Yes | Yes | Yes | Yes | Yes |\n| **GDPR Compliance** | Full | Full | Full | Full | Full |\n| **CCPA\u002FCPRA Support** | Yes | Yes | Yes | Yes | Yes |\n| **GPC Detection** | Yes | Yes | Yes | Yes | Yes |\n| **LGPD Support** | Yes | Limited | Yes | Yes | Limited |\n| **CNIL Compliance** | Yes | Yes | Yes | Yes | Yes |\n| **Multi-Jurisdiction** | 100+ countries | 50+ countries | 50+ countries | 40+ countries | 30+ countries |\n| **Cookie Scanner** | Automated | Automated | Automated | Automated | Automated |\n| **API** | REST + GraphQL | REST | REST | REST + GraphQL | REST |\n| **Mobile SDKs** | iOS + Android | Limited | iOS + Android | iOS + Android | Limited |\n| **GTM Integration** | Native | Native | Native | Native | Native |\n| **A\u002FB Testing** | Built-in | Via API | Built-in | Built-in | Limited |\n| **Performance** | ~80ms | ~60ms | ~70ms | ~75ms | ~50ms |\n| **Consent Receipts** | Kantara-aligned | Basic | Detailed | Detailed | Basic |\n| **Version Control** | Yes | Yes | Yes | Yes | Yes |\n| **Data Export** | JSON, CSV, API | CSV | JSON, CSV, API | JSON, CSV | CSV |\n| **Consent Dashboard** | Advanced | Basic | Advanced | Advanced | Basic |\n| **EU Data Hosting** | Yes (Frankfurt) | Yes (Copenhagen) | Yes (Munich) | Yes (Paris) | Yes (Amsterdam) |\n| **DPA Available** | Standard | Standard | Standard | Standard | Standard |\n| **SLA** | 99.99% | 99.9% | 99.95% | 99.9% | 99.9% |\n| **Pricing Model** | Per session | Per domain | Per session | Per pageview | Free (basic) |\n| **Starting Price** | ~EUR 300\u002Fmonth | ~EUR 9\u002Fmonth | ~EUR 50\u002Fmonth | ~EUR 50\u002Fmonth | Free tier |\n\n## Selection Process\n\n### Step 1: Requirements Gathering\n\nIdentify must-have requirements based on:\n- Jurisdictions where your organization operates\n- Number of domains and mobile apps\n- Advertising ecosystem participation (need TCF v2.2?)\n- Backend integration needs (API requirements)\n- Budget constraints\n\n### Step 2: Shortlist (3-4 Vendors)\n\nApply mandatory criteria as filters:\n- TCF v2.2 certification (if operating in EU ad tech)\n- GPC support (if serving US consumers)\n- EU data hosting (if required by data residency policy)\n\n### Step 3: Proof of Concept (2 Weeks per Vendor)\n\nFor each shortlisted vendor:\n- Implement on a staging environment\n- Test all consent flows (accept, refuse, manage, withdraw)\n- Measure page load impact\n- Test API integration with backend systems\n- Verify consent records meet Art. 7(1) requirements\n- Test multi-jurisdiction logic (EU vs US vs Brazil)\n\n### Step 4: Scoring and Selection\n\nScore each vendor against the weighted criteria. Calculate weighted total score. Select the vendor with the highest score that meets all mandatory requirements.\n\n## CloudVault SaaS Inc. Selection\n\nAfter evaluating five vendors, CloudVault SaaS Inc. selected **Usercentrics** based on:\n- Full TCF v2.2 certification\n- Native iOS and Android SDKs (critical for CloudVault mobile app)\n- Built-in A\u002FB testing within CNIL compliance boundaries\n- Strong API for server-side consent state queries\n- EU data hosting in Munich (same jurisdiction as key customers)\n- Competitive pricing for the pageview volume\n\n## Key Regulatory References\n\n- IAB TCF v2.2 Specification — CMP certification and requirements\n- GDPR Article 7 — Conditions for consent (CMP must support)\n- GDPR Article 28 — Processor requirements (CMP as processor)\n- CPRA Section 1798.135(e) — GPC signal recognition\n- CNIL Deliberation 2020-091 — Cookie consent technical requirements\n- LGPD (Lei 13.709\u002F2018) — Brazilian consent requirements\n- ePrivacy Directive Article 5(3) — Cookie consent basis\n",{"name":5,"license":15,"metadata":43,"description":7},{"tags":44,"author":9,"domain":36,"version":45,"subdomain":46},"consent-management-platform, cmp-evaluation, tcf-certification, vendor-selection, cmp-comparison","1.0","consent-management","main","9b2ef9eae161c00a17241d42a388571321b33e9f","plugins\u002Fconsent-management-skills\u002Fskills\u002Fconsent-platform-eval",68,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills","https:\u002F\u002Fgithub.com\u002Fmukul975","Mahipal.engineer","🔐 Cybersecurity | 💻 Dev | 📷 Street Photographer\r\n🎓 MSc | 📚 Research & AI Security","2026-03-17 04:06:52",{"source":8,"skillName":5,"commands":57,"prompt":67,"zipAvailable":68},[58,61,64],{"tool":59,"command":60},"npx","npx skills add mukul975\u002FPrivacy-Data-Protection-Skills --skill consent-platform-eval",{"tool":62,"command":63},"bunx","bunx skills add mukul975\u002FPrivacy-Data-Protection-Skills --skill consent-platform-eval",{"tool":65,"command":66},"pnpm","pnpm dlx skills add mukul975\u002FPrivacy-Data-Protection-Skills --skill consent-platform-eval","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fplugins\u002Fconsent-management-skills\u002Fskills\u002Fconsent-platform-eval\u002FSKILL.md",true,[70,76,82,86],{"path":71,"resourceType":72,"resourceTypeDesc":73,"sizeBytes":74,"sourceHtmlUrl":75},"assets\u002Ftemplate.md","ASSET","资产文件",3144,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fplugins\u002Fconsent-management-skills\u002Fskills\u002Fconsent-platform-eval\u002Fassets\u002Ftemplate.md",{"path":77,"resourceType":78,"resourceTypeDesc":79,"sizeBytes":80,"sourceHtmlUrl":81},"references\u002Fstandards.md","REFERENCE","参考文档",3251,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fplugins\u002Fconsent-management-skills\u002Fskills\u002Fconsent-platform-eval\u002Freferences\u002Fstandards.md",{"path":83,"resourceType":78,"resourceTypeDesc":79,"sizeBytes":84,"sourceHtmlUrl":85},"references\u002Fworkflows.md",4710,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fplugins\u002Fconsent-management-skills\u002Fskills\u002Fconsent-platform-eval\u002Freferences\u002Fworkflows.md",{"path":87,"resourceType":88,"resourceTypeDesc":89,"sizeBytes":90,"sourceHtmlUrl":91},"scripts\u002Fprocess.py","SCRIPT","脚本",10296,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fplugins\u002Fconsent-management-skills\u002Fskills\u002Fconsent-platform-eval\u002Fscripts\u002Fprocess.py",[93,116,131,144,161,174],{"skillNo":94,"name":95,"nameZh":6,"description":96,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":97,"categories":98,"keywords":108,"publishedAt":38},"01M6AG6K8R3XW10ENWH2FH18RH","workplace-email-privacy","Implements email and internet monitoring compliance in the workplace per Barbulescu v Romania (ECHR Grand Chamber), EDPB guidance, and national labour law. Covers acceptable use policies, legitimate expectation of privacy, proportionality testing, and content vs metadata monitoring. Keywords: email monitoring, Barbulescu, workplace privacy, internet monitoring, acceptable use policy, ECHR, proportionality.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fworkplace-email-privacy\u002FSKILL.md",[99,104,107],{"categoryNo":100,"categoryName":101,"taxonomyType":102,"taxonomyTypeDesc":103},"01JBSEEDCAT000000000000005","邮件与沟通","SCENARIO","使用场景",{"categoryNo":105,"categoryName":106,"taxonomyType":102,"taxonomyTypeDesc":103},"01JBSEEDCAT000000000000008","测试与质量",{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[109,110,36,32,111,112,113,25,114,115],"email","workplace email privacy","content","data","policy","monitoring","metadata",{"skillNo":117,"name":118,"nameZh":6,"description":119,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":120,"categories":121,"keywords":126,"publishedAt":38},"01M6AG6FRCBJY7D061BJZMNV49","whistleblower-data","Implements data protection compliance for whistleblowing systems under EU Directive 2019\u002F1937 and GDPR. Covers anonymous reporting channels, identity protection for whistleblowers and accused persons, retention limits, access restrictions, and retaliation prevention. Addresses national transpositions and DPA guidance. Keywords: whistleblower, Directive 2019\u002F1937, anonymous reporting, identity protection, retaliation, retention, reporting channel.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fwhistleblower-data\u002FSKILL.md",[122,125],{"categoryNo":123,"categoryName":124,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000033","数据分析师",{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[112,127,128,31,32,129,34,36,130],"whistleblower data","identity","data protection","prevention",{"skillNo":132,"name":133,"nameZh":6,"description":134,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":135,"categories":136,"keywords":138,"publishedAt":38},"01M6AG6CJP0PW3X65HC7VP9SR9","vendor-termination-data","Vendor termination data return and deletion procedures per GDPR Article 28(3)(g). Covers data extraction formats, deletion certification requirements, transition planning, residual data handling, and post-termination verification.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fvendor-termination-data\u002FSKILL.md",[137],{"categoryNo":123,"categoryName":124,"taxonomyType":21,"taxonomyTypeDesc":22},[112,139,140,141,142,34,36,143],"vendor termination data","planning","verification","extraction","certification",{"skillNo":145,"name":146,"nameZh":6,"description":147,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":148,"categories":149,"keywords":151,"publishedAt":38},"01M6AG69E277DXZB2NF6KV17ZA","vendor-risk-scoring","Vendor privacy risk tiering methodology for processor management. Covers scoring factors including data volume, sensitivity, transfer locations, certifications, breach history, and control maturity with weighted risk calculation and tier assignment.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fvendor-risk-scoring\u002FSKILL.md",[150],{"categoryNo":123,"categoryName":124,"taxonomyType":21,"taxonomyTypeDesc":22},[152,153,154,155,156,157,158,159,36,112,160],"vendor risk scoring","risk","risk scoring","methodology","risk-scoring","assessment","transfer","certifications","processor",{"skillNo":162,"name":163,"nameZh":6,"description":164,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":165,"categories":166,"keywords":168,"publishedAt":38},"01M6AG6655ABFKT2BBWHCP4PAT","vendor-privacy-due-diligence","Pre-contract vendor privacy due diligence per GDPR Article 28(1). Covers risk questionnaires, technical controls assessment, certification review, data flow analysis, and documented sufficiency decisions for processor engagement.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fvendor-privacy-due-diligence\u002FSKILL.md",[167],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[36,169,34,170,157,171,172,112,160,153,143,173],"vendor privacy due diligence","review","onboarding","flow","analysis",{"skillNo":175,"name":176,"nameZh":6,"description":177,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":178,"categories":179,"keywords":187,"publishedAt":38},"01M6AG62C3VD8SYNGH4N7RHZTE","vendor-privacy-audit","On-site and remote vendor audit procedures per GDPR Article 28(3)(h). Covers audit planning, evidence collection methodologies, finding classification, remediation tracking, and audit report generation for processor compliance verification.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fvendor-privacy-audit\u002FSKILL.md",[180,183,186],{"categoryNo":181,"categoryName":182,"taxonomyType":102,"taxonomyTypeDesc":103},"01JBSEEDCAT000000000000018","写作与文案",{"categoryNo":184,"categoryName":185,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000036","内容创作者",{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[188,189,36,190,141,191,32,34,192,160,193,194,195,140],"vendor privacy audit","audit","report","audit report","remediation","collection","remediation-tracking","classification"]