[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6AE321F55SVS3KMQ7RKFZ2F":3,"skill-same:01M6AE321F55SVS3KMQ7RKFZ2F":80},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":18,"publishedAt":26,"linkOnly":27,"markdownContent":28,"markdownBody":29,"frontMatter":30,"refName":35,"commitSha":36,"skillDirectory":37,"forksCount":38,"repositoryHtmlUrl":39,"repositoryHomepageUrl":6,"ownerHtmlUrl":40,"ownerBlogUrl":41,"ownerDescription":42,"updatedAt":43,"install":44,"resources":57},"01M6AE321F55SVS3KMQ7RKFZ2F","gdpr-doc-review",null,"Guides systematic review of processing documentation for completeness against GDPR Articles 5, 13-14, 24, 28, and 30. Activate when auditing documentation or preparing for inspections. Keywords: documentation review, processing records, completeness, privacy notices, RoPA.","mukul975\u002FPrivacy-Data-Protection-Skills","mukul975","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F42860185?v=4","01M6ADEQR8T5M4EEG6C67BQCWF","Mahipal","01M6ADNKWX1HF4Q5DKEXT5M774",336,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fplugins\u002Fgdpr-compliance-skills\u002Fskills\u002Fgdpr-doc-review\u002FSKILL.md",[],[19,20,21,22,23,24,25],"review","gdpr","gdpr doc review","documentation","audit","compliance","privacy","2026-11-10 10:12:30",false,"---\nname: gdpr-doc-review\ndescription: >-\n  Guides systematic review of processing documentation for completeness against GDPR Articles 5, 13-14, 24, 28, and 30. Activate when auditing documentation or preparing for inspections. Keywords: documentation review, processing records, completeness, privacy notices, RoPA.\nlicense: Apache-2.0\nmetadata:\n  author: mukul975\n  version: \"1.0\"\n  domain: privacy\n  subdomain: gdpr-compliance\n  tags: \"gdpr, documentation-review, processing-records, completeness, accuracy, audit\"\n---\n\n# Reviewing Documentation of Processing\n\n## Overview\n\nGDPR compliance depends on comprehensive, accurate, and current documentation. This skill provides methodology for reviewing RoPA, privacy notices, DPAs, DPIAs, consent records, and internal policies for internal consistency and alignment with actual processing.\n\n## Implementation Approach\n\n### Phase 1: Assessment\n1. Review current state against applicable GDPR articles.\n2. Identify gaps between current practices and requirements.\n3. Classify gaps by severity and regulatory risk.\n4. Document the assessment with evidence references.\n\n### Phase 2: Design\n1. Design measures to address identified gaps.\n2. Align measures with organisational capacity and risk appetite.\n3. Obtain DPO and stakeholder review of proposed measures.\n4. Create implementation timeline with milestones.\n\n### Phase 3: Implementation\n1. Execute the implementation plan according to priority.\n2. Document all measures implemented with evidence.\n3. Train relevant staff on new procedures and requirements.\n4. Validate implementation through testing or review.\n\n### Phase 4: Maintenance\n1. Schedule periodic reviews (minimum annual).\n2. Monitor for regulatory changes affecting the scope.\n3. Update measures in response to audit findings or incidents.\n4. Report on compliance status to the governance structure.\n","# Reviewing Documentation of Processing\n\n## Overview\n\nGDPR compliance depends on comprehensive, accurate, and current documentation. This skill provides methodology for reviewing RoPA, privacy notices, DPAs, DPIAs, consent records, and internal policies for internal consistency and alignment with actual processing.\n\n## Implementation Approach\n\n### Phase 1: Assessment\n1. Review current state against applicable GDPR articles.\n2. Identify gaps between current practices and requirements.\n3. Classify gaps by severity and regulatory risk.\n4. Document the assessment with evidence references.\n\n### Phase 2: Design\n1. Design measures to address identified gaps.\n2. Align measures with organisational capacity and risk appetite.\n3. Obtain DPO and stakeholder review of proposed measures.\n4. Create implementation timeline with milestones.\n\n### Phase 3: Implementation\n1. Execute the implementation plan according to priority.\n2. Document all measures implemented with evidence.\n3. Train relevant staff on new procedures and requirements.\n4. Validate implementation through testing or review.\n\n### Phase 4: Maintenance\n1. Schedule periodic reviews (minimum annual).\n2. Monitor for regulatory changes affecting the scope.\n3. Update measures in response to audit findings or incidents.\n4. Report on compliance status to the governance structure.\n",{"name":5,"license":15,"metadata":31,"description":7},{"tags":32,"author":9,"domain":25,"version":33,"subdomain":34},"gdpr, documentation-review, processing-records, completeness, accuracy, audit","1.0","gdpr-compliance","main","9b2ef9eae161c00a17241d42a388571321b33e9f","plugins\u002Fgdpr-compliance-skills\u002Fskills\u002Fgdpr-doc-review",67,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills","https:\u002F\u002Fgithub.com\u002Fmukul975","Mahipal.engineer","🔐 Cybersecurity | 💻 Dev | 📷 Street Photographer\r\n🎓 MSc | 📚 Research & AI Security","2026-03-17 04:06:52",{"source":8,"skillName":5,"commands":45,"prompt":55,"zipAvailable":56},[46,49,52],{"tool":47,"command":48},"npx","npx skills add mukul975\u002FPrivacy-Data-Protection-Skills --skill gdpr-doc-review",{"tool":50,"command":51},"bunx","bunx skills add mukul975\u002FPrivacy-Data-Protection-Skills --skill gdpr-doc-review",{"tool":53,"command":54},"pnpm","pnpm dlx skills add mukul975\u002FPrivacy-Data-Protection-Skills --skill gdpr-doc-review","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fplugins\u002Fgdpr-compliance-skills\u002Fskills\u002Fgdpr-doc-review\u002FSKILL.md",true,[58,64,70,74],{"path":59,"resourceType":60,"resourceTypeDesc":61,"sizeBytes":62,"sourceHtmlUrl":63},"assets\u002Ftemplate.md","ASSET","资产文件",1308,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fplugins\u002Fgdpr-compliance-skills\u002Fskills\u002Fgdpr-doc-review\u002Fassets\u002Ftemplate.md",{"path":65,"resourceType":66,"resourceTypeDesc":67,"sizeBytes":68,"sourceHtmlUrl":69},"references\u002Fstandards.md","REFERENCE","参考文档",1203,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fplugins\u002Fgdpr-compliance-skills\u002Fskills\u002Fgdpr-doc-review\u002Freferences\u002Fstandards.md",{"path":71,"resourceType":66,"resourceTypeDesc":67,"sizeBytes":72,"sourceHtmlUrl":73},"references\u002Fworkflows.md",1501,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fplugins\u002Fgdpr-compliance-skills\u002Fskills\u002Fgdpr-doc-review\u002Freferences\u002Fworkflows.md",{"path":75,"resourceType":76,"resourceTypeDesc":77,"sizeBytes":78,"sourceHtmlUrl":79},"scripts\u002Fprocess.py","SCRIPT","脚本",3068,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fplugins\u002Fgdpr-compliance-skills\u002Fskills\u002Fgdpr-doc-review\u002Fscripts\u002Fprocess.py",[81,109,125,138,155,167],{"skillNo":82,"name":83,"nameZh":6,"description":84,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":85,"categories":86,"keywords":100,"publishedAt":26},"01M6AG6K8R3XW10ENWH2FH18RH","workplace-email-privacy","Implements email and internet monitoring compliance in the workplace per Barbulescu v Romania (ECHR Grand Chamber), EDPB guidance, and national labour law. Covers acceptable use policies, legitimate expectation of privacy, proportionality testing, and content vs metadata monitoring. Keywords: email monitoring, Barbulescu, workplace privacy, internet monitoring, acceptable use policy, ECHR, proportionality.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fworkplace-email-privacy\u002FSKILL.md",[87,92,95],{"categoryNo":88,"categoryName":89,"taxonomyType":90,"taxonomyTypeDesc":91},"01JBSEEDCAT000000000000005","邮件与沟通","SCENARIO","使用场景",{"categoryNo":93,"categoryName":94,"taxonomyType":90,"taxonomyTypeDesc":91},"01JBSEEDCAT000000000000008","测试与质量",{"categoryNo":96,"categoryName":97,"taxonomyType":98,"taxonomyTypeDesc":99},"01JBSEEDCAT000000000000037","律师与法务","PROFESSION","适用职业",[101,102,25,24,103,104,105,106,107,108],"email","workplace email privacy","content","data","policy","testing","monitoring","metadata",{"skillNo":110,"name":111,"nameZh":6,"description":112,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":113,"categories":114,"keywords":119,"publishedAt":26},"01M6AG6FRCBJY7D061BJZMNV49","whistleblower-data","Implements data protection compliance for whistleblowing systems under EU Directive 2019\u002F1937 and GDPR. Covers anonymous reporting channels, identity protection for whistleblowers and accused persons, retention limits, access restrictions, and retaliation prevention. Addresses national transpositions and DPA guidance. Keywords: whistleblower, Directive 2019\u002F1937, anonymous reporting, identity protection, retaliation, retention, reporting channel.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fwhistleblower-data\u002FSKILL.md",[115,118],{"categoryNo":116,"categoryName":117,"taxonomyType":98,"taxonomyTypeDesc":99},"01JBSEEDCAT000000000000033","数据分析师",{"categoryNo":96,"categoryName":97,"taxonomyType":98,"taxonomyTypeDesc":99},[104,120,121,122,24,123,20,25,124],"whistleblower data","identity","reporting","data protection","prevention",{"skillNo":126,"name":127,"nameZh":6,"description":128,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":129,"categories":130,"keywords":132,"publishedAt":26},"01M6AG6CJP0PW3X65HC7VP9SR9","vendor-termination-data","Vendor termination data return and deletion procedures per GDPR Article 28(3)(g). Covers data extraction formats, deletion certification requirements, transition planning, residual data handling, and post-termination verification.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fvendor-termination-data\u002FSKILL.md",[131],{"categoryNo":116,"categoryName":117,"taxonomyType":98,"taxonomyTypeDesc":99},[104,133,134,135,136,20,25,137],"vendor termination data","planning","verification","extraction","certification",{"skillNo":139,"name":140,"nameZh":6,"description":141,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":142,"categories":143,"keywords":145,"publishedAt":26},"01M6AG69E277DXZB2NF6KV17ZA","vendor-risk-scoring","Vendor privacy risk tiering methodology for processor management. Covers scoring factors including data volume, sensitivity, transfer locations, certifications, breach history, and control maturity with weighted risk calculation and tier assignment.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fvendor-risk-scoring\u002FSKILL.md",[144],{"categoryNo":116,"categoryName":117,"taxonomyType":98,"taxonomyTypeDesc":99},[146,147,148,149,150,151,152,153,25,104,154],"vendor risk scoring","risk","risk scoring","methodology","risk-scoring","assessment","transfer","certifications","processor",{"skillNo":156,"name":157,"nameZh":6,"description":158,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":159,"categories":160,"keywords":162,"publishedAt":26},"01M6AG6655ABFKT2BBWHCP4PAT","vendor-privacy-due-diligence","Pre-contract vendor privacy due diligence per GDPR Article 28(1). Covers risk questionnaires, technical controls assessment, certification review, data flow analysis, and documented sufficiency decisions for processor engagement.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fvendor-privacy-due-diligence\u002FSKILL.md",[161],{"categoryNo":96,"categoryName":97,"taxonomyType":98,"taxonomyTypeDesc":99},[25,163,20,19,151,164,165,104,154,147,137,166],"vendor privacy due diligence","onboarding","flow","analysis",{"skillNo":168,"name":169,"nameZh":6,"description":170,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":171,"categories":172,"keywords":180,"publishedAt":26},"01M6AG62C3VD8SYNGH4N7RHZTE","vendor-privacy-audit","On-site and remote vendor audit procedures per GDPR Article 28(3)(h). Covers audit planning, evidence collection methodologies, finding classification, remediation tracking, and audit report generation for processor compliance verification.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fvendor-privacy-audit\u002FSKILL.md",[173,176,179],{"categoryNo":174,"categoryName":175,"taxonomyType":90,"taxonomyTypeDesc":91},"01JBSEEDCAT000000000000018","写作与文案",{"categoryNo":177,"categoryName":178,"taxonomyType":98,"taxonomyTypeDesc":99},"01JBSEEDCAT000000000000036","内容创作者",{"categoryNo":96,"categoryName":97,"taxonomyType":98,"taxonomyTypeDesc":99},[181,23,25,182,135,183,24,20,184,154,185,186,187,134],"vendor privacy audit","report","audit report","remediation","collection","remediation-tracking","classification"]