[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6AF04JFGW3VTAM3F7SZ5CY6":3,"skill-same:01M6AF04JFGW3VTAM3F7SZ5CY6":99},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":18,"publishedAt":33,"linkOnly":34,"markdownContent":35,"markdownBody":36,"frontMatter":37,"refName":42,"commitSha":43,"skillDirectory":44,"forksCount":45,"repositoryHtmlUrl":46,"repositoryHomepageUrl":6,"ownerHtmlUrl":47,"ownerBlogUrl":48,"ownerDescription":49,"updatedAt":50,"install":51,"resources":64},"01M6AF04JFGW3VTAM3F7SZ5CY6","nist-pf-govern",null,"Implement the NIST Privacy Framework GOVERN function covering GV.AT awareness and training, GV.MT monitoring and review, GV.PO policy development, and GV.RR roles and responsibilities. Provides governance structure templates, training programs, and accountability frameworks for privacy governance.","mukul975\u002FPrivacy-Data-Protection-Skills","mukul975","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F42860185?v=4","01M6ADEQR8T5M4EEG6C67BQCWF","Mahipal","01M6ADNKWX1HF4Q5DKEXT5M774",337,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fplugins\u002Fprivacy-skills-complete\u002Fskills\u002Fnist-pf-govern\u002FSKILL.md",[],[19,20,21,22,23,24,25,26,27,28,29,30,31,32],"NIST","nist pf govern","review","policy","implement","governance","training","development","framework","monitoring","engineering","privacy","awareness","templates","2026-11-10 10:12:30",false,"---\nname: nist-pf-govern\ndescription: >-\n  Implement the NIST Privacy Framework GOVERN function covering GV.AT\n  awareness and training, GV.MT monitoring and review, GV.PO policy development,\n  and GV.RR roles and responsibilities. Provides governance structure templates,\n  training programs, and accountability frameworks for privacy governance.\nlicense: Apache-2.0\nmetadata:\n  author: mukul975\n  version: \"1.0\"\n  domain: privacy\n  subdomain: privacy-engineering\n  tags: \"nist-privacy-framework, govern-function, privacy-governance, privacy-policy, roles-responsibilities\"\n---\n\n# NIST Privacy Framework — GOVERN Function\n\n## Overview\n\nThe GOVERN function establishes and monitors the organization's privacy governance structure, including policies, processes, and procedures for managing privacy risk. It is the foundational function that enables all other NIST Privacy Framework functions.\n\n## GOVERN Function Subcategories\n\n### GV.AT — Awareness and Training\n\nBuilding organizational awareness and capability for privacy risk management.\n\n| Subcategory | Description | Implementation Guidance |\n|-------------|-------------|------------------------|\n| GV.AT-P1 | The workforce is informed and trained on its roles and responsibilities | Develop role-based privacy training curricula. New hire training within 30 days, annual refresher for all staff. |\n| GV.AT-P2 | Senior executives understand their roles and responsibilities | Executive briefings quarterly. Board-level privacy risk reporting semi-annually. |\n| GV.AT-P3 | Privacy personnel understand their roles and responsibilities | Specialized training for DPOs, privacy engineers, and legal counsel. Professional certification support (CIPP, CIPM, CIPT). |\n| GV.AT-P4 | Third parties (service providers, customers, partners) understand their roles and responsibilities | Include privacy requirements in contracts. Provide vendor privacy guidelines. Verify third-party training compliance. |\n\n### GV.MT — Monitoring and Review\n\nOngoing assessment of privacy governance effectiveness.\n\n| Subcategory | Description | Implementation Guidance |\n|-------------|-------------|------------------------|\n| GV.MT-P1 | Privacy risk is re-assessed on an ongoing basis and as key factors change | Trigger-based reassessment: new processing activities, regulatory changes, incidents, organizational changes. |\n| GV.MT-P2 | Privacy risk management activities are periodically reviewed | Conduct quarterly operational reviews and annual strategic reviews. Benchmark against industry peers. |\n| GV.MT-P3 | Privacy policies, processes, and procedures are maintained and used to manage privacy risk | Version control for all privacy documentation. Annual policy review cycle with defined approval workflow. |\n| GV.MT-P4 | Privacy risk assessment results are shared with stakeholders | Distribute risk dashboards to executive leadership monthly. Share relevant findings with operational teams weekly. |\n\n### GV.PO — Policy\n\nPrivacy policies governing organizational approach to privacy risk management.\n\n| Subcategory | Description | Implementation Guidance |\n|-------------|-------------|------------------------|\n| GV.PO-P1 | Organizational privacy values and policies are established and communicated | Publish a privacy mission statement. Develop comprehensive privacy policy suite aligned with organizational values. |\n| GV.PO-P2 | Processes to instill organizational privacy values within data processing activities are established | Embed privacy requirements into SDLC. Require privacy review at design stage for all new data processing. |\n| GV.PO-P3 | Roles and responsibilities for privacy workforce are established | Define RACI matrices for privacy functions. Document authority levels and escalation paths. |\n| GV.PO-P4 | Privacy is integrated into organizational risk management | Include privacy in enterprise risk register. Align privacy risk appetite with organizational risk tolerance. |\n| GV.PO-P5 | Legal, regulatory, and contractual requirements regarding privacy are understood and managed | Maintain regulatory tracking register. Map obligations to controls. Conduct annual compliance assessments. |\n| GV.PO-P6 | Governance and risk management policies address privacy risks | Privacy risk addressed in board risk committee charter. Executive-level accountability for privacy. |\n\n### GV.RR — Roles and Responsibilities\n\nEstablishing accountability structures for privacy risk management.\n\n| Subcategory | Description | Implementation Guidance |\n|-------------|-------------|------------------------|\n| GV.RR-P1 | Organizational leadership is responsible and accountable for privacy risk | C-suite privacy accountability documented. Chief Privacy Officer reports to CEO or General Counsel. |\n| GV.RR-P2 | Adequate resources for privacy programs are allocated | Annual privacy budget planning. Headcount planning for privacy team. Technology investment for privacy tools. |\n| GV.RR-P3 | Processes are in place to determine, assess, and manage privacy risks | Formal privacy risk management methodology adopted. Standard operating procedures for risk assessment. |\n\n## Governance Structure Template\n\n### Organizational Hierarchy\n\n```\nBoard of Directors \u002F Audit Committee\n    |\nChief Executive Officer\n    |\nChief Privacy Officer (CPO) \u002F Data Protection Officer (DPO)\n    |\n    +-- Privacy Legal Counsel\n    +-- Privacy Engineering Lead\n    +-- Privacy Operations Manager\n    +-- Privacy Compliance Analyst\n    |\nBusiness Unit Privacy Champions (distributed model)\n```\n\n### RACI Matrix for Key Privacy Activities\n\n| Activity | CPO\u002FDPO | Legal | Engineering | Business Units | Executive |\n|----------|---------|-------|-------------|----------------|-----------|\n| Privacy strategy | A | C | C | I | R |\n| Policy development | R | R | C | C | A |\n| DPIA execution | A | C | R | R | I |\n| Incident response | R | R | C | C | I |\n| Training delivery | A | C | I | R | I |\n| Regulatory monitoring | C | R | I | I | A |\n| Vendor assessment | A | R | C | R | I |\n| Metrics reporting | R | I | C | C | A |\n\n*R = Responsible, A = Accountable, C = Consulted, I = Informed*\n\n## Training Program Framework\n\n### Tier 1 — General Awareness (All Staff)\n- **Frequency**: Annual, plus new hire onboarding\n- **Duration**: 45 minutes\n- **Topics**: Privacy principles, data handling basics, incident reporting, individual rights\n- **Assessment**: Quiz with 80% pass threshold\n\n### Tier 2 — Role-Specific (Data Handlers)\n- **Frequency**: Semi-annual\n- **Duration**: 2 hours\n- **Topics**: Data classification, access controls, secure processing, retention schedules\n- **Assessment**: Scenario-based exercises\n\n### Tier 3 — Specialist (Privacy Team)\n- **Frequency**: Quarterly\n- **Duration**: 4 hours\n- **Topics**: Regulatory updates, advanced risk assessment, PET implementation, incident management\n- **Assessment**: Practical exercises and case studies\n\n### Tier 4 — Executive (Leadership)\n- **Frequency**: Semi-annual\n- **Duration**: 1 hour\n- **Topics**: Privacy risk landscape, regulatory exposure, strategic alignment, board reporting\n- **Assessment**: N\u002FA (discussion-based)\n\n## Policy Suite Inventory\n\n| Policy | Owner | Review Cycle | Approval Authority |\n|--------|-------|-------------|-------------------|\n| Enterprise Privacy Policy | CPO | Annual | CEO |\n| Data Classification Policy | CISO\u002FCPO | Annual | CTO |\n| Data Retention Policy | CPO | Annual | General Counsel |\n| Data Subject Rights Policy | CPO | Annual | General Counsel |\n| Privacy Incident Response Policy | CPO | Semi-Annual | CISO |\n| Third-Party Data Processing Policy | CPO | Annual | Procurement Lead |\n| Cross-Border Transfer Policy | Legal | Annual | General Counsel |\n| Cookie and Tracking Policy | CPO | Semi-Annual | CMO |\n| Employee Privacy Policy | CPO\u002FHR | Annual | CHRO |\n| Privacy-by-Design Standards | Privacy Engineering | Annual | CTO |\n\n## Control Mapping\n\n| NIST PF GOVERN | ISO 27701 | GDPR Article | SOC 2 TSC |\n|----------------|-----------|--------------|-----------|\n| GV.AT-P1 | 7.2.2 | Art. 39(1)(b) | CC1.4 |\n| GV.AT-P2 | 5.1 | Art. 38(3) | CC1.2 |\n| GV.MT-P1 | 9.1 | Art. 24(1) | CC4.1 |\n| GV.MT-P3 | 5.2 | Art. 24(2) | CC1.3 |\n| GV.PO-P1 | 5.2 | Art. 5(1) | CC1.1 |\n| GV.PO-P4 | 5.3.2 | Art. 24(1) | CC3.1 |\n| GV.PO-P5 | 5.2.1 | Art. 5(1)(a) | CC2.2 |\n| GV.RR-P1 | 5.3 | Art. 37-39 | CC1.2 |\n| GV.RR-P2 | 7.1 | Art. 38(2) | CC1.1 |\n\n## References\n\n- NIST Privacy Framework Version 1.0 (January 16, 2020)\n- NIST SP 800-53 Rev. 5 — Security and Privacy Controls (PM family)\n- ISO\u002FIEC 27701:2019 — Clause 5 (PIMS-specific requirements)\n- IAPP CIPM Body of Knowledge — Privacy Program Management\n","# NIST Privacy Framework — GOVERN Function\n\n## Overview\n\nThe GOVERN function establishes and monitors the organization's privacy governance structure, including policies, processes, and procedures for managing privacy risk. It is the foundational function that enables all other NIST Privacy Framework functions.\n\n## GOVERN Function Subcategories\n\n### GV.AT — Awareness and Training\n\nBuilding organizational awareness and capability for privacy risk management.\n\n| Subcategory | Description | Implementation Guidance |\n|-------------|-------------|------------------------|\n| GV.AT-P1 | The workforce is informed and trained on its roles and responsibilities | Develop role-based privacy training curricula. New hire training within 30 days, annual refresher for all staff. |\n| GV.AT-P2 | Senior executives understand their roles and responsibilities | Executive briefings quarterly. Board-level privacy risk reporting semi-annually. |\n| GV.AT-P3 | Privacy personnel understand their roles and responsibilities | Specialized training for DPOs, privacy engineers, and legal counsel. Professional certification support (CIPP, CIPM, CIPT). |\n| GV.AT-P4 | Third parties (service providers, customers, partners) understand their roles and responsibilities | Include privacy requirements in contracts. Provide vendor privacy guidelines. Verify third-party training compliance. |\n\n### GV.MT — Monitoring and Review\n\nOngoing assessment of privacy governance effectiveness.\n\n| Subcategory | Description | Implementation Guidance |\n|-------------|-------------|------------------------|\n| GV.MT-P1 | Privacy risk is re-assessed on an ongoing basis and as key factors change | Trigger-based reassessment: new processing activities, regulatory changes, incidents, organizational changes. |\n| GV.MT-P2 | Privacy risk management activities are periodically reviewed | Conduct quarterly operational reviews and annual strategic reviews. Benchmark against industry peers. |\n| GV.MT-P3 | Privacy policies, processes, and procedures are maintained and used to manage privacy risk | Version control for all privacy documentation. Annual policy review cycle with defined approval workflow. |\n| GV.MT-P4 | Privacy risk assessment results are shared with stakeholders | Distribute risk dashboards to executive leadership monthly. Share relevant findings with operational teams weekly. |\n\n### GV.PO — Policy\n\nPrivacy policies governing organizational approach to privacy risk management.\n\n| Subcategory | Description | Implementation Guidance |\n|-------------|-------------|------------------------|\n| GV.PO-P1 | Organizational privacy values and policies are established and communicated | Publish a privacy mission statement. Develop comprehensive privacy policy suite aligned with organizational values. |\n| GV.PO-P2 | Processes to instill organizational privacy values within data processing activities are established | Embed privacy requirements into SDLC. Require privacy review at design stage for all new data processing. |\n| GV.PO-P3 | Roles and responsibilities for privacy workforce are established | Define RACI matrices for privacy functions. Document authority levels and escalation paths. |\n| GV.PO-P4 | Privacy is integrated into organizational risk management | Include privacy in enterprise risk register. Align privacy risk appetite with organizational risk tolerance. |\n| GV.PO-P5 | Legal, regulatory, and contractual requirements regarding privacy are understood and managed | Maintain regulatory tracking register. Map obligations to controls. Conduct annual compliance assessments. |\n| GV.PO-P6 | Governance and risk management policies address privacy risks | Privacy risk addressed in board risk committee charter. Executive-level accountability for privacy. |\n\n### GV.RR — Roles and Responsibilities\n\nEstablishing accountability structures for privacy risk management.\n\n| Subcategory | Description | Implementation Guidance |\n|-------------|-------------|------------------------|\n| GV.RR-P1 | Organizational leadership is responsible and accountable for privacy risk | C-suite privacy accountability documented. Chief Privacy Officer reports to CEO or General Counsel. |\n| GV.RR-P2 | Adequate resources for privacy programs are allocated | Annual privacy budget planning. Headcount planning for privacy team. Technology investment for privacy tools. |\n| GV.RR-P3 | Processes are in place to determine, assess, and manage privacy risks | Formal privacy risk management methodology adopted. Standard operating procedures for risk assessment. |\n\n## Governance Structure Template\n\n### Organizational Hierarchy\n\n```\nBoard of Directors \u002F Audit Committee\n    |\nChief Executive Officer\n    |\nChief Privacy Officer (CPO) \u002F Data Protection Officer (DPO)\n    |\n    +-- Privacy Legal Counsel\n    +-- Privacy Engineering Lead\n    +-- Privacy Operations Manager\n    +-- Privacy Compliance Analyst\n    |\nBusiness Unit Privacy Champions (distributed model)\n```\n\n### RACI Matrix for Key Privacy Activities\n\n| Activity | CPO\u002FDPO | Legal | Engineering | Business Units | Executive |\n|----------|---------|-------|-------------|----------------|-----------|\n| Privacy strategy | A | C | C | I | R |\n| Policy development | R | R | C | C | A |\n| DPIA execution | A | C | R | R | I |\n| Incident response | R | R | C | C | I |\n| Training delivery | A | C | I | R | I |\n| Regulatory monitoring | C | R | I | I | A |\n| Vendor assessment | A | R | C | R | I |\n| Metrics reporting | R | I | C | C | A |\n\n*R = Responsible, A = Accountable, C = Consulted, I = Informed*\n\n## Training Program Framework\n\n### Tier 1 — General Awareness (All Staff)\n- **Frequency**: Annual, plus new hire onboarding\n- **Duration**: 45 minutes\n- **Topics**: Privacy principles, data handling basics, incident reporting, individual rights\n- **Assessment**: Quiz with 80% pass threshold\n\n### Tier 2 — Role-Specific (Data Handlers)\n- **Frequency**: Semi-annual\n- **Duration**: 2 hours\n- **Topics**: Data classification, access controls, secure processing, retention schedules\n- **Assessment**: Scenario-based exercises\n\n### Tier 3 — Specialist (Privacy Team)\n- **Frequency**: Quarterly\n- **Duration**: 4 hours\n- **Topics**: Regulatory updates, advanced risk assessment, PET implementation, incident management\n- **Assessment**: Practical exercises and case studies\n\n### Tier 4 — Executive (Leadership)\n- **Frequency**: Semi-annual\n- **Duration**: 1 hour\n- **Topics**: Privacy risk landscape, regulatory exposure, strategic alignment, board reporting\n- **Assessment**: N\u002FA (discussion-based)\n\n## Policy Suite Inventory\n\n| Policy | Owner | Review Cycle | Approval Authority |\n|--------|-------|-------------|-------------------|\n| Enterprise Privacy Policy | CPO | Annual | CEO |\n| Data Classification Policy | CISO\u002FCPO | Annual | CTO |\n| Data Retention Policy | CPO | Annual | General Counsel |\n| Data Subject Rights Policy | CPO | Annual | General Counsel |\n| Privacy Incident Response Policy | CPO | Semi-Annual | CISO |\n| Third-Party Data Processing Policy | CPO | Annual | Procurement Lead |\n| Cross-Border Transfer Policy | Legal | Annual | General Counsel |\n| Cookie and Tracking Policy | CPO | Semi-Annual | CMO |\n| Employee Privacy Policy | CPO\u002FHR | Annual | CHRO |\n| Privacy-by-Design Standards | Privacy Engineering | Annual | CTO |\n\n## Control Mapping\n\n| NIST PF GOVERN | ISO 27701 | GDPR Article | SOC 2 TSC |\n|----------------|-----------|--------------|-----------|\n| GV.AT-P1 | 7.2.2 | Art. 39(1)(b) | CC1.4 |\n| GV.AT-P2 | 5.1 | Art. 38(3) | CC1.2 |\n| GV.MT-P1 | 9.1 | Art. 24(1) | CC4.1 |\n| GV.MT-P3 | 5.2 | Art. 24(2) | CC1.3 |\n| GV.PO-P1 | 5.2 | Art. 5(1) | CC1.1 |\n| GV.PO-P4 | 5.3.2 | Art. 24(1) | CC3.1 |\n| GV.PO-P5 | 5.2.1 | Art. 5(1)(a) | CC2.2 |\n| GV.RR-P1 | 5.3 | Art. 37-39 | CC1.2 |\n| GV.RR-P2 | 7.1 | Art. 38(2) | CC1.1 |\n\n## References\n\n- NIST Privacy Framework Version 1.0 (January 16, 2020)\n- NIST SP 800-53 Rev. 5 — Security and Privacy Controls (PM family)\n- ISO\u002FIEC 27701:2019 — Clause 5 (PIMS-specific requirements)\n- IAPP CIPM Body of Knowledge — Privacy Program Management\n",{"name":5,"license":15,"metadata":38,"description":7},{"tags":39,"author":9,"domain":30,"version":40,"subdomain":41},"nist-privacy-framework, govern-function, privacy-governance, privacy-policy, roles-responsibilities","1.0","privacy-engineering","main","9b2ef9eae161c00a17241d42a388571321b33e9f","plugins\u002Fprivacy-skills-complete\u002Fskills\u002Fnist-pf-govern",68,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills","https:\u002F\u002Fgithub.com\u002Fmukul975","Mahipal.engineer","🔐 Cybersecurity | 💻 Dev | 📷 Street Photographer\r\n🎓 MSc | 📚 Research & AI Security","2026-03-17 04:06:52",{"source":8,"skillName":5,"commands":52,"prompt":62,"zipAvailable":63},[53,56,59],{"tool":54,"command":55},"npx","npx skills add mukul975\u002FPrivacy-Data-Protection-Skills --skill nist-pf-govern",{"tool":57,"command":58},"bunx","bunx skills add mukul975\u002FPrivacy-Data-Protection-Skills --skill nist-pf-govern",{"tool":60,"command":61},"pnpm","pnpm dlx skills add mukul975\u002FPrivacy-Data-Protection-Skills --skill nist-pf-govern","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fplugins\u002Fprivacy-skills-complete\u002Fskills\u002Fnist-pf-govern\u002FSKILL.md",true,[65,71,77,81,85,89,93],{"path":66,"resourceType":67,"resourceTypeDesc":68,"sizeBytes":69,"sourceHtmlUrl":70},"assets\u002Ftemplate.md","ASSET","资产文件",1795,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fplugins\u002Fprivacy-skills-complete\u002Fskills\u002Fnist-pf-govern\u002Fassets\u002Ftemplate.md",{"path":72,"resourceType":73,"resourceTypeDesc":74,"sizeBytes":75,"sourceHtmlUrl":76},"references\u002Fexamples.md","REFERENCE","参考文档",17624,"https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fscientific\u002Fseaborn\u002Freferences\u002Fexamples.md",{"path":78,"resourceType":73,"resourceTypeDesc":74,"sizeBytes":79,"sourceHtmlUrl":80},"references\u002Ffunction_reference.md",24615,"https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fscientific\u002Fseaborn\u002Freferences\u002Ffunction_reference.md",{"path":82,"resourceType":73,"resourceTypeDesc":74,"sizeBytes":83,"sourceHtmlUrl":84},"references\u002Fobjects_interface.md",20801,"https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fscientific\u002Fseaborn\u002Freferences\u002Fobjects_interface.md",{"path":86,"resourceType":73,"resourceTypeDesc":74,"sizeBytes":87,"sourceHtmlUrl":88},"references\u002Fstandards.md",1500,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fplugins\u002Fprivacy-skills-complete\u002Fskills\u002Fnist-pf-govern\u002Freferences\u002Fstandards.md",{"path":90,"resourceType":73,"resourceTypeDesc":74,"sizeBytes":91,"sourceHtmlUrl":92},"references\u002Fworkflows.md",2362,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fplugins\u002Fprivacy-skills-complete\u002Fskills\u002Fnist-pf-govern\u002Freferences\u002Fworkflows.md",{"path":94,"resourceType":95,"resourceTypeDesc":96,"sizeBytes":97,"sourceHtmlUrl":98},"scripts\u002Fprocess.py","SCRIPT","脚本",7923,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fplugins\u002Fprivacy-skills-complete\u002Fskills\u002Fnist-pf-govern\u002Fscripts\u002Fprocess.py",[100,127,144,157,174,186],{"skillNo":101,"name":102,"nameZh":6,"description":103,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":104,"categories":105,"keywords":119,"publishedAt":33},"01M6AG6K8R3XW10ENWH2FH18RH","workplace-email-privacy","Implements email and internet monitoring compliance in the workplace per Barbulescu v Romania (ECHR Grand Chamber), EDPB guidance, and national labour law. Covers acceptable use policies, legitimate expectation of privacy, proportionality testing, and content vs metadata monitoring. Keywords: email monitoring, Barbulescu, workplace privacy, internet monitoring, acceptable use policy, ECHR, proportionality.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fworkplace-email-privacy\u002FSKILL.md",[106,111,114],{"categoryNo":107,"categoryName":108,"taxonomyType":109,"taxonomyTypeDesc":110},"01JBSEEDCAT000000000000005","邮件与沟通","SCENARIO","使用场景",{"categoryNo":112,"categoryName":113,"taxonomyType":109,"taxonomyTypeDesc":110},"01JBSEEDCAT000000000000008","测试与质量",{"categoryNo":115,"categoryName":116,"taxonomyType":117,"taxonomyTypeDesc":118},"01JBSEEDCAT000000000000037","律师与法务","PROFESSION","适用职业",[120,121,30,122,123,124,22,125,28,126],"email","workplace email privacy","compliance","content","data","testing","metadata",{"skillNo":128,"name":129,"nameZh":6,"description":130,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":131,"categories":132,"keywords":137,"publishedAt":33},"01M6AG6FRCBJY7D061BJZMNV49","whistleblower-data","Implements data protection compliance for whistleblowing systems under EU Directive 2019\u002F1937 and GDPR. Covers anonymous reporting channels, identity protection for whistleblowers and accused persons, retention limits, access restrictions, and retaliation prevention. Addresses national transpositions and DPA guidance. Keywords: whistleblower, Directive 2019\u002F1937, anonymous reporting, identity protection, retaliation, retention, reporting channel.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fwhistleblower-data\u002FSKILL.md",[133,136],{"categoryNo":134,"categoryName":135,"taxonomyType":117,"taxonomyTypeDesc":118},"01JBSEEDCAT000000000000033","数据分析师",{"categoryNo":115,"categoryName":116,"taxonomyType":117,"taxonomyTypeDesc":118},[124,138,139,140,122,141,142,30,143],"whistleblower data","identity","reporting","data protection","gdpr","prevention",{"skillNo":145,"name":146,"nameZh":6,"description":147,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":148,"categories":149,"keywords":151,"publishedAt":33},"01M6AG6CJP0PW3X65HC7VP9SR9","vendor-termination-data","Vendor termination data return and deletion procedures per GDPR Article 28(3)(g). Covers data extraction formats, deletion certification requirements, transition planning, residual data handling, and post-termination verification.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fvendor-termination-data\u002FSKILL.md",[150],{"categoryNo":134,"categoryName":135,"taxonomyType":117,"taxonomyTypeDesc":118},[124,152,153,154,155,142,30,156],"vendor termination data","planning","verification","extraction","certification",{"skillNo":158,"name":159,"nameZh":6,"description":160,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":161,"categories":162,"keywords":164,"publishedAt":33},"01M6AG69E277DXZB2NF6KV17ZA","vendor-risk-scoring","Vendor privacy risk tiering methodology for processor management. Covers scoring factors including data volume, sensitivity, transfer locations, certifications, breach history, and control maturity with weighted risk calculation and tier assignment.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fvendor-risk-scoring\u002FSKILL.md",[163],{"categoryNo":134,"categoryName":135,"taxonomyType":117,"taxonomyTypeDesc":118},[165,166,167,168,169,170,171,172,30,124,173],"vendor risk scoring","risk","risk scoring","methodology","risk-scoring","assessment","transfer","certifications","processor",{"skillNo":175,"name":176,"nameZh":6,"description":177,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":178,"categories":179,"keywords":181,"publishedAt":33},"01M6AG6655ABFKT2BBWHCP4PAT","vendor-privacy-due-diligence","Pre-contract vendor privacy due diligence per GDPR Article 28(1). Covers risk questionnaires, technical controls assessment, certification review, data flow analysis, and documented sufficiency decisions for processor engagement.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fvendor-privacy-due-diligence\u002FSKILL.md",[180],{"categoryNo":115,"categoryName":116,"taxonomyType":117,"taxonomyTypeDesc":118},[30,182,142,21,170,183,184,124,173,166,156,185],"vendor privacy due diligence","onboarding","flow","analysis",{"skillNo":187,"name":188,"nameZh":6,"description":189,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":190,"categories":191,"keywords":199,"publishedAt":33},"01M6AG62C3VD8SYNGH4N7RHZTE","vendor-privacy-audit","On-site and remote vendor audit procedures per GDPR Article 28(3)(h). Covers audit planning, evidence collection methodologies, finding classification, remediation tracking, and audit report generation for processor compliance verification.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fvendor-privacy-audit\u002FSKILL.md",[192,195,198],{"categoryNo":193,"categoryName":194,"taxonomyType":109,"taxonomyTypeDesc":110},"01JBSEEDCAT000000000000018","写作与文案",{"categoryNo":196,"categoryName":197,"taxonomyType":117,"taxonomyTypeDesc":118},"01JBSEEDCAT000000000000036","内容创作者",{"categoryNo":115,"categoryName":116,"taxonomyType":117,"taxonomyTypeDesc":118},[200,201,30,202,154,203,122,142,204,173,205,206,207,153],"vendor privacy audit","audit","report","audit report","remediation","collection","remediation-tracking","classification"]