[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6AF56PS1TAW99ZRT3B8KGZD":3,"skill-same:01M6AF56PS1TAW99ZRT3B8KGZD":84},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":23,"publishedAt":30,"linkOnly":31,"markdownContent":32,"markdownBody":33,"frontMatter":34,"refName":39,"commitSha":40,"skillDirectory":41,"forksCount":42,"repositoryHtmlUrl":43,"repositoryHomepageUrl":6,"ownerHtmlUrl":44,"ownerBlogUrl":45,"ownerDescription":46,"updatedAt":47,"install":48,"resources":61},"01M6AF56PS1TAW99ZRT3B8KGZD","state-law-tracker",null,"Tracks and monitors US state privacy legislation across all 50 states, DC, and territories. Covers enacted comprehensive privacy laws (California CCPA\u002FCPRA, Virginia VCDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA, and subsequent enactments), pending bills, effective dates, and key requirement differences. Keywords: state privacy law, CCPA, CPRA, VCDPA, CPA, CTDPA, UCPA, multi-state.","mukul975\u002FPrivacy-Data-Protection-Skills","mukul975","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F42860185?v=4","01M6ADEQR8T5M4EEG6C67BQCWF","Mahipal","01M6ADNKWX1HF4Q5DKEXT5M774",337,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fplugins\u002Fprivacy-skills-complete\u002Fskills\u002Fstate-law-tracker\u002FSKILL.md",[18],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000037","律师与法务","PROFESSION","适用职业",[24,25,26,27,28,29],"state","state law tracker","compliance","ccpa","privacy","connecticut ctdpa","2026-11-10 10:12:30",false,"---\nname: state-law-tracker\ndescription: >-\n  Tracks and monitors US state privacy legislation across all 50 states, DC,\n  and territories. Covers enacted comprehensive privacy laws (California CCPA\u002FCPRA,\n  Virginia VCDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA, and subsequent\n  enactments), pending bills, effective dates, and key requirement differences.\n  Keywords: state privacy law, CCPA, CPRA, VCDPA, CPA, CTDPA, UCPA, multi-state.\nlicense: Apache-2.0\nmetadata:\n  author: mukul975\n  version: \"1.0\"\n  domain: privacy\n  subdomain: jurisdiction-compliance\n  tags: \"state-privacy, multi-state, ccpa, cpra, vcdpa, cpa, comprehensive-privacy\"\n---\n\n# US State Privacy Law Tracker\n\n## Overview\n\nThe United States does not have a single comprehensive federal privacy law. Instead, a patchwork of state-level comprehensive privacy statutes has emerged since the California Consumer Privacy Act (CCPA) was enacted in 2018. As of early 2026, twenty states have enacted comprehensive consumer privacy laws, with additional states introducing legislation in each legislative session. This skill tracks the status of enacted laws, key provisions, effective dates, and substantive differences that drive multi-state compliance obligations.\n\n## Enacted Comprehensive State Privacy Laws\n\n| State | Law | Enacted | Effective | Enforcer |\n|-------|-----|---------|-----------|----------|\n| California | CCPA\u002FCPRA | 2018\u002F2020 | 1 Jan 2020 \u002F 1 Jan 2023 | CPPA + AG |\n| Virginia | VCDPA | 2021 | 1 Jan 2023 | AG |\n| Colorado | CPA | 2021 | 1 Jul 2023 | AG |\n| Connecticut | CTDPA | 2022 | 1 Jul 2023 | AG |\n| Utah | UCPA | 2022 | 31 Dec 2023 | AG |\n| Iowa | ICDPA | 2023 | 1 Jan 2025 | AG |\n| Indiana | INCDPA | 2023 | 1 Jan 2026 | AG |\n| Tennessee | TIPA | 2023 | 1 Jul 2025 | AG |\n| Montana | MCDPA | 2023 | 1 Oct 2024 | AG |\n| Texas | TDPSA | 2023 | 1 Jul 2024 | AG |\n| Oregon | OCPA | 2023 | 1 Jul 2024 | AG |\n| Delaware | DPDPA | 2023 | 1 Jan 2025 | AG |\n| New Hampshire | NHPA | 2024 | 1 Jan 2025 | AG |\n| New Jersey | NJDPA | 2024 | 15 Jan 2025 | AG |\n| Nebraska | NDPA | 2024 | 1 Jan 2025 | AG |\n| Minnesota | MCDPA | 2024 | 31 Jul 2025 | AG |\n| Maryland | MODPA | 2024 | 1 Oct 2025 | AG |\n| Rhode Island | RIDPA | 2024 | 1 Jan 2026 | AG |\n| Kentucky | KCDPA | 2024 | 1 Jan 2026 | AG |\n| Vermont | VDPA | 2024 | 1 Jul 2025 | AG |\n\n## Key Compliance Variables Across States\n\n### Applicability Thresholds\n\nStates differ in what triggers applicability:\n\n- **Revenue threshold**: California (USD 25 million gross revenue) is the only state with a revenue trigger\n- **Consumer volume**: Most states use 100,000 consumers; Texas uses 50,000 (if revenue derived from data sales); Montana uses 50,000 (total population consideration)\n- **Revenue from data sales**: Most states apply if 25% or more of revenue comes from selling personal data (for businesses processing 25,000+ consumers)\n\n### Consumer Rights Comparison\n\n| Right | CA | VA | CO | CT | TX | OR | NJ | MD |\n|-------|----|----|----|----|----|----|----|----|\n| Access | Y | Y | Y | Y | Y | Y | Y | Y |\n| Delete | Y | Y | Y | Y | Y | Y | Y | Y |\n| Correct | Y | Y | Y | Y | Y | Y | Y | Y |\n| Portability | Y | Y | Y | Y | Y | Y | Y | Y |\n| Opt-out of sale | Y | Y | Y | Y | Y | Y | Y | Y |\n| Opt-out of targeted ads | Y | Y | Y | Y | Y | Y | Y | Y |\n| Opt-out of profiling | N* | Y | Y | Y | Y | Y | Y | Y |\n| Appeal right | N | Y | Y | Y | Y | Y | Y | Y |\n| Private right of action | Y** | N | N | N | N | N | N | N |\n\n*California CPRA provides limited automated decision-making rights via regulations\n**California PRA limited to data breaches involving specified personal information\n\n### Cure Period Variations\n\n- **30-day cure**: Virginia, Utah, Iowa, Indiana, Tennessee, Kentucky\n- **60-day cure**: Colorado (expires 1 Jan 2025), Connecticut (expires 31 Dec 2024)\n- **No cure period**: California (CPPA discretion), Texas, Oregon, New Jersey, Maryland\n- **AG discretion**: Several states allow AG to determine cure appropriateness\n\n### Universal Opt-Out Mechanism\n\nStates increasingly recognise universal opt-out signals:\n- **Required**: California (CPRA regulations), Colorado, Connecticut, Texas, Montana, Oregon, Delaware, New Hampshire, New Jersey, Minnesota, Maryland, Vermont\n- **Not required**: Virginia, Utah, Iowa, Indiana, Tennessee, Kentucky\n\n## Monitoring Methodology\n\nThis tracker is updated by reviewing:\n1. National Conference of State Legislatures (NCSL) privacy legislation database\n2. International Association of Privacy Professionals (IAPP) state law comparison tool\n3. Individual state legislature bill tracking systems\n4. Attorney General enforcement announcements\n\n## Integration Points\n\n- **state-law-applicability**: Uses tracker data to determine which state laws apply to a specific organisation\n- **multi-state-compliance**: Operationalises tracker data into a unified compliance programme\n- **universal-opt-out**: Implements technical mechanisms required by states mandating GPC\u002Funiversal opt-out\n- **ccpa-consumer-requests**: California-specific consumer request handling\n- **vcdpa-compliance**: Virginia-specific compliance operations\n- **texas-tdpsa-compliance**: Texas-specific compliance operations\n","# US State Privacy Law Tracker\n\n## Overview\n\nThe United States does not have a single comprehensive federal privacy law. Instead, a patchwork of state-level comprehensive privacy statutes has emerged since the California Consumer Privacy Act (CCPA) was enacted in 2018. As of early 2026, twenty states have enacted comprehensive consumer privacy laws, with additional states introducing legislation in each legislative session. This skill tracks the status of enacted laws, key provisions, effective dates, and substantive differences that drive multi-state compliance obligations.\n\n## Enacted Comprehensive State Privacy Laws\n\n| State | Law | Enacted | Effective | Enforcer |\n|-------|-----|---------|-----------|----------|\n| California | CCPA\u002FCPRA | 2018\u002F2020 | 1 Jan 2020 \u002F 1 Jan 2023 | CPPA + AG |\n| Virginia | VCDPA | 2021 | 1 Jan 2023 | AG |\n| Colorado | CPA | 2021 | 1 Jul 2023 | AG |\n| Connecticut | CTDPA | 2022 | 1 Jul 2023 | AG |\n| Utah | UCPA | 2022 | 31 Dec 2023 | AG |\n| Iowa | ICDPA | 2023 | 1 Jan 2025 | AG |\n| Indiana | INCDPA | 2023 | 1 Jan 2026 | AG |\n| Tennessee | TIPA | 2023 | 1 Jul 2025 | AG |\n| Montana | MCDPA | 2023 | 1 Oct 2024 | AG |\n| Texas | TDPSA | 2023 | 1 Jul 2024 | AG |\n| Oregon | OCPA | 2023 | 1 Jul 2024 | AG |\n| Delaware | DPDPA | 2023 | 1 Jan 2025 | AG |\n| New Hampshire | NHPA | 2024 | 1 Jan 2025 | AG |\n| New Jersey | NJDPA | 2024 | 15 Jan 2025 | AG |\n| Nebraska | NDPA | 2024 | 1 Jan 2025 | AG |\n| Minnesota | MCDPA | 2024 | 31 Jul 2025 | AG |\n| Maryland | MODPA | 2024 | 1 Oct 2025 | AG |\n| Rhode Island | RIDPA | 2024 | 1 Jan 2026 | AG |\n| Kentucky | KCDPA | 2024 | 1 Jan 2026 | AG |\n| Vermont | VDPA | 2024 | 1 Jul 2025 | AG |\n\n## Key Compliance Variables Across States\n\n### Applicability Thresholds\n\nStates differ in what triggers applicability:\n\n- **Revenue threshold**: California (USD 25 million gross revenue) is the only state with a revenue trigger\n- **Consumer volume**: Most states use 100,000 consumers; Texas uses 50,000 (if revenue derived from data sales); Montana uses 50,000 (total population consideration)\n- **Revenue from data sales**: Most states apply if 25% or more of revenue comes from selling personal data (for businesses processing 25,000+ consumers)\n\n### Consumer Rights Comparison\n\n| Right | CA | VA | CO | CT | TX | OR | NJ | MD |\n|-------|----|----|----|----|----|----|----|----|\n| Access | Y | Y | Y | Y | Y | Y | Y | Y |\n| Delete | Y | Y | Y | Y | Y | Y | Y | Y |\n| Correct | Y | Y | Y | Y | Y | Y | Y | Y |\n| Portability | Y | Y | Y | Y | Y | Y | Y | Y |\n| Opt-out of sale | Y | Y | Y | Y | Y | Y | Y | Y |\n| Opt-out of targeted ads | Y | Y | Y | Y | Y | Y | Y | Y |\n| Opt-out of profiling | N* | Y | Y | Y | Y | Y | Y | Y |\n| Appeal right | N | Y | Y | Y | Y | Y | Y | Y |\n| Private right of action | Y** | N | N | N | N | N | N | N |\n\n*California CPRA provides limited automated decision-making rights via regulations\n**California PRA limited to data breaches involving specified personal information\n\n### Cure Period Variations\n\n- **30-day cure**: Virginia, Utah, Iowa, Indiana, Tennessee, Kentucky\n- **60-day cure**: Colorado (expires 1 Jan 2025), Connecticut (expires 31 Dec 2024)\n- **No cure period**: California (CPPA discretion), Texas, Oregon, New Jersey, Maryland\n- **AG discretion**: Several states allow AG to determine cure appropriateness\n\n### Universal Opt-Out Mechanism\n\nStates increasingly recognise universal opt-out signals:\n- **Required**: California (CPRA regulations), Colorado, Connecticut, Texas, Montana, Oregon, Delaware, New Hampshire, New Jersey, Minnesota, Maryland, Vermont\n- **Not required**: Virginia, Utah, Iowa, Indiana, Tennessee, Kentucky\n\n## Monitoring Methodology\n\nThis tracker is updated by reviewing:\n1. National Conference of State Legislatures (NCSL) privacy legislation database\n2. International Association of Privacy Professionals (IAPP) state law comparison tool\n3. Individual state legislature bill tracking systems\n4. Attorney General enforcement announcements\n\n## Integration Points\n\n- **state-law-applicability**: Uses tracker data to determine which state laws apply to a specific organisation\n- **multi-state-compliance**: Operationalises tracker data into a unified compliance programme\n- **universal-opt-out**: Implements technical mechanisms required by states mandating GPC\u002Funiversal opt-out\n- **ccpa-consumer-requests**: California-specific consumer request handling\n- **vcdpa-compliance**: Virginia-specific compliance operations\n- **texas-tdpsa-compliance**: Texas-specific compliance operations\n",{"name":5,"license":15,"metadata":35,"description":7},{"tags":36,"author":9,"domain":28,"version":37,"subdomain":38},"state-privacy, multi-state, ccpa, cpra, vcdpa, cpa, comprehensive-privacy","1.0","jurisdiction-compliance","main","9b2ef9eae161c00a17241d42a388571321b33e9f","plugins\u002Fprivacy-skills-complete\u002Fskills\u002Fstate-law-tracker",68,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills","https:\u002F\u002Fgithub.com\u002Fmukul975","Mahipal.engineer","🔐 Cybersecurity | 💻 Dev | 📷 Street Photographer\r\n🎓 MSc | 📚 Research & AI Security","2026-03-17 04:06:52",{"source":8,"skillName":5,"commands":49,"prompt":59,"zipAvailable":60},[50,53,56],{"tool":51,"command":52},"npx","npx skills add mukul975\u002FPrivacy-Data-Protection-Skills --skill state-law-tracker",{"tool":54,"command":55},"bunx","bunx skills add mukul975\u002FPrivacy-Data-Protection-Skills --skill state-law-tracker",{"tool":57,"command":58},"pnpm","pnpm dlx skills add mukul975\u002FPrivacy-Data-Protection-Skills --skill state-law-tracker","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fplugins\u002Fprivacy-skills-complete\u002Fskills\u002Fstate-law-tracker\u002FSKILL.md",true,[62,68,74,78],{"path":63,"resourceType":64,"resourceTypeDesc":65,"sizeBytes":66,"sourceHtmlUrl":67},"assets\u002Ftemplate.md","ASSET","资产文件",4105,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fplugins\u002Fprivacy-skills-complete\u002Fskills\u002Fstate-law-tracker\u002Fassets\u002Ftemplate.md",{"path":69,"resourceType":70,"resourceTypeDesc":71,"sizeBytes":72,"sourceHtmlUrl":73},"references\u002Fstandards.md","REFERENCE","参考文档",3852,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fplugins\u002Fprivacy-skills-complete\u002Fskills\u002Fstate-law-tracker\u002Freferences\u002Fstandards.md",{"path":75,"resourceType":70,"resourceTypeDesc":71,"sizeBytes":76,"sourceHtmlUrl":77},"references\u002Fworkflows.md",6448,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fplugins\u002Fprivacy-skills-complete\u002Fskills\u002Fstate-law-tracker\u002Freferences\u002Fworkflows.md",{"path":79,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":82,"sourceHtmlUrl":83},"scripts\u002Fprocess.py","SCRIPT","脚本",16089,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fplugins\u002Fprivacy-skills-complete\u002Fskills\u002Fstate-law-tracker\u002Fscripts\u002Fprocess.py",[85,109,126,139,156,169],{"skillNo":86,"name":87,"nameZh":6,"description":88,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":89,"categories":90,"keywords":100,"publishedAt":30},"01M6AG6K8R3XW10ENWH2FH18RH","workplace-email-privacy","Implements email and internet monitoring compliance in the workplace per Barbulescu v Romania (ECHR Grand Chamber), EDPB guidance, and national labour law. Covers acceptable use policies, legitimate expectation of privacy, proportionality testing, and content vs metadata monitoring. Keywords: email monitoring, Barbulescu, workplace privacy, internet monitoring, acceptable use policy, ECHR, proportionality.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fworkplace-email-privacy\u002FSKILL.md",[91,96,99],{"categoryNo":92,"categoryName":93,"taxonomyType":94,"taxonomyTypeDesc":95},"01JBSEEDCAT000000000000005","邮件与沟通","SCENARIO","使用场景",{"categoryNo":97,"categoryName":98,"taxonomyType":94,"taxonomyTypeDesc":95},"01JBSEEDCAT000000000000008","测试与质量",{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[101,102,28,26,103,104,105,106,107,108],"email","workplace email privacy","content","data","policy","testing","monitoring","metadata",{"skillNo":110,"name":111,"nameZh":6,"description":112,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":113,"categories":114,"keywords":119,"publishedAt":30},"01M6AG6FRCBJY7D061BJZMNV49","whistleblower-data","Implements data protection compliance for whistleblowing systems under EU Directive 2019\u002F1937 and GDPR. Covers anonymous reporting channels, identity protection for whistleblowers and accused persons, retention limits, access restrictions, and retaliation prevention. Addresses national transpositions and DPA guidance. Keywords: whistleblower, Directive 2019\u002F1937, anonymous reporting, identity protection, retaliation, retention, reporting channel.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fwhistleblower-data\u002FSKILL.md",[115,118],{"categoryNo":116,"categoryName":117,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000033","数据分析师",{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[104,120,121,122,26,123,124,28,125],"whistleblower data","identity","reporting","data protection","gdpr","prevention",{"skillNo":127,"name":128,"nameZh":6,"description":129,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":130,"categories":131,"keywords":133,"publishedAt":30},"01M6AG6CJP0PW3X65HC7VP9SR9","vendor-termination-data","Vendor termination data return and deletion procedures per GDPR Article 28(3)(g). Covers data extraction formats, deletion certification requirements, transition planning, residual data handling, and post-termination verification.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fvendor-termination-data\u002FSKILL.md",[132],{"categoryNo":116,"categoryName":117,"taxonomyType":21,"taxonomyTypeDesc":22},[104,134,135,136,137,124,28,138],"vendor termination data","planning","verification","extraction","certification",{"skillNo":140,"name":141,"nameZh":6,"description":142,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":143,"categories":144,"keywords":146,"publishedAt":30},"01M6AG69E277DXZB2NF6KV17ZA","vendor-risk-scoring","Vendor privacy risk tiering methodology for processor management. Covers scoring factors including data volume, sensitivity, transfer locations, certifications, breach history, and control maturity with weighted risk calculation and tier assignment.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fvendor-risk-scoring\u002FSKILL.md",[145],{"categoryNo":116,"categoryName":117,"taxonomyType":21,"taxonomyTypeDesc":22},[147,148,149,150,151,152,153,154,28,104,155],"vendor risk scoring","risk","risk scoring","methodology","risk-scoring","assessment","transfer","certifications","processor",{"skillNo":157,"name":158,"nameZh":6,"description":159,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":160,"categories":161,"keywords":163,"publishedAt":30},"01M6AG6655ABFKT2BBWHCP4PAT","vendor-privacy-due-diligence","Pre-contract vendor privacy due diligence per GDPR Article 28(1). Covers risk questionnaires, technical controls assessment, certification review, data flow analysis, and documented sufficiency decisions for processor engagement.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fvendor-privacy-due-diligence\u002FSKILL.md",[162],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[28,164,124,165,152,166,167,104,155,148,138,168],"vendor privacy due diligence","review","onboarding","flow","analysis",{"skillNo":170,"name":171,"nameZh":6,"description":172,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":173,"categories":174,"keywords":182,"publishedAt":30},"01M6AG62C3VD8SYNGH4N7RHZTE","vendor-privacy-audit","On-site and remote vendor audit procedures per GDPR Article 28(3)(h). Covers audit planning, evidence collection methodologies, finding classification, remediation tracking, and audit report generation for processor compliance verification.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fvendor-privacy-audit\u002FSKILL.md",[175,178,181],{"categoryNo":176,"categoryName":177,"taxonomyType":94,"taxonomyTypeDesc":95},"01JBSEEDCAT000000000000018","写作与文案",{"categoryNo":179,"categoryName":180,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000036","内容创作者",{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[183,184,28,185,136,186,26,124,187,155,188,189,190,135],"vendor privacy audit","audit","report","audit report","remediation","collection","remediation-tracking","classification"]