[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6AFC26B979HZRN8RVG8MF8F":3,"skill-same:01M6AFC26B979HZRN8RVG8MF8F":87},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":23,"publishedAt":33,"linkOnly":34,"markdownContent":35,"markdownBody":36,"frontMatter":37,"refName":42,"commitSha":43,"skillDirectory":44,"forksCount":45,"repositoryHtmlUrl":46,"repositoryHomepageUrl":6,"ownerHtmlUrl":47,"ownerBlogUrl":48,"ownerDescription":49,"updatedAt":50,"install":51,"resources":64},"01M6AFC26B979HZRN8RVG8MF8F","ai-privacy-impact-template",null,"Provides combined DPIA and AI Act conformity assessment template with integrated risk scoring matrix. Covers GDPR Art. 35 DPIA elements, AI Act high-risk system requirements, mitigation measures, and human oversight assessment. Keywords: DPIA template, conformity assessment, risk scoring, AI Act, combined assessment, high-risk AI.","mukul975\u002FPrivacy-Data-Protection-Skills","mukul975","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F42860185?v=4","01M6ADEQR8T5M4EEG6C67BQCWF","Mahipal","01M6ADNKWX1HF4Q5DKEXT5M774",337,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fai-privacy-impact-template\u002FSKILL.md",[18],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000015","视觉设计","SCENARIO","使用场景",[24,25,26,27,28,29,30,31,32],"privacy","ai privacy impact template","risk scoring","governance","assessment","gdpr","dpia","risk","risk-scoring","2026-11-10 10:12:30",false,"---\nname: ai-privacy-impact-template\ndescription: >-\n  Provides combined DPIA and AI Act conformity assessment template with\n  integrated risk scoring matrix. Covers GDPR Art. 35 DPIA elements, AI Act\n  high-risk system requirements, mitigation measures, and human oversight\n  assessment. Keywords: DPIA template, conformity assessment, risk scoring,\n  AI Act, combined assessment, high-risk AI.\nlicense: Apache-2.0\nmetadata:\n  author: mukul975\n  version: \"1.0\"\n  domain: privacy\n  subdomain: ai-privacy-governance\n  tags: \"dpia-template, conformity-assessment, risk-scoring, ai-act, combined-assessment, high-risk\"\n---\n\n# Combined DPIA and AI Act Conformity Assessment Template\n\n## Overview\n\nHigh-risk AI systems under the EU AI Act must undergo both a GDPR Art. 35 DPIA and an AI Act conformity assessment. Rather than conducting these as separate exercises, this skill provides an integrated template that satisfies both frameworks simultaneously. The combined assessment ensures consistency between GDPR privacy risk analysis and AI Act safety and fundamental rights evaluation, reduces duplication, and provides a single risk scoring matrix covering both regulatory dimensions. Art. 26(9) AI Act explicitly requires deployers to use DPIA results when fulfilling AI Act obligations.\n\n## Combined Risk Scoring Matrix\n\n### Risk Dimensions\n\n| Dimension | Source | Weight |\n|-----------|--------|--------|\n| Privacy risk to data subjects | GDPR Art. 35(7)(c) | 30% |\n| Fundamental rights impact | EU AI Act Art. 9(2)(a) | 25% |\n| Accuracy and reliability risk | EU AI Act Art. 15 | 20% |\n| Transparency and explainability gap | GDPR Art. 13(2)(f) + AI Act Art. 13 | 15% |\n| Human oversight adequacy | GDPR Art. 22 + AI Act Art. 14 | 10% |\n\n### Scoring Scale (Per Dimension)\n\n| Score | Level | Description |\n|-------|-------|-------------|\n| 1 | Minimal | Risk negligible; controls effective |\n| 2 | Low | Minor risk; standard controls sufficient |\n| 3 | Medium | Moderate risk; enhanced controls needed |\n| 4 | High | Significant risk; intensive mitigation required |\n| 5 | Critical | Severe risk; may require processing suspension |\n\n### Overall Risk Classification\n\n| Weighted Score | Classification | Action Required |\n|---------------|---------------|-----------------|\n| 1.0-1.5 | Low | Standard monitoring |\n| 1.6-2.5 | Medium | Enhanced monitoring and periodic review |\n| 2.6-3.5 | High | Active mitigation and DPO\u002FBoard oversight |\n| 3.6-4.5 | Very High | Art. 36 prior consultation; deployment hold pending mitigation |\n| 4.6-5.0 | Critical | Do not deploy; fundamental redesign required |\n\n## GDPR DPIA Requirements (Art. 35(7))\n\n| Element | Reference | Combined Assessment Section |\n|---------|-----------|---------------------------|\n| Systematic description of processing | Art. 35(7)(a) | Section 2: AI System Description |\n| Necessity and proportionality | Art. 35(7)(b) | Section 3: Necessity Assessment |\n| Risk assessment | Art. 35(7)(c) | Section 5: Combined Risk Register |\n| Mitigation measures | Art. 35(7)(d) | Section 6: Mitigation Measures |\n\n## AI Act Conformity Assessment Requirements\n\nFor high-risk AI systems (Annex III), the conformity assessment per Art. 43 requires:\n\n| Element | Reference | Combined Assessment Section |\n|---------|-----------|---------------------------|\n| Risk management system | Art. 9 | Section 5: Combined Risk Register |\n| Data governance | Art. 10 | Section 2: Training Data Governance |\n| Technical documentation | Art. 11 | Full combined assessment document |\n| Record-keeping | Art. 12 | Section 7: Monitoring and Logging |\n| Transparency | Art. 13 | Section 4: Transparency Assessment |\n| Human oversight | Art. 14 | Section 4: Human Oversight |\n| Accuracy, robustness, cybersecurity | Art. 15 | Section 5: Technical Risk Assessment |\n| Quality management system | Art. 17 | Section 8: Quality Management |\n\n## Mitigation Measures Framework\n\n### Technical Measures\n\n| Measure | GDPR Relevance | AI Act Relevance | Priority |\n|---------|---------------|------------------|----------|\n| Differential privacy | Training data protection | Robustness (Art. 15) | High for sensitive data |\n| Model output perturbation | Model inversion protection | Accuracy trade-off (Art. 15) | Medium |\n| Fairness constraints | Non-discrimination (Art. 5(1)(a)) | Bias prevention (Art. 10) | High for high-risk |\n| Explainability tools (SHAP\u002FLIME) | Art. 13(2)(f) logic explanation | Interpretability (Art. 13) | High |\n| Input\u002Foutput PII filtering | Data minimisation (Art. 5(1)(c)) | Accuracy (Art. 15) | High for generative AI |\n| Encryption (rest\u002Ftransit) | Security (Art. 32) | Cybersecurity (Art. 15) | Standard |\n| Access controls (RBAC) | Security (Art. 32) | Cybersecurity (Art. 15) | Standard |\n| Anomaly detection | Breach detection (Art. 33) | Robustness (Art. 15) | Medium |\n\n### Organisational Measures\n\n| Measure | GDPR Relevance | AI Act Relevance |\n|---------|---------------|------------------|\n| AI ethics review board | Accountability (Art. 5(2)) | Quality management (Art. 17) |\n| Model cards | Transparency (Art. 13-14) | Technical documentation (Art. 11) |\n| Regular bias audits | Fairness (Art. 5(1)(a)) | Bias monitoring (Art. 10) |\n| Incident response for AI | Breach notification (Art. 33-34) | Post-market monitoring (Art. 72) |\n| Staff training on AI risks | Accountability | Human oversight (Art. 14) |\n| Documentation and record-keeping | Accountability (Art. 5(2)) | Record-keeping (Art. 12) |\n\n## Enforcement Relevance\n\n- **AI Act Art. 26(9)**: Deployers of high-risk AI shall use GDPR Art. 35 DPIA information when fulfilling AI Act obligations — the combined assessment implements this requirement.\n- **AI Act Art. 43**: Conformity assessment procedures for high-risk AI systems.\n- **GDPR Art. 35**: DPIA requirements — the combined template satisfies all Art. 35(7) elements.\n\n## Integration Points\n\n- **ai-dpia**: Combined template extends the AI DPIA methodology\n- **ai-act-high-risk-docs**: Conformity assessment documentation aligns with high-risk requirements\n- **ai-bias-special-category**: Bias assessment results feed into combined risk register\n- **ai-automated-decisions**: Human oversight assessment integrates Art. 22 and Art. 14 requirements\n","# Combined DPIA and AI Act Conformity Assessment Template\n\n## Overview\n\nHigh-risk AI systems under the EU AI Act must undergo both a GDPR Art. 35 DPIA and an AI Act conformity assessment. Rather than conducting these as separate exercises, this skill provides an integrated template that satisfies both frameworks simultaneously. The combined assessment ensures consistency between GDPR privacy risk analysis and AI Act safety and fundamental rights evaluation, reduces duplication, and provides a single risk scoring matrix covering both regulatory dimensions. Art. 26(9) AI Act explicitly requires deployers to use DPIA results when fulfilling AI Act obligations.\n\n## Combined Risk Scoring Matrix\n\n### Risk Dimensions\n\n| Dimension | Source | Weight |\n|-----------|--------|--------|\n| Privacy risk to data subjects | GDPR Art. 35(7)(c) | 30% |\n| Fundamental rights impact | EU AI Act Art. 9(2)(a) | 25% |\n| Accuracy and reliability risk | EU AI Act Art. 15 | 20% |\n| Transparency and explainability gap | GDPR Art. 13(2)(f) + AI Act Art. 13 | 15% |\n| Human oversight adequacy | GDPR Art. 22 + AI Act Art. 14 | 10% |\n\n### Scoring Scale (Per Dimension)\n\n| Score | Level | Description |\n|-------|-------|-------------|\n| 1 | Minimal | Risk negligible; controls effective |\n| 2 | Low | Minor risk; standard controls sufficient |\n| 3 | Medium | Moderate risk; enhanced controls needed |\n| 4 | High | Significant risk; intensive mitigation required |\n| 5 | Critical | Severe risk; may require processing suspension |\n\n### Overall Risk Classification\n\n| Weighted Score | Classification | Action Required |\n|---------------|---------------|-----------------|\n| 1.0-1.5 | Low | Standard monitoring |\n| 1.6-2.5 | Medium | Enhanced monitoring and periodic review |\n| 2.6-3.5 | High | Active mitigation and DPO\u002FBoard oversight |\n| 3.6-4.5 | Very High | Art. 36 prior consultation; deployment hold pending mitigation |\n| 4.6-5.0 | Critical | Do not deploy; fundamental redesign required |\n\n## GDPR DPIA Requirements (Art. 35(7))\n\n| Element | Reference | Combined Assessment Section |\n|---------|-----------|---------------------------|\n| Systematic description of processing | Art. 35(7)(a) | Section 2: AI System Description |\n| Necessity and proportionality | Art. 35(7)(b) | Section 3: Necessity Assessment |\n| Risk assessment | Art. 35(7)(c) | Section 5: Combined Risk Register |\n| Mitigation measures | Art. 35(7)(d) | Section 6: Mitigation Measures |\n\n## AI Act Conformity Assessment Requirements\n\nFor high-risk AI systems (Annex III), the conformity assessment per Art. 43 requires:\n\n| Element | Reference | Combined Assessment Section |\n|---------|-----------|---------------------------|\n| Risk management system | Art. 9 | Section 5: Combined Risk Register |\n| Data governance | Art. 10 | Section 2: Training Data Governance |\n| Technical documentation | Art. 11 | Full combined assessment document |\n| Record-keeping | Art. 12 | Section 7: Monitoring and Logging |\n| Transparency | Art. 13 | Section 4: Transparency Assessment |\n| Human oversight | Art. 14 | Section 4: Human Oversight |\n| Accuracy, robustness, cybersecurity | Art. 15 | Section 5: Technical Risk Assessment |\n| Quality management system | Art. 17 | Section 8: Quality Management |\n\n## Mitigation Measures Framework\n\n### Technical Measures\n\n| Measure | GDPR Relevance | AI Act Relevance | Priority |\n|---------|---------------|------------------|----------|\n| Differential privacy | Training data protection | Robustness (Art. 15) | High for sensitive data |\n| Model output perturbation | Model inversion protection | Accuracy trade-off (Art. 15) | Medium |\n| Fairness constraints | Non-discrimination (Art. 5(1)(a)) | Bias prevention (Art. 10) | High for high-risk |\n| Explainability tools (SHAP\u002FLIME) | Art. 13(2)(f) logic explanation | Interpretability (Art. 13) | High |\n| Input\u002Foutput PII filtering | Data minimisation (Art. 5(1)(c)) | Accuracy (Art. 15) | High for generative AI |\n| Encryption (rest\u002Ftransit) | Security (Art. 32) | Cybersecurity (Art. 15) | Standard |\n| Access controls (RBAC) | Security (Art. 32) | Cybersecurity (Art. 15) | Standard |\n| Anomaly detection | Breach detection (Art. 33) | Robustness (Art. 15) | Medium |\n\n### Organisational Measures\n\n| Measure | GDPR Relevance | AI Act Relevance |\n|---------|---------------|------------------|\n| AI ethics review board | Accountability (Art. 5(2)) | Quality management (Art. 17) |\n| Model cards | Transparency (Art. 13-14) | Technical documentation (Art. 11) |\n| Regular bias audits | Fairness (Art. 5(1)(a)) | Bias monitoring (Art. 10) |\n| Incident response for AI | Breach notification (Art. 33-34) | Post-market monitoring (Art. 72) |\n| Staff training on AI risks | Accountability | Human oversight (Art. 14) |\n| Documentation and record-keeping | Accountability (Art. 5(2)) | Record-keeping (Art. 12) |\n\n## Enforcement Relevance\n\n- **AI Act Art. 26(9)**: Deployers of high-risk AI shall use GDPR Art. 35 DPIA information when fulfilling AI Act obligations — the combined assessment implements this requirement.\n- **AI Act Art. 43**: Conformity assessment procedures for high-risk AI systems.\n- **GDPR Art. 35**: DPIA requirements — the combined template satisfies all Art. 35(7) elements.\n\n## Integration Points\n\n- **ai-dpia**: Combined template extends the AI DPIA methodology\n- **ai-act-high-risk-docs**: Conformity assessment documentation aligns with high-risk requirements\n- **ai-bias-special-category**: Bias assessment results feed into combined risk register\n- **ai-automated-decisions**: Human oversight assessment integrates Art. 22 and Art. 14 requirements\n",{"name":5,"license":15,"metadata":38,"description":7},{"tags":39,"author":9,"domain":24,"version":40,"subdomain":41},"dpia-template, conformity-assessment, risk-scoring, ai-act, combined-assessment, high-risk","1.0","ai-privacy-governance","main","9b2ef9eae161c00a17241d42a388571321b33e9f","skills\u002Fprivacy\u002Fai-privacy-impact-template",68,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills","https:\u002F\u002Fgithub.com\u002Fmukul975","Mahipal.engineer","🔐 Cybersecurity | 💻 Dev | 📷 Street Photographer\r\n🎓 MSc | 📚 Research & AI Security","2026-03-17 04:06:52",{"source":8,"skillName":5,"commands":52,"prompt":62,"zipAvailable":63},[53,56,59],{"tool":54,"command":55},"npx","npx skills add mukul975\u002FPrivacy-Data-Protection-Skills --skill ai-privacy-impact-template",{"tool":57,"command":58},"bunx","bunx skills add mukul975\u002FPrivacy-Data-Protection-Skills --skill ai-privacy-impact-template",{"tool":60,"command":61},"pnpm","pnpm dlx skills add mukul975\u002FPrivacy-Data-Protection-Skills --skill ai-privacy-impact-template","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fai-privacy-impact-template\u002FSKILL.md",true,[65,71,77,81],{"path":66,"resourceType":67,"resourceTypeDesc":68,"sizeBytes":69,"sourceHtmlUrl":70},"assets\u002Ftemplate.md","ASSET","资产文件",2441,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fai-privacy-impact-template\u002Fassets\u002Ftemplate.md",{"path":72,"resourceType":73,"resourceTypeDesc":74,"sizeBytes":75,"sourceHtmlUrl":76},"references\u002Fstandards.md","REFERENCE","参考文档",1092,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fai-privacy-impact-template\u002Freferences\u002Fstandards.md",{"path":78,"resourceType":73,"resourceTypeDesc":74,"sizeBytes":79,"sourceHtmlUrl":80},"references\u002Fworkflows.md",2699,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fai-privacy-impact-template\u002Freferences\u002Fworkflows.md",{"path":82,"resourceType":83,"resourceTypeDesc":84,"sizeBytes":85,"sourceHtmlUrl":86},"scripts\u002Fprocess.py","SCRIPT","脚本",5485,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fai-privacy-impact-template\u002Fscripts\u002Fprocess.py",[88,115,131,144,157,170],{"skillNo":89,"name":90,"nameZh":6,"description":91,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":92,"categories":93,"keywords":105,"publishedAt":33},"01M6AG6K8R3XW10ENWH2FH18RH","workplace-email-privacy","Implements email and internet monitoring compliance in the workplace per Barbulescu v Romania (ECHR Grand Chamber), EDPB guidance, and national labour law. Covers acceptable use policies, legitimate expectation of privacy, proportionality testing, and content vs metadata monitoring. Keywords: email monitoring, Barbulescu, workplace privacy, internet monitoring, acceptable use policy, ECHR, proportionality.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fworkplace-email-privacy\u002FSKILL.md",[94,97,100],{"categoryNo":95,"categoryName":96,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000005","邮件与沟通",{"categoryNo":98,"categoryName":99,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000008","测试与质量",{"categoryNo":101,"categoryName":102,"taxonomyType":103,"taxonomyTypeDesc":104},"01JBSEEDCAT000000000000037","律师与法务","PROFESSION","适用职业",[106,107,24,108,109,110,111,112,113,114],"email","workplace email privacy","compliance","content","data","policy","testing","monitoring","metadata",{"skillNo":116,"name":117,"nameZh":6,"description":118,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":119,"categories":120,"keywords":125,"publishedAt":33},"01M6AG6FRCBJY7D061BJZMNV49","whistleblower-data","Implements data protection compliance for whistleblowing systems under EU Directive 2019\u002F1937 and GDPR. Covers anonymous reporting channels, identity protection for whistleblowers and accused persons, retention limits, access restrictions, and retaliation prevention. Addresses national transpositions and DPA guidance. Keywords: whistleblower, Directive 2019\u002F1937, anonymous reporting, identity protection, retaliation, retention, reporting channel.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fwhistleblower-data\u002FSKILL.md",[121,124],{"categoryNo":122,"categoryName":123,"taxonomyType":103,"taxonomyTypeDesc":104},"01JBSEEDCAT000000000000033","数据分析师",{"categoryNo":101,"categoryName":102,"taxonomyType":103,"taxonomyTypeDesc":104},[110,126,127,128,108,129,29,24,130],"whistleblower data","identity","reporting","data protection","prevention",{"skillNo":132,"name":133,"nameZh":6,"description":134,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":135,"categories":136,"keywords":138,"publishedAt":33},"01M6AG6CJP0PW3X65HC7VP9SR9","vendor-termination-data","Vendor termination data return and deletion procedures per GDPR Article 28(3)(g). Covers data extraction formats, deletion certification requirements, transition planning, residual data handling, and post-termination verification.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fvendor-termination-data\u002FSKILL.md",[137],{"categoryNo":122,"categoryName":123,"taxonomyType":103,"taxonomyTypeDesc":104},[110,139,140,141,142,29,24,143],"vendor termination data","planning","verification","extraction","certification",{"skillNo":145,"name":146,"nameZh":6,"description":147,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":148,"categories":149,"keywords":151,"publishedAt":33},"01M6AG69E277DXZB2NF6KV17ZA","vendor-risk-scoring","Vendor privacy risk tiering methodology for processor management. Covers scoring factors including data volume, sensitivity, transfer locations, certifications, breach history, and control maturity with weighted risk calculation and tier assignment.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fvendor-risk-scoring\u002FSKILL.md",[150],{"categoryNo":122,"categoryName":123,"taxonomyType":103,"taxonomyTypeDesc":104},[152,31,26,153,32,28,154,155,24,110,156],"vendor risk scoring","methodology","transfer","certifications","processor",{"skillNo":158,"name":159,"nameZh":6,"description":160,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":161,"categories":162,"keywords":164,"publishedAt":33},"01M6AG6655ABFKT2BBWHCP4PAT","vendor-privacy-due-diligence","Pre-contract vendor privacy due diligence per GDPR Article 28(1). Covers risk questionnaires, technical controls assessment, certification review, data flow analysis, and documented sufficiency decisions for processor engagement.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fvendor-privacy-due-diligence\u002FSKILL.md",[163],{"categoryNo":101,"categoryName":102,"taxonomyType":103,"taxonomyTypeDesc":104},[24,165,29,166,28,167,168,110,156,31,143,169],"vendor privacy due diligence","review","onboarding","flow","analysis",{"skillNo":171,"name":172,"nameZh":6,"description":173,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":174,"categories":175,"keywords":183,"publishedAt":33},"01M6AG62C3VD8SYNGH4N7RHZTE","vendor-privacy-audit","On-site and remote vendor audit procedures per GDPR Article 28(3)(h). Covers audit planning, evidence collection methodologies, finding classification, remediation tracking, and audit report generation for processor compliance verification.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fvendor-privacy-audit\u002FSKILL.md",[176,179,182],{"categoryNo":177,"categoryName":178,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000018","写作与文案",{"categoryNo":180,"categoryName":181,"taxonomyType":103,"taxonomyTypeDesc":104},"01JBSEEDCAT000000000000036","内容创作者",{"categoryNo":101,"categoryName":102,"taxonomyType":103,"taxonomyTypeDesc":104},[184,185,24,186,141,187,108,29,188,156,189,190,191,140],"vendor privacy audit","audit","report","audit report","remediation","collection","remediation-tracking","classification"]