[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6AFKEPTEMXPD9E9PJDAT26W":3,"skill-same:01M6AFKEPTEMXPD9E9PJDAT26W":141},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":18,"publishedAt":26,"linkOnly":27,"markdownContent":28,"markdownBody":29,"frontMatter":30,"refName":34,"commitSha":35,"skillDirectory":36,"forksCount":37,"repositoryHtmlUrl":38,"repositoryHomepageUrl":6,"ownerHtmlUrl":39,"ownerBlogUrl":40,"ownerDescription":41,"updatedAt":42,"install":43,"resources":56},"01M6AFKEPTEMXPD9E9PJDAT26W","cpra-opt-out-signals",null,"Implements CPRA Section 1798.135 opt-out preference signal handling, covering Global Privacy Control (GPC) technical detection, automated signal honoring, cross-device consistency, and the relationship between browser signals and explicit consumer choices. Activate for GPC, opt-out preference signal, CPRA 1798.135, browser privacy signal, Do Not Sell queries.","mukul975\u002FPrivacy-Data-Protection-Skills","mukul975","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F42860185?v=4","01M6ADEQR8T5M4EEG6C67BQCWF","Mahipal","01M6ADNKWX1HF4Q5DKEXT5M774",338,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fcpra-opt-out-signals\u002FSKILL.md",[],[19,20,21,22,23,24,25],"cpra opt out signals","browser","privacy","data","global privacy control","data-subject-rights","detection","2026-11-10 10:12:30",false,"---\nname: cpra-opt-out-signals\ndescription: >-\n  Implements CPRA Section 1798.135 opt-out preference signal handling, covering\n  Global Privacy Control (GPC) technical detection, automated signal honoring,\n  cross-device consistency, and the relationship between browser signals and\n  explicit consumer choices. Activate for GPC, opt-out preference signal,\n  CPRA 1798.135, browser privacy signal, Do Not Sell queries.\nlicense: Apache-2.0\nmetadata:\n  author: mukul975\n  version: \"1.0\"\n  domain: privacy\n  subdomain: data-subject-rights\n  tags: \"opt-out-preference-signal, gpc, cpra, global-privacy-control, do-not-sell\"\n---\n\n# Implementing CPRA Opt-Out Preference Signals\n\n## Overview\n\nCPRA Section 1798.135 requires businesses to treat opt-out preference signals (such as Global Privacy Control \u002F GPC) as valid consumer requests to opt out of the sale and sharing of personal information. This skill covers the technical detection of GPC signals, automated honoring workflows, cross-device consistency requirements, and the interaction between browser-level signals and explicit consumer choices.\n\n## Legal Foundation\n\n### CPRA Section 1798.135 — Methods of Limiting Sale, Sharing, and Use\n\n1. **Section 1798.135(a)** — A business that sells or shares consumers' personal information shall provide a clear and conspicuous link on its homepage titled \"Do Not Sell or Share My Personal Information.\"\n\n2. **Section 1798.135(b)(1)** — A business that sells or shares personal information shall treat the consumer's use of an opt-out preference signal as a valid request to opt out under Section 1798.120.\n\n3. **Section 1798.135(b)(3)** — A business that complies with subsection (b)(1) is not required to post the \"Do Not Sell or Share My Personal Information\" link on its homepage, provided it instead posts a link to a page describing the consumer's opt-out rights.\n\n4. **Section 1798.135(e)** — A business may not interpret the absence of an opt-out preference signal as consent to sell or share personal information.\n\n### CCPA Regulations (11 CCR Section 7025)\n\n- **Section 7025(a)** — A business shall process an opt-out preference signal as a valid request to opt out of sale\u002Fsharing for that browser or device, and, if known, the consumer.\n- **Section 7025(b)** — If the business is unable to identify the consumer, the opt-out shall apply to the browser or device from which the signal was sent.\n- **Section 7025(c)** — The business shall not require the consumer to provide additional information to opt out via a preference signal, unless necessary to verify the consumer's identity.\n- **Section 7025(d)** — If a conflict exists between the opt-out preference signal and a consumer's business-specific privacy setting, the business shall process the opt-out preference signal but may notify the consumer of the conflict and provide the consumer the opportunity to confirm their intention.\n\n### Global Privacy Control (GPC) Specification\n\nGPC is an HTTP header and JavaScript API signal that communicates a user's privacy preferences:\n- **HTTP header**: `Sec-GPC: 1`\n- **JavaScript API**: `navigator.globalPrivacyControl === true`\n- **DNT header**: GPC is distinct from the deprecated Do Not Track (DNT) header. GPC has legal effect under CPRA and Colorado Privacy Act; DNT does not.\n\n## Technical Implementation\n\n### Step 1: Detect the GPC Signal\n\n#### Server-Side Detection\n\nCheck for the GPC HTTP header on every incoming request:\n\n```\nHTTP Header: Sec-GPC: 1\n```\n\nIf the header is present and its value is `1`, the user has activated GPC.\n\n#### Client-Side Detection (JavaScript)\n\nFor single-page applications or client-side consent management:\n\n```javascript\nif (navigator.globalPrivacyControl === true) {\n    \u002F\u002F GPC signal detected — treat as opt-out of sale\u002Fsharing\n}\n```\n\n### Step 2: Map GPC Signal to Consumer\n\n| Scenario | Action |\n|----------|--------|\n| Consumer is logged in (authenticated) | Apply opt-out to the consumer's account across all devices |\n| Consumer is not logged in but has cookies | Apply opt-out to the browser\u002Fdevice |\n| Consumer is anonymous (no identification) | Apply opt-out to the current browsing session and device |\n\n### Step 3: Automated Honoring\n\nWhen a GPC signal is detected, the following actions must be executed automatically:\n\n1. **Suppress third-party tracking scripts**: Do not load advertising pixels, third-party analytics trackers, or cross-site tracking scripts.\n2. **Disable advertising cookies**: Do not set or read cookies used for targeted advertising or cross-context behavioral advertising.\n3. **Exclude from data sharing**: Do not include the user's data in any data-sharing arrangements with third parties for advertising or monetisation purposes.\n4. **Exclude from sale**: Do not sell the user's personal information to any third party.\n5. **Update consent management platform**: Set the user's sale\u002Fsharing preference to \"opted-out\" in the CMP.\n\n### Step 4: Consent Management Platform (CMP) Integration\n\nThe CMP must be configured to:\n\n1. **Detect GPC on page load**: Before any third-party scripts are loaded.\n2. **Suppress consent banner sale\u002Fsharing options**: If GPC is detected, automatically set the sale\u002Fsharing toggle to \"opted-out\" and suppress any request for consent to sell\u002Fshare.\n3. **Allow explicit re-consent**: If the consumer explicitly chooses to opt back in through the business's privacy settings, this explicit choice overrides the GPC signal for that business only.\n4. **Log the signal**: Record the GPC signal detection for compliance audit purposes.\n\n### Step 5: Cross-Device Consistency\n\n| Consumer Status | Cross-Device Behaviour |\n|----------------|----------------------|\n| Authenticated (logged-in account) | GPC signal from one device triggers account-level opt-out across all devices |\n| Unauthenticated | GPC signal applies only to the device\u002Fbrowser from which it was sent |\n| Consumer later logs in from GPC-enabled device | Account-level opt-out is applied retroactively |\n\n### Step 6: Conflict Resolution\n\nWhen a conflict exists between the GPC signal and the consumer's explicit business-specific setting:\n\n```\n[GPC Signal Detected: Opt-Out]\n         │\n         ▼\n[Does consumer have an explicit business-specific setting?]\n   │\n   ├── No explicit setting ──► Honor GPC signal (opt-out)\n   │\n   ├── Explicit opt-in to sale\u002Fsharing ──► [Conflict]\n   │     └── Honor GPC signal (opt-out applies)\n   │         Optionally: display notification\n   │         \"Your browser is sending a Global Privacy Control signal.\n   │          We have applied this as an opt-out of sale\u002Fsharing.\n   │          You previously opted in to sale\u002Fsharing on this site.\n   │          If you wish to maintain your opt-in, please confirm\n   │          in your privacy settings.\"\n   │\n   └── Explicit opt-out ──► No conflict (both agree on opt-out)\n```\n\n### Step 7: Documentation and Audit\n\n1. Log every GPC signal detection with timestamp, IP hash, device identifier, and authenticated status.\n2. Log every opt-out action taken in response to a GPC signal.\n3. Maintain records for 24 months per CCPA regulation requirements.\n4. Include GPC signal handling in quarterly privacy compliance audits.\n5. Test GPC detection quarterly using browsers with GPC enabled (Firefox, Brave, DuckDuckGo).\n\n## Monitoring and Testing\n\n### Monthly Verification Checklist\n\n- [ ] GPC header detection confirmed operational (test with Sec-GPC: 1)\n- [ ] JavaScript API detection confirmed operational (test with navigator.globalPrivacyControl)\n- [ ] Third-party tracking scripts are suppressed when GPC is detected\n- [ ] Advertising cookies are not set when GPC is detected\n- [ ] CMP correctly reflects GPC opt-out status\n- [ ] Cross-device consistency confirmed for authenticated users\n- [ ] Conflict resolution functioning as designed\n- [ ] Audit logs recording GPC detections\n","# Implementing CPRA Opt-Out Preference Signals\n\n## Overview\n\nCPRA Section 1798.135 requires businesses to treat opt-out preference signals (such as Global Privacy Control \u002F GPC) as valid consumer requests to opt out of the sale and sharing of personal information. This skill covers the technical detection of GPC signals, automated honoring workflows, cross-device consistency requirements, and the interaction between browser-level signals and explicit consumer choices.\n\n## Legal Foundation\n\n### CPRA Section 1798.135 — Methods of Limiting Sale, Sharing, and Use\n\n1. **Section 1798.135(a)** — A business that sells or shares consumers' personal information shall provide a clear and conspicuous link on its homepage titled \"Do Not Sell or Share My Personal Information.\"\n\n2. **Section 1798.135(b)(1)** — A business that sells or shares personal information shall treat the consumer's use of an opt-out preference signal as a valid request to opt out under Section 1798.120.\n\n3. **Section 1798.135(b)(3)** — A business that complies with subsection (b)(1) is not required to post the \"Do Not Sell or Share My Personal Information\" link on its homepage, provided it instead posts a link to a page describing the consumer's opt-out rights.\n\n4. **Section 1798.135(e)** — A business may not interpret the absence of an opt-out preference signal as consent to sell or share personal information.\n\n### CCPA Regulations (11 CCR Section 7025)\n\n- **Section 7025(a)** — A business shall process an opt-out preference signal as a valid request to opt out of sale\u002Fsharing for that browser or device, and, if known, the consumer.\n- **Section 7025(b)** — If the business is unable to identify the consumer, the opt-out shall apply to the browser or device from which the signal was sent.\n- **Section 7025(c)** — The business shall not require the consumer to provide additional information to opt out via a preference signal, unless necessary to verify the consumer's identity.\n- **Section 7025(d)** — If a conflict exists between the opt-out preference signal and a consumer's business-specific privacy setting, the business shall process the opt-out preference signal but may notify the consumer of the conflict and provide the consumer the opportunity to confirm their intention.\n\n### Global Privacy Control (GPC) Specification\n\nGPC is an HTTP header and JavaScript API signal that communicates a user's privacy preferences:\n- **HTTP header**: `Sec-GPC: 1`\n- **JavaScript API**: `navigator.globalPrivacyControl === true`\n- **DNT header**: GPC is distinct from the deprecated Do Not Track (DNT) header. GPC has legal effect under CPRA and Colorado Privacy Act; DNT does not.\n\n## Technical Implementation\n\n### Step 1: Detect the GPC Signal\n\n#### Server-Side Detection\n\nCheck for the GPC HTTP header on every incoming request:\n\n```\nHTTP Header: Sec-GPC: 1\n```\n\nIf the header is present and its value is `1`, the user has activated GPC.\n\n#### Client-Side Detection (JavaScript)\n\nFor single-page applications or client-side consent management:\n\n```javascript\nif (navigator.globalPrivacyControl === true) {\n    \u002F\u002F GPC signal detected — treat as opt-out of sale\u002Fsharing\n}\n```\n\n### Step 2: Map GPC Signal to Consumer\n\n| Scenario | Action |\n|----------|--------|\n| Consumer is logged in (authenticated) | Apply opt-out to the consumer's account across all devices |\n| Consumer is not logged in but has cookies | Apply opt-out to the browser\u002Fdevice |\n| Consumer is anonymous (no identification) | Apply opt-out to the current browsing session and device |\n\n### Step 3: Automated Honoring\n\nWhen a GPC signal is detected, the following actions must be executed automatically:\n\n1. **Suppress third-party tracking scripts**: Do not load advertising pixels, third-party analytics trackers, or cross-site tracking scripts.\n2. **Disable advertising cookies**: Do not set or read cookies used for targeted advertising or cross-context behavioral advertising.\n3. **Exclude from data sharing**: Do not include the user's data in any data-sharing arrangements with third parties for advertising or monetisation purposes.\n4. **Exclude from sale**: Do not sell the user's personal information to any third party.\n5. **Update consent management platform**: Set the user's sale\u002Fsharing preference to \"opted-out\" in the CMP.\n\n### Step 4: Consent Management Platform (CMP) Integration\n\nThe CMP must be configured to:\n\n1. **Detect GPC on page load**: Before any third-party scripts are loaded.\n2. **Suppress consent banner sale\u002Fsharing options**: If GPC is detected, automatically set the sale\u002Fsharing toggle to \"opted-out\" and suppress any request for consent to sell\u002Fshare.\n3. **Allow explicit re-consent**: If the consumer explicitly chooses to opt back in through the business's privacy settings, this explicit choice overrides the GPC signal for that business only.\n4. **Log the signal**: Record the GPC signal detection for compliance audit purposes.\n\n### Step 5: Cross-Device Consistency\n\n| Consumer Status | Cross-Device Behaviour |\n|----------------|----------------------|\n| Authenticated (logged-in account) | GPC signal from one device triggers account-level opt-out across all devices |\n| Unauthenticated | GPC signal applies only to the device\u002Fbrowser from which it was sent |\n| Consumer later logs in from GPC-enabled device | Account-level opt-out is applied retroactively |\n\n### Step 6: Conflict Resolution\n\nWhen a conflict exists between the GPC signal and the consumer's explicit business-specific setting:\n\n```\n[GPC Signal Detected: Opt-Out]\n         │\n         ▼\n[Does consumer have an explicit business-specific setting?]\n   │\n   ├── No explicit setting ──► Honor GPC signal (opt-out)\n   │\n   ├── Explicit opt-in to sale\u002Fsharing ──► [Conflict]\n   │     └── Honor GPC signal (opt-out applies)\n   │         Optionally: display notification\n   │         \"Your browser is sending a Global Privacy Control signal.\n   │          We have applied this as an opt-out of sale\u002Fsharing.\n   │          You previously opted in to sale\u002Fsharing on this site.\n   │          If you wish to maintain your opt-in, please confirm\n   │          in your privacy settings.\"\n   │\n   └── Explicit opt-out ──► No conflict (both agree on opt-out)\n```\n\n### Step 7: Documentation and Audit\n\n1. Log every GPC signal detection with timestamp, IP hash, device identifier, and authenticated status.\n2. Log every opt-out action taken in response to a GPC signal.\n3. Maintain records for 24 months per CCPA regulation requirements.\n4. Include GPC signal handling in quarterly privacy compliance audits.\n5. Test GPC detection quarterly using browsers with GPC enabled (Firefox, Brave, DuckDuckGo).\n\n## Monitoring and Testing\n\n### Monthly Verification Checklist\n\n- [ ] GPC header detection confirmed operational (test with Sec-GPC: 1)\n- [ ] JavaScript API detection confirmed operational (test with navigator.globalPrivacyControl)\n- [ ] Third-party tracking scripts are suppressed when GPC is detected\n- [ ] Advertising cookies are not set when GPC is detected\n- [ ] CMP correctly reflects GPC opt-out status\n- [ ] Cross-device consistency confirmed for authenticated users\n- [ ] Conflict resolution functioning as designed\n- [ ] Audit logs recording GPC detections\n",{"name":5,"license":15,"metadata":31,"description":7},{"tags":32,"author":9,"domain":21,"version":33,"subdomain":24},"opt-out-preference-signal, gpc, cpra, global-privacy-control, do-not-sell","1.0","main","9b2ef9eae161c00a17241d42a388571321b33e9f","skills\u002Fprivacy\u002Fcpra-opt-out-signals",68,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills","https:\u002F\u002Fgithub.com\u002Fmukul975","Mahipal.engineer","🔐 Cybersecurity | 💻 Dev | 📷 Street Photographer\r\n🎓 MSc | 📚 Research & AI Security","2026-03-17 04:06:52",{"source":8,"skillName":5,"commands":44,"prompt":54,"zipAvailable":55},[45,48,51],{"tool":46,"command":47},"npx","npx skills add mukul975\u002FPrivacy-Data-Protection-Skills --skill cpra-opt-out-signals",{"tool":49,"command":50},"bunx","bunx skills add mukul975\u002FPrivacy-Data-Protection-Skills --skill cpra-opt-out-signals",{"tool":52,"command":53},"pnpm","pnpm dlx skills add mukul975\u002FPrivacy-Data-Protection-Skills --skill cpra-opt-out-signals","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fcpra-opt-out-signals\u002FSKILL.md",true,[57,63,67,71,75,81,87,91,95,99,103,107,111,115,119,123,127,131,135],{"path":58,"resourceType":59,"resourceTypeDesc":60,"sizeBytes":61,"sourceHtmlUrl":62},"assets\u002Ftemplate.md","ASSET","资产文件",3186,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fcpra-opt-out-signals\u002Fassets\u002Ftemplate.md",{"path":64,"resourceType":59,"resourceTypeDesc":60,"sizeBytes":65,"sourceHtmlUrl":66},"assets\u002Ftemplates\u002Fcwv-audit-report.md",1587,"https:\u002F\u002Fgithub.com\u002Fnoirelab\u002Flinux-setup\u002Fblob\u002Fmain\u002Fconfigs\u002Fcommon\u002Fclaude\u002Fskills\u002Fseo-google\u002Fassets\u002Ftemplates\u002Fcwv-audit-report.md",{"path":68,"resourceType":59,"resourceTypeDesc":60,"sizeBytes":69,"sourceHtmlUrl":70},"assets\u002Ftemplates\u002Fgsc-performance-report.md",1442,"https:\u002F\u002Fgithub.com\u002Fnoirelab\u002Flinux-setup\u002Fblob\u002Fmain\u002Fconfigs\u002Fcommon\u002Fclaude\u002Fskills\u002Fseo-google\u002Fassets\u002Ftemplates\u002Fgsc-performance-report.md",{"path":72,"resourceType":59,"resourceTypeDesc":60,"sizeBytes":73,"sourceHtmlUrl":74},"assets\u002Ftemplates\u002Findexation-status-report.md",1126,"https:\u002F\u002Fgithub.com\u002Fnoirelab\u002Flinux-setup\u002Fblob\u002Fmain\u002Fconfigs\u002Fcommon\u002Fclaude\u002Fskills\u002Fseo-google\u002Fassets\u002Ftemplates\u002Findexation-status-report.md",{"path":76,"resourceType":77,"resourceTypeDesc":78,"sizeBytes":79,"sourceHtmlUrl":80},"LICENSE.txt","LICENSE","许可证",143,"https:\u002F\u002Fgithub.com\u002Fnoirelab\u002Flinux-setup\u002Fblob\u002Fmain\u002Fconfigs\u002Fcommon\u002Fclaude\u002Fskills\u002Fseo-google\u002FLICENSE.txt",{"path":82,"resourceType":83,"resourceTypeDesc":84,"sizeBytes":85,"sourceHtmlUrl":86},"references\u002Fauth-setup.md","REFERENCE","参考文档",5238,"https:\u002F\u002Fgithub.com\u002Fnoirelab\u002Flinux-setup\u002Fblob\u002Fmain\u002Fconfigs\u002Fcommon\u002Fclaude\u002Fskills\u002Fseo-google\u002Freferences\u002Fauth-setup.md",{"path":88,"resourceType":83,"resourceTypeDesc":84,"sizeBytes":89,"sourceHtmlUrl":90},"references\u002Fdma-consent-mode-v2.md",2672,"https:\u002F\u002Fgithub.com\u002Fnoirelab\u002Flinux-setup\u002Fblob\u002Fmain\u002Fconfigs\u002Fcommon\u002Fclaude\u002Fskills\u002Fseo-google\u002Freferences\u002Fdma-consent-mode-v2.md",{"path":92,"resourceType":83,"resourceTypeDesc":84,"sizeBytes":93,"sourceHtmlUrl":94},"references\u002Fga4-data-api.md",5364,"https:\u002F\u002Fgithub.com\u002Fnoirelab\u002Flinux-setup\u002Fblob\u002Fmain\u002Fconfigs\u002Fcommon\u002Fclaude\u002Fskills\u002Fseo-google\u002Freferences\u002Fga4-data-api.md",{"path":96,"resourceType":83,"resourceTypeDesc":84,"sizeBytes":97,"sourceHtmlUrl":98},"references\u002Findexing-api.md",3273,"https:\u002F\u002Fgithub.com\u002Fnoirelab\u002Flinux-setup\u002Fblob\u002Fmain\u002Fconfigs\u002Fcommon\u002Fclaude\u002Fskills\u002Fseo-google\u002Freferences\u002Findexing-api.md",{"path":100,"resourceType":83,"resourceTypeDesc":84,"sizeBytes":101,"sourceHtmlUrl":102},"references\u002Fkeyword-planner-api.md",2398,"https:\u002F\u002Fgithub.com\u002Fnoirelab\u002Flinux-setup\u002Fblob\u002Fmain\u002Fconfigs\u002Fcommon\u002Fclaude\u002Fskills\u002Fseo-google\u002Freferences\u002Fkeyword-planner-api.md",{"path":104,"resourceType":83,"resourceTypeDesc":84,"sizeBytes":105,"sourceHtmlUrl":106},"references\u002Fnlp-api.md",2333,"https:\u002F\u002Fgithub.com\u002Fnoirelab\u002Flinux-setup\u002Fblob\u002Fmain\u002Fconfigs\u002Fcommon\u002Fclaude\u002Fskills\u002Fseo-google\u002Freferences\u002Fnlp-api.md",{"path":108,"resourceType":83,"resourceTypeDesc":84,"sizeBytes":109,"sourceHtmlUrl":110},"references\u002Fpagespeed-crux-api.md",6968,"https:\u002F\u002Fgithub.com\u002Fnoirelab\u002Flinux-setup\u002Fblob\u002Fmain\u002Fconfigs\u002Fcommon\u002Fclaude\u002Fskills\u002Fseo-google\u002Freferences\u002Fpagespeed-crux-api.md",{"path":112,"resourceType":83,"resourceTypeDesc":84,"sizeBytes":113,"sourceHtmlUrl":114},"references\u002Frate-limits-quotas.md",3379,"https:\u002F\u002Fgithub.com\u002Fnoirelab\u002Flinux-setup\u002Fblob\u002Fmain\u002Fconfigs\u002Fcommon\u002Fclaude\u002Fskills\u002Fseo-google\u002Freferences\u002Frate-limits-quotas.md",{"path":116,"resourceType":83,"resourceTypeDesc":84,"sizeBytes":117,"sourceHtmlUrl":118},"references\u002Fsearch-console-api.md",5448,"https:\u002F\u002Fgithub.com\u002Fnoirelab\u002Flinux-setup\u002Fblob\u002Fmain\u002Fconfigs\u002Fcommon\u002Fclaude\u002Fskills\u002Fseo-google\u002Freferences\u002Fsearch-console-api.md",{"path":120,"resourceType":83,"resourceTypeDesc":84,"sizeBytes":121,"sourceHtmlUrl":122},"references\u002Fstandards.md",2160,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fcpra-opt-out-signals\u002Freferences\u002Fstandards.md",{"path":124,"resourceType":83,"resourceTypeDesc":84,"sizeBytes":125,"sourceHtmlUrl":126},"references\u002Fsupplementary-apis.md",2812,"https:\u002F\u002Fgithub.com\u002Fnoirelab\u002Flinux-setup\u002Fblob\u002Fmain\u002Fconfigs\u002Fcommon\u002Fclaude\u002Fskills\u002Fseo-google\u002Freferences\u002Fsupplementary-apis.md",{"path":128,"resourceType":83,"resourceTypeDesc":84,"sizeBytes":129,"sourceHtmlUrl":130},"references\u002Fworkflows.md",3431,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fcpra-opt-out-signals\u002Freferences\u002Fworkflows.md",{"path":132,"resourceType":83,"resourceTypeDesc":84,"sizeBytes":133,"sourceHtmlUrl":134},"references\u002Fyoutube-api.md",1595,"https:\u002F\u002Fgithub.com\u002Fnoirelab\u002Flinux-setup\u002Fblob\u002Fmain\u002Fconfigs\u002Fcommon\u002Fclaude\u002Fskills\u002Fseo-google\u002Freferences\u002Fyoutube-api.md",{"path":136,"resourceType":137,"resourceTypeDesc":138,"sizeBytes":139,"sourceHtmlUrl":140},"scripts\u002Fprocess.py","SCRIPT","脚本",8721,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fcpra-opt-out-signals\u002Fscripts\u002Fprocess.py",[142,170,187,200,217,230],{"skillNo":143,"name":144,"nameZh":6,"description":145,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":146,"categories":147,"keywords":161,"publishedAt":26},"01M6AG6K8R3XW10ENWH2FH18RH","workplace-email-privacy","Implements email and internet monitoring compliance in the workplace per Barbulescu v Romania (ECHR Grand Chamber), EDPB guidance, and national labour law. Covers acceptable use policies, legitimate expectation of privacy, proportionality testing, and content vs metadata monitoring. Keywords: email monitoring, Barbulescu, workplace privacy, internet monitoring, acceptable use policy, ECHR, proportionality.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fworkplace-email-privacy\u002FSKILL.md",[148,153,156],{"categoryNo":149,"categoryName":150,"taxonomyType":151,"taxonomyTypeDesc":152},"01JBSEEDCAT000000000000005","邮件与沟通","SCENARIO","使用场景",{"categoryNo":154,"categoryName":155,"taxonomyType":151,"taxonomyTypeDesc":152},"01JBSEEDCAT000000000000008","测试与质量",{"categoryNo":157,"categoryName":158,"taxonomyType":159,"taxonomyTypeDesc":160},"01JBSEEDCAT000000000000037","律师与法务","PROFESSION","适用职业",[162,163,21,164,165,22,166,167,168,169],"email","workplace email privacy","compliance","content","policy","testing","monitoring","metadata",{"skillNo":171,"name":172,"nameZh":6,"description":173,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":174,"categories":175,"keywords":180,"publishedAt":26},"01M6AG6FRCBJY7D061BJZMNV49","whistleblower-data","Implements data protection compliance for whistleblowing systems under EU Directive 2019\u002F1937 and GDPR. Covers anonymous reporting channels, identity protection for whistleblowers and accused persons, retention limits, access restrictions, and retaliation prevention. Addresses national transpositions and DPA guidance. Keywords: whistleblower, Directive 2019\u002F1937, anonymous reporting, identity protection, retaliation, retention, reporting channel.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fwhistleblower-data\u002FSKILL.md",[176,179],{"categoryNo":177,"categoryName":178,"taxonomyType":159,"taxonomyTypeDesc":160},"01JBSEEDCAT000000000000033","数据分析师",{"categoryNo":157,"categoryName":158,"taxonomyType":159,"taxonomyTypeDesc":160},[22,181,182,183,164,184,185,21,186],"whistleblower data","identity","reporting","data protection","gdpr","prevention",{"skillNo":188,"name":189,"nameZh":6,"description":190,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":191,"categories":192,"keywords":194,"publishedAt":26},"01M6AG6CJP0PW3X65HC7VP9SR9","vendor-termination-data","Vendor termination data return and deletion procedures per GDPR Article 28(3)(g). Covers data extraction formats, deletion certification requirements, transition planning, residual data handling, and post-termination verification.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fvendor-termination-data\u002FSKILL.md",[193],{"categoryNo":177,"categoryName":178,"taxonomyType":159,"taxonomyTypeDesc":160},[22,195,196,197,198,185,21,199],"vendor termination data","planning","verification","extraction","certification",{"skillNo":201,"name":202,"nameZh":6,"description":203,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":204,"categories":205,"keywords":207,"publishedAt":26},"01M6AG69E277DXZB2NF6KV17ZA","vendor-risk-scoring","Vendor privacy risk tiering methodology for processor management. Covers scoring factors including data volume, sensitivity, transfer locations, certifications, breach history, and control maturity with weighted risk calculation and tier assignment.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fvendor-risk-scoring\u002FSKILL.md",[206],{"categoryNo":177,"categoryName":178,"taxonomyType":159,"taxonomyTypeDesc":160},[208,209,210,211,212,213,214,215,21,22,216],"vendor risk scoring","risk","risk scoring","methodology","risk-scoring","assessment","transfer","certifications","processor",{"skillNo":218,"name":219,"nameZh":6,"description":220,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":221,"categories":222,"keywords":224,"publishedAt":26},"01M6AG6655ABFKT2BBWHCP4PAT","vendor-privacy-due-diligence","Pre-contract vendor privacy due diligence per GDPR Article 28(1). Covers risk questionnaires, technical controls assessment, certification review, data flow analysis, and documented sufficiency decisions for processor engagement.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fvendor-privacy-due-diligence\u002FSKILL.md",[223],{"categoryNo":157,"categoryName":158,"taxonomyType":159,"taxonomyTypeDesc":160},[21,225,185,226,213,227,228,22,216,209,199,229],"vendor privacy due diligence","review","onboarding","flow","analysis",{"skillNo":231,"name":232,"nameZh":6,"description":233,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":234,"categories":235,"keywords":243,"publishedAt":26},"01M6AG62C3VD8SYNGH4N7RHZTE","vendor-privacy-audit","On-site and remote vendor audit procedures per GDPR Article 28(3)(h). Covers audit planning, evidence collection methodologies, finding classification, remediation tracking, and audit report generation for processor compliance verification.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fvendor-privacy-audit\u002FSKILL.md",[236,239,242],{"categoryNo":237,"categoryName":238,"taxonomyType":151,"taxonomyTypeDesc":152},"01JBSEEDCAT000000000000018","写作与文案",{"categoryNo":240,"categoryName":241,"taxonomyType":159,"taxonomyTypeDesc":160},"01JBSEEDCAT000000000000036","内容创作者",{"categoryNo":157,"categoryName":158,"taxonomyType":159,"taxonomyTypeDesc":160},[244,245,21,246,197,247,164,185,248,216,249,250,251,196],"vendor privacy audit","audit","report","audit report","remediation","collection","remediation-tracking","classification"]