[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6AFY2SA68GET97HT9HWYG4V":3,"skill-same:01M6AFY2SA68GET97HT9HWYG4V":89},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":26,"publishedAt":35,"linkOnly":36,"markdownContent":37,"markdownBody":38,"frontMatter":39,"refName":44,"commitSha":45,"skillDirectory":46,"forksCount":47,"repositoryHtmlUrl":48,"repositoryHomepageUrl":6,"ownerHtmlUrl":49,"ownerBlogUrl":50,"ownerDescription":51,"updatedAt":52,"install":53,"resources":66},"01M6AFY2SA68GET97HT9HWYG4V","nigeria-ndpr",null,"Nigeria Data Protection Regulation (NDPR) and Nigeria Data Protection Act (NDPA) 2023 compliance. Covers lawful basis for processing, data subject rights, cross-border transfer mechanisms, Data Protection Compliance Organisation (DPCO) registration, mandatory DPIA filing, and breach notification. Keywords: NDPR, NDPA, Nigeria, NITDA, DPCO, Africa data protection, cross-border transfer.","mukul975\u002FPrivacy-Data-Protection-Skills","mukul975","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F42860185?v=4","01M6ADEQR8T5M4EEG6C67BQCWF","Mahipal","01M6ADNKWX1HF4Q5DKEXT5M774",336,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fnigeria-ndpr\u002FSKILL.md",[18,23],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000033","数据分析师","PROFESSION","适用职业",{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000037","律师与法务",[27,28,29,30,31,32,33,34],"nigeria ndpr","transfer","compliance","data protection","privacy","data","data-protection","dpia","2026-11-10 10:12:30",false,"---\nname: nigeria-ndpr\ndescription: >-\n  Nigeria Data Protection Regulation (NDPR) and Nigeria Data Protection Act\n  (NDPA) 2023 compliance. Covers lawful basis for processing, data subject\n  rights, cross-border transfer mechanisms, Data Protection Compliance\n  Organisation (DPCO) registration, mandatory DPIA filing, and breach\n  notification. Keywords: NDPR, NDPA, Nigeria, NITDA, DPCO, Africa data\n  protection, cross-border transfer.\nlicense: Apache-2.0\nmetadata:\n  author: mukul975\n  version: \"1.0\"\n  domain: privacy\n  subdomain: global-privacy-regulations\n  tags: \"ndpr, ndpa, nigeria, nitda, dpco, africa-data-protection\"\n---\n\n# Nigeria Data Protection Regulation (NDPR) and Nigeria Data Protection Act (NDPA)\n\n## Overview\n\nNigeria's data protection framework comprises the Nigeria Data Protection Regulation (NDPR) issued by NITDA in January 2019, and the Nigeria Data Protection Act (NDPA) signed into law on June 12, 2023. The NDPA established the Nigeria Data Protection Commission (NDPC) as an independent regulatory body, replacing NITDA's oversight role. The NDPA applies to the processing of personal data by any data controller or processor that is domiciled, resident, or operating in Nigeria, or that processes personal data of data subjects in Nigeria.\n\n## Lawful Basis for Processing (NDPA Section 25)\n\n| Lawful Basis | Description |\n|-------------|-------------|\n| Consent | Data subject has given consent to the processing for one or more specific purposes. Must be freely given, specific, informed, and unambiguous. |\n| Contract | Processing necessary for the performance of a contract to which the data subject is party. |\n| Legal obligation | Processing necessary for compliance with a legal obligation of the controller. |\n| Vital interests | Processing necessary to protect the vital interests of the data subject or another natural person. |\n| Public interest | Processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority. |\n| Legitimate interests | Processing necessary for legitimate interests of the controller or third party, provided the interests are not overridden by the data subject's rights. |\n\n## Data Subject Rights (NDPA Part IV)\n\n| Right | Description | Response Period |\n|-------|-------------|----------------|\n| Right to be informed | Receive information about data processing at the point of collection | At collection |\n| Right of access | Obtain confirmation of processing and a copy of personal data | 30 days |\n| Right to rectification | Correct inaccurate personal data | 30 days |\n| Right to erasure | Request deletion of personal data where no lawful basis for continued processing | 30 days |\n| Right to restrict processing | Request limitation of processing in certain circumstances | 30 days |\n| Right to data portability | Receive personal data in a structured, commonly used, machine-readable format | 30 days |\n| Right to object | Object to processing based on legitimate interests or public interest | 30 days |\n| Right related to automated decision-making | Not be subject to decisions based solely on automated processing that produce legal or significant effects | 30 days |\n\n## Sensitive Personal Data (NDPA Section 30)\n\nThe NDPA defines sensitive personal data as data relating to:\n- Racial or ethnic origin\n- Political opinions or affiliations\n- Religious or philosophical beliefs\n- Trade union membership\n- Genetic data\n- Biometric data for identification purposes\n- Health data\n- Sex life or sexual orientation\n- Criminal convictions or offences\n\nProcessing of sensitive personal data requires explicit consent or is permitted under specific derogations (substantial public interest, employment obligations, vital interests, legal claims, health or social care purposes).\n\n## Cross-Border Transfer (NDPA Part VI)\n\nPersonal data may be transferred outside Nigeria where:\n\n1. **Adequacy decision**: The NDPC has determined that the receiving country or international organisation ensures an adequate level of data protection.\n2. **Appropriate safeguards**: Including binding corporate rules, standard contractual clauses approved by the NDPC, codes of conduct, or certification mechanisms.\n3. **Derogations**: Explicit consent, contract performance, public interest, legal claims, vital interests, or transfer from a public register.\n\nThe NDPC maintains a whitelist of countries with adequate protection. Controllers must conduct a transfer impact assessment and maintain records of all cross-border transfers.\n\n## Data Protection Compliance Organisation (DPCO)\n\nUnder the NDPR framework, organisations processing personal data of more than 2,000 data subjects in a 12-month period must engage a licensed Data Protection Compliance Organisation (DPCO) to conduct an annual data protection audit. The DPCO:\n\n- Must be licensed by the NDPC (formerly NITDA)\n- Conducts annual data protection audits\n- Files the audit report with the NDPC\n- Verifies compliance with the NDPR\u002FNDPA\n- Provides data protection advisory services\n\n## Data Protection Impact Assessment (NDPA Section 28)\n\nControllers must conduct a DPIA prior to processing that is likely to result in a high risk to data subjects' rights and freedoms, particularly:\n- Systematic and extensive evaluation of personal aspects (profiling)\n- Large-scale processing of sensitive personal data\n- Systematic monitoring of a publicly accessible area\n- Processing involving new technologies\n\nDPIA results must be filed with the NDPC.\n\n## Breach Notification (NDPA Section 39)\n\n| Requirement | Detail |\n|-------------|--------|\n| Notification to NDPC | Within 72 hours of becoming aware of a personal data breach |\n| Notification to data subjects | Without undue delay where the breach is likely to result in a high risk to rights and freedoms |\n| Content of notification | Nature of breach, categories and approximate number of data subjects affected, name and contact of DPO, likely consequences, measures taken or proposed |\n| Record keeping | Document all breaches regardless of notification obligation |\n\n## Penalties (NDPA Section 46)\n\n- Organisations processing data of more than 10,000 data subjects: up to 2% of annual gross revenue or NGN 10 million, whichever is greater.\n- Organisations processing data of fewer than 10,000 data subjects: up to 1% of annual gross revenue or NGN 2 million, whichever is greater.\n- Additional remedies include compensation orders, enforcement notices, and compliance orders.\n\n## Registration Requirement\n\nData controllers and processors must register with the NDPC. The registration includes:\n- Description of categories of data subjects and personal data\n- Purposes of processing\n- Categories of recipients\n- Description of cross-border transfers\n- Retention periods\n- Description of security measures\n","# Nigeria Data Protection Regulation (NDPR) and Nigeria Data Protection Act (NDPA)\n\n## Overview\n\nNigeria's data protection framework comprises the Nigeria Data Protection Regulation (NDPR) issued by NITDA in January 2019, and the Nigeria Data Protection Act (NDPA) signed into law on June 12, 2023. The NDPA established the Nigeria Data Protection Commission (NDPC) as an independent regulatory body, replacing NITDA's oversight role. The NDPA applies to the processing of personal data by any data controller or processor that is domiciled, resident, or operating in Nigeria, or that processes personal data of data subjects in Nigeria.\n\n## Lawful Basis for Processing (NDPA Section 25)\n\n| Lawful Basis | Description |\n|-------------|-------------|\n| Consent | Data subject has given consent to the processing for one or more specific purposes. Must be freely given, specific, informed, and unambiguous. |\n| Contract | Processing necessary for the performance of a contract to which the data subject is party. |\n| Legal obligation | Processing necessary for compliance with a legal obligation of the controller. |\n| Vital interests | Processing necessary to protect the vital interests of the data subject or another natural person. |\n| Public interest | Processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority. |\n| Legitimate interests | Processing necessary for legitimate interests of the controller or third party, provided the interests are not overridden by the data subject's rights. |\n\n## Data Subject Rights (NDPA Part IV)\n\n| Right | Description | Response Period |\n|-------|-------------|----------------|\n| Right to be informed | Receive information about data processing at the point of collection | At collection |\n| Right of access | Obtain confirmation of processing and a copy of personal data | 30 days |\n| Right to rectification | Correct inaccurate personal data | 30 days |\n| Right to erasure | Request deletion of personal data where no lawful basis for continued processing | 30 days |\n| Right to restrict processing | Request limitation of processing in certain circumstances | 30 days |\n| Right to data portability | Receive personal data in a structured, commonly used, machine-readable format | 30 days |\n| Right to object | Object to processing based on legitimate interests or public interest | 30 days |\n| Right related to automated decision-making | Not be subject to decisions based solely on automated processing that produce legal or significant effects | 30 days |\n\n## Sensitive Personal Data (NDPA Section 30)\n\nThe NDPA defines sensitive personal data as data relating to:\n- Racial or ethnic origin\n- Political opinions or affiliations\n- Religious or philosophical beliefs\n- Trade union membership\n- Genetic data\n- Biometric data for identification purposes\n- Health data\n- Sex life or sexual orientation\n- Criminal convictions or offences\n\nProcessing of sensitive personal data requires explicit consent or is permitted under specific derogations (substantial public interest, employment obligations, vital interests, legal claims, health or social care purposes).\n\n## Cross-Border Transfer (NDPA Part VI)\n\nPersonal data may be transferred outside Nigeria where:\n\n1. **Adequacy decision**: The NDPC has determined that the receiving country or international organisation ensures an adequate level of data protection.\n2. **Appropriate safeguards**: Including binding corporate rules, standard contractual clauses approved by the NDPC, codes of conduct, or certification mechanisms.\n3. **Derogations**: Explicit consent, contract performance, public interest, legal claims, vital interests, or transfer from a public register.\n\nThe NDPC maintains a whitelist of countries with adequate protection. Controllers must conduct a transfer impact assessment and maintain records of all cross-border transfers.\n\n## Data Protection Compliance Organisation (DPCO)\n\nUnder the NDPR framework, organisations processing personal data of more than 2,000 data subjects in a 12-month period must engage a licensed Data Protection Compliance Organisation (DPCO) to conduct an annual data protection audit. The DPCO:\n\n- Must be licensed by the NDPC (formerly NITDA)\n- Conducts annual data protection audits\n- Files the audit report with the NDPC\n- Verifies compliance with the NDPR\u002FNDPA\n- Provides data protection advisory services\n\n## Data Protection Impact Assessment (NDPA Section 28)\n\nControllers must conduct a DPIA prior to processing that is likely to result in a high risk to data subjects' rights and freedoms, particularly:\n- Systematic and extensive evaluation of personal aspects (profiling)\n- Large-scale processing of sensitive personal data\n- Systematic monitoring of a publicly accessible area\n- Processing involving new technologies\n\nDPIA results must be filed with the NDPC.\n\n## Breach Notification (NDPA Section 39)\n\n| Requirement | Detail |\n|-------------|--------|\n| Notification to NDPC | Within 72 hours of becoming aware of a personal data breach |\n| Notification to data subjects | Without undue delay where the breach is likely to result in a high risk to rights and freedoms |\n| Content of notification | Nature of breach, categories and approximate number of data subjects affected, name and contact of DPO, likely consequences, measures taken or proposed |\n| Record keeping | Document all breaches regardless of notification obligation |\n\n## Penalties (NDPA Section 46)\n\n- Organisations processing data of more than 10,000 data subjects: up to 2% of annual gross revenue or NGN 10 million, whichever is greater.\n- Organisations processing data of fewer than 10,000 data subjects: up to 1% of annual gross revenue or NGN 2 million, whichever is greater.\n- Additional remedies include compensation orders, enforcement notices, and compliance orders.\n\n## Registration Requirement\n\nData controllers and processors must register with the NDPC. The registration includes:\n- Description of categories of data subjects and personal data\n- Purposes of processing\n- Categories of recipients\n- Description of cross-border transfers\n- Retention periods\n- Description of security measures\n",{"name":5,"license":15,"metadata":40,"description":7},{"tags":41,"author":9,"domain":31,"version":42,"subdomain":43},"ndpr, ndpa, nigeria, nitda, dpco, africa-data-protection","1.0","global-privacy-regulations","main","9b2ef9eae161c00a17241d42a388571321b33e9f","skills\u002Fprivacy\u002Fnigeria-ndpr",67,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills","https:\u002F\u002Fgithub.com\u002Fmukul975","Mahipal.engineer","🔐 Cybersecurity | 💻 Dev | 📷 Street Photographer\r\n🎓 MSc | 📚 Research & AI Security","2026-03-17 04:06:52",{"source":8,"skillName":5,"commands":54,"prompt":64,"zipAvailable":65},[55,58,61],{"tool":56,"command":57},"npx","npx skills add mukul975\u002FPrivacy-Data-Protection-Skills --skill nigeria-ndpr",{"tool":59,"command":60},"bunx","bunx skills add mukul975\u002FPrivacy-Data-Protection-Skills --skill nigeria-ndpr",{"tool":62,"command":63},"pnpm","pnpm dlx skills add mukul975\u002FPrivacy-Data-Protection-Skills --skill nigeria-ndpr","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fnigeria-ndpr\u002FSKILL.md",true,[67,73,79,83],{"path":68,"resourceType":69,"resourceTypeDesc":70,"sizeBytes":71,"sourceHtmlUrl":72},"assets\u002Ftemplate.md","ASSET","资产文件",3419,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fnigeria-ndpr\u002Fassets\u002Ftemplate.md",{"path":74,"resourceType":75,"resourceTypeDesc":76,"sizeBytes":77,"sourceHtmlUrl":78},"references\u002Fstandards.md","REFERENCE","参考文档",2648,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fnigeria-ndpr\u002Freferences\u002Fstandards.md",{"path":80,"resourceType":75,"resourceTypeDesc":76,"sizeBytes":81,"sourceHtmlUrl":82},"references\u002Fworkflows.md",3861,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fnigeria-ndpr\u002Freferences\u002Fworkflows.md",{"path":84,"resourceType":85,"resourceTypeDesc":86,"sizeBytes":87,"sourceHtmlUrl":88},"scripts\u002Fprocess.py","SCRIPT","脚本",15141,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fnigeria-ndpr\u002Fscripts\u002Fprocess.py",[90,113,127,140,156,169],{"skillNo":91,"name":92,"nameZh":6,"description":93,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":94,"categories":95,"keywords":105,"publishedAt":35},"01M6AG6K8R3XW10ENWH2FH18RH","workplace-email-privacy","Implements email and internet monitoring compliance in the workplace per Barbulescu v Romania (ECHR Grand Chamber), EDPB guidance, and national labour law. Covers acceptable use policies, legitimate expectation of privacy, proportionality testing, and content vs metadata monitoring. Keywords: email monitoring, Barbulescu, workplace privacy, internet monitoring, acceptable use policy, ECHR, proportionality.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fworkplace-email-privacy\u002FSKILL.md",[96,101,104],{"categoryNo":97,"categoryName":98,"taxonomyType":99,"taxonomyTypeDesc":100},"01JBSEEDCAT000000000000005","邮件与沟通","SCENARIO","使用场景",{"categoryNo":102,"categoryName":103,"taxonomyType":99,"taxonomyTypeDesc":100},"01JBSEEDCAT000000000000008","测试与质量",{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},[106,107,31,29,108,32,109,110,111,112],"email","workplace email privacy","content","policy","testing","monitoring","metadata",{"skillNo":114,"name":115,"nameZh":6,"description":116,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":117,"categories":118,"keywords":121,"publishedAt":35},"01M6AG6FRCBJY7D061BJZMNV49","whistleblower-data","Implements data protection compliance for whistleblowing systems under EU Directive 2019\u002F1937 and GDPR. Covers anonymous reporting channels, identity protection for whistleblowers and accused persons, retention limits, access restrictions, and retaliation prevention. Addresses national transpositions and DPA guidance. Keywords: whistleblower, Directive 2019\u002F1937, anonymous reporting, identity protection, retaliation, retention, reporting channel.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fwhistleblower-data\u002FSKILL.md",[119,120],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},[32,122,123,124,29,30,125,31,126],"whistleblower data","identity","reporting","gdpr","prevention",{"skillNo":128,"name":129,"nameZh":6,"description":130,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":131,"categories":132,"keywords":134,"publishedAt":35},"01M6AG6CJP0PW3X65HC7VP9SR9","vendor-termination-data","Vendor termination data return and deletion procedures per GDPR Article 28(3)(g). Covers data extraction formats, deletion certification requirements, transition planning, residual data handling, and post-termination verification.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fvendor-termination-data\u002FSKILL.md",[133],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[32,135,136,137,138,125,31,139],"vendor termination data","planning","verification","extraction","certification",{"skillNo":141,"name":142,"nameZh":6,"description":143,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":144,"categories":145,"keywords":147,"publishedAt":35},"01M6AG69E277DXZB2NF6KV17ZA","vendor-risk-scoring","Vendor privacy risk tiering methodology for processor management. Covers scoring factors including data volume, sensitivity, transfer locations, certifications, breach history, and control maturity with weighted risk calculation and tier assignment.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fvendor-risk-scoring\u002FSKILL.md",[146],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[148,149,150,151,152,153,28,154,31,32,155],"vendor risk scoring","risk","risk scoring","methodology","risk-scoring","assessment","certifications","processor",{"skillNo":157,"name":158,"nameZh":6,"description":159,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":160,"categories":161,"keywords":163,"publishedAt":35},"01M6AG6655ABFKT2BBWHCP4PAT","vendor-privacy-due-diligence","Pre-contract vendor privacy due diligence per GDPR Article 28(1). Covers risk questionnaires, technical controls assessment, certification review, data flow analysis, and documented sufficiency decisions for processor engagement.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fvendor-privacy-due-diligence\u002FSKILL.md",[162],{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},[31,164,125,165,153,166,167,32,155,149,139,168],"vendor privacy due diligence","review","onboarding","flow","analysis",{"skillNo":170,"name":171,"nameZh":6,"description":172,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":173,"categories":174,"keywords":182,"publishedAt":35},"01M6AG62C3VD8SYNGH4N7RHZTE","vendor-privacy-audit","On-site and remote vendor audit procedures per GDPR Article 28(3)(h). Covers audit planning, evidence collection methodologies, finding classification, remediation tracking, and audit report generation for processor compliance verification.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FPrivacy-Data-Protection-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fprivacy\u002Fvendor-privacy-audit\u002FSKILL.md",[175,178,181],{"categoryNo":176,"categoryName":177,"taxonomyType":99,"taxonomyTypeDesc":100},"01JBSEEDCAT000000000000018","写作与文案",{"categoryNo":179,"categoryName":180,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000036","内容创作者",{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},[183,184,31,185,137,186,29,125,187,155,188,189,190,136],"vendor privacy audit","audit","report","audit report","remediation","collection","remediation-tracking","classification"]