[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6EW1FJCYWW8KMFE39KSEKCT":3,"skill-same:01M6EW1FJCYWW8KMFE39KSEKCT":115},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":31,"publishedAt":52,"linkOnly":53,"markdownContent":54,"markdownBody":55,"frontMatter":56,"refName":76,"commitSha":77,"skillDirectory":78,"forksCount":14,"repositoryHtmlUrl":79,"repositoryHomepageUrl":80,"ownerHtmlUrl":81,"ownerBlogUrl":6,"ownerDescription":82,"updatedAt":83,"install":84,"resources":97},"01M6EW1FJCYWW8KMFE39KSEKCT","performing-privacy-impact-assessment",null,"Automates the Privacy Impact Assessment (PIA) workflow including data flow mapping, privacy risk scoring matrices, GDPR Article 35 DPIA and CCPA\u002FCPRA alignment checks, data inventory cataloging, and remediation tracking. Implements the NIST Privacy Framework PRAM methodology and ICO DPIA guidance for systematic identification and mitigation of privacy risks across processing activities. Use when conducting privacy assessments for new systems, evaluating regulatory compliance posture, or building automated privacy governance programs.","henriquescastilho\u002Fmy-claude","henriquescastilho","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F153296945?v=4","01M6ESH7EXPXTH9CVQ4K16SRG8","Henrique Scheer","01M6ESH7JHEK2PTNNH4HEH787Z",0,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fperforming-privacy-impact-assessment\u002FSKILL.md",[18,23,28],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",{"categoryNo":24,"categoryName":25,"taxonomyType":26,"taxonomyTypeDesc":27},"01JBSEEDCAT000000000000033","数据分析师","PROFESSION","适用职业",{"categoryNo":29,"categoryName":30,"taxonomyType":26,"taxonomyTypeDesc":27},"01JBSEEDCAT000000000000037","律师与法务",[32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51],"assessment","privacy","impact","performing privacy impact assessment","inventory","processing","systematic","article","across","flow mapping","scoring","alignment","cybersecurity","t1078","ico","dpia","remediation","NIST","flow","workflow","2026-11-10 10:12:30",false,"---\nname: performing-privacy-impact-assessment\ndescription: 'Automates the Privacy Impact Assessment (PIA) workflow including data\n  flow mapping, privacy risk scoring matrices, GDPR Article 35 DPIA and CCPA\u002FCPRA\n  alignment checks, data inventory cataloging, and remediation tracking. Implements\n  the NIST Privacy Framework PRAM methodology and ICO DPIA guidance for systematic\n  identification and mitigation of privacy risks across processing activities. Use\n  when conducting privacy assessments for new systems, evaluating regulatory compliance\n  posture, or building automated privacy governance programs.\n\n  '\ndomain: cybersecurity\nsubdomain: privacy-compliance\ntags:\n- privacy\n- impact-assessment\n- GDPR\n- CCPA\n- NIST\n- DPIA\n- data-flow-mapping\n- risk-scoring\nversion: '1.0'\nauthor: mukul975\nlicense: Apache-2.0\nnist_csf:\n- GV.PO-01\n- PR.DS-01\n- GV.OC-05\nmitre_attack:\n- T1078\n- T1190\n- T1059\n---\n\n# Performing Privacy Impact Assessment\n\n## When to Use\n\n- When launching a new system, product, or processing activity that handles personal data\n- When conducting GDPR Article 35 Data Protection Impact Assessments (DPIAs)\n- When evaluating CCPA\u002FCPRA compliance for data processing operations\n- When performing privacy risk assessments aligned to the NIST Privacy Framework\n- When mapping data flows across organizational boundaries and third-party processors\n- When building automated privacy governance and assessment pipelines\n- When preparing for regulatory audits or demonstrating accountability obligations\n\n## Prerequisites\n\n- Familiarity with GDPR, CCPA\u002FCPRA, and NIST Privacy Framework concepts\n- Access to data processing inventories and system architecture documentation\n- Python 3.8+ with required dependencies installed\n- Appropriate authorization from the Data Protection Officer (DPO) or privacy team\n- Knowledge of organizational data flows and third-party processor relationships\n\n## Instructions\n\n### Phase 1: Data Inventory and Processing Activity Catalog\n\nBuild a complete inventory of personal data processing activities. Each record of\nprocessing activity (ROPA) entry must capture the data categories, legal basis,\nretention periods, and data subjects involved.\n\n```python\nfrom agent import PrivacyImpactAssessmentEngine\n\nengine = PrivacyImpactAssessmentEngine()\n\n# Register a processing activity for assessment\nactivity = engine.register_processing_activity(\n    name=\"Customer Analytics Platform\",\n    description=\"Collects browsing behavior and purchase history for personalization\",\n    data_controller=\"Acme Corp\",\n    data_processor=\"CloudAnalytics Inc\",\n    data_categories=[\"browsing_history\", \"purchase_records\", \"ip_address\", \"device_id\"],\n    data_subjects=[\"customers\", \"website_visitors\"],\n    legal_basis=\"consent\",\n    retention_period_days=730,\n    cross_border_transfer=True,\n    transfer_destinations=[\"US\", \"IN\"],\n    automated_decision_making=True,\n)\nprint(f\"Registered activity: {activity['activity_id']}\")\n```\n\n### Phase 2: Data Flow Mapping\n\nMap all data flows from collection to deletion, identifying every touchpoint,\ntransformation, and storage location. This reveals hidden privacy risks in data\nmovement across systems.\n\n```python\n# Build the data flow map\nflow_map = engine.map_data_flows(\n    activity_id=activity[\"activity_id\"],\n    flows=[\n        {\n            \"stage\": \"collection\",\n            \"source\": \"Web browser cookie + form submission\",\n            \"destination\": \"CDN edge server\",\n            \"data_elements\": [\"ip_address\", \"device_id\", \"browsing_history\"],\n            \"encryption_in_transit\": True,\n            \"protocol\": \"TLS 1.3\",\n        },\n        {\n            \"stage\": \"processing\",\n            \"source\": \"CDN edge server\",\n            \"destination\": \"Analytics data warehouse (US-East)\",\n            \"data_elements\": [\"browsing_history\", \"purchase_records\", \"device_id\"],\n            \"encryption_in_transit\": True,\n            \"encryption_at_rest\": True,\n            \"protocol\": \"mTLS\",\n        },\n        {\n            \"stage\": \"storage\",\n            \"source\": \"Analytics data warehouse\",\n            \"destination\": \"S3 encrypted bucket\",\n            \"data_elements\": [\"browsing_history\", \"purchase_records\"],\n            \"encryption_at_rest\": True,\n            \"retention_days\": 730,\n            \"access_controls\": \"IAM role-based, MFA required\",\n        },\n        {\n            \"stage\": \"sharing\",\n            \"source\": \"Analytics data warehouse\",\n            \"destination\": \"Third-party ML provider (IN)\",\n            \"data_elements\": [\"browsing_history\", \"purchase_records\"],\n            \"encryption_in_transit\": True,\n            \"data_processing_agreement\": True,\n            \"cross_border\": True,\n        },\n        {\n            \"stage\": \"deletion\",\n            \"source\": \"S3 bucket + data warehouse\",\n            \"destination\": \"Secure erasure\",\n            \"method\": \"Cryptographic erasure + lifecycle policy\",\n            \"verification\": \"Automated deletion audit log\",\n        },\n    ],\n)\nengine.render_data_flow_diagram(flow_map)\n```\n\n### Phase 3: Privacy Risk Assessment with Scoring Matrix\n\nApply a structured risk scoring methodology evaluating likelihood and impact\nacross multiple privacy risk dimensions. The matrix aligns with both the\nNIST PRAM and ICO DPIA risk assessment approaches.\n\n```python\n# Run the risk assessment\nrisk_report = engine.assess_privacy_risks(\n    activity_id=activity[\"activity_id\"],\n    assessment_type=\"full_dpia\",\n)\n\n# Display risk matrix results\nfor risk in risk_report[\"risks\"]:\n    print(f\"[{risk['severity']}] {risk['category']}: {risk['description']}\")\n    print(f\"  Likelihood: {risk['likelihood']}\u002F5 | Impact: {risk['impact']}\u002F5 | Score: {risk['risk_score']}\u002F25\")\n    print(f\"  Mitigation: {risk['recommended_mitigation']}\")\n```\n\nRisk categories evaluated include:\n1. **Data Minimization** -- Excessive collection beyond stated purpose\n2. **Purpose Limitation** -- Secondary use without legal basis\n3. **Cross-Border Transfer** -- Transfers without adequate safeguards (SCCs, BCRs)\n4. **Automated Decision Making** -- Profiling without human oversight or appeal\n5. **Data Subject Rights** -- Inability to fulfill access\u002Ferasure\u002Fportability requests\n6. **Third-Party Risk** -- Processor compliance gaps, subprocessor chains\n7. **Security Controls** -- Encryption, access control, breach response gaps\n8. **Retention** -- Storing data beyond necessity or legal requirement\n9. **Consent Management** -- Invalid or ambiguous consent mechanisms\n10. **Breach Notification** -- Inability to detect and notify within 72 hours (GDPR)\n\n### Phase 4: GDPR and CCPA\u002FCPRA Alignment Checks\n\nRun automated compliance checks against specific regulatory requirements.\nThe engine maps each processing activity against article-level GDPR obligations\nand CCPA\u002FCPRA consumer rights requirements.\n\n```python\n# GDPR compliance check\ngdpr_report = engine.check_gdpr_compliance(activity_id=activity[\"activity_id\"])\nprint(f\"GDPR Score: {gdpr_report['compliance_score']}\u002F100\")\nfor finding in gdpr_report[\"findings\"]:\n    print(f\"  [{finding['status']}] Art.{finding['article']}: {finding['description']}\")\n\n# CCPA\u002FCPRA compliance check\nccpa_report = engine.check_ccpa_compliance(activity_id=activity[\"activity_id\"])\nprint(f\"CCPA Score: {ccpa_report['compliance_score']}\u002F100\")\nfor finding in ccpa_report[\"findings\"]:\n    print(f\"  [{finding['status']}] Sec.{finding['section']}: {finding['description']}\")\n```\n\n### Phase 5: Remediation Plan and Report Generation\n\nGenerate a prioritized remediation plan with specific action items, responsible\nparties, deadlines, and generate the formal PIA\u002FDPIA report document.\n\n```python\n# Generate remediation plan\nremediation = engine.generate_remediation_plan(\n    activity_id=activity[\"activity_id\"],\n    risk_report=risk_report,\n    gdpr_report=gdpr_report,\n    ccpa_report=ccpa_report,\n)\n\nfor item in remediation[\"action_items\"]:\n    print(f\"[{item['priority']}] {item['action']}\")\n    print(f\"  Owner: {item['owner']} | Deadline: {item['deadline']}\")\n    print(f\"  Addresses: {', '.join(item['addresses_risks'])}\")\n\n# Generate formal DPIA report\nengine.generate_dpia_report(\n    activity_id=activity[\"activity_id\"],\n    output_path=\"dpia_report_customer_analytics.json\",\n    format=\"json\",\n)\nprint(\"[+] DPIA report generated\")\n```\n\n## Examples\n\n### Quick Screening Assessment\n\nDetermine whether a full DPIA is required using the ICO screening checklist:\n\n```python\nengine = PrivacyImpactAssessmentEngine()\n\nscreening = engine.run_screening_checklist(\n    uses_special_category_data=False,\n    large_scale_processing=True,\n    systematic_monitoring=True,\n    automated_decision_making=True,\n    cross_border_transfer=True,\n    vulnerable_data_subjects=False,\n    innovative_technology=True,\n    denial_of_service_or_rights=False,\n)\nprint(f\"DPIA Required: {screening['dpia_required']}\")\nprint(f\"Triggers: {screening['triggers']}\")\n# Output: DPIA Required: True\n# Triggers: ['large_scale_processing', 'systematic_monitoring',\n#            'automated_decision_making', 'cross_border_transfer',\n#            'innovative_technology']\n```\n\n### Batch Assessment of Multiple Processing Activities\n\n```python\nengine = PrivacyImpactAssessmentEngine()\n\nactivities = [\n    {\"name\": \"Email Marketing\", \"data_categories\": [\"email\", \"name\"],\n     \"legal_basis\": \"consent\", \"cross_border_transfer\": False},\n    {\"name\": \"HR Analytics\", \"data_categories\": [\"employee_id\", \"performance_scores\",\n     \"health_data\"], \"legal_basis\": \"legitimate_interest\", \"cross_border_transfer\": True},\n    {\"name\": \"Fraud Detection\", \"data_categories\": [\"transaction_data\", \"ip_address\",\n     \"device_fingerprint\"], \"legal_basis\": \"legitimate_interest\",\n     \"automated_decision_making\": True, \"cross_border_transfer\": False},\n]\n\nfor act_def in activities:\n    activity = engine.register_processing_activity(**act_def)\n    risk = engine.assess_privacy_risks(activity_id=activity[\"activity_id\"])\n    print(f\"{act_def['name']}: Overall Risk={risk['overall_risk_level']} \"\n          f\"({risk['risk_count_by_severity']})\")\n```\n\n### NIST Privacy Framework Profile Mapping\n\n```python\nengine = PrivacyImpactAssessmentEngine()\n\nprofile = engine.generate_nist_privacy_profile(\n    activity_id=activity[\"activity_id\"],\n    target_tier=\"tier_3\",  # Repeatable\n)\n\nfor function_id, outcomes in profile[\"functions\"].items():\n    print(f\"\\n{function_id}:\")\n    for outcome in outcomes:\n        status = \"PASS\" if outcome[\"implemented\"] else \"GAP\"\n        print(f\"  [{status}] {outcome['subcategory']}: {outcome['description']}\")\n```\n","# Performing Privacy Impact Assessment\n\n## When to Use\n\n- When launching a new system, product, or processing activity that handles personal data\n- When conducting GDPR Article 35 Data Protection Impact Assessments (DPIAs)\n- When evaluating CCPA\u002FCPRA compliance for data processing operations\n- When performing privacy risk assessments aligned to the NIST Privacy Framework\n- When mapping data flows across organizational boundaries and third-party processors\n- When building automated privacy governance and assessment pipelines\n- When preparing for regulatory audits or demonstrating accountability obligations\n\n## Prerequisites\n\n- Familiarity with GDPR, CCPA\u002FCPRA, and NIST Privacy Framework concepts\n- Access to data processing inventories and system architecture documentation\n- Python 3.8+ with required dependencies installed\n- Appropriate authorization from the Data Protection Officer (DPO) or privacy team\n- Knowledge of organizational data flows and third-party processor relationships\n\n## Instructions\n\n### Phase 1: Data Inventory and Processing Activity Catalog\n\nBuild a complete inventory of personal data processing activities. Each record of\nprocessing activity (ROPA) entry must capture the data categories, legal basis,\nretention periods, and data subjects involved.\n\n```python\nfrom agent import PrivacyImpactAssessmentEngine\n\nengine = PrivacyImpactAssessmentEngine()\n\n# Register a processing activity for assessment\nactivity = engine.register_processing_activity(\n    name=\"Customer Analytics Platform\",\n    description=\"Collects browsing behavior and purchase history for personalization\",\n    data_controller=\"Acme Corp\",\n    data_processor=\"CloudAnalytics Inc\",\n    data_categories=[\"browsing_history\", \"purchase_records\", \"ip_address\", \"device_id\"],\n    data_subjects=[\"customers\", \"website_visitors\"],\n    legal_basis=\"consent\",\n    retention_period_days=730,\n    cross_border_transfer=True,\n    transfer_destinations=[\"US\", \"IN\"],\n    automated_decision_making=True,\n)\nprint(f\"Registered activity: {activity['activity_id']}\")\n```\n\n### Phase 2: Data Flow Mapping\n\nMap all data flows from collection to deletion, identifying every touchpoint,\ntransformation, and storage location. This reveals hidden privacy risks in data\nmovement across systems.\n\n```python\n# Build the data flow map\nflow_map = engine.map_data_flows(\n    activity_id=activity[\"activity_id\"],\n    flows=[\n        {\n            \"stage\": \"collection\",\n            \"source\": \"Web browser cookie + form submission\",\n            \"destination\": \"CDN edge server\",\n            \"data_elements\": [\"ip_address\", \"device_id\", \"browsing_history\"],\n            \"encryption_in_transit\": True,\n            \"protocol\": \"TLS 1.3\",\n        },\n        {\n            \"stage\": \"processing\",\n            \"source\": \"CDN edge server\",\n            \"destination\": \"Analytics data warehouse (US-East)\",\n            \"data_elements\": [\"browsing_history\", \"purchase_records\", \"device_id\"],\n            \"encryption_in_transit\": True,\n            \"encryption_at_rest\": True,\n            \"protocol\": \"mTLS\",\n        },\n        {\n            \"stage\": \"storage\",\n            \"source\": \"Analytics data warehouse\",\n            \"destination\": \"S3 encrypted bucket\",\n            \"data_elements\": [\"browsing_history\", \"purchase_records\"],\n            \"encryption_at_rest\": True,\n            \"retention_days\": 730,\n            \"access_controls\": \"IAM role-based, MFA required\",\n        },\n        {\n            \"stage\": \"sharing\",\n            \"source\": \"Analytics data warehouse\",\n            \"destination\": \"Third-party ML provider (IN)\",\n            \"data_elements\": [\"browsing_history\", \"purchase_records\"],\n            \"encryption_in_transit\": True,\n            \"data_processing_agreement\": True,\n            \"cross_border\": True,\n        },\n        {\n            \"stage\": \"deletion\",\n            \"source\": \"S3 bucket + data warehouse\",\n            \"destination\": \"Secure erasure\",\n            \"method\": \"Cryptographic erasure + lifecycle policy\",\n            \"verification\": \"Automated deletion audit log\",\n        },\n    ],\n)\nengine.render_data_flow_diagram(flow_map)\n```\n\n### Phase 3: Privacy Risk Assessment with Scoring Matrix\n\nApply a structured risk scoring methodology evaluating likelihood and impact\nacross multiple privacy risk dimensions. The matrix aligns with both the\nNIST PRAM and ICO DPIA risk assessment approaches.\n\n```python\n# Run the risk assessment\nrisk_report = engine.assess_privacy_risks(\n    activity_id=activity[\"activity_id\"],\n    assessment_type=\"full_dpia\",\n)\n\n# Display risk matrix results\nfor risk in risk_report[\"risks\"]:\n    print(f\"[{risk['severity']}] {risk['category']}: {risk['description']}\")\n    print(f\"  Likelihood: {risk['likelihood']}\u002F5 | Impact: {risk['impact']}\u002F5 | Score: {risk['risk_score']}\u002F25\")\n    print(f\"  Mitigation: {risk['recommended_mitigation']}\")\n```\n\nRisk categories evaluated include:\n1. **Data Minimization** -- Excessive collection beyond stated purpose\n2. **Purpose Limitation** -- Secondary use without legal basis\n3. **Cross-Border Transfer** -- Transfers without adequate safeguards (SCCs, BCRs)\n4. **Automated Decision Making** -- Profiling without human oversight or appeal\n5. **Data Subject Rights** -- Inability to fulfill access\u002Ferasure\u002Fportability requests\n6. **Third-Party Risk** -- Processor compliance gaps, subprocessor chains\n7. **Security Controls** -- Encryption, access control, breach response gaps\n8. **Retention** -- Storing data beyond necessity or legal requirement\n9. **Consent Management** -- Invalid or ambiguous consent mechanisms\n10. **Breach Notification** -- Inability to detect and notify within 72 hours (GDPR)\n\n### Phase 4: GDPR and CCPA\u002FCPRA Alignment Checks\n\nRun automated compliance checks against specific regulatory requirements.\nThe engine maps each processing activity against article-level GDPR obligations\nand CCPA\u002FCPRA consumer rights requirements.\n\n```python\n# GDPR compliance check\ngdpr_report = engine.check_gdpr_compliance(activity_id=activity[\"activity_id\"])\nprint(f\"GDPR Score: {gdpr_report['compliance_score']}\u002F100\")\nfor finding in gdpr_report[\"findings\"]:\n    print(f\"  [{finding['status']}] Art.{finding['article']}: {finding['description']}\")\n\n# CCPA\u002FCPRA compliance check\nccpa_report = engine.check_ccpa_compliance(activity_id=activity[\"activity_id\"])\nprint(f\"CCPA Score: {ccpa_report['compliance_score']}\u002F100\")\nfor finding in ccpa_report[\"findings\"]:\n    print(f\"  [{finding['status']}] Sec.{finding['section']}: {finding['description']}\")\n```\n\n### Phase 5: Remediation Plan and Report Generation\n\nGenerate a prioritized remediation plan with specific action items, responsible\nparties, deadlines, and generate the formal PIA\u002FDPIA report document.\n\n```python\n# Generate remediation plan\nremediation = engine.generate_remediation_plan(\n    activity_id=activity[\"activity_id\"],\n    risk_report=risk_report,\n    gdpr_report=gdpr_report,\n    ccpa_report=ccpa_report,\n)\n\nfor item in remediation[\"action_items\"]:\n    print(f\"[{item['priority']}] {item['action']}\")\n    print(f\"  Owner: {item['owner']} | Deadline: {item['deadline']}\")\n    print(f\"  Addresses: {', '.join(item['addresses_risks'])}\")\n\n# Generate formal DPIA report\nengine.generate_dpia_report(\n    activity_id=activity[\"activity_id\"],\n    output_path=\"dpia_report_customer_analytics.json\",\n    format=\"json\",\n)\nprint(\"[+] DPIA report generated\")\n```\n\n## Examples\n\n### Quick Screening Assessment\n\nDetermine whether a full DPIA is required using the ICO screening checklist:\n\n```python\nengine = PrivacyImpactAssessmentEngine()\n\nscreening = engine.run_screening_checklist(\n    uses_special_category_data=False,\n    large_scale_processing=True,\n    systematic_monitoring=True,\n    automated_decision_making=True,\n    cross_border_transfer=True,\n    vulnerable_data_subjects=False,\n    innovative_technology=True,\n    denial_of_service_or_rights=False,\n)\nprint(f\"DPIA Required: {screening['dpia_required']}\")\nprint(f\"Triggers: {screening['triggers']}\")\n# Output: DPIA Required: True\n# Triggers: ['large_scale_processing', 'systematic_monitoring',\n#            'automated_decision_making', 'cross_border_transfer',\n#            'innovative_technology']\n```\n\n### Batch Assessment of Multiple Processing Activities\n\n```python\nengine = PrivacyImpactAssessmentEngine()\n\nactivities = [\n    {\"name\": \"Email Marketing\", \"data_categories\": [\"email\", \"name\"],\n     \"legal_basis\": \"consent\", \"cross_border_transfer\": False},\n    {\"name\": \"HR Analytics\", \"data_categories\": [\"employee_id\", \"performance_scores\",\n     \"health_data\"], \"legal_basis\": \"legitimate_interest\", \"cross_border_transfer\": True},\n    {\"name\": \"Fraud Detection\", \"data_categories\": [\"transaction_data\", \"ip_address\",\n     \"device_fingerprint\"], \"legal_basis\": \"legitimate_interest\",\n     \"automated_decision_making\": True, \"cross_border_transfer\": False},\n]\n\nfor act_def in activities:\n    activity = engine.register_processing_activity(**act_def)\n    risk = engine.assess_privacy_risks(activity_id=activity[\"activity_id\"])\n    print(f\"{act_def['name']}: Overall Risk={risk['overall_risk_level']} \"\n          f\"({risk['risk_count_by_severity']})\")\n```\n\n### NIST Privacy Framework Profile Mapping\n\n```python\nengine = PrivacyImpactAssessmentEngine()\n\nprofile = engine.generate_nist_privacy_profile(\n    activity_id=activity[\"activity_id\"],\n    target_tier=\"tier_3\",  # Repeatable\n)\n\nfor function_id, outcomes in profile[\"functions\"].items():\n    print(f\"\\n{function_id}:\")\n    for outcome in outcomes:\n        status = \"PASS\" if outcome[\"implemented\"] else \"GAP\"\n        print(f\"  [{status}] {outcome['subcategory']}: {outcome['description']}\")\n```\n",{"name":5,"tags":57,"author":64,"domain":44,"license":15,"version":65,"nist_csf":66,"subdomain":70,"description":71,"mitre_attack":72},[33,58,59,60,49,61,62,63],"impact-assessment","GDPR","CCPA","DPIA","data-flow-mapping","risk-scoring","mukul975","1.0",[67,68,69],"GV.PO-01","PR.DS-01","GV.OC-05","privacy-compliance","Automates the Privacy Impact Assessment (PIA) workflow including data flow mapping, privacy risk scoring matrices, GDPR Article 35 DPIA and CCPA\u002FCPRA alignment checks, data inventory cataloging, and remediation tracking. Implements the NIST Privacy Framework PRAM methodology and ICO DPIA guidance for systematic identification and mitigation of privacy risks across processing activities. Use when conducting privacy assessments for new systems, evaluating regulatory compliance posture, or building automated privacy governance programs.\n",[73,74,75],"T1078","T1190","T1059","main","7925716f065257435fdb12e97f7e52842147d5ad",".claude\u002Fskills\u002Fperforming-privacy-impact-assessment","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude","https:\u002F\u002Fclaude.com\u002Fclaude-code","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho","Software · Applied AI · Quantitative Modeling · Building with Claude.","2026-06-10 12:24:46",{"source":8,"skillName":5,"commands":85,"prompt":95,"zipAvailable":96},[86,89,92],{"tool":87,"command":88},"npx","npx skills add henriquescastilho\u002Fmy-claude --skill performing-privacy-impact-assessment",{"tool":90,"command":91},"bunx","bunx skills add henriquescastilho\u002Fmy-claude --skill performing-privacy-impact-assessment",{"tool":93,"command":94},"pnpm","pnpm dlx skills add henriquescastilho\u002Fmy-claude --skill performing-privacy-impact-assessment","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fperforming-privacy-impact-assessment\u002FSKILL.md",true,[98,103,109],{"path":99,"resourceType":99,"resourceTypeDesc":100,"sizeBytes":101,"sourceHtmlUrl":102},"LICENSE","许可证",11255,"https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fperforming-privacy-impact-assessment\u002FLICENSE",{"path":104,"resourceType":105,"resourceTypeDesc":106,"sizeBytes":107,"sourceHtmlUrl":108},"references\u002Fapi-reference.md","REFERENCE","参考文档",7597,"https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fperforming-privacy-impact-assessment\u002Freferences\u002Fapi-reference.md",{"path":110,"resourceType":111,"resourceTypeDesc":112,"sizeBytes":113,"sourceHtmlUrl":114},"scripts\u002Fagent.py","SCRIPT","脚本",64215,"https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fperforming-privacy-impact-assessment\u002Fscripts\u002Fagent.py",[116,155,164,173,195,221],{"skillNo":117,"name":118,"nameZh":6,"description":119,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":120,"licenseFileUrl":6,"sourceHtmlUrl":121,"categories":122,"keywords":135,"publishedAt":52},"01M6F0B6XPQ65AX2X0DWK8KT3E","markitdown","Convert files and office documents to Markdown. Supports PDF, DOCX, PPTX, XLSX, images (with OCR), audio (with transcription), HTML, CSV, JSON, XML, ZIP, YouTube URLs, EPubs and more.","MIT","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.codex\u002Fvendor_imports\u002Fclaude\u002Fmarketplaces\u002Fclaude-scientific-writer\u002Fskills\u002Fmarkitdown\u002FSKILL.md",[123,126,129,132],{"categoryNo":124,"categoryName":125,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000002","文档处理",{"categoryNo":127,"categoryName":128,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000003","演示文稿",{"categoryNo":130,"categoryName":131,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000004","电子表格",{"categoryNo":133,"categoryName":134,"taxonomyType":26,"taxonomyTypeDesc":27},"01JBSEEDCAT000000000000034","行政与办公人员",[118,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154],"docx","PDF","pptx","xlsx","documents","csv","ocr","Audio","Bash","markdown","convert","read","write","edit","html","images","files","youtube","with",{"skillNo":156,"name":118,"nameZh":6,"description":119,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":120,"licenseFileUrl":6,"sourceHtmlUrl":157,"categories":158,"keywords":163,"publishedAt":52},"01M6F06SBHR9F0SDWE282Y8075","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.codex\u002Fvendor_imports\u002Fclaude\u002Fmarketplaces\u002Fclaude-scientific-writer\u002Fscientific_writer\u002F.claude\u002Fskills\u002Fmarkitdown\u002FSKILL.md",[159,160,161,162],{"categoryNo":124,"categoryName":125,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":127,"categoryName":128,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":130,"categoryName":131,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":133,"categoryName":134,"taxonomyType":26,"taxonomyTypeDesc":27},[118,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154],{"skillNo":165,"name":118,"nameZh":6,"description":119,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":120,"licenseFileUrl":6,"sourceHtmlUrl":166,"categories":167,"keywords":172,"publishedAt":52},"01M6F02D4R14EJAPBWVDF9J9VQ","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.codex\u002Fvendor_imports\u002Fclaude\u002Fmarketplaces\u002Fclaude-scientific-writer\u002F.claude\u002Fskills\u002Fmarkitdown\u002FSKILL.md",[168,169,170,171],{"categoryNo":124,"categoryName":125,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":127,"categoryName":128,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":130,"categoryName":131,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":133,"categoryName":134,"taxonomyType":26,"taxonomyTypeDesc":27},[118,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154],{"skillNo":174,"name":175,"nameZh":6,"description":176,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":120,"licenseFileUrl":6,"sourceHtmlUrl":177,"categories":178,"keywords":179,"publishedAt":52},"01M6F000KS6YB4MKS774G4R8ND","zarr-python","Chunked N-D arrays for cloud storage. Compressed arrays, parallel I\u002FO, S3\u002FGCS integration, NumPy\u002FDask\u002FXarray compatible, for large-scale scientific computing pipelines.","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.codex\u002Fvendor_imports\u002Fclaude\u002Fmarketplaces\u002Fclaude-scientific-skills\u002Fscientific-skills\u002Fzarr-python\u002FSKILL.md",[],[180,181,182,183,184,185,186,187,188,189,190,191,192,193,194],"python","zarr python","storage","integration","s3","gcs","cloud","dask","parallel","pipelines","arrays","numpy","scientific computing","scale","scientific",{"skillNo":196,"name":197,"nameZh":6,"description":198,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":120,"licenseFileUrl":6,"sourceHtmlUrl":199,"categories":200,"keywords":202,"publishedAt":52},"01M6EZZJWFXM1GR78KTW6J0DN8","what-if-oracle","Run structured What-If scenario analysis with multi-branch possibility exploration. Use this skill when the user asks speculative questions like \"what if...\", \"what would happen if...\", \"what are the possibilities\", \"explore scenarios\", \"scenario analysis\", \"possibility space\", \"what could go wrong\", \"best case \u002F worst case\", \"risk analysis\", \"contingency planning\", \"strategic options\", or any question about uncertain futures. Also trigger when the user faces a fork-in-the-road decision, wants to stress-test an idea, or needs to think through consequences before committing.","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.codex\u002Fvendor_imports\u002Fclaude\u002Fmarketplaces\u002Fclaude-scientific-skills\u002Fscientific-skills\u002Fwhat-if-oracle\u002FSKILL.md",[201],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[203,204,205,206,207,208,209,210,211,212,213,147,148,214,215,216,217,218,219,220],"oracle","what if oracle","go","run","ux","futures","analysis","explore","decision","branch","question","idea","exploration","options","stress-test","strategies","scenario","stress",{"skillNo":222,"name":223,"nameZh":6,"description":224,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":120,"licenseFileUrl":6,"sourceHtmlUrl":225,"categories":226,"keywords":237,"publishedAt":52},"01M6EZZCXAEB49RXGQCJX5E8GB","venue-templates","Access comprehensive LaTeX templates, formatting requirements, and submission guidelines for major scientific publication venues (Nature, Science, PLOS, IEEE, ACM), academic conferences (NeurIPS, ICML, CVPR, CHI), research posters, and grant proposals (NSF, NIH, DOE, DARPA). This skill should be used when preparing manuscripts for journal submission, conference papers, research posters, or grant proposals and need venue-specific formatting requirements and templates.","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.codex\u002Fvendor_imports\u002Fclaude\u002Fmarketplaces\u002Fclaude-scientific-skills\u002Fscientific-skills\u002Fvenue-templates\u002FSKILL.md",[227,230,233,234],{"categoryNo":228,"categoryName":229,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000018","写作与文案",{"categoryNo":231,"categoryName":232,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000021","资料检索与研究",{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":235,"categoryName":236,"taxonomyType":26,"taxonomyTypeDesc":27},"01JBSEEDCAT000000000000036","内容创作者",[238,239,240,241,242,243,244,245,144,246,147,148,149,247,248,249,250,251,194,252],"templates","venue templates","research","guidelines","NeurIPS","ICML","LaTeX","science","access","proposals","Academic","requirements","formatting","journal","chi"]