agency-data-privacy-officer

To conduct a data protection impact assessment (DPIA), this skill guides you through identifying privacy risks, determining necessary controls, and validating the lawful basis for processing activities before feature deployment.

The 72-hour breach notification process requires assessing the breach scope, documenting the incident, and notifying the relevant supervisory authority within 72 hours of becoming aware of a personal data breach.

You need to perform a DPIA when launching features that collect user location data or conduct large-scale tracking, ensuring you identify required privacy controls and establish a valid lawful basis beforehand.

Maintaining Article 30 records involves structured data mapping to document processing activities, purposes of processing, data sharing, and retention schedules, ensuring organizational adherence to regulatory record-keeping requirements.

Yes, this skill operationalizes both GDPR and CCPA frameworks by providing strategic advisory guidance, facilitating breach response protocols, and managing data subject rights fulfillment workflows across global privacy regulations.

Privacy-by-design is embedding data protection measures into product development from the outset. This skill provides structured frameworks to ensure organizational adherence to these principles throughout the development lifecycle.