data-governance-privacy

What problem does it solve?

Make sure every byte of user data is classified, justified by a lawful basis, retained no longer than necessary, and auditable end-to-end. This skill produces the classification, the PIA, and the retention rules, and enables downstream skills to enforce them.

Core Features & Use Cases

• Data classification and tagging for fields, datasets, and storage layers to drive policy enforcement.
• Privacy Impact Assessments (PIA) generation, risk evaluation, and mitigation planning.
• Lawful basis selection, minimisation decisions, and retention policy configuration across stores.
• Deletion and erasure workflows, SAR handling, and data-portability support.
• Cross-border transfer guidance and EU AI Act / transparency considerations for AI-enabled data processing.
• Output artefacts: data classification table, completed PIA, retention register, and SAR/erasure workflows; reference documents to update public policies and design docs.

Quick Start

Configure a privacy-by-design plan for a new feature that collects or processes user data.