pia-generation

A privacy impact assessment is needed when a new feature or processing activity triggers internal or jurisdiction-specific mandatory assessment requirements, which this Skill evaluates by comparing your activity against regime-specific triggers with cited primary sources.

You generate a privacy impact assessment in your company's format by loading your internal PIA structure and shared guardrails, then the Skill produces a structured assessment including data flow, lawful basis checks, and risks with mitigations.

A structured privacy impact assessment output includes data flow mapping, lawful basis and regime checks, privacy policy consistency analysis, specific risks with likelihood and impact, mitigation owners, and a next-steps recommendation for sign-off routing.

Yes, you can reconcile a new privacy impact assessment with prior triage and prior PIA outputs for the same or overlapping activity, allowing the Skill to flag privacy policy consistency issues and mismatches before launch.

Jurisdiction analysis for privacy impact assessments works by performing a jurisdiction-aware determination of whether a PIA is needed, citing primary sources and surfacing uncertainty when internal triggers intersect with regime-specific mandatory assessment triggers.

Automated privacy risk assessment generation produces a draft structured assessment ready for attorney review, but it does not replace legal decision-making, as the output explicitly requires attorney sign-off routing for final conditions and launch approval.