pia-generation

Generate a privacy impact assessment by providing a feature description or PRD to receive a structured draft covering lawful bases, data flows, retention, risks, mitigations, and a sign-off decision tree. The output applies configured house style and regulatory triggers.

A privacy review is needed when introducing new features or processing activities that require evaluating regulatory assessment triggers, data subject rights, and policy consistency. The assessment determines if mandatory regulatory submissions or attorney review are required.

Conduct regulatory compliance research by identifying mandatory assessment triggers and requiring current, source-attributed legal research for applicable privacy regimes. The assessment reconciles prior triage outputs and routes consequential regulatory submissions for attorney review.

Document data flows and lawful bases by applying the PIA workflow to evaluate access, sharing, retention, and data subject rights. The structured output assigns named mitigation owners and checks privacy policy consistency before sign-off.

Yes, use a PRD to draft a privacy risk analysis that evaluates specific privacy risks, assigns mitigation owners, and establishes a sign-off decision tree. The output reconciles prior triage and ensures policy consistency.

Attorney review is required for consequential regulatory submissions before submitting an assessment to a regulator. The workflow routes these submissions for attorney sign-off and ensures current, source-attributed legal research supports applicable privacy regimes.