pia-generation

A privacy impact assessment is required when a new feature or processing activity triggers mandatory regime-specific thresholds. This Skill validates necessity by checking configured assessment triggers and jurisdiction-specific requirements with primary-source citations before generating documentation.

To generate a privacy impact assessment, provide the feature name or processing description. The Skill guides intake for data categories, purposes, lawful-basis checks, sharing, and retention, then outputs a structured, review-ready document formatted for attorney sign-off.

Yes, a privacy impact assessment includes structured risk-and-mitigation tables with named owners. The Skill produces these alongside jurisdiction-aware research, privacy policy consistency diffs, and a sign-off recommendation suitable for attorney review.

Yes, this privacy impact assessment checks privacy policy compliance by cross-referencing the documented data processing flow against existing policies. It generates consistency diffs to highlight any gaps between the new feature and current privacy statements.

The best way to document lawful basis and data retention in a legal workflow is through a structured privacy impact assessment. This Skill captures those specific data categories and regime checks, reconciling them with prior outputs to ensure consistent legal documentation across features.