privacy-compliance

GDPR, CCPA, and LGPD compliance requires mapping lawful bases for data processing, implementing consent management, defining data retention policies, and establishing data subject rights workflows. This Skill provides guidance on regulatory requirements, implementation patterns, and compliance checklists tailored to each jurisdiction so you can operationalize privacy controls across your organization.

GDPR lawful bases determine when you can process personal data; data subject rights—access, erasure, portability—define what individuals can request. This Skill details each lawful basis category, maps them to common use cases, and outlines workflows to handle access, deletion, and portability requests operationally.

Consent management captures explicit user permission before processing personal data and maintains audit trails for regulatory proof. This Skill provides implementation patterns, consent policy templates, and data models for recording consent choices, ensuring your system meets GDPR and CCPA consent requirements.

A privacy compliance checklist verifies that data handling practices meet regulatory standards across collection, storage, and retention. This Skill delivers a comprehensive checklist spanning privacy policy publication, breach notification processes, vendor DPA alignment, and data minimization controls to systematically audit your application.

Breach notification readiness requires documented procedures to detect, report, and communicate incidents within regulatory timelines. Vendor compliance involves Data Processing Agreements that align third-party processors with your obligations. This Skill specifies DPA templates, governance artifacts, and breach workflows to meet GDPR and CCPA notification requirements.

Yes; GDPR, CCPA, LGPD, and PIPEDA have distinct requirements and scopes. This Skill compares regulatory summaries for each jurisdiction, identifies overlapping obligations, and guides you on jurisdiction-specific lawful bases, consent rules, and data subject rights so you can tailor implementation to your operational footprint.