What problem does it solve?
Helps engineering teams identify and remediate personal data risks across applications, APIs, and databases by providing a structured privacy-by-design workflow and validation guidance to prevent PII leakage, enforce retention policies, and produce auditable evidence.
Core Features & Use Cases
- Data Mapping & Classification: Identify personal data classes, flows, and processing purposes across services and storage.
- Controls Implementation: Recommend and validate minimization, masking, encryption, and least-privilege access patterns.
- Retention & Auditability: Define retention and deletion behaviors with auditable evidence and verification steps.
- Testing & Reporting: Add privacy-focused tests for tenant isolation and sensitive-data leakage and report residual compliance risks with owners and deadlines.
- Use Case: When updating an API that handles customer profiles, map PII exposure, apply masking and encryption, add retention policies, and produce a compliance remediation plan with validation checks.
Quick Start
Use the privacy-compliance-engineer skill to map personal data flows in the codebase, recommend controls, and produce a prioritized remediation and validation plan.
