vendor-privacy-policy-first-pass

What problem does it solve?

This Skill helps you quickly assess a vendor’s published privacy policy to determine whether the policy contains meaningful red flags that should pause procurement or trigger deeper privacy diligence.

Core Features & Use Cases

• Fast first-pass triage report: Produces a short, structured assessment of the policy’s stated practices across collection, use, sharing, retention, transfers, rights, security, children’s data, and AI/ML.
• Red-flag identification with escalation guidance: Highlights high-stakes issues (especially AI/ML training and CCPA-style sale/sharing posture) with a severity rubric and recommended next actions.
• Procurement-appropriate output: Calibrates severity using optional context (expected data to share and applicable regimes) and explicitly keeps scope to “first pass,” not full privacy assessment or compliance certification.

Quick Start

Use the vendor-privacy-policy-first-pass skill on the attached vendor privacy policy text or file and include your vendor_context and applicable_regimes if you want severity calibrated to your use case.