Privacy Impact Assessment Guide

What it does

This skill transforms raw processing context, data inventory, and system architectures into professional privacy impact assessments (PIA) and data protection impact assessments (DPIA). It guides the user through the complex process of identifying privacy risks, mapping data flows from collection to deletion, and building audit-ready documentation for regulatory compliance.

High-Level Logic

The skill acts as a privacy architect. It collects inputs on data subjects, categories, and purposes, then layers these against your chosen regulatory framework (e.g., GDPR, CCPA/CPRA, NIST) to generate structured outputs. It automatically flags high-risk activities like cross-border transfers or automated decision-making while maintaining a strict boundary against providing unauthorized legal advice.

Why use this skill

• Beyond Simple Prompting: While a standard AI might give generic advice, this skill follows a rigorous assessment workflow, ensuring no data lifecycle stage (storage, sharing, retention) is overlooked.
• Audit Readiness: It generates structured risk registers and remediation plans that use professional privacy terminology and clear accountability markers.
• Framework Agnostic: It adapts to your specific jurisdiction or internal organizational standards rather than assuming a "one size fits all" approach.

Supported Outputs

Users receive structured markdown or text reports including PIA screenings, processing activity profiles, data flow summaries, remediation trackers, and evidence checklists for internal stakeholders or regulators.