Security
cyber-incident-response-72h
Structured immediate response for active cyber incidents — hacker attacks, ransomware, data exfiltration, insider threats. Phase 1: immediate containment, network isolation, forens…
Security
dsv-beweissicherung
Structures evidence preservation after a data-protection incident to keep materials admissible in administrative, criminal, or civil proceedings. Covers chain of custody, secure lo…
Security
dsar-response-anthropics
Walks through a Data Subject Access Request (or deletion, portability, correction request) and drafts the response — verifies identity, locates data system-by-system, assesses exem…
Security
gdpr-valid-consent
Guide for implementing GDPR-valid consent under Article 7 conditions and Article 4(11) definition. Covers five core requirements: freely given, specific, informed, unambiguous, and…
Security
rodo-ropa-dpa-pl
Builds and validates Polish RoPA registers (art. 30) for controllers and processors while reviewing DPAs (art. 28) for mandatory clauses on instructions, confidentiality, security,…
General
klauselvorschlaege
Supply modular contract clause templates covering confidentiality, §§ 203-204 StGB instructions, subcontractor terms, no-training clauses, zero-retention policies, EU hosting, audi…
Security
analyse-dpa-fournisseur-hugo-salard
Systematic DPA audit against GDPR Art. 28, EDPB guidelines 07/2020 & 02/2024, 2021 SCCs, post-Schrems II recommendations, and the EU AI Act. Delivers clause-by-clause diagnostics (…
Security
dsv-meldung-hmbbfdi
Prepares and submits GDPR Art. 33 breach notifications to Hamburg’s data protection authority (HmbBfDI). Covers online forms and postal filing, required fields in Berliner Goldstan…
Security
managing-consent-for-research
Guide for managing consent for scientific research under GDPR Article 89 and Recital 33 broad consent provisions. Covers ethical review board coordination, purpose evolution manage…
Security
kirchliche-datenschutzaufsicht-sanktionen
Analyzes ecclesiastical data protection oversight under KDG and DSG-EKD, including supervisory authorities, ecclesiastical courts, and sanction mechanisms. Maps GDPR Articles 58 an…
Security
interne-untersuchung-legal-hold
Organizes internal investigations and legal holds: secures documents, emails, tickets, logs, and backups while preparing data-protection notices and executive summaries. References…
General
avv-haftung-risikoallokation-art-82-dsgvo
Addresses liability allocation, risk distribution, and liability caps in AVVs under Art. 82 GDPR. Covers external liability to data subjects, internal recourse between controller a…
Business
zeugeninterviews-mitarbeiter
Conducts employee interviews in sanctions proceedings with proper warnings, works council involvement, data protection, right to silence, and conflict assessment. References GDPR A…
Business
behoerdenstrategie-kooperation-oder-schweigen
Weigh cooperation versus silence in regulatory matters: assess cooperation benefits, Art. 83 mitigation, right to silence, scope expansion, and follow-on claims. Reference GDPR Art…
Security
dsar-intake-system
Builds a multi-channel DSAR intake system supporting web form, email, phone, and in-person requests with identity verification tiers, automated routing logic, SLA tracking, and res…
Security
avv-eu-us-data-privacy-framework-bezug
Handles EU-US Data Privacy Framework (DPF) provisions in data processing agreements. Covers EU Commission adequacy decision of 10.07.2023, self-certification requirements, listing …
Business
sap-successfactors-hr-process-risk-review
Reviews SAP SuccessFactors HR process risks including Employee Central data integrity, role-based permissions, org management, hire-to-retire controls, payroll integration, GDPR/PI…
Security
dsv-meldung-uld-sh
Prepares and submits Article 33 GDPR breach notifications to Schleswig-Holstein’s ULD data protection authority. Outputs a ready-to-file notification as continuous text with submis…
General
schlussmemo-und-lessons-learned
Documents final memos and lessons learned covering enforceability, conditions, follow-ups, training, D&O, follow-on claims, and compliance remediation. References GDPR Arts. 58, 77…
Security
managing-consent-for-children
Guide for managing consent for children's personal data under GDPR Article 8 and COPPA. Covers parental consent mechanisms, age verification methods, country-specific age threshold…
Security
rechtssicherheit
Scans Android apps for legal and compliance risks including GDPR, CCPA, DSA, AI Act, and Play Store policies. Performs full code and manifest analysis against current regulatory re…
Business
einstweilige-anordnung-123-vwgo-datenschutz
Creates interim injunctions under § 123 VwGO for provisional relief in data-protection cases involving inaction, toleration, or non-standard challenges. Anchors to GDPR Arts. 58/77…
Security
besondere-datenkategorien-art-9
Assess special-category data under Art. 9 GDPR (health, biometric, religious, political, employee data) as an aggravating factor. Reference DSGVO Arts. 58 & 77–84, BDSG § 41, OWiG …
General
avv-konzern-und-multi-party-konstellation
Manages AVVs in corporate groups and multi-party setups. Covers group-wide agreements with central IT and shared service centers, consolidated processor lists, and whether the grou…
General
datentraeger-rueckgabe
Manages return of storage media, customer lists, business records, and digital access credentials upon contract termination under § 88 HGB and § 667 BGB. Covers scope of disclosure…
Research
art-58-anordnung-verwaltungsakt
Examines Art. 58 GDPR orders as administrative acts—warnings, prohibitions, deletions, and transfer bans—under administrative court review. Anchors in GDPR Arts. 58/77-84, BDSG §41…
Security
avv-grenzpruefung-datenschutz
Defines the interface between data protection law and professional rules. Checks whether an Art. 28 GDPR processing agreement exists and clarifies that AVV review does not replace …
Security
unverhaeltnismaessigkeit-und-existenzgefahr
Balances proportionality against existential risk: weighs liquidity, equity, insolvency proximity, jobs, and installments versus deterrence. References GDPR Arts. 58/77-84, BDSG §4…
Security
verdacht-vs-festgestellt
Evaluates whether a client already has knowledge of a GDPR Article 33(1) infringement or if only suspicion exists. Covers the distinction between suspicion and confirmed knowledge,…
Business
workflow-gdpr-implementation-pack
Delivers complete GDPR implementation or remediation, covering twelve phases from data mapping to governance. Supports parallel MENA regimes (UAE/Saudi PDPL) and outputs compliance…
Security
loeschkonzept-und-aufbewahrungsfehler
Structure data deletion concepts and retention violations as fine-risk topics: missing erasure, excessive storage, backups, and statutory duties. Map GDPR Art. 58/77-84, BDSG § 41,…
Business
tia-eu-us-data-privacy-framework-aktueller-stand
Provides current status of the EU-US Data Privacy Framework (DPF) as an Art. 45 GDPR adequacy decision, covering the 2023/1795 implementing decision, Executive Order 14086, listing…
Business
staatsanwaltschaft-im-dsgvo-owig
Explains the public prosecutor's role after case file receipt in DSGVO-OWiG proceedings, including supervisory consent requirements for case closure. Covers judicial competence, ev…
General
gewinnabschoepfung-und-finanzieller-vorteil
Assess financial advantage and disgorgement claims by evaluating benefits, cost savings, causality, estimates, and remediation offsets. Reference GDPR Arts. 58/77-84, BDSG §41, OWi…
Security
dsar-form
Drafts a GDPR- and CCPA-compliant Data Subject Access Request (DSAR) intake form for collecting requester information and processing privacy rights. Use when drafting DSAR forms, p…
Research
anhoerung-55-owig
Prepares responses to § 55 OWiG administrative offense hearings while preserving the right to silence and triggering file access. Anchors on GDPR Arts. 58/77-84, BDSG § 41, OWiG §§…
General
avv-rolemix-getrennt-vs-gemeinsam-verantwortlich
Distinguishes roles under Art. 4(7), Art. 26, and Art. 28 GDPR. Determines when parties act as separate controllers, joint controllers, or controller-processor. Provides a test sch…
Business
behoerdenvergleich-erledigung-und-auflagen
Negotiate authority resolutions: reach informal closures, warnings, conditions, reduced fines, or withdrawals that hold up legally. Reference GDPR Arts. 58/77-84, BDSG §41, OWiG §§…
Security
data-breach-officer
Handles personal data breach response for EU institutions: initial assessment and containment, risk evaluation, 72-hour EDPS notification drafting under Art. 34 EUDPR, data subject…
Security
datenschutz-hris-und-saas-tools
Reviews HRIS/SaaS tools for Berlin startups: checks AVV, TOMs, third-country transfers, access roles, data deletion, and works council requirements. Guides through HR data protecti…
Security
privacidad
Multi-jurisdiction orchestrator for personal data protection audits. Detects applicable laws or accepts explicit jurisdictions via --ley, runs shared Paso 0, delegates to sub-skill…
Security
datenschutz-livecheck-bfdi-laender
Livecheck skill for current BfDI and state data protection authority publications before filing briefs or statements. Runs a seven-question diagnostic on mandate area, supervisory …
Business
anlagen-check-zustellung-redaktion-dsgvo
Validates attachment packages before delivery: completeness (all document references have matching exhibits), readability (OCR quality, no black bars), redaction (GDPR and client c…
General
zwischenverfahren-69-owig
Handles OWiG § 69 intermediate proceedings after objection: tactical withdrawal, further inquiries, or referral via prosecution to court. Maps GDPR Art. 58/77-84, BDSG § 41, OWiG §…
Business
bussgeldbescheid-65-owig-analyse
Analyze § 65 OWiG fine notices: break down tenor, offense, legal basis, reasoning, penalty calculation, service, and remedies. Maps GDPR Arts. 58/77-84, BDSG § 41, OWiG §§ 46/55/66…
General
datenbankrechte-bei-schul-und-hochschuldaten
Handles database rights for educational repositories: §§ 87a-87e UrhG for teaching materials and university archives, § 60a UrhG education exceptions, LMS manufacturer rights, and …
General
fachanwalt-it-recht-orientierung
Maps IT law orientation including FAO requirements, core statutes, typical mandates, and standard literature. Covers IT contract law, SaaS/cloud licensing, DSGVO/BDSG, NIS2, DDG, D…
General
fristverlaengerung-behoerde-ohne-nachteile
Apply for deadline extensions and partial responses to supervisory authorities while avoiding any admission of delay or breach. Assess GDPR Arts. 58/77–84, BDSG §41, OWiG §§46/55/6…
General
selbstbelastungsfreiheit-und-mitwirkungspflichten
Balances self-incrimination protections with mandatory disclosure duties toward regulators in administrative fine proceedings. Evaluates GDPR Articles 58/77-84, BDSG §41, OWiG §§46…
Security
salesforce-marketing-consent-review-skill
Reviews Salesforce marketing consent models, lawful basis, preference centers, suppression integrity, subscriber-key risks, and email authentication (SPF/DKIM/DMARC) across Marketi…
Research
beschlussverfahren-72-owig
Assess whether an administrative fine case under § 72 OWiG qualifies for written resolution by order, evaluating facts, procedural posture, GDPR Art. 58/77-84, BDSG § 41, and relat…
Security
nachmeldung-aktualisierung-art-33-abs-4
Generates a follow-up notification under Art. 33(4) GDPR for an initial breach report, covering the 14-day Berlin deadline, data category updates, affected persons count correction…
Business
verarbeitungsverzeichnis-vvt-generator
Generates a register of processing activities (VVT) per Art. 30 GDPR with separate content requirements for controllers and processors. Extracts data from AVV records and DSFA, man…
General
avv-loeschung-rueckgabe-nach-vertragsende
Covers mandatory deletion or return of personal data after contract termination per Art. 28(3)(g) GDPR. Addresses controller choice, format, proof, retention exceptions, and backup…
Security
normenkollision-geheimnisse-und-datenschutzaufsicht
Protects trade secrets, client confidentiality, banking secrecy, and social data when submitting materials to data protection authorities. Evaluates GDPR Arts. 58/77-84, BDSG § 41,…
Security
wisp
Creates a Written Information Security Program meeting Massachusetts 201 CMR 17.00 plus GDPR, CCPA, HIPAA, GLBA, and PCI-DSS requirements. Generates board-ready documentation cover…
Security
marketing-analytics-dpia
Guides DPIA for marketing profiling, behavioural targeting, cross-device tracking, and advertising analytics. Covers ePrivacy Directive cookie consent, PECR regulations, legitimate…
Security
durchsuchung-beschlagnahme-und-datenzugriff
Prepares for extreme regulatory and law-enforcement access to servers, communications, client files, and trade secrets. Covers GDPR Arts. 58/77-84, BDSG §41, OWiG §§46/55/66-72, St…
Productivity
mandanteninterview-ohne-selbstbelastung
Gathers facts in client interviews while avoiding self-incrimination, excess disclosures, or premature judgments. References GDPR Arts. 58/77-84, BDSG §41, OWiG §§46/55/66-72, and …
Security
security-grc
Delivers CISO-level GRC for SaaS: builds policies, risk assessments, compliance matrices, and audit artifacts across ISO 27001, SOC 2, PCI DSS, GDPR, HIPAA, FedRAMP and regional fr…
Showing the top 60 of 1,085. See the full list →