[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill-anthropic-compliance-check":3,"mdc--jusb2z-key":31,"related-repo-anthropic-compliance-check":2483,"related-org-anthropic-compliance-check":2600},{"slug":4,"name":4,"fn":5,"description":6,"org":7,"tags":12,"stars":20,"repoUrl":21,"updatedAt":22,"license":23,"forks":24,"topics":25,"repo":26,"sourceUrl":29,"mdContent":30},"compliance-check","assess compliance and regulatory requirements","Run a compliance check on a proposed action, product feature, or business initiative, surfacing applicable regulations, required approvals, and risk areas. Use when launching a feature that touches personal data, when marketing or product proposes something with regulatory implications, or when you need to know which approvals and jurisdictional requirements apply before proceeding.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},"anthropic","Anthropic","https:\u002F\u002Fpexgzepcugksgbtrxkhf.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Forg-logos\u002Fanthropic.png","anthropics",[13,17],{"name":14,"slug":15,"type":16},"Regulatory Compliance","regulatory-compliance","tag",{"name":18,"slug":19,"type":16},"Legal","legal",22885,"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins","2026-04-06T17:55:42.635536",null,2736,[],{"repoUrl":21,"stars":20,"forks":24,"topics":27,"description":28},[],"Open source repository of plugins primarily intended for knowledge workers to use in Claude Cowork","https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Ftree\u002FHEAD\u002Flegal\u002Fskills\u002Fcompliance-check","---\nname: compliance-check\ndescription: Run a compliance check on a proposed action, product feature, or business initiative, surfacing applicable regulations, required approvals, and risk areas. Use when launching a feature that touches personal data, when marketing or product proposes something with regulatory implications, or when you need to know which approvals and jurisdictional requirements apply before proceeding.\nargument-hint: \"\u003Caction or initiative to check>\"\n---\n\n# \u002Fcompliance-check -- Compliance Review\n\n> If you see unfamiliar placeholders or need to check which tools are connected, see [CONNECTORS.md](..\u002F..\u002FCONNECTORS.md).\n\nRun a compliance check on a proposed action, product feature, marketing campaign, or business initiative.\n\n**Important**: This command assists with legal workflows but does not provide legal advice. Compliance assessments should be reviewed by qualified legal professionals. Regulatory requirements change frequently; always verify current requirements with authoritative sources.\n\n## Usage\n\n```\n\u002Fcompliance-check $ARGUMENTS\n```\n\n## What I Need From You\n\nDescribe what you're planning to do. Examples:\n- \"We want to launch a referral program with cash rewards\"\n- \"We're adding biometric authentication to our mobile app\"\n- \"We need to process EU customer data in our US data center\"\n- \"Marketing wants to use customer testimonials in ads\"\n\n## Output\n\n```markdown\n## Compliance Check: [Initiative]\n\n### Summary\n[Quick assessment: Proceed \u002F Proceed with conditions \u002F Requires further review]\n\n### Applicable Regulations and Policies\n| Regulation\u002FPolicy | Relevance | Key Requirements |\n|-------------------|-----------|-----------------|\n| [GDPR \u002F CCPA \u002F HIPAA \u002F etc.] | [How it applies] | [What you need to do] |\n\n### Requirements\n| # | Requirement | Status | Action Needed |\n|---|-------------|--------|---------------|\n| 1 | [Requirement] | [Met \u002F Not Met \u002F Unknown] | [What to do] |\n\n### Risk Areas\n| Risk | Severity | Mitigation |\n|------|----------|------------|\n| [Risk] | [High\u002FMed\u002FLow] | [How to address] |\n\n### Recommended Actions\n1. [Most important action]\n2. [Second priority]\n3. [Third priority]\n\n### Approvals Needed\n| Approver | Why | Status |\n|----------|-----|--------|\n| [Person\u002FTeam] | [Reason] | [Pending] |\n\n### Further Review Recommended\n[Areas where outside counsel or specialist review is advised]\n```\n\n## Privacy Regulation Overview\n\n### GDPR (General Data Protection Regulation)\n\n**Scope**: Applies to processing of personal data of individuals in the EU\u002FEEA, regardless of where the processing organization is located.\n\n**Key Obligations for In-House Legal Teams**:\n- **Lawful basis**: Identify and document lawful basis for each processing activity (consent, contract, legitimate interest, legal obligation, vital interest, public task)\n- **Data subject rights**: Respond to access, rectification, erasure, portability, restriction, and objection requests within 30 days (extendable by 60 days for complex requests)\n- **Data protection impact assessments (DPIAs)**: Required for processing likely to result in high risk to individuals\n- **Breach notification**: Notify supervisory authority within 72 hours of becoming aware of a personal data breach; notify affected individuals without undue delay if high risk\n- **Records of processing**: Maintain Article 30 records of processing activities\n- **International transfers**: Ensure appropriate safeguards for transfers outside EEA (SCCs, adequacy decisions, BCRs)\n- **DPO requirement**: Appoint a Data Protection Officer if required (public authority, large-scale processing of special categories, large-scale systematic monitoring)\n\n**Common In-House Legal Touchpoints**:\n- Reviewing vendor DPAs for GDPR compliance\n- Advising product teams on privacy by design requirements\n- Responding to supervisory authority inquiries\n- Managing cross-border data transfer mechanisms\n- Reviewing consent mechanisms and privacy notices\n\n### CCPA \u002F CPRA (California Consumer Privacy Act \u002F California Privacy Rights Act)\n\n**Scope**: Applies to businesses that collect personal information of California residents and meet revenue, data volume, or data sale thresholds.\n\n**Key Obligations**:\n- **Right to know**: Consumers can request disclosure of personal information collected, used, and shared\n- **Right to delete**: Consumers can request deletion of their personal information\n- **Right to opt-out**: Consumers can opt out of the sale or sharing of personal information\n- **Right to correct**: Consumers can request correction of inaccurate personal information (CPRA addition)\n- **Right to limit use of sensitive personal information**: Consumers can limit use of sensitive PI to specific purposes (CPRA addition)\n- **Non-discrimination**: Cannot discriminate against consumers who exercise their rights\n- **Privacy notice**: Must provide a privacy notice at or before collection describing categories of PI collected and purposes\n- **Service provider agreements**: Contracts with service providers must restrict use of PI to the specified business purpose\n\n**Response Timelines**:\n- Acknowledge receipt within 10 business days\n- Respond substantively within 45 calendar days (extendable by 45 days with notice)\n\n### Other Key Regulations to Monitor\n\n| Regulation | Jurisdiction | Key Differentiators |\n|---|---|---|\n| **LGPD** (Brazil) | Brazil | Similar to GDPR; requires DPO appointment; National Data Protection Authority (ANPD) enforcement |\n| **POPIA** (South Africa) | South Africa | Information Regulator oversight; required registration of processing |\n| **PIPEDA** (Canada) | Canada (federal) | Consent-based framework; OPC oversight; being modernized |\n| **PDPA** (Singapore) | Singapore | Do Not Call registry; mandatory breach notification; PDPC enforcement |\n| **Privacy Act** (Australia) | Australia | Australian Privacy Principles (APPs); notifiable data breaches scheme |\n| **PIPL** (China) | China | Strict cross-border transfer rules; data localization requirements; CAC oversight |\n| **UK GDPR** | United Kingdom | Post-Brexit UK version; ICO oversight; similar to EU GDPR with UK-specific adequacy |\n\n## DPA Review Checklist\n\nWhen reviewing a Data Processing Agreement or Data Processing Addendum, verify the following:\n\n### Required Elements (GDPR Article 28)\n\n- [ ] **Subject matter and duration**: Clearly defined scope and term of processing\n- [ ] **Nature and purpose**: Specific description of what processing will occur and why\n- [ ] **Type of personal data**: Categories of personal data being processed\n- [ ] **Categories of data subjects**: Whose personal data is being processed\n- [ ] **Controller obligations and rights**: Controller's instructions and oversight rights\n\n### Processor Obligations\n\n- [ ] **Process only on documented instructions**: Processor commits to process only per controller's instructions (with exception for legal requirements)\n- [ ] **Confidentiality**: Personnel authorized to process have committed to confidentiality\n- [ ] **Security measures**: Appropriate technical and organizational measures described (Article 32 reference)\n- [ ] **Sub-processor requirements**:\n  - [ ] Written authorization requirement (general or specific)\n  - [ ] If general authorization: notification of changes with opportunity to object\n  - [ ] Sub-processors bound by same obligations via written agreement\n  - [ ] Processor remains liable for sub-processor performance\n- [ ] **Data subject rights assistance**: Processor will assist controller in responding to data subject requests\n- [ ] **Security and breach assistance**: Processor will assist with security obligations, breach notification, DPIAs, and prior consultation\n- [ ] **Deletion or return**: On termination, delete or return all personal data (at controller's choice) and delete existing copies unless legal retention required\n- [ ] **Audit rights**: Controller has right to conduct audits and inspections (or accept third-party audit reports)\n- [ ] **Breach notification**: Processor will notify controller of personal data breaches without undue delay (ideally within 24-48 hours; must enable controller to meet 72-hour regulatory deadline)\n\n### International Transfers\n\n- [ ] **Transfer mechanism identified**: SCCs, adequacy decision, BCRs, or other valid mechanism\n- [ ] **SCCs version**: Using current EU SCCs (June 2021 version) if applicable\n- [ ] **Correct module**: Appropriate SCC module selected (C2P, C2C, P2P, P2C)\n- [ ] **Transfer impact assessment**: Completed if transferring to countries without adequacy decisions\n- [ ] **Supplementary measures**: Technical, organizational, or contractual measures to address gaps identified in transfer impact assessment\n- [ ] **UK addendum**: If UK personal data is in scope, UK International Data Transfer Addendum included\n\n### Practical Considerations\n\n- [ ] **Liability**: DPA liability provisions align with (or don't conflict with) the main services agreement\n- [ ] **Termination alignment**: DPA term aligns with the services agreement\n- [ ] **Data locations**: Processing locations specified and acceptable\n- [ ] **Security standards**: Specific security standards or certifications required (SOC 2, ISO 27001, etc.)\n- [ ] **Insurance**: Adequate insurance coverage for data processing activities\n\n### Common DPA Issues\n\n| Issue | Risk | Standard Position |\n|---|---|---|\n| Blanket sub-processor authorization without notification | Loss of control over processing chain | Require notification with right to object |\n| Breach notification timeline > 72 hours | May prevent timely regulatory notification | Require notification within 24-48 hours |\n| No audit rights (or audit rights only via third-party reports) | Cannot verify compliance | Accept SOC 2 Type II + right to audit upon cause |\n| Data deletion timeline not specified | Data retained indefinitely | Require deletion within 30-90 days of termination |\n| No data processing locations specified | Data could be processed anywhere | Require disclosure of processing locations |\n| Outdated SCCs | Invalid transfer mechanism | Require current EU SCCs (2021 version) |\n\n## Data Subject Request Handling\n\n### Request Intake\n\nWhen a data subject request is received:\n\n1. **Identify the request type**:\n   - Access (copy of personal data)\n   - Rectification (correction of inaccurate data)\n   - Erasure \u002F deletion (\"right to be forgotten\")\n   - Restriction of processing\n   - Data portability (structured, machine-readable format)\n   - Objection to processing\n   - Opt-out of sale\u002Fsharing (CCPA\u002FCPRA)\n   - Limit use of sensitive personal information (CPRA)\n\n2. **Identify applicable regulation(s)**:\n   - Where is the data subject located?\n   - Which laws apply based on your organization's presence and activities?\n   - What are the specific requirements and timelines?\n\n3. **Verify identity**:\n   - Confirm the requester is who they claim to be\n   - Use reasonable verification measures proportionate to the sensitivity of the data\n   - Do not require excessive documentation\n\n4. **Log the request**:\n   - Date received\n   - Request type\n   - Requester identity\n   - Applicable regulation\n   - Response deadline\n   - Assigned handler\n\n### Response Timelines\n\n| Regulation | Initial Acknowledgment | Substantive Response | Extension |\n|---|---|---|---|\n| GDPR | Not specified (best practice: promptly) | 30 days | +60 days (with notice) |\n| CCPA\u002FCPRA | 10 business days | 45 calendar days | +45 days (with notice) |\n| UK GDPR | Not specified (best practice: promptly) | 30 days | +60 days (with notice) |\n| LGPD | Not specified | 15 days | Limited extensions |\n\n### Exemptions and Exceptions\n\nBefore fulfilling a request, check whether any exemptions apply:\n\n**Common exemptions across regulations**:\n- Legal claims defense or establishment\n- Legal obligations requiring retention\n- Public interest or official authority\n- Freedom of expression and information (for erasure requests)\n- Archiving in the public interest or scientific\u002Fhistorical research\n\n**Organization-specific considerations**:\n- Litigation hold: Data subject to a legal hold cannot be deleted\n- Regulatory retention: Financial records, employment records, and other categories may have mandatory retention periods\n- Third-party rights: Fulfilling the request might adversely affect the rights of others\n\n### Response Process\n\n1. Gather all personal data of the requester across systems\n2. Apply any exemptions and document the basis\n3. Prepare response: fulfill the request or explain why (in whole or part) it cannot be fulfilled\n4. If denying (in whole or part): cite the specific legal basis for denial\n5. Inform the requester of their right to lodge a complaint with the supervisory authority\n6. Document the response and retain records of the request and response\n\n## Regulatory Monitoring Basics\n\n### What to Monitor\n\nMaintain awareness of developments in:\n- **Regulatory guidance**: New or updated guidance from supervisory authorities (ICO, CNIL, FTC, state AGs, etc.)\n- **Enforcement actions**: Fines, orders, and settlements that signal regulatory priorities\n- **Legislative changes**: New privacy laws, amendments to existing laws, implementing regulations\n- **Industry standards**: Updates to ISO 27001, SOC 2, NIST frameworks, and sector-specific requirements\n- **Cross-border transfer developments**: Adequacy decisions, SCC updates, data localization requirements\n\n### Monitoring Approach\n\n1. **Subscribe to regulatory authority communications** (newsletters, RSS feeds, official announcements)\n2. **Track relevant legal publications** for analysis of new developments\n3. **Review industry association updates** for sector-specific guidance\n4. **Maintain a regulatory calendar** of known upcoming deadlines, effective dates, and compliance milestones\n5. **Brief the legal team** on material developments that affect the organization's processing activities\n\n### Escalation Criteria\n\nEscalate regulatory developments to senior counsel or leadership when:\n- A new regulation or guidance directly affects the organization's core business activities\n- An enforcement action in the organization's sector signals heightened regulatory scrutiny\n- A compliance deadline is approaching that requires organizational changes\n- A data transfer mechanism the organization relies on is challenged or invalidated\n- A regulatory authority initiates an inquiry or investigation involving the organization\n\n## Tips\n\n1. **Be specific** — \"We want to email all our users\" is better than \"marketing campaign.\"\n2. **Include the geography** — Compliance requirements vary by jurisdiction.\n3. **Mention the data** — What personal data is involved? This drives most compliance requirements.\n",{"data":32,"body":34},{"name":4,"description":6,"argument-hint":33},"\u003Caction or initiative to check>",{"type":35,"children":36},"root",[37,46,65,70,81,88,101,107,112,137,143,784,790,797,807,817,890,899,927,933,942,951,1034,1043,1056,1062,1254,1260,1265,1271,1355,1361,1539,1545,1639,1645,1724,1730,1864,1870,1876,1881,2033,2038,2156,2162,2167,2176,2204,2213,2231,2237,2270,2276,2282,2287,2340,2346,2399,2405,2410,2438,2444,2477],{"type":38,"tag":39,"props":40,"children":42},"element","h1",{"id":41},"compliance-check-compliance-review",[43],{"type":44,"value":45},"text","\u002Fcompliance-check -- Compliance Review",{"type":38,"tag":47,"props":48,"children":49},"blockquote",{},[50],{"type":38,"tag":51,"props":52,"children":53},"p",{},[54,56,63],{"type":44,"value":55},"If you see unfamiliar placeholders or need to check which tools are connected, see ",{"type":38,"tag":57,"props":58,"children":60},"a",{"href":59},"..\u002F..\u002FCONNECTORS.md",[61],{"type":44,"value":62},"CONNECTORS.md",{"type":44,"value":64},".",{"type":38,"tag":51,"props":66,"children":67},{},[68],{"type":44,"value":69},"Run a compliance check on a proposed action, product feature, marketing campaign, or business initiative.",{"type":38,"tag":51,"props":71,"children":72},{},[73,79],{"type":38,"tag":74,"props":75,"children":76},"strong",{},[77],{"type":44,"value":78},"Important",{"type":44,"value":80},": This command assists with legal workflows but does not provide legal advice. Compliance assessments should be reviewed by qualified legal professionals. Regulatory requirements change frequently; always verify current requirements with authoritative sources.",{"type":38,"tag":82,"props":83,"children":85},"h2",{"id":84},"usage",[86],{"type":44,"value":87},"Usage",{"type":38,"tag":89,"props":90,"children":94},"pre",{"className":91,"code":93,"language":44},[92],"language-text","\u002Fcompliance-check $ARGUMENTS\n",[95],{"type":38,"tag":96,"props":97,"children":99},"code",{"__ignoreMap":98},"",[100],{"type":44,"value":93},{"type":38,"tag":82,"props":102,"children":104},{"id":103},"what-i-need-from-you",[105],{"type":44,"value":106},"What I Need From You",{"type":38,"tag":51,"props":108,"children":109},{},[110],{"type":44,"value":111},"Describe what you're planning to do. Examples:",{"type":38,"tag":113,"props":114,"children":115},"ul",{},[116,122,127,132],{"type":38,"tag":117,"props":118,"children":119},"li",{},[120],{"type":44,"value":121},"\"We want to launch a referral program with cash rewards\"",{"type":38,"tag":117,"props":123,"children":124},{},[125],{"type":44,"value":126},"\"We're adding biometric authentication to our mobile app\"",{"type":38,"tag":117,"props":128,"children":129},{},[130],{"type":44,"value":131},"\"We need to process EU customer data in our US data center\"",{"type":38,"tag":117,"props":133,"children":134},{},[135],{"type":44,"value":136},"\"Marketing wants to use customer testimonials in ads\"",{"type":38,"tag":82,"props":138,"children":140},{"id":139},"output",[141],{"type":44,"value":142},"Output",{"type":38,"tag":89,"props":144,"children":148},{"className":145,"code":146,"language":147,"meta":98,"style":98},"language-markdown shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","## Compliance Check: [Initiative]\n\n### Summary\n[Quick assessment: Proceed \u002F Proceed with conditions \u002F Requires further review]\n\n### Applicable Regulations and Policies\n| Regulation\u002FPolicy | Relevance | Key Requirements |\n|-------------------|-----------|-----------------|\n| [GDPR \u002F CCPA \u002F HIPAA \u002F etc.] | [How it applies] | [What you need to do] |\n\n### Requirements\n| # | Requirement | Status | Action Needed |\n|---|-------------|--------|---------------|\n| 1 | [Requirement] | [Met \u002F Not Met \u002F Unknown] | [What to do] |\n\n### Risk Areas\n| Risk | Severity | Mitigation |\n|------|----------|------------|\n| [Risk] | [High\u002FMed\u002FLow] | [How to address] |\n\n### Recommended Actions\n1. [Most important action]\n2. [Second priority]\n3. [Third priority]\n\n### Approvals Needed\n| Approver | Why | Status |\n|----------|-----|--------|\n| [Person\u002FTeam] | [Reason] | [Pending] |\n\n### Further Review Recommended\n[Areas where outside counsel or specialist review is advised]\n","markdown",[149],{"type":38,"tag":96,"props":150,"children":151},{"__ignoreMap":98},[152,186,196,210,220,228,241,278,287,322,330,343,387,396,451,459,472,507,516,567,575,588,602,616,630,638,651,685,694,754,762,775],{"type":38,"tag":153,"props":154,"children":157},"span",{"class":155,"line":156},"line",1,[158,164,170,175,181],{"type":38,"tag":153,"props":159,"children":161},{"style":160},"--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF",[162],{"type":44,"value":163},"## ",{"type":38,"tag":153,"props":165,"children":167},{"style":166},"--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B",[168],{"type":44,"value":169},"Compliance Check: ",{"type":38,"tag":153,"props":171,"children":172},{"style":160},[173],{"type":44,"value":174},"[",{"type":38,"tag":153,"props":176,"children":178},{"style":177},"--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D",[179],{"type":44,"value":180},"Initiative",{"type":38,"tag":153,"props":182,"children":183},{"style":160},[184],{"type":44,"value":185},"]\n",{"type":38,"tag":153,"props":187,"children":189},{"class":155,"line":188},2,[190],{"type":38,"tag":153,"props":191,"children":193},{"emptyLinePlaceholder":192},true,[194],{"type":44,"value":195},"\n",{"type":38,"tag":153,"props":197,"children":199},{"class":155,"line":198},3,[200,205],{"type":38,"tag":153,"props":201,"children":202},{"style":160},[203],{"type":44,"value":204},"### ",{"type":38,"tag":153,"props":206,"children":207},{"style":166},[208],{"type":44,"value":209},"Summary\n",{"type":38,"tag":153,"props":211,"children":213},{"class":155,"line":212},4,[214],{"type":38,"tag":153,"props":215,"children":217},{"style":216},"--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8",[218],{"type":44,"value":219},"[Quick assessment: Proceed \u002F Proceed with conditions \u002F Requires further review]\n",{"type":38,"tag":153,"props":221,"children":223},{"class":155,"line":222},5,[224],{"type":38,"tag":153,"props":225,"children":226},{"emptyLinePlaceholder":192},[227],{"type":44,"value":195},{"type":38,"tag":153,"props":229,"children":231},{"class":155,"line":230},6,[232,236],{"type":38,"tag":153,"props":233,"children":234},{"style":160},[235],{"type":44,"value":204},{"type":38,"tag":153,"props":237,"children":238},{"style":166},[239],{"type":44,"value":240},"Applicable Regulations and Policies\n",{"type":38,"tag":153,"props":242,"children":244},{"class":155,"line":243},7,[245,250,255,259,264,268,273],{"type":38,"tag":153,"props":246,"children":247},{"style":160},[248],{"type":44,"value":249},"|",{"type":38,"tag":153,"props":251,"children":252},{"style":216},[253],{"type":44,"value":254}," Regulation\u002FPolicy ",{"type":38,"tag":153,"props":256,"children":257},{"style":160},[258],{"type":44,"value":249},{"type":38,"tag":153,"props":260,"children":261},{"style":216},[262],{"type":44,"value":263}," Relevance ",{"type":38,"tag":153,"props":265,"children":266},{"style":160},[267],{"type":44,"value":249},{"type":38,"tag":153,"props":269,"children":270},{"style":216},[271],{"type":44,"value":272}," Key Requirements ",{"type":38,"tag":153,"props":274,"children":275},{"style":160},[276],{"type":44,"value":277},"|\n",{"type":38,"tag":153,"props":279,"children":281},{"class":155,"line":280},8,[282],{"type":38,"tag":153,"props":283,"children":284},{"style":160},[285],{"type":44,"value":286},"|-------------------|-----------|-----------------|\n",{"type":38,"tag":153,"props":288,"children":290},{"class":155,"line":289},9,[291,295,300,304,309,313,318],{"type":38,"tag":153,"props":292,"children":293},{"style":160},[294],{"type":44,"value":249},{"type":38,"tag":153,"props":296,"children":297},{"style":216},[298],{"type":44,"value":299}," [GDPR \u002F CCPA \u002F HIPAA \u002F etc.] ",{"type":38,"tag":153,"props":301,"children":302},{"style":160},[303],{"type":44,"value":249},{"type":38,"tag":153,"props":305,"children":306},{"style":216},[307],{"type":44,"value":308}," [How it applies] ",{"type":38,"tag":153,"props":310,"children":311},{"style":160},[312],{"type":44,"value":249},{"type":38,"tag":153,"props":314,"children":315},{"style":216},[316],{"type":44,"value":317}," [What you need to do] ",{"type":38,"tag":153,"props":319,"children":320},{"style":160},[321],{"type":44,"value":277},{"type":38,"tag":153,"props":323,"children":325},{"class":155,"line":324},10,[326],{"type":38,"tag":153,"props":327,"children":328},{"emptyLinePlaceholder":192},[329],{"type":44,"value":195},{"type":38,"tag":153,"props":331,"children":333},{"class":155,"line":332},11,[334,338],{"type":38,"tag":153,"props":335,"children":336},{"style":160},[337],{"type":44,"value":204},{"type":38,"tag":153,"props":339,"children":340},{"style":166},[341],{"type":44,"value":342},"Requirements\n",{"type":38,"tag":153,"props":344,"children":346},{"class":155,"line":345},12,[347,351,356,360,365,369,374,378,383],{"type":38,"tag":153,"props":348,"children":349},{"style":160},[350],{"type":44,"value":249},{"type":38,"tag":153,"props":352,"children":353},{"style":216},[354],{"type":44,"value":355}," # ",{"type":38,"tag":153,"props":357,"children":358},{"style":160},[359],{"type":44,"value":249},{"type":38,"tag":153,"props":361,"children":362},{"style":216},[363],{"type":44,"value":364}," Requirement ",{"type":38,"tag":153,"props":366,"children":367},{"style":160},[368],{"type":44,"value":249},{"type":38,"tag":153,"props":370,"children":371},{"style":216},[372],{"type":44,"value":373}," Status ",{"type":38,"tag":153,"props":375,"children":376},{"style":160},[377],{"type":44,"value":249},{"type":38,"tag":153,"props":379,"children":380},{"style":216},[381],{"type":44,"value":382}," Action Needed ",{"type":38,"tag":153,"props":384,"children":385},{"style":160},[386],{"type":44,"value":277},{"type":38,"tag":153,"props":388,"children":390},{"class":155,"line":389},13,[391],{"type":38,"tag":153,"props":392,"children":393},{"style":160},[394],{"type":44,"value":395},"|---|-------------|--------|---------------|\n",{"type":38,"tag":153,"props":397,"children":399},{"class":155,"line":398},14,[400,404,409,413,418,423,428,433,438,442,447],{"type":38,"tag":153,"props":401,"children":402},{"style":160},[403],{"type":44,"value":249},{"type":38,"tag":153,"props":405,"children":406},{"style":216},[407],{"type":44,"value":408}," 1 ",{"type":38,"tag":153,"props":410,"children":411},{"style":160},[412],{"type":44,"value":249},{"type":38,"tag":153,"props":414,"children":415},{"style":160},[416],{"type":44,"value":417}," [",{"type":38,"tag":153,"props":419,"children":420},{"style":177},[421],{"type":44,"value":422},"Requirement",{"type":38,"tag":153,"props":424,"children":425},{"style":160},[426],{"type":44,"value":427},"]",{"type":38,"tag":153,"props":429,"children":430},{"style":160},[431],{"type":44,"value":432}," |",{"type":38,"tag":153,"props":434,"children":435},{"style":216},[436],{"type":44,"value":437}," [Met \u002F Not Met \u002F Unknown] ",{"type":38,"tag":153,"props":439,"children":440},{"style":160},[441],{"type":44,"value":249},{"type":38,"tag":153,"props":443,"children":444},{"style":216},[445],{"type":44,"value":446}," [What to do] ",{"type":38,"tag":153,"props":448,"children":449},{"style":160},[450],{"type":44,"value":277},{"type":38,"tag":153,"props":452,"children":454},{"class":155,"line":453},15,[455],{"type":38,"tag":153,"props":456,"children":457},{"emptyLinePlaceholder":192},[458],{"type":44,"value":195},{"type":38,"tag":153,"props":460,"children":462},{"class":155,"line":461},16,[463,467],{"type":38,"tag":153,"props":464,"children":465},{"style":160},[466],{"type":44,"value":204},{"type":38,"tag":153,"props":468,"children":469},{"style":166},[470],{"type":44,"value":471},"Risk Areas\n",{"type":38,"tag":153,"props":473,"children":475},{"class":155,"line":474},17,[476,480,485,489,494,498,503],{"type":38,"tag":153,"props":477,"children":478},{"style":160},[479],{"type":44,"value":249},{"type":38,"tag":153,"props":481,"children":482},{"style":216},[483],{"type":44,"value":484}," Risk ",{"type":38,"tag":153,"props":486,"children":487},{"style":160},[488],{"type":44,"value":249},{"type":38,"tag":153,"props":490,"children":491},{"style":216},[492],{"type":44,"value":493}," Severity ",{"type":38,"tag":153,"props":495,"children":496},{"style":160},[497],{"type":44,"value":249},{"type":38,"tag":153,"props":499,"children":500},{"style":216},[501],{"type":44,"value":502}," Mitigation ",{"type":38,"tag":153,"props":504,"children":505},{"style":160},[506],{"type":44,"value":277},{"type":38,"tag":153,"props":508,"children":510},{"class":155,"line":509},18,[511],{"type":38,"tag":153,"props":512,"children":513},{"style":160},[514],{"type":44,"value":515},"|------|----------|------------|\n",{"type":38,"tag":153,"props":517,"children":519},{"class":155,"line":518},19,[520,524,528,533,537,541,545,550,554,558,563],{"type":38,"tag":153,"props":521,"children":522},{"style":160},[523],{"type":44,"value":249},{"type":38,"tag":153,"props":525,"children":526},{"style":160},[527],{"type":44,"value":417},{"type":38,"tag":153,"props":529,"children":530},{"style":177},[531],{"type":44,"value":532},"Risk",{"type":38,"tag":153,"props":534,"children":535},{"style":160},[536],{"type":44,"value":427},{"type":38,"tag":153,"props":538,"children":539},{"style":160},[540],{"type":44,"value":432},{"type":38,"tag":153,"props":542,"children":543},{"style":160},[544],{"type":44,"value":417},{"type":38,"tag":153,"props":546,"children":547},{"style":177},[548],{"type":44,"value":549},"High\u002FMed\u002FLow",{"type":38,"tag":153,"props":551,"children":552},{"style":160},[553],{"type":44,"value":427},{"type":38,"tag":153,"props":555,"children":556},{"style":160},[557],{"type":44,"value":432},{"type":38,"tag":153,"props":559,"children":560},{"style":216},[561],{"type":44,"value":562}," [How to address] ",{"type":38,"tag":153,"props":564,"children":565},{"style":160},[566],{"type":44,"value":277},{"type":38,"tag":153,"props":568,"children":570},{"class":155,"line":569},20,[571],{"type":38,"tag":153,"props":572,"children":573},{"emptyLinePlaceholder":192},[574],{"type":44,"value":195},{"type":38,"tag":153,"props":576,"children":578},{"class":155,"line":577},21,[579,583],{"type":38,"tag":153,"props":580,"children":581},{"style":160},[582],{"type":44,"value":204},{"type":38,"tag":153,"props":584,"children":585},{"style":166},[586],{"type":44,"value":587},"Recommended Actions\n",{"type":38,"tag":153,"props":589,"children":591},{"class":155,"line":590},22,[592,597],{"type":38,"tag":153,"props":593,"children":594},{"style":160},[595],{"type":44,"value":596},"1.",{"type":38,"tag":153,"props":598,"children":599},{"style":216},[600],{"type":44,"value":601}," [Most important action]\n",{"type":38,"tag":153,"props":603,"children":605},{"class":155,"line":604},23,[606,611],{"type":38,"tag":153,"props":607,"children":608},{"style":160},[609],{"type":44,"value":610},"2.",{"type":38,"tag":153,"props":612,"children":613},{"style":216},[614],{"type":44,"value":615}," [Second priority]\n",{"type":38,"tag":153,"props":617,"children":619},{"class":155,"line":618},24,[620,625],{"type":38,"tag":153,"props":621,"children":622},{"style":160},[623],{"type":44,"value":624},"3.",{"type":38,"tag":153,"props":626,"children":627},{"style":216},[628],{"type":44,"value":629}," [Third priority]\n",{"type":38,"tag":153,"props":631,"children":633},{"class":155,"line":632},25,[634],{"type":38,"tag":153,"props":635,"children":636},{"emptyLinePlaceholder":192},[637],{"type":44,"value":195},{"type":38,"tag":153,"props":639,"children":641},{"class":155,"line":640},26,[642,646],{"type":38,"tag":153,"props":643,"children":644},{"style":160},[645],{"type":44,"value":204},{"type":38,"tag":153,"props":647,"children":648},{"style":166},[649],{"type":44,"value":650},"Approvals Needed\n",{"type":38,"tag":153,"props":652,"children":654},{"class":155,"line":653},27,[655,659,664,668,673,677,681],{"type":38,"tag":153,"props":656,"children":657},{"style":160},[658],{"type":44,"value":249},{"type":38,"tag":153,"props":660,"children":661},{"style":216},[662],{"type":44,"value":663}," Approver ",{"type":38,"tag":153,"props":665,"children":666},{"style":160},[667],{"type":44,"value":249},{"type":38,"tag":153,"props":669,"children":670},{"style":216},[671],{"type":44,"value":672}," Why ",{"type":38,"tag":153,"props":674,"children":675},{"style":160},[676],{"type":44,"value":249},{"type":38,"tag":153,"props":678,"children":679},{"style":216},[680],{"type":44,"value":373},{"type":38,"tag":153,"props":682,"children":683},{"style":160},[684],{"type":44,"value":277},{"type":38,"tag":153,"props":686,"children":688},{"class":155,"line":687},28,[689],{"type":38,"tag":153,"props":690,"children":691},{"style":160},[692],{"type":44,"value":693},"|----------|-----|--------|\n",{"type":38,"tag":153,"props":695,"children":697},{"class":155,"line":696},29,[698,702,706,711,715,719,723,728,732,736,740,745,749],{"type":38,"tag":153,"props":699,"children":700},{"style":160},[701],{"type":44,"value":249},{"type":38,"tag":153,"props":703,"children":704},{"style":160},[705],{"type":44,"value":417},{"type":38,"tag":153,"props":707,"children":708},{"style":177},[709],{"type":44,"value":710},"Person\u002FTeam",{"type":38,"tag":153,"props":712,"children":713},{"style":160},[714],{"type":44,"value":427},{"type":38,"tag":153,"props":716,"children":717},{"style":160},[718],{"type":44,"value":432},{"type":38,"tag":153,"props":720,"children":721},{"style":160},[722],{"type":44,"value":417},{"type":38,"tag":153,"props":724,"children":725},{"style":177},[726],{"type":44,"value":727},"Reason",{"type":38,"tag":153,"props":729,"children":730},{"style":160},[731],{"type":44,"value":427},{"type":38,"tag":153,"props":733,"children":734},{"style":160},[735],{"type":44,"value":432},{"type":38,"tag":153,"props":737,"children":738},{"style":160},[739],{"type":44,"value":417},{"type":38,"tag":153,"props":741,"children":742},{"style":177},[743],{"type":44,"value":744},"Pending",{"type":38,"tag":153,"props":746,"children":747},{"style":160},[748],{"type":44,"value":427},{"type":38,"tag":153,"props":750,"children":751},{"style":160},[752],{"type":44,"value":753}," |\n",{"type":38,"tag":153,"props":755,"children":757},{"class":155,"line":756},30,[758],{"type":38,"tag":153,"props":759,"children":760},{"emptyLinePlaceholder":192},[761],{"type":44,"value":195},{"type":38,"tag":153,"props":763,"children":765},{"class":155,"line":764},31,[766,770],{"type":38,"tag":153,"props":767,"children":768},{"style":160},[769],{"type":44,"value":204},{"type":38,"tag":153,"props":771,"children":772},{"style":166},[773],{"type":44,"value":774},"Further Review Recommended\n",{"type":38,"tag":153,"props":776,"children":778},{"class":155,"line":777},32,[779],{"type":38,"tag":153,"props":780,"children":781},{"style":216},[782],{"type":44,"value":783},"[Areas where outside counsel or specialist review is advised]\n",{"type":38,"tag":82,"props":785,"children":787},{"id":786},"privacy-regulation-overview",[788],{"type":44,"value":789},"Privacy Regulation Overview",{"type":38,"tag":791,"props":792,"children":794},"h3",{"id":793},"gdpr-general-data-protection-regulation",[795],{"type":44,"value":796},"GDPR (General Data Protection Regulation)",{"type":38,"tag":51,"props":798,"children":799},{},[800,805],{"type":38,"tag":74,"props":801,"children":802},{},[803],{"type":44,"value":804},"Scope",{"type":44,"value":806},": Applies to processing of personal data of individuals in the EU\u002FEEA, regardless of where the processing organization is located.",{"type":38,"tag":51,"props":808,"children":809},{},[810,815],{"type":38,"tag":74,"props":811,"children":812},{},[813],{"type":44,"value":814},"Key Obligations for In-House Legal Teams",{"type":44,"value":816},":",{"type":38,"tag":113,"props":818,"children":819},{},[820,830,840,850,860,870,880],{"type":38,"tag":117,"props":821,"children":822},{},[823,828],{"type":38,"tag":74,"props":824,"children":825},{},[826],{"type":44,"value":827},"Lawful basis",{"type":44,"value":829},": Identify and document lawful basis for each processing activity (consent, contract, legitimate interest, legal obligation, vital interest, public task)",{"type":38,"tag":117,"props":831,"children":832},{},[833,838],{"type":38,"tag":74,"props":834,"children":835},{},[836],{"type":44,"value":837},"Data subject rights",{"type":44,"value":839},": Respond to access, rectification, erasure, portability, restriction, and objection requests within 30 days (extendable by 60 days for complex requests)",{"type":38,"tag":117,"props":841,"children":842},{},[843,848],{"type":38,"tag":74,"props":844,"children":845},{},[846],{"type":44,"value":847},"Data protection impact assessments (DPIAs)",{"type":44,"value":849},": Required for processing likely to result in high risk to individuals",{"type":38,"tag":117,"props":851,"children":852},{},[853,858],{"type":38,"tag":74,"props":854,"children":855},{},[856],{"type":44,"value":857},"Breach notification",{"type":44,"value":859},": Notify supervisory authority within 72 hours of becoming aware of a personal data breach; notify affected individuals without undue delay if high risk",{"type":38,"tag":117,"props":861,"children":862},{},[863,868],{"type":38,"tag":74,"props":864,"children":865},{},[866],{"type":44,"value":867},"Records of processing",{"type":44,"value":869},": Maintain Article 30 records of processing activities",{"type":38,"tag":117,"props":871,"children":872},{},[873,878],{"type":38,"tag":74,"props":874,"children":875},{},[876],{"type":44,"value":877},"International transfers",{"type":44,"value":879},": Ensure appropriate safeguards for transfers outside EEA (SCCs, adequacy decisions, BCRs)",{"type":38,"tag":117,"props":881,"children":882},{},[883,888],{"type":38,"tag":74,"props":884,"children":885},{},[886],{"type":44,"value":887},"DPO requirement",{"type":44,"value":889},": Appoint a Data Protection Officer if required (public authority, large-scale processing of special categories, large-scale systematic monitoring)",{"type":38,"tag":51,"props":891,"children":892},{},[893,898],{"type":38,"tag":74,"props":894,"children":895},{},[896],{"type":44,"value":897},"Common In-House Legal Touchpoints",{"type":44,"value":816},{"type":38,"tag":113,"props":900,"children":901},{},[902,907,912,917,922],{"type":38,"tag":117,"props":903,"children":904},{},[905],{"type":44,"value":906},"Reviewing vendor DPAs for GDPR compliance",{"type":38,"tag":117,"props":908,"children":909},{},[910],{"type":44,"value":911},"Advising product teams on privacy by design requirements",{"type":38,"tag":117,"props":913,"children":914},{},[915],{"type":44,"value":916},"Responding to supervisory authority inquiries",{"type":38,"tag":117,"props":918,"children":919},{},[920],{"type":44,"value":921},"Managing cross-border data transfer mechanisms",{"type":38,"tag":117,"props":923,"children":924},{},[925],{"type":44,"value":926},"Reviewing consent mechanisms and privacy notices",{"type":38,"tag":791,"props":928,"children":930},{"id":929},"ccpa-cpra-california-consumer-privacy-act-california-privacy-rights-act",[931],{"type":44,"value":932},"CCPA \u002F CPRA (California Consumer Privacy Act \u002F California Privacy Rights Act)",{"type":38,"tag":51,"props":934,"children":935},{},[936,940],{"type":38,"tag":74,"props":937,"children":938},{},[939],{"type":44,"value":804},{"type":44,"value":941},": Applies to businesses that collect personal information of California residents and meet revenue, data volume, or data sale thresholds.",{"type":38,"tag":51,"props":943,"children":944},{},[945,950],{"type":38,"tag":74,"props":946,"children":947},{},[948],{"type":44,"value":949},"Key Obligations",{"type":44,"value":816},{"type":38,"tag":113,"props":952,"children":953},{},[954,964,974,984,994,1004,1014,1024],{"type":38,"tag":117,"props":955,"children":956},{},[957,962],{"type":38,"tag":74,"props":958,"children":959},{},[960],{"type":44,"value":961},"Right to know",{"type":44,"value":963},": Consumers can request disclosure of personal information collected, used, and shared",{"type":38,"tag":117,"props":965,"children":966},{},[967,972],{"type":38,"tag":74,"props":968,"children":969},{},[970],{"type":44,"value":971},"Right to delete",{"type":44,"value":973},": Consumers can request deletion of their personal information",{"type":38,"tag":117,"props":975,"children":976},{},[977,982],{"type":38,"tag":74,"props":978,"children":979},{},[980],{"type":44,"value":981},"Right to opt-out",{"type":44,"value":983},": Consumers can opt out of the sale or sharing of personal information",{"type":38,"tag":117,"props":985,"children":986},{},[987,992],{"type":38,"tag":74,"props":988,"children":989},{},[990],{"type":44,"value":991},"Right to correct",{"type":44,"value":993},": Consumers can request correction of inaccurate personal information (CPRA addition)",{"type":38,"tag":117,"props":995,"children":996},{},[997,1002],{"type":38,"tag":74,"props":998,"children":999},{},[1000],{"type":44,"value":1001},"Right to limit use of sensitive personal information",{"type":44,"value":1003},": Consumers can limit use of sensitive PI to specific purposes (CPRA addition)",{"type":38,"tag":117,"props":1005,"children":1006},{},[1007,1012],{"type":38,"tag":74,"props":1008,"children":1009},{},[1010],{"type":44,"value":1011},"Non-discrimination",{"type":44,"value":1013},": Cannot discriminate against consumers who exercise their rights",{"type":38,"tag":117,"props":1015,"children":1016},{},[1017,1022],{"type":38,"tag":74,"props":1018,"children":1019},{},[1020],{"type":44,"value":1021},"Privacy notice",{"type":44,"value":1023},": Must provide a privacy notice at or before collection describing categories of PI collected and purposes",{"type":38,"tag":117,"props":1025,"children":1026},{},[1027,1032],{"type":38,"tag":74,"props":1028,"children":1029},{},[1030],{"type":44,"value":1031},"Service provider agreements",{"type":44,"value":1033},": Contracts with service providers must restrict use of PI to the specified business purpose",{"type":38,"tag":51,"props":1035,"children":1036},{},[1037,1042],{"type":38,"tag":74,"props":1038,"children":1039},{},[1040],{"type":44,"value":1041},"Response Timelines",{"type":44,"value":816},{"type":38,"tag":113,"props":1044,"children":1045},{},[1046,1051],{"type":38,"tag":117,"props":1047,"children":1048},{},[1049],{"type":44,"value":1050},"Acknowledge receipt within 10 business days",{"type":38,"tag":117,"props":1052,"children":1053},{},[1054],{"type":44,"value":1055},"Respond substantively within 45 calendar days (extendable by 45 days with notice)",{"type":38,"tag":791,"props":1057,"children":1059},{"id":1058},"other-key-regulations-to-monitor",[1060],{"type":44,"value":1061},"Other Key Regulations to Monitor",{"type":38,"tag":1063,"props":1064,"children":1065},"table",{},[1066,1090],{"type":38,"tag":1067,"props":1068,"children":1069},"thead",{},[1070],{"type":38,"tag":1071,"props":1072,"children":1073},"tr",{},[1074,1080,1085],{"type":38,"tag":1075,"props":1076,"children":1077},"th",{},[1078],{"type":44,"value":1079},"Regulation",{"type":38,"tag":1075,"props":1081,"children":1082},{},[1083],{"type":44,"value":1084},"Jurisdiction",{"type":38,"tag":1075,"props":1086,"children":1087},{},[1088],{"type":44,"value":1089},"Key Differentiators",{"type":38,"tag":1091,"props":1092,"children":1093},"tbody",{},[1094,1118,1141,1164,1187,1210,1233],{"type":38,"tag":1071,"props":1095,"children":1096},{},[1097,1108,1113],{"type":38,"tag":1098,"props":1099,"children":1100},"td",{},[1101,1106],{"type":38,"tag":74,"props":1102,"children":1103},{},[1104],{"type":44,"value":1105},"LGPD",{"type":44,"value":1107}," (Brazil)",{"type":38,"tag":1098,"props":1109,"children":1110},{},[1111],{"type":44,"value":1112},"Brazil",{"type":38,"tag":1098,"props":1114,"children":1115},{},[1116],{"type":44,"value":1117},"Similar to GDPR; requires DPO appointment; National Data Protection Authority (ANPD) enforcement",{"type":38,"tag":1071,"props":1119,"children":1120},{},[1121,1131,1136],{"type":38,"tag":1098,"props":1122,"children":1123},{},[1124,1129],{"type":38,"tag":74,"props":1125,"children":1126},{},[1127],{"type":44,"value":1128},"POPIA",{"type":44,"value":1130}," (South Africa)",{"type":38,"tag":1098,"props":1132,"children":1133},{},[1134],{"type":44,"value":1135},"South Africa",{"type":38,"tag":1098,"props":1137,"children":1138},{},[1139],{"type":44,"value":1140},"Information Regulator oversight; required registration of processing",{"type":38,"tag":1071,"props":1142,"children":1143},{},[1144,1154,1159],{"type":38,"tag":1098,"props":1145,"children":1146},{},[1147,1152],{"type":38,"tag":74,"props":1148,"children":1149},{},[1150],{"type":44,"value":1151},"PIPEDA",{"type":44,"value":1153}," (Canada)",{"type":38,"tag":1098,"props":1155,"children":1156},{},[1157],{"type":44,"value":1158},"Canada (federal)",{"type":38,"tag":1098,"props":1160,"children":1161},{},[1162],{"type":44,"value":1163},"Consent-based framework; OPC oversight; being modernized",{"type":38,"tag":1071,"props":1165,"children":1166},{},[1167,1177,1182],{"type":38,"tag":1098,"props":1168,"children":1169},{},[1170,1175],{"type":38,"tag":74,"props":1171,"children":1172},{},[1173],{"type":44,"value":1174},"PDPA",{"type":44,"value":1176}," (Singapore)",{"type":38,"tag":1098,"props":1178,"children":1179},{},[1180],{"type":44,"value":1181},"Singapore",{"type":38,"tag":1098,"props":1183,"children":1184},{},[1185],{"type":44,"value":1186},"Do Not Call registry; mandatory breach notification; PDPC enforcement",{"type":38,"tag":1071,"props":1188,"children":1189},{},[1190,1200,1205],{"type":38,"tag":1098,"props":1191,"children":1192},{},[1193,1198],{"type":38,"tag":74,"props":1194,"children":1195},{},[1196],{"type":44,"value":1197},"Privacy Act",{"type":44,"value":1199}," (Australia)",{"type":38,"tag":1098,"props":1201,"children":1202},{},[1203],{"type":44,"value":1204},"Australia",{"type":38,"tag":1098,"props":1206,"children":1207},{},[1208],{"type":44,"value":1209},"Australian Privacy Principles (APPs); notifiable data breaches scheme",{"type":38,"tag":1071,"props":1211,"children":1212},{},[1213,1223,1228],{"type":38,"tag":1098,"props":1214,"children":1215},{},[1216,1221],{"type":38,"tag":74,"props":1217,"children":1218},{},[1219],{"type":44,"value":1220},"PIPL",{"type":44,"value":1222}," (China)",{"type":38,"tag":1098,"props":1224,"children":1225},{},[1226],{"type":44,"value":1227},"China",{"type":38,"tag":1098,"props":1229,"children":1230},{},[1231],{"type":44,"value":1232},"Strict cross-border transfer rules; data localization requirements; CAC oversight",{"type":38,"tag":1071,"props":1234,"children":1235},{},[1236,1244,1249],{"type":38,"tag":1098,"props":1237,"children":1238},{},[1239],{"type":38,"tag":74,"props":1240,"children":1241},{},[1242],{"type":44,"value":1243},"UK GDPR",{"type":38,"tag":1098,"props":1245,"children":1246},{},[1247],{"type":44,"value":1248},"United Kingdom",{"type":38,"tag":1098,"props":1250,"children":1251},{},[1252],{"type":44,"value":1253},"Post-Brexit UK version; ICO oversight; similar to EU GDPR with UK-specific adequacy",{"type":38,"tag":82,"props":1255,"children":1257},{"id":1256},"dpa-review-checklist",[1258],{"type":44,"value":1259},"DPA Review Checklist",{"type":38,"tag":51,"props":1261,"children":1262},{},[1263],{"type":44,"value":1264},"When reviewing a Data Processing Agreement or Data Processing Addendum, verify the following:",{"type":38,"tag":791,"props":1266,"children":1268},{"id":1267},"required-elements-gdpr-article-28",[1269],{"type":44,"value":1270},"Required Elements (GDPR Article 28)",{"type":38,"tag":113,"props":1272,"children":1275},{"className":1273},[1274],"contains-task-list",[1276,1295,1310,1325,1340],{"type":38,"tag":117,"props":1277,"children":1280},{"className":1278},[1279],"task-list-item",[1281,1286,1288,1293],{"type":38,"tag":1282,"props":1283,"children":1285},"input",{"disabled":192,"type":1284},"checkbox",[],{"type":44,"value":1287}," ",{"type":38,"tag":74,"props":1289,"children":1290},{},[1291],{"type":44,"value":1292},"Subject matter and duration",{"type":44,"value":1294},": Clearly defined scope and term of processing",{"type":38,"tag":117,"props":1296,"children":1298},{"className":1297},[1279],[1299,1302,1303,1308],{"type":38,"tag":1282,"props":1300,"children":1301},{"disabled":192,"type":1284},[],{"type":44,"value":1287},{"type":38,"tag":74,"props":1304,"children":1305},{},[1306],{"type":44,"value":1307},"Nature and purpose",{"type":44,"value":1309},": Specific description of what processing will occur and why",{"type":38,"tag":117,"props":1311,"children":1313},{"className":1312},[1279],[1314,1317,1318,1323],{"type":38,"tag":1282,"props":1315,"children":1316},{"disabled":192,"type":1284},[],{"type":44,"value":1287},{"type":38,"tag":74,"props":1319,"children":1320},{},[1321],{"type":44,"value":1322},"Type of personal data",{"type":44,"value":1324},": Categories of personal data being processed",{"type":38,"tag":117,"props":1326,"children":1328},{"className":1327},[1279],[1329,1332,1333,1338],{"type":38,"tag":1282,"props":1330,"children":1331},{"disabled":192,"type":1284},[],{"type":44,"value":1287},{"type":38,"tag":74,"props":1334,"children":1335},{},[1336],{"type":44,"value":1337},"Categories of data subjects",{"type":44,"value":1339},": Whose personal data is being processed",{"type":38,"tag":117,"props":1341,"children":1343},{"className":1342},[1279],[1344,1347,1348,1353],{"type":38,"tag":1282,"props":1345,"children":1346},{"disabled":192,"type":1284},[],{"type":44,"value":1287},{"type":38,"tag":74,"props":1349,"children":1350},{},[1351],{"type":44,"value":1352},"Controller obligations and rights",{"type":44,"value":1354},": Controller's instructions and oversight rights",{"type":38,"tag":791,"props":1356,"children":1358},{"id":1357},"processor-obligations",[1359],{"type":44,"value":1360},"Processor Obligations",{"type":38,"tag":113,"props":1362,"children":1364},{"className":1363},[1274],[1365,1380,1395,1410,1465,1480,1495,1510,1525],{"type":38,"tag":117,"props":1366,"children":1368},{"className":1367},[1279],[1369,1372,1373,1378],{"type":38,"tag":1282,"props":1370,"children":1371},{"disabled":192,"type":1284},[],{"type":44,"value":1287},{"type":38,"tag":74,"props":1374,"children":1375},{},[1376],{"type":44,"value":1377},"Process only on documented instructions",{"type":44,"value":1379},": Processor commits to process only per controller's instructions (with exception for legal requirements)",{"type":38,"tag":117,"props":1381,"children":1383},{"className":1382},[1279],[1384,1387,1388,1393],{"type":38,"tag":1282,"props":1385,"children":1386},{"disabled":192,"type":1284},[],{"type":44,"value":1287},{"type":38,"tag":74,"props":1389,"children":1390},{},[1391],{"type":44,"value":1392},"Confidentiality",{"type":44,"value":1394},": Personnel authorized to process have committed to confidentiality",{"type":38,"tag":117,"props":1396,"children":1398},{"className":1397},[1279],[1399,1402,1403,1408],{"type":38,"tag":1282,"props":1400,"children":1401},{"disabled":192,"type":1284},[],{"type":44,"value":1287},{"type":38,"tag":74,"props":1404,"children":1405},{},[1406],{"type":44,"value":1407},"Security measures",{"type":44,"value":1409},": Appropriate technical and organizational measures described (Article 32 reference)",{"type":38,"tag":117,"props":1411,"children":1413},{"className":1412},[1279],[1414,1417,1418,1423,1425],{"type":38,"tag":1282,"props":1415,"children":1416},{"disabled":192,"type":1284},[],{"type":44,"value":1287},{"type":38,"tag":74,"props":1419,"children":1420},{},[1421],{"type":44,"value":1422},"Sub-processor requirements",{"type":44,"value":1424},":\n",{"type":38,"tag":113,"props":1426,"children":1428},{"className":1427},[1274],[1429,1438,1447,1456],{"type":38,"tag":117,"props":1430,"children":1432},{"className":1431},[1279],[1433,1436],{"type":38,"tag":1282,"props":1434,"children":1435},{"disabled":192,"type":1284},[],{"type":44,"value":1437}," Written authorization requirement (general or specific)",{"type":38,"tag":117,"props":1439,"children":1441},{"className":1440},[1279],[1442,1445],{"type":38,"tag":1282,"props":1443,"children":1444},{"disabled":192,"type":1284},[],{"type":44,"value":1446}," If general authorization: notification of changes with opportunity to object",{"type":38,"tag":117,"props":1448,"children":1450},{"className":1449},[1279],[1451,1454],{"type":38,"tag":1282,"props":1452,"children":1453},{"disabled":192,"type":1284},[],{"type":44,"value":1455}," Sub-processors bound by same obligations via written agreement",{"type":38,"tag":117,"props":1457,"children":1459},{"className":1458},[1279],[1460,1463],{"type":38,"tag":1282,"props":1461,"children":1462},{"disabled":192,"type":1284},[],{"type":44,"value":1464}," Processor remains liable for sub-processor performance",{"type":38,"tag":117,"props":1466,"children":1468},{"className":1467},[1279],[1469,1472,1473,1478],{"type":38,"tag":1282,"props":1470,"children":1471},{"disabled":192,"type":1284},[],{"type":44,"value":1287},{"type":38,"tag":74,"props":1474,"children":1475},{},[1476],{"type":44,"value":1477},"Data subject rights assistance",{"type":44,"value":1479},": Processor will assist controller in responding to data subject requests",{"type":38,"tag":117,"props":1481,"children":1483},{"className":1482},[1279],[1484,1487,1488,1493],{"type":38,"tag":1282,"props":1485,"children":1486},{"disabled":192,"type":1284},[],{"type":44,"value":1287},{"type":38,"tag":74,"props":1489,"children":1490},{},[1491],{"type":44,"value":1492},"Security and breach assistance",{"type":44,"value":1494},": Processor will assist with security obligations, breach notification, DPIAs, and prior consultation",{"type":38,"tag":117,"props":1496,"children":1498},{"className":1497},[1279],[1499,1502,1503,1508],{"type":38,"tag":1282,"props":1500,"children":1501},{"disabled":192,"type":1284},[],{"type":44,"value":1287},{"type":38,"tag":74,"props":1504,"children":1505},{},[1506],{"type":44,"value":1507},"Deletion or return",{"type":44,"value":1509},": On termination, delete or return all personal data (at controller's choice) and delete existing copies unless legal retention required",{"type":38,"tag":117,"props":1511,"children":1513},{"className":1512},[1279],[1514,1517,1518,1523],{"type":38,"tag":1282,"props":1515,"children":1516},{"disabled":192,"type":1284},[],{"type":44,"value":1287},{"type":38,"tag":74,"props":1519,"children":1520},{},[1521],{"type":44,"value":1522},"Audit rights",{"type":44,"value":1524},": Controller has right to conduct audits and inspections (or accept third-party audit reports)",{"type":38,"tag":117,"props":1526,"children":1528},{"className":1527},[1279],[1529,1532,1533,1537],{"type":38,"tag":1282,"props":1530,"children":1531},{"disabled":192,"type":1284},[],{"type":44,"value":1287},{"type":38,"tag":74,"props":1534,"children":1535},{},[1536],{"type":44,"value":857},{"type":44,"value":1538},": Processor will notify controller of personal data breaches without undue delay (ideally within 24-48 hours; must enable controller to meet 72-hour regulatory deadline)",{"type":38,"tag":791,"props":1540,"children":1542},{"id":1541},"international-transfers",[1543],{"type":44,"value":1544},"International Transfers",{"type":38,"tag":113,"props":1546,"children":1548},{"className":1547},[1274],[1549,1564,1579,1594,1609,1624],{"type":38,"tag":117,"props":1550,"children":1552},{"className":1551},[1279],[1553,1556,1557,1562],{"type":38,"tag":1282,"props":1554,"children":1555},{"disabled":192,"type":1284},[],{"type":44,"value":1287},{"type":38,"tag":74,"props":1558,"children":1559},{},[1560],{"type":44,"value":1561},"Transfer mechanism identified",{"type":44,"value":1563},": SCCs, adequacy decision, BCRs, or other valid mechanism",{"type":38,"tag":117,"props":1565,"children":1567},{"className":1566},[1279],[1568,1571,1572,1577],{"type":38,"tag":1282,"props":1569,"children":1570},{"disabled":192,"type":1284},[],{"type":44,"value":1287},{"type":38,"tag":74,"props":1573,"children":1574},{},[1575],{"type":44,"value":1576},"SCCs version",{"type":44,"value":1578},": Using current EU SCCs (June 2021 version) if applicable",{"type":38,"tag":117,"props":1580,"children":1582},{"className":1581},[1279],[1583,1586,1587,1592],{"type":38,"tag":1282,"props":1584,"children":1585},{"disabled":192,"type":1284},[],{"type":44,"value":1287},{"type":38,"tag":74,"props":1588,"children":1589},{},[1590],{"type":44,"value":1591},"Correct module",{"type":44,"value":1593},": Appropriate SCC module selected (C2P, C2C, P2P, P2C)",{"type":38,"tag":117,"props":1595,"children":1597},{"className":1596},[1279],[1598,1601,1602,1607],{"type":38,"tag":1282,"props":1599,"children":1600},{"disabled":192,"type":1284},[],{"type":44,"value":1287},{"type":38,"tag":74,"props":1603,"children":1604},{},[1605],{"type":44,"value":1606},"Transfer impact assessment",{"type":44,"value":1608},": Completed if transferring to countries without adequacy decisions",{"type":38,"tag":117,"props":1610,"children":1612},{"className":1611},[1279],[1613,1616,1617,1622],{"type":38,"tag":1282,"props":1614,"children":1615},{"disabled":192,"type":1284},[],{"type":44,"value":1287},{"type":38,"tag":74,"props":1618,"children":1619},{},[1620],{"type":44,"value":1621},"Supplementary measures",{"type":44,"value":1623},": Technical, organizational, or contractual measures to address gaps identified in transfer impact assessment",{"type":38,"tag":117,"props":1625,"children":1627},{"className":1626},[1279],[1628,1631,1632,1637],{"type":38,"tag":1282,"props":1629,"children":1630},{"disabled":192,"type":1284},[],{"type":44,"value":1287},{"type":38,"tag":74,"props":1633,"children":1634},{},[1635],{"type":44,"value":1636},"UK addendum",{"type":44,"value":1638},": If UK personal data is in scope, UK International Data Transfer Addendum included",{"type":38,"tag":791,"props":1640,"children":1642},{"id":1641},"practical-considerations",[1643],{"type":44,"value":1644},"Practical Considerations",{"type":38,"tag":113,"props":1646,"children":1648},{"className":1647},[1274],[1649,1664,1679,1694,1709],{"type":38,"tag":117,"props":1650,"children":1652},{"className":1651},[1279],[1653,1656,1657,1662],{"type":38,"tag":1282,"props":1654,"children":1655},{"disabled":192,"type":1284},[],{"type":44,"value":1287},{"type":38,"tag":74,"props":1658,"children":1659},{},[1660],{"type":44,"value":1661},"Liability",{"type":44,"value":1663},": DPA liability provisions align with (or don't conflict with) the main services agreement",{"type":38,"tag":117,"props":1665,"children":1667},{"className":1666},[1279],[1668,1671,1672,1677],{"type":38,"tag":1282,"props":1669,"children":1670},{"disabled":192,"type":1284},[],{"type":44,"value":1287},{"type":38,"tag":74,"props":1673,"children":1674},{},[1675],{"type":44,"value":1676},"Termination alignment",{"type":44,"value":1678},": DPA term aligns with the services agreement",{"type":38,"tag":117,"props":1680,"children":1682},{"className":1681},[1279],[1683,1686,1687,1692],{"type":38,"tag":1282,"props":1684,"children":1685},{"disabled":192,"type":1284},[],{"type":44,"value":1287},{"type":38,"tag":74,"props":1688,"children":1689},{},[1690],{"type":44,"value":1691},"Data locations",{"type":44,"value":1693},": Processing locations specified and acceptable",{"type":38,"tag":117,"props":1695,"children":1697},{"className":1696},[1279],[1698,1701,1702,1707],{"type":38,"tag":1282,"props":1699,"children":1700},{"disabled":192,"type":1284},[],{"type":44,"value":1287},{"type":38,"tag":74,"props":1703,"children":1704},{},[1705],{"type":44,"value":1706},"Security standards",{"type":44,"value":1708},": Specific security standards or certifications required (SOC 2, ISO 27001, etc.)",{"type":38,"tag":117,"props":1710,"children":1712},{"className":1711},[1279],[1713,1716,1717,1722],{"type":38,"tag":1282,"props":1714,"children":1715},{"disabled":192,"type":1284},[],{"type":44,"value":1287},{"type":38,"tag":74,"props":1718,"children":1719},{},[1720],{"type":44,"value":1721},"Insurance",{"type":44,"value":1723},": Adequate insurance coverage for data processing activities",{"type":38,"tag":791,"props":1725,"children":1727},{"id":1726},"common-dpa-issues",[1728],{"type":44,"value":1729},"Common DPA Issues",{"type":38,"tag":1063,"props":1731,"children":1732},{},[1733,1753],{"type":38,"tag":1067,"props":1734,"children":1735},{},[1736],{"type":38,"tag":1071,"props":1737,"children":1738},{},[1739,1744,1748],{"type":38,"tag":1075,"props":1740,"children":1741},{},[1742],{"type":44,"value":1743},"Issue",{"type":38,"tag":1075,"props":1745,"children":1746},{},[1747],{"type":44,"value":532},{"type":38,"tag":1075,"props":1749,"children":1750},{},[1751],{"type":44,"value":1752},"Standard Position",{"type":38,"tag":1091,"props":1754,"children":1755},{},[1756,1774,1792,1810,1828,1846],{"type":38,"tag":1071,"props":1757,"children":1758},{},[1759,1764,1769],{"type":38,"tag":1098,"props":1760,"children":1761},{},[1762],{"type":44,"value":1763},"Blanket sub-processor authorization without notification",{"type":38,"tag":1098,"props":1765,"children":1766},{},[1767],{"type":44,"value":1768},"Loss of control over processing chain",{"type":38,"tag":1098,"props":1770,"children":1771},{},[1772],{"type":44,"value":1773},"Require notification with right to object",{"type":38,"tag":1071,"props":1775,"children":1776},{},[1777,1782,1787],{"type":38,"tag":1098,"props":1778,"children":1779},{},[1780],{"type":44,"value":1781},"Breach notification timeline > 72 hours",{"type":38,"tag":1098,"props":1783,"children":1784},{},[1785],{"type":44,"value":1786},"May prevent timely regulatory notification",{"type":38,"tag":1098,"props":1788,"children":1789},{},[1790],{"type":44,"value":1791},"Require notification within 24-48 hours",{"type":38,"tag":1071,"props":1793,"children":1794},{},[1795,1800,1805],{"type":38,"tag":1098,"props":1796,"children":1797},{},[1798],{"type":44,"value":1799},"No audit rights (or audit rights only via third-party reports)",{"type":38,"tag":1098,"props":1801,"children":1802},{},[1803],{"type":44,"value":1804},"Cannot verify compliance",{"type":38,"tag":1098,"props":1806,"children":1807},{},[1808],{"type":44,"value":1809},"Accept SOC 2 Type II + right to audit upon cause",{"type":38,"tag":1071,"props":1811,"children":1812},{},[1813,1818,1823],{"type":38,"tag":1098,"props":1814,"children":1815},{},[1816],{"type":44,"value":1817},"Data deletion timeline not specified",{"type":38,"tag":1098,"props":1819,"children":1820},{},[1821],{"type":44,"value":1822},"Data retained indefinitely",{"type":38,"tag":1098,"props":1824,"children":1825},{},[1826],{"type":44,"value":1827},"Require deletion within 30-90 days of termination",{"type":38,"tag":1071,"props":1829,"children":1830},{},[1831,1836,1841],{"type":38,"tag":1098,"props":1832,"children":1833},{},[1834],{"type":44,"value":1835},"No data processing locations specified",{"type":38,"tag":1098,"props":1837,"children":1838},{},[1839],{"type":44,"value":1840},"Data could be processed anywhere",{"type":38,"tag":1098,"props":1842,"children":1843},{},[1844],{"type":44,"value":1845},"Require disclosure of processing locations",{"type":38,"tag":1071,"props":1847,"children":1848},{},[1849,1854,1859],{"type":38,"tag":1098,"props":1850,"children":1851},{},[1852],{"type":44,"value":1853},"Outdated SCCs",{"type":38,"tag":1098,"props":1855,"children":1856},{},[1857],{"type":44,"value":1858},"Invalid transfer mechanism",{"type":38,"tag":1098,"props":1860,"children":1861},{},[1862],{"type":44,"value":1863},"Require current EU SCCs (2021 version)",{"type":38,"tag":82,"props":1865,"children":1867},{"id":1866},"data-subject-request-handling",[1868],{"type":44,"value":1869},"Data Subject Request Handling",{"type":38,"tag":791,"props":1871,"children":1873},{"id":1872},"request-intake",[1874],{"type":44,"value":1875},"Request Intake",{"type":38,"tag":51,"props":1877,"children":1878},{},[1879],{"type":44,"value":1880},"When a data subject request is received:",{"type":38,"tag":1882,"props":1883,"children":1884},"ol",{},[1885,1937,1964,1991],{"type":38,"tag":117,"props":1886,"children":1887},{},[1888,1893,1894],{"type":38,"tag":74,"props":1889,"children":1890},{},[1891],{"type":44,"value":1892},"Identify the request type",{"type":44,"value":816},{"type":38,"tag":113,"props":1895,"children":1896},{},[1897,1902,1907,1912,1917,1922,1927,1932],{"type":38,"tag":117,"props":1898,"children":1899},{},[1900],{"type":44,"value":1901},"Access (copy of personal data)",{"type":38,"tag":117,"props":1903,"children":1904},{},[1905],{"type":44,"value":1906},"Rectification (correction of inaccurate data)",{"type":38,"tag":117,"props":1908,"children":1909},{},[1910],{"type":44,"value":1911},"Erasure \u002F deletion (\"right to be forgotten\")",{"type":38,"tag":117,"props":1913,"children":1914},{},[1915],{"type":44,"value":1916},"Restriction of processing",{"type":38,"tag":117,"props":1918,"children":1919},{},[1920],{"type":44,"value":1921},"Data portability (structured, machine-readable format)",{"type":38,"tag":117,"props":1923,"children":1924},{},[1925],{"type":44,"value":1926},"Objection to processing",{"type":38,"tag":117,"props":1928,"children":1929},{},[1930],{"type":44,"value":1931},"Opt-out of sale\u002Fsharing (CCPA\u002FCPRA)",{"type":38,"tag":117,"props":1933,"children":1934},{},[1935],{"type":44,"value":1936},"Limit use of sensitive personal information (CPRA)",{"type":38,"tag":117,"props":1938,"children":1939},{},[1940,1945,1946],{"type":38,"tag":74,"props":1941,"children":1942},{},[1943],{"type":44,"value":1944},"Identify applicable regulation(s)",{"type":44,"value":816},{"type":38,"tag":113,"props":1947,"children":1948},{},[1949,1954,1959],{"type":38,"tag":117,"props":1950,"children":1951},{},[1952],{"type":44,"value":1953},"Where is the data subject located?",{"type":38,"tag":117,"props":1955,"children":1956},{},[1957],{"type":44,"value":1958},"Which laws apply based on your organization's presence and activities?",{"type":38,"tag":117,"props":1960,"children":1961},{},[1962],{"type":44,"value":1963},"What are the specific requirements and timelines?",{"type":38,"tag":117,"props":1965,"children":1966},{},[1967,1972,1973],{"type":38,"tag":74,"props":1968,"children":1969},{},[1970],{"type":44,"value":1971},"Verify identity",{"type":44,"value":816},{"type":38,"tag":113,"props":1974,"children":1975},{},[1976,1981,1986],{"type":38,"tag":117,"props":1977,"children":1978},{},[1979],{"type":44,"value":1980},"Confirm the requester is who they claim to be",{"type":38,"tag":117,"props":1982,"children":1983},{},[1984],{"type":44,"value":1985},"Use reasonable verification measures proportionate to the sensitivity of the data",{"type":38,"tag":117,"props":1987,"children":1988},{},[1989],{"type":44,"value":1990},"Do not require excessive documentation",{"type":38,"tag":117,"props":1992,"children":1993},{},[1994,1999,2000],{"type":38,"tag":74,"props":1995,"children":1996},{},[1997],{"type":44,"value":1998},"Log the request",{"type":44,"value":816},{"type":38,"tag":113,"props":2001,"children":2002},{},[2003,2008,2013,2018,2023,2028],{"type":38,"tag":117,"props":2004,"children":2005},{},[2006],{"type":44,"value":2007},"Date received",{"type":38,"tag":117,"props":2009,"children":2010},{},[2011],{"type":44,"value":2012},"Request type",{"type":38,"tag":117,"props":2014,"children":2015},{},[2016],{"type":44,"value":2017},"Requester identity",{"type":38,"tag":117,"props":2019,"children":2020},{},[2021],{"type":44,"value":2022},"Applicable regulation",{"type":38,"tag":117,"props":2024,"children":2025},{},[2026],{"type":44,"value":2027},"Response deadline",{"type":38,"tag":117,"props":2029,"children":2030},{},[2031],{"type":44,"value":2032},"Assigned handler",{"type":38,"tag":791,"props":2034,"children":2036},{"id":2035},"response-timelines",[2037],{"type":44,"value":1041},{"type":38,"tag":1063,"props":2039,"children":2040},{},[2041,2066],{"type":38,"tag":1067,"props":2042,"children":2043},{},[2044],{"type":38,"tag":1071,"props":2045,"children":2046},{},[2047,2051,2056,2061],{"type":38,"tag":1075,"props":2048,"children":2049},{},[2050],{"type":44,"value":1079},{"type":38,"tag":1075,"props":2052,"children":2053},{},[2054],{"type":44,"value":2055},"Initial Acknowledgment",{"type":38,"tag":1075,"props":2057,"children":2058},{},[2059],{"type":44,"value":2060},"Substantive Response",{"type":38,"tag":1075,"props":2062,"children":2063},{},[2064],{"type":44,"value":2065},"Extension",{"type":38,"tag":1091,"props":2067,"children":2068},{},[2069,2092,2115,2134],{"type":38,"tag":1071,"props":2070,"children":2071},{},[2072,2077,2082,2087],{"type":38,"tag":1098,"props":2073,"children":2074},{},[2075],{"type":44,"value":2076},"GDPR",{"type":38,"tag":1098,"props":2078,"children":2079},{},[2080],{"type":44,"value":2081},"Not specified (best practice: promptly)",{"type":38,"tag":1098,"props":2083,"children":2084},{},[2085],{"type":44,"value":2086},"30 days",{"type":38,"tag":1098,"props":2088,"children":2089},{},[2090],{"type":44,"value":2091},"+60 days (with notice)",{"type":38,"tag":1071,"props":2093,"children":2094},{},[2095,2100,2105,2110],{"type":38,"tag":1098,"props":2096,"children":2097},{},[2098],{"type":44,"value":2099},"CCPA\u002FCPRA",{"type":38,"tag":1098,"props":2101,"children":2102},{},[2103],{"type":44,"value":2104},"10 business days",{"type":38,"tag":1098,"props":2106,"children":2107},{},[2108],{"type":44,"value":2109},"45 calendar days",{"type":38,"tag":1098,"props":2111,"children":2112},{},[2113],{"type":44,"value":2114},"+45 days (with notice)",{"type":38,"tag":1071,"props":2116,"children":2117},{},[2118,2122,2126,2130],{"type":38,"tag":1098,"props":2119,"children":2120},{},[2121],{"type":44,"value":1243},{"type":38,"tag":1098,"props":2123,"children":2124},{},[2125],{"type":44,"value":2081},{"type":38,"tag":1098,"props":2127,"children":2128},{},[2129],{"type":44,"value":2086},{"type":38,"tag":1098,"props":2131,"children":2132},{},[2133],{"type":44,"value":2091},{"type":38,"tag":1071,"props":2135,"children":2136},{},[2137,2141,2146,2151],{"type":38,"tag":1098,"props":2138,"children":2139},{},[2140],{"type":44,"value":1105},{"type":38,"tag":1098,"props":2142,"children":2143},{},[2144],{"type":44,"value":2145},"Not specified",{"type":38,"tag":1098,"props":2147,"children":2148},{},[2149],{"type":44,"value":2150},"15 days",{"type":38,"tag":1098,"props":2152,"children":2153},{},[2154],{"type":44,"value":2155},"Limited extensions",{"type":38,"tag":791,"props":2157,"children":2159},{"id":2158},"exemptions-and-exceptions",[2160],{"type":44,"value":2161},"Exemptions and Exceptions",{"type":38,"tag":51,"props":2163,"children":2164},{},[2165],{"type":44,"value":2166},"Before fulfilling a request, check whether any exemptions apply:",{"type":38,"tag":51,"props":2168,"children":2169},{},[2170,2175],{"type":38,"tag":74,"props":2171,"children":2172},{},[2173],{"type":44,"value":2174},"Common exemptions across regulations",{"type":44,"value":816},{"type":38,"tag":113,"props":2177,"children":2178},{},[2179,2184,2189,2194,2199],{"type":38,"tag":117,"props":2180,"children":2181},{},[2182],{"type":44,"value":2183},"Legal claims defense or establishment",{"type":38,"tag":117,"props":2185,"children":2186},{},[2187],{"type":44,"value":2188},"Legal obligations requiring retention",{"type":38,"tag":117,"props":2190,"children":2191},{},[2192],{"type":44,"value":2193},"Public interest or official authority",{"type":38,"tag":117,"props":2195,"children":2196},{},[2197],{"type":44,"value":2198},"Freedom of expression and information (for erasure requests)",{"type":38,"tag":117,"props":2200,"children":2201},{},[2202],{"type":44,"value":2203},"Archiving in the public interest or scientific\u002Fhistorical research",{"type":38,"tag":51,"props":2205,"children":2206},{},[2207,2212],{"type":38,"tag":74,"props":2208,"children":2209},{},[2210],{"type":44,"value":2211},"Organization-specific considerations",{"type":44,"value":816},{"type":38,"tag":113,"props":2214,"children":2215},{},[2216,2221,2226],{"type":38,"tag":117,"props":2217,"children":2218},{},[2219],{"type":44,"value":2220},"Litigation hold: Data subject to a legal hold cannot be deleted",{"type":38,"tag":117,"props":2222,"children":2223},{},[2224],{"type":44,"value":2225},"Regulatory retention: Financial records, employment records, and other categories may have mandatory retention periods",{"type":38,"tag":117,"props":2227,"children":2228},{},[2229],{"type":44,"value":2230},"Third-party rights: Fulfilling the request might adversely affect the rights of others",{"type":38,"tag":791,"props":2232,"children":2234},{"id":2233},"response-process",[2235],{"type":44,"value":2236},"Response Process",{"type":38,"tag":1882,"props":2238,"children":2239},{},[2240,2245,2250,2255,2260,2265],{"type":38,"tag":117,"props":2241,"children":2242},{},[2243],{"type":44,"value":2244},"Gather all personal data of the requester across systems",{"type":38,"tag":117,"props":2246,"children":2247},{},[2248],{"type":44,"value":2249},"Apply any exemptions and document the basis",{"type":38,"tag":117,"props":2251,"children":2252},{},[2253],{"type":44,"value":2254},"Prepare response: fulfill the request or explain why (in whole or part) it cannot be fulfilled",{"type":38,"tag":117,"props":2256,"children":2257},{},[2258],{"type":44,"value":2259},"If denying (in whole or part): cite the specific legal basis for denial",{"type":38,"tag":117,"props":2261,"children":2262},{},[2263],{"type":44,"value":2264},"Inform the requester of their right to lodge a complaint with the supervisory authority",{"type":38,"tag":117,"props":2266,"children":2267},{},[2268],{"type":44,"value":2269},"Document the response and retain records of the request and response",{"type":38,"tag":82,"props":2271,"children":2273},{"id":2272},"regulatory-monitoring-basics",[2274],{"type":44,"value":2275},"Regulatory Monitoring Basics",{"type":38,"tag":791,"props":2277,"children":2279},{"id":2278},"what-to-monitor",[2280],{"type":44,"value":2281},"What to Monitor",{"type":38,"tag":51,"props":2283,"children":2284},{},[2285],{"type":44,"value":2286},"Maintain awareness of developments in:",{"type":38,"tag":113,"props":2288,"children":2289},{},[2290,2300,2310,2320,2330],{"type":38,"tag":117,"props":2291,"children":2292},{},[2293,2298],{"type":38,"tag":74,"props":2294,"children":2295},{},[2296],{"type":44,"value":2297},"Regulatory guidance",{"type":44,"value":2299},": New or updated guidance from supervisory authorities (ICO, CNIL, FTC, state AGs, etc.)",{"type":38,"tag":117,"props":2301,"children":2302},{},[2303,2308],{"type":38,"tag":74,"props":2304,"children":2305},{},[2306],{"type":44,"value":2307},"Enforcement actions",{"type":44,"value":2309},": Fines, orders, and settlements that signal regulatory priorities",{"type":38,"tag":117,"props":2311,"children":2312},{},[2313,2318],{"type":38,"tag":74,"props":2314,"children":2315},{},[2316],{"type":44,"value":2317},"Legislative changes",{"type":44,"value":2319},": New privacy laws, amendments to existing laws, implementing regulations",{"type":38,"tag":117,"props":2321,"children":2322},{},[2323,2328],{"type":38,"tag":74,"props":2324,"children":2325},{},[2326],{"type":44,"value":2327},"Industry standards",{"type":44,"value":2329},": Updates to ISO 27001, SOC 2, NIST frameworks, and sector-specific requirements",{"type":38,"tag":117,"props":2331,"children":2332},{},[2333,2338],{"type":38,"tag":74,"props":2334,"children":2335},{},[2336],{"type":44,"value":2337},"Cross-border transfer developments",{"type":44,"value":2339},": Adequacy decisions, SCC updates, data localization requirements",{"type":38,"tag":791,"props":2341,"children":2343},{"id":2342},"monitoring-approach",[2344],{"type":44,"value":2345},"Monitoring Approach",{"type":38,"tag":1882,"props":2347,"children":2348},{},[2349,2359,2369,2379,2389],{"type":38,"tag":117,"props":2350,"children":2351},{},[2352,2357],{"type":38,"tag":74,"props":2353,"children":2354},{},[2355],{"type":44,"value":2356},"Subscribe to regulatory authority communications",{"type":44,"value":2358}," (newsletters, RSS feeds, official announcements)",{"type":38,"tag":117,"props":2360,"children":2361},{},[2362,2367],{"type":38,"tag":74,"props":2363,"children":2364},{},[2365],{"type":44,"value":2366},"Track relevant legal publications",{"type":44,"value":2368}," for analysis of new developments",{"type":38,"tag":117,"props":2370,"children":2371},{},[2372,2377],{"type":38,"tag":74,"props":2373,"children":2374},{},[2375],{"type":44,"value":2376},"Review industry association updates",{"type":44,"value":2378}," for sector-specific guidance",{"type":38,"tag":117,"props":2380,"children":2381},{},[2382,2387],{"type":38,"tag":74,"props":2383,"children":2384},{},[2385],{"type":44,"value":2386},"Maintain a regulatory calendar",{"type":44,"value":2388}," of known upcoming deadlines, effective dates, and compliance milestones",{"type":38,"tag":117,"props":2390,"children":2391},{},[2392,2397],{"type":38,"tag":74,"props":2393,"children":2394},{},[2395],{"type":44,"value":2396},"Brief the legal team",{"type":44,"value":2398}," on material developments that affect the organization's processing activities",{"type":38,"tag":791,"props":2400,"children":2402},{"id":2401},"escalation-criteria",[2403],{"type":44,"value":2404},"Escalation Criteria",{"type":38,"tag":51,"props":2406,"children":2407},{},[2408],{"type":44,"value":2409},"Escalate regulatory developments to senior counsel or leadership when:",{"type":38,"tag":113,"props":2411,"children":2412},{},[2413,2418,2423,2428,2433],{"type":38,"tag":117,"props":2414,"children":2415},{},[2416],{"type":44,"value":2417},"A new regulation or guidance directly affects the organization's core business activities",{"type":38,"tag":117,"props":2419,"children":2420},{},[2421],{"type":44,"value":2422},"An enforcement action in the organization's sector signals heightened regulatory scrutiny",{"type":38,"tag":117,"props":2424,"children":2425},{},[2426],{"type":44,"value":2427},"A compliance deadline is approaching that requires organizational changes",{"type":38,"tag":117,"props":2429,"children":2430},{},[2431],{"type":44,"value":2432},"A data transfer mechanism the organization relies on is challenged or invalidated",{"type":38,"tag":117,"props":2434,"children":2435},{},[2436],{"type":44,"value":2437},"A regulatory authority initiates an inquiry or investigation involving the organization",{"type":38,"tag":82,"props":2439,"children":2441},{"id":2440},"tips",[2442],{"type":44,"value":2443},"Tips",{"type":38,"tag":1882,"props":2445,"children":2446},{},[2447,2457,2467],{"type":38,"tag":117,"props":2448,"children":2449},{},[2450,2455],{"type":38,"tag":74,"props":2451,"children":2452},{},[2453],{"type":44,"value":2454},"Be specific",{"type":44,"value":2456}," — \"We want to email all our users\" is better than \"marketing campaign.\"",{"type":38,"tag":117,"props":2458,"children":2459},{},[2460,2465],{"type":38,"tag":74,"props":2461,"children":2462},{},[2463],{"type":44,"value":2464},"Include the geography",{"type":44,"value":2466}," — Compliance requirements vary by jurisdiction.",{"type":38,"tag":117,"props":2468,"children":2469},{},[2470,2475],{"type":38,"tag":74,"props":2471,"children":2472},{},[2473],{"type":44,"value":2474},"Mention the data",{"type":44,"value":2476}," — What personal data is involved? This drives most compliance requirements.",{"type":38,"tag":2478,"props":2479,"children":2480},"style",{},[2481],{"type":44,"value":2482},"html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"items":2484,"total":2599},[2485,2501,2517,2533,2551,2568,2584],{"slug":2486,"name":2486,"fn":2487,"description":2488,"org":2489,"tags":2490,"stars":20,"repoUrl":21,"updatedAt":2500},"accessibility-review","run WCAG accessibility audits","Run a WCAG 2.1 AA accessibility audit on a design or page. Trigger with \"audit accessibility\", \"check a11y\", \"is this accessible?\", or when reviewing a design for color contrast, keyboard navigation, touch target size, or screen reader behavior before handoff.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2491,2494,2497],{"name":2492,"slug":2493,"type":16},"Accessibility","accessibility",{"name":2495,"slug":2496,"type":16},"Design","design",{"name":2498,"slug":2499,"type":16},"WCAG","wcag","2026-04-06T17:58:05.682394",{"slug":2502,"name":2502,"fn":2503,"description":2504,"org":2505,"tags":2506,"stars":20,"repoUrl":21,"updatedAt":2516},"account-research","research accounts for sales intel","Research a company or person and get actionable sales intel. Works standalone with web search, supercharged when you connect enrichment tools or your CRM. Trigger with \"research [company]\", \"look up [person]\", \"intel on [prospect]\", \"who is [name] at [company]\", or \"tell me about [company]\".",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2507,2510,2513],{"name":2508,"slug":2509,"type":16},"CRM","crm",{"name":2511,"slug":2512,"type":16},"Research","research",{"name":2514,"slug":2515,"type":16},"Sales","sales","2026-04-06T17:56:41.410418",{"slug":2518,"name":2518,"fn":2519,"description":2520,"org":2521,"tags":2522,"stars":20,"repoUrl":21,"updatedAt":2532},"analyze","answer data questions and run analyses","Answer data questions -- from quick lookups to full analyses. Use when looking up a single metric, investigating what's driving a trend or drop, comparing segments over time, or preparing a formal data report for stakeholders.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2523,2526,2529],{"name":2524,"slug":2525,"type":16},"Analytics","analytics",{"name":2527,"slug":2528,"type":16},"Data Analysis","data-analysis",{"name":2530,"slug":2531,"type":16},"SQL","sql","2026-04-06T17:57:21.593647",{"slug":2534,"name":2534,"fn":2535,"description":2536,"org":2537,"tags":2538,"stars":20,"repoUrl":21,"updatedAt":2550},"architecture","create and evaluate architecture decision records","Create or evaluate an architecture decision record (ADR). Use when choosing between technologies (e.g., Kafka vs SQS), documenting a design decision with trade-offs and consequences, reviewing a system design proposal, or designing a new component from requirements and constraints.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2539,2542,2544,2547],{"name":2540,"slug":2541,"type":16},"ADR","adr",{"name":2543,"slug":2534,"type":16},"Architecture",{"name":2545,"slug":2546,"type":16},"Documentation","documentation",{"name":2548,"slug":2549,"type":16},"Engineering","engineering","2026-04-06T17:57:49.26444",{"slug":2552,"name":2552,"fn":2553,"description":2554,"org":2555,"tags":2556,"stars":20,"repoUrl":21,"updatedAt":2567},"audit-support","support SOX 404 control testing","Support SOX 404 compliance with control testing methodology, sample selection, and documentation standards. Use when generating testing workpapers, selecting audit samples, classifying control deficiencies, or preparing for internal or external audits.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2557,2560,2563,2564],{"name":2558,"slug":2559,"type":16},"Audit","audit",{"name":2561,"slug":2562,"type":16},"Finance","finance",{"name":14,"slug":15,"type":16},{"name":2565,"slug":2566,"type":16},"SOX","sox","2026-04-06T17:57:36.714815",{"slug":2569,"name":2569,"fn":2570,"description":2571,"org":2572,"tags":2573,"stars":20,"repoUrl":21,"updatedAt":2583},"brand-review","review content against brand voice","Review content against your brand voice, style guide, and messaging pillars, flagging deviations by severity with specific before\u002Fafter fixes. Use when checking a draft before it ships, when auditing copy for voice consistency and terminology, or when screening for unsubstantiated claims, missing disclaimers, and other legal flags.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2574,2577,2580],{"name":2575,"slug":2576,"type":16},"Branding","branding",{"name":2578,"slug":2579,"type":16},"Marketing","marketing",{"name":2581,"slug":2582,"type":16},"Writing","writing","2026-04-06T17:58:19.548331",{"slug":2585,"name":2585,"fn":2586,"description":2587,"org":2588,"tags":2589,"stars":20,"repoUrl":21,"updatedAt":2598},"brand-voice-enforcement","enforce brand voice in content","This skill applies brand guidelines to content creation. It should be used when the user asks to \"write an email\", \"draft a proposal\", \"create a pitch deck\", \"write a LinkedIn post\", \"draft a presentation\", \"write a Slack message\", \"draft sales content\", or any content creation request where brand voice should be applied. Also triggers on \"on-brand\", \"brand voice\", \"enforce voice\", \"apply brand guidelines\", \"brand-aligned content\", \"write in our voice\", \"use our brand tone\", \"make this sound like us\", \"rewrite this in our tone\", or \"this doesn't sound on-brand\". Not for generating guidelines from scratch (use guideline-generation) or discovering brand materials (use discover-brand).\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2590,2591,2594,2597],{"name":2575,"slug":2576,"type":16},{"name":2592,"slug":2593,"type":16},"Communications","communications",{"name":2595,"slug":2596,"type":16},"Content Creation","content-creation",{"name":2581,"slug":2582,"type":16},"2026-04-06T18:00:23.528956",200,{"items":2601,"total":2778},[2602,2621,2633,2645,2664,2675,2696,2716,2726,2741,2749,2762],{"slug":2603,"name":2603,"fn":2604,"description":2605,"org":2606,"tags":2607,"stars":2618,"repoUrl":2619,"updatedAt":2620},"algorithmic-art","create algorithmic art with p5.js","Creating algorithmic art using p5.js with seeded randomness and interactive parameter exploration. Use this when users request creating art using code, generative art, algorithmic art, flow fields, or particle systems. Create original algorithmic art rather than copying existing artists' work to avoid copyright violations.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2608,2611,2612,2615],{"name":2609,"slug":2610,"type":16},"Creative","creative",{"name":2495,"slug":2496,"type":16},{"name":2613,"slug":2614,"type":16},"Generative Art","generative-art",{"name":2616,"slug":2617,"type":16},"JavaScript","javascript",161831,"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fskills","2026-04-06T17:56:15.455818",{"slug":2622,"name":2622,"fn":2623,"description":2624,"org":2625,"tags":2626,"stars":2618,"repoUrl":2619,"updatedAt":2632},"brand-guidelines","apply Anthropic brand colors and typography","Applies Anthropic's official brand colors and typography to any sort of artifact that may benefit from having Anthropic's look-and-feel. Use it when brand colors or style guidelines, visual formatting, or company design standards apply.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2627,2628,2629],{"name":2575,"slug":2576,"type":16},{"name":2495,"slug":2496,"type":16},{"name":2630,"slug":2631,"type":16},"Typography","typography","2026-04-06T17:56:05.042852",{"slug":2634,"name":2634,"fn":2635,"description":2636,"org":2637,"tags":2638,"stars":2618,"repoUrl":2619,"updatedAt":2644},"canvas-design","create posters and visual art as PNG or PDF","Create beautiful visual art in .png and .pdf documents using design philosophy. You should use this skill when the user asks to create a poster, piece of art, design, or other static piece. Create original visual designs, never copying existing artists' work to avoid copyright violations.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2639,2640,2641],{"name":2609,"slug":2610,"type":16},{"name":2495,"slug":2496,"type":16},{"name":2642,"slug":2643,"type":16},"PDF","pdf","2026-04-06T17:56:03.794732",{"slug":2646,"name":2646,"fn":2647,"description":2648,"org":2649,"tags":2650,"stars":2618,"repoUrl":2619,"updatedAt":2663},"claude-api","build apps with the Claude API","Reference for the Claude API \u002F Anthropic SDK — model ids, pricing, params, streaming, tool use, MCP, agents, caching, token counting, model migration.\nTRIGGER — read BEFORE opening the target file; don't skip because it \"looks like a one-liner\" — whenever: the prompt names Claude\u002FAnthropic in any form (Claude, Anthropic, Fable, Opus, Sonnet, Haiku, `anthropic`, `@anthropic-ai`, `claude-*`, `us.anthropic.*`, `[1m]`); the user asks about an LLM (pricing\u002Fmodel choice\u002Flimits\u002Fcaching) — never answer from memory; OR the task is LLM-shaped with provider unstated (agent\u002FMCP\u002Ftool-definition\u002Fmulti-agent\u002FRAG\u002FLLM-judge\u002Fcomputer-use; generate\u002Fsummarize\u002Fextract\u002Fclassify\u002Frewrite\u002Fconverse over NL; debugging refusals\u002Fcutoffs\u002Fstreaming\u002Ftool-calls\u002Ftokens).\nSKIP only when another provider is being worked on (overrides all triggers): OpenAI\u002FGPT\u002FGemini\u002FLlama\u002FMistral\u002FCohere\u002FOllama named in the query; OR `grep -rE 'openai|langchain_openai|google.generativeai|genai|mistralai|cohere|ollama'` over the project hits (run this grep FIRST if no provider named — don't Read the file).",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2651,2654,2655,2658,2660],{"name":2652,"slug":2653,"type":16},"Agents","agents",{"name":9,"slug":8,"type":16},{"name":2656,"slug":2657,"type":16},"Anthropic SDK","anthropic-sdk",{"name":2659,"slug":2646,"type":16},"Claude API",{"name":2661,"slug":2662,"type":16},"LLM","llm","2026-07-28T05:36:08.213335",{"slug":2665,"name":2665,"fn":2666,"description":2667,"org":2668,"tags":2669,"stars":2618,"repoUrl":2619,"updatedAt":2674},"doc-coauthoring","co-author documentation and technical specs","Guide users through a structured workflow for co-authoring documentation. Use when user wants to write documentation, proposals, technical specs, decision docs, or similar structured content. This workflow helps users efficiently transfer context, refine content through iteration, and verify the doc works for readers. Trigger when user mentions writing docs, creating proposals, drafting specs, or similar documentation tasks.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2670,2671],{"name":2545,"slug":2546,"type":16},{"name":2672,"slug":2673,"type":16},"Technical Writing","technical-writing","2026-04-06T17:56:14.18897",{"slug":2676,"name":2676,"fn":2677,"description":2678,"org":2679,"tags":2680,"stars":2618,"repoUrl":2619,"updatedAt":2695},"docx","create and edit Word documents","Use this skill whenever the user wants to create, read, edit, or manipulate Word documents (.docx files) or Word templates (.dotx files). Triggers include: any mention of 'Word doc', 'word document', '.docx', '.dotx', or requests to produce professional documents with formatting like tables of contents, headings, page numbers, or letterheads. Also use when extracting or reorganizing content from .docx or .dotx files, inserting or replacing images in documents, performing find-and-replace in Word files, working with tracked changes or comments, or converting content into a polished Word document. If the user asks for a 'report', 'memo', 'letter', 'template', or similar deliverable as a Word or .docx file, use this skill. Do NOT use for PDFs, spreadsheets, Google Docs, or general coding tasks unrelated to document generation.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2681,2684,2686,2689,2692],{"name":2682,"slug":2683,"type":16},"Documents","documents",{"name":2685,"slug":2676,"type":16},"DOCX",{"name":2687,"slug":2688,"type":16},"Office","office",{"name":2690,"slug":2691,"type":16},"Templates","templates",{"name":2693,"slug":2694,"type":16},"Word","word","2026-07-18T05:16:23.136271",{"slug":2697,"name":2697,"fn":2698,"description":2699,"org":2700,"tags":2701,"stars":2618,"repoUrl":2619,"updatedAt":2715},"frontend-design","design production-grade frontend interfaces","Guidance for distinctive, intentional visual design when building new UI or reshaping an existing one. Helps with aesthetic direction, typography, and making choices that don't read as templated defaults.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2702,2703,2706,2709,2712],{"name":2495,"slug":2496,"type":16},{"name":2704,"slug":2705,"type":16},"Frontend","frontend",{"name":2707,"slug":2708,"type":16},"React","react",{"name":2710,"slug":2711,"type":16},"Tailwind CSS","tailwind-css",{"name":2713,"slug":2714,"type":16},"UI Components","ui-components","2026-04-06T17:56:16.723469",{"slug":2717,"name":2717,"fn":2718,"description":2719,"org":2720,"tags":2721,"stars":2618,"repoUrl":2619,"updatedAt":2725},"internal-comms","write internal company communications","A set of resources to help me write all kinds of internal communications, using the formats that my company likes to use. Claude should use this skill whenever asked to write some sort of internal communications (status reports, leadership updates, 3P updates, company newsletters, FAQs, incident reports, project updates, etc.).",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2722,2723,2724],{"name":2592,"slug":2593,"type":16},{"name":2690,"slug":2691,"type":16},{"name":2581,"slug":2582,"type":16},"2026-04-06T17:56:20.695522",{"slug":2727,"name":2727,"fn":2728,"description":2729,"org":2730,"tags":2731,"stars":2618,"repoUrl":2619,"updatedAt":2740},"mcp-builder","build MCP servers","Guide for creating high-quality MCP (Model Context Protocol) servers that enable LLMs to interact with external services through well-designed tools. Use when building MCP servers to integrate external APIs or services, whether in Python (FastMCP) or Node\u002FTypeScript (MCP SDK).",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2732,2733,2736,2737],{"name":2652,"slug":2653,"type":16},{"name":2734,"slug":2735,"type":16},"API Development","api-development",{"name":2661,"slug":2662,"type":16},{"name":2738,"slug":2739,"type":16},"MCP","mcp","2026-04-06T17:56:10.357665",{"slug":2643,"name":2643,"fn":2742,"description":2743,"org":2744,"tags":2745,"stars":2618,"repoUrl":2619,"updatedAt":2748},"read edit and manipulate PDF files","Use this skill whenever the user wants to do anything with PDF files. This includes reading or extracting text\u002Ftables from PDFs, combining or merging multiple PDFs into one, splitting PDFs apart, rotating pages, adding watermarks, creating new PDFs, filling PDF forms, encrypting\u002Fdecrypting PDFs, extracting images, and OCR on scanned PDFs to make them searchable. If the user mentions a .pdf file or asks to produce one, use this skill.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2746,2747],{"name":2682,"slug":2683,"type":16},{"name":2642,"slug":2643,"type":16},"2026-04-06T17:56:02.483316",{"slug":2750,"name":2750,"fn":2751,"description":2752,"org":2753,"tags":2754,"stars":2618,"repoUrl":2619,"updatedAt":2761},"pptx","create and edit PowerPoint presentations","Use this skill any time a .pptx or .potx file is involved in any way — as input, output, or both. This includes: creating slide decks, pitch decks, or presentations; reading, parsing, or extracting text from any .pptx or .potx file (even if the extracted content will be used elsewhere, like in an email or summary); editing, modifying, or updating existing presentations; combining or splitting slide files; working with templates (.potx), layouts, speaker notes, or comments. Trigger whenever the user mentions \"deck,\" \"slides,\" \"presentation,\" or references a .pptx or .potx filename, regardless of what they plan to do with the content afterward. If a .pptx or .potx file needs to be opened, created, or touched, use this skill.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2755,2758],{"name":2756,"slug":2757,"type":16},"PowerPoint","powerpoint",{"name":2759,"slug":2760,"type":16},"Presentations","presentations","2026-07-18T05:16:24.1471",{"slug":2763,"name":2763,"fn":2764,"description":2765,"org":2766,"tags":2767,"stars":2618,"repoUrl":2619,"updatedAt":2777},"skill-creator","create and optimize agent skills","Create new skills, modify and improve existing skills, and measure skill performance. Use when users want to create a skill from scratch, edit, or optimize an existing skill, run evals to test a skill, benchmark skill performance with variance analysis, or optimize a skill's description for better triggering accuracy.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2768,2769,2770,2773,2776],{"name":2652,"slug":2653,"type":16},{"name":2545,"slug":2546,"type":16},{"name":2771,"slug":2772,"type":16},"Evals","evals",{"name":2774,"slug":2775,"type":16},"Performance","performance",{"name":2672,"slug":2673,"type":16},"2026-04-19T06:45:40.804",490]