Regulatory Gap Analyzer
Audit business processes against GDPR, CCPA, HIPAA, SOC2 — generate prioritized remediation roadmaps
What You Can Do
You can rapidly audit your organization's business processes and documentation against GDPR, CCPA, HIPAA, and SOC2 requirements. The skill maps your current state to regulatory obligations, identifies specific gaps and missing controls, assigns risk severity based on penalty exposure, and generates prioritized remediation roadmaps with timelines and dependencies — all formatted for board presentations and audit committee review.
Features
aligns current processes against GDPR, CCPA, HIPAA, and SOC2 control requirements simultaneously
assigns Critical, High, Medium, Low ratings based on regulatory penalty exposure and operational impact
pinpoints documentation deficiencies, control gaps, and process misalignments with specific fix actions
sequences remediation activities with dependencies, effort estimates, and resource requirements
produces board-ready compliance status reports with risk heat maps and investment priorities
formats findings and remediation plans to meet auditor and regulator expectations
clarifies prerequisites and sequencing to optimize remediation resource allocation
Example Output
Gap Summary: 3 Critical gaps (GDPR data processing agreements, HIPAA audit logging), 7 High gaps (CCPA deletion procedures, SOC2 change management), 12 Medium gaps.
Sample Gap Entry:
- Gap: GDPR Data Processing Agreements missing with 8 third-party vendors
- Risk Level: Critical
- Remediation: Draft DPA template, execute with all vendors, document proof of execution
- Timeline: 6 weeks
- Dependency: Legal review required before vendor outreach
Executive Summary Heat Map: 28% Critical/High gaps requiring Q1 2024 focus; SOC2 audit readiness at 65%; CCPA deletion workflow requires immediate engineering resource allocation.
What's Included
- SKILL.md instruction file with audit methodology and framework requirements:
- Multi-framework compliance mapping matrix (GDPR/CCPA/HIPAA/SOC2 control checklist):
- Gap severity scoring rubric and penalty exposure lookup table:
- Remediation roadmap template with timeline and dependency fields:
- Executive summary template for board/audit committee presentation:
- Sample audit responses for common gap categories:
Who It's For
- General counsel preparing for regulatory audits or audit committee presentations
- Compliance officers building or validating compliance programs and control environments
- External legal advisors conducting due diligence, pre-IPO reviews, or post-acquisition compliance baselines
- Risk management teams prioritizing security and compliance investments
- Privacy officers managing cross-jurisdictional data handling obligations and privacy by design
Best For
- SOC2 Type II audit preparation and third-party security assessments
- Regulatory inquiry responses and audit notice remediation planning
- Business line onboarding or acquisition compliance baseline establishment
- Annual compliance health checks and compliance program validation
- Post-incident remediation roadmap development and board reporting
You might also like
Generate privacy impact assessments, data processing agreements, and breach notification templates tailored to your organization's specific data flows and regulatory obligations. You'll produce audit-ready compliance documentation, identify data handling risks, and streamline responses to regulatory requirements and data subject requests.
by joabgonzalez
Conduct thorough GDPR/CCPA compliance audits by analyzing your data handling practices, identifying gaps against regulatory requirements, and generating comprehensive risk assessment matrices. You'll receive data flow documentation, control assessments, and actionable remediation recommendations tailored to your organization's specific context. This skill transforms complex privacy regulations into clear, measurable compliance metrics and visual risk profiles.
by skillslib
You can systematically audit your code and data flows to uncover privacy compliance risks across GDPR, CCPA, and other regulatory frameworks. The skill maps where personally identifiable information is collected, processed, stored, and transmitted—then validates that consent mechanisms, data minimization practices, retention policies, and deletion implementations meet legal requirements. This catches compliance gaps early, before they result in regulatory fines or enforcement actions.
by heygen-com