GDPR/CCPA Compliance Assistant
Automate GDPR/CCPA compliance audits, agreements, and breach documentation
What You Can Do
Generate privacy impact assessments, data processing agreements, and breach notification templates tailored to your organization's specific data flows and regulatory obligations. You'll produce audit-ready compliance documentation, identify data handling risks, and streamline responses to regulatory requirements and data subject requests.
Features
Automatically analyzes your data processing activities and generates comprehensive PIAs that identify privacy risks, processing purposes, lawful basis, and mitigation measures aligned with GDPR Article 35 requirements.
Creates customized data processing agreements between controllers and processors, including data subject rights clauses, subprocessor obligations, and Standard Contractual Clauses (SCCs) for international transfers.
Generates incident response workflows and notification templates for GDPR Article 33/34 compliance, including timely assessment of breach impact, regulatory notifications, and affected individual communications.
Produces detailed audit findings across data inventory, consent mechanisms, retention policies, vendor agreements, and security controls, with prioritized remediation recommendations.
Automates responses to access, deletion, portability, and objection requests (Articles 12-22) with verification templates, data compilation workflows, and compliance timelines.
Drafts consent forms, privacy policies, cookie notices, and pre-ticked opt-in requirements aligned with GDPR and state privacy laws (CCPA, CPRA, CPA, VPMPA).
Evaluates adequacy decisions, Standard Contractual Clauses, and Binding Corporate Rules for international data transfers; identifies supplementary safeguards needed for non-adequate countries.
Example Output
Privacy Impact Assessment Summary:
- Processing Activity: Customer email marketing database
- Lawful Basis: Explicit consent (Art. 6(1)(a))
- Risk Level: Medium (email data retention)
- Recommendation: Implement 18-month auto-purge; document consent mechanism
Data Processing Agreement Section:
- Processor obligations per Art. 28(3): ✓ Confidentiality, ✓ Security, ✓ Sub-processor authorization
- Data subject rights assistance: ✓ Access requests, ✓ Deletion, ✓ Portability
- International transfer safeguard: SCCs with supplementary encryption
Breach Notification Template (ready to customize):
- Incident Type: Unauthorized access to customer names/emails
- GDPR Impact: Low-moderate risk (no passwords/payment data)
- Notification Timeline: Send to authorities within 72 hours if risk-based
- Affected Individuals: Estimated 2,400 users; notification via email + website banner
What's Included
- PIA & DPIA Templates: Structured assessment forms that guide you through lawful basis, processing purposes, recipient lists, retention schedules, and risk mitigation strategies.
- Legal Agreement Generators: Dynamic DPA, processor amendment, subprocessor clause, and SCCs that adapt to your data flows and third-party vendor details.
- Breach Response Playbook: Step-by-step workflows for assessing breach impact, calculating notification timelines, drafting regulator letters, and communicating with affected users.
- Compliance Audit Checklist: Verification tool covering data inventory completeness, consent management, vendor DPAs, data retention policies, access controls, and security incident procedures.
- Policy & Notice Templates: Ready-to-customize privacy policies, cookie notices, consent forms, and data subject rights exercise procedures compliant with GDPR, CCPA, CPRA, and emerging US state laws.
Who It's For
- Data Protection Officers (DPOs)
- Compliance & Legal Teams
- Privacy Engineers & Product Managers
- Information Security Directors
- Third-party Risk & Vendor Managers
Best For
- Conducting data protection impact assessments
- Drafting and reviewing data processing agreements
- Responding to data breach incidents
- Handling data subject access and deletion requests
- Preparing for compliance audits and regulatory inspections
You might also like
Generate SEC-compliant board materials, governance documentation, and risk disclosures that meet Delaware corporate law standards and best practices. You can prepare meeting agendas, board resolutions, committee charters, conflict disclosures, and minutes templates—all with embedded compliance logic and audit trails. This skill streamlines board administration by automating routine documentation while ensuring every template meets regulatory requirements.
by joabgonzalez
You get a systematic HIPAA compliance audit that evaluates your healthcare operations against the Privacy and Security Rules, identifies gaps by severity level, and generates prioritized remediation roadmaps. The skill scores your overall compliance risk and delivers actionable findings with specific remediation steps, timelines, and ownership assignments so you can strategically close compliance gaps and reduce breach risk.
by joabgonzalez
Analyze your board's practices, policies, and documentation to identify governance compliance gaps and fiduciary duty risks. You receive expert-level legal review findings with prioritized recommendations for liability mitigation. The skill evaluates your governance framework against industry best practices and regulatory requirements.
by joabgonzalez
You can design complete campaign architectures that escalate strategically from education through direct action, with tailored messaging for different audiences (allies, decision-makers, public). Map power dynamics to identify leverage points, build coalition strategies across organizations, and diagnose why campaigns stall so you can adjust tactics without abandoning strategy.
by joabgonzalez
You can rapidly analyze dozens or hundreds of qualitative responses—interviews, focus groups, open-ended survey answers, and participant feedback—to extract themes, patterns, and evidence of program impact. Claude codes responses against your logic model or emergent themes, flags anomalies where outcomes diverge from expectations, and generates frequency tables and quote libraries that substantiate your evaluation reports with real participant data.
by joabgonzalez
You can systematically extract key compliance obligations from regulatory policies, create multi-jurisdiction comparison matrices, and assess organizational impact across different legal environments. Claude analyzes policy language, identifies specific requirements tied to business functions, and generates actionable implementation roadmaps with timelines and risk assessments.
by joabgonzalez
You can develop complete campaign blueprints that integrate strategy, stakeholder analysis, and tactical execution. This skill guides you through defining your campaign's theory of change, mapping constituencies and opposition, crafting unified messaging frameworks, sequencing campaign phases, and generating specific advocacy materials. The result is a reusable strategic document that aligns your entire team and ensures consistent messaging across all constituencies.
by joabgonzalez
You can synthesize heterogeneous monitoring data—quantitative metrics, qualitative interviews, financial records, and beneficiary case studies—into coherent impact narratives with established evidence hierarchies and causal chains. This skill helps you translate raw data into funder-ready reports, dashboards, and grant narratives that demonstrate program effectiveness with methodological rigor. You'll identify which program activities drove the strongest outcomes and address funder skepticism with credible, data-backed storytelling.
by joabgonzalez