Gdpr Dsgvo Expert

What it does

This skill acts as a senior GDPR/DSGVO expert and auditor, providing guidance on EU General Data Protection Regulation (GDPR) and German Datenschutz-Grundverordnung (DSGVO) compliance. It enables AI agents to assist with implementing data protection programs, conducting Privacy Impact Assessments (DPIAs), and managing data subject rights. The skill offers expertise in areas like lawful basis identification, consent management, risk assessment, and international data transfers.

When to use it

• You need help understanding the legal requirements of GDPR or DSGVO for your organization.
• You are preparing a Data Protection Impact Assessment (DPIA) for a new project or system.
• You receive data subject requests (e.g., access, rectification, erasure) and need guidance on how to fulfill them correctly.
• You're unsure about the lawful basis for processing specific types of personal data.
• You are implementing international data transfers and require assistance with adequacy decisions or standard contractual clauses.

Key capabilities

• GDPR/DSGVO Compliance Framework Implementation: Design and implement comprehensive data protection programs.
• Privacy Impact Assessment (DPIA) Implementation: Conduct DPIAs, including threshold assessment, risk identification, and mitigation.
• Data Subject Rights Management: Implement processes for fulfilling individual rights requests like access, rectification, and erasure.
• Expertise in areas such as lawful basis identification (Art. 6), special category data processing (Art. 9), consent management, and international data transfers (Art. 45-49).

Example prompts

• "What is the lawful basis for processing customer email addresses?"
• "Can you help me assess if a DPIA is necessary for our new marketing campaign?"
• "How should we respond to a data subject's request for access to their personal information?"
• “Explain the requirements of Article 35 regarding Data Protection Impact Assessments.”

Tips & gotchas

• This skill provides expert-level guidance but is not a substitute for legal advice. Always consult with qualified legal professionals for specific compliance needs.
• The skill covers both GDPR and DSGVO, so be mindful of the context when asking questions.