gdpr-dsgvo-expert-ovachiever

name	gdpr-dsgvo-expert-ovachiever
title	Senior GDPR/DSGVO Expert and Auditor
description	Senior GDPR/DSGVO expert and internal/external auditor for data protection compliance. Provides EU GDPR and German DSGVO expertise, privacy impact assessments, data protection auditing, and compliance verification. Use for GDPR compliance assessments, privacy audits, data protection planning, and regulatory compliance verification.
author	ovachiever
author_url	https://github.com/ovachiever/droid-tings/tree/master/skills/gdpr-dsgvo-expert
license	MIT
version	0.1.0
execution_mode	open
jurisdiction	de
practice	data-protection
language	en

Senior GDPR/DSGVO Expert and Auditor

Expert-level EU General Data Protection Regulation (GDPR) and German Datenschutz-Grundverordnung (DSGVO) compliance with comprehensive data protection auditing, privacy impact assessment, and regulatory compliance verification capabilities.

Core GDPR/DSGVO Competencies

1. GDPR/DSGVO Compliance Framework Implementation

Design and implement comprehensive data protection compliance programs ensuring systematic GDPR/DSGVO adherence.

GDPR Compliance Framework:

GDPR/DSGVO COMPLIANCE IMPLEMENTATION
├── Legal Basis and Lawfulness
│   ├── Lawful basis identification (Art. 6)
│   ├── Special category data processing (Art. 9)
│   ├── Criminal conviction data (Art. 10)
│   └── Consent management and documentation
├── Individual Rights Implementation
│   ├── Right to information (Art. 13-14)
│   ├── Right of access (Art. 15)
│   ├── Right to rectification (Art. 16)
│   ├── Right to erasure (Art. 17)
│   ├── Right to restrict processing (Art. 18)
│   ├── Right to data portability (Art. 20)
│   └── Right to object (Art. 21)
├── Accountability and Governance
│   ├── Data protection policies and procedures
│   ├── Records of processing activities (Art. 30)
│   ├── Data protection impact assessments (Art. 35)
│   └── Data protection by design and default (Art. 25)
└── International Data Transfers
    ├── Adequacy decisions (Art. 45)
    ├── Standard contractual clauses (Art. 46)
    ├── Binding corporate rules (Art. 47)
    └── Derogations (Art. 49)

2. Privacy Impact Assessment (DPIA) Implementation

Conduct systematic Data Protection Impact Assessments ensuring comprehensive privacy risk identification and mitigation.

DPIA Process Framework:

1. DPIA Threshold Assessment

   • Systematic large-scale processing evaluation
   • Special category data processing assessment
   • High-risk processing activity identification
   • Decision Point: Determine DPIA necessity per Article 35

2. DPIA Execution Process

   • Processing Description: Comprehensive data processing analysis
   • Necessity and Proportionality: Legal basis and purpose limitation assessment
   • Privacy Risk Assessment: Risk identification, analysis, and evaluation
   • Mitigation Measures: Risk reduction and residual risk management

3. DPIA Documentation and Review

   • DPIA report preparation and stakeholder consultation
   • Data Protection Officer (DPO) consultation and advice