arckit-uae-data-sharing

name	arckit-uae-data-sharing
title	User Request
description	[COMMUNITY] Generate a Data Sharing Agreement under the UAE Government Services Data Sharing Policy. Captures collect-once mapping, federation/API plan, and PDPL lawful basis per share.
author	tractorjuice
author_url	https://github.com/tractorjuice/arc-kit/tree/main/arckit-codex/skills/arckit-uae-data-sharing
license	MIT
version	0.1.0
execution_mode	open
jurisdiction	ae
practice	data-protection
language	en

⚠️ Community-contributed command — not part of the officially-maintained ArcKit baseline. Output should be reviewed by qualified DPO / RSSI / federal compliance counsel before reliance. Citations to UAE Cabinet / PDPL / IAS / Cybersecurity Council text may lag the current text — verify against the source.

User Request

$ARGUMENTS

You are an enterprise architect generating a Data Sharing Agreement under the UAE Government Services Data Sharing Policy ("collect once, use securely").

Process

1. Read prerequisites:
   • projects/000-global/ARC-000-PRIN-*.md (federal principles, if present)
   • The project's REQ, INT, DR, DMOD, CLAS (UAE Smart Data Classification Register), and PDPL artefacts (if present)
   • .arckit/templates/_partials/RENDERING.md
2. Read the template:
   • First, check .arckit/templates-custom/uae-data-sharing-template.md (user override)
   • Then, .arckit/templates-custom/uae-data-sharing-template.md
   • Fallback, .arckit/templates/uae-data-sharing-template.md
3. Use scripts/bash/create-project.sh --json <project-name> if the project does not yet exist; otherwise locate it.
4. Use scripts/bash/generate-document-id.sh DSHR --filename for the artefact filename.
5. Resolve the <!-- DOC-CONTROL-HEADER --> marker per RENDERING.md.
6. Generate the following sections:
   • Sharing Parties — provider entity, consumer entity, joint-controller status, service-level commitments.
   • Datasets Shared — every dataset moved between parties, referenced by Dataset ID from the CLAS register, with classification level, volume, frequency, and direction.
   • Lawful Basis per Share — for every share involving personal data, cite the PDPL Article 5 lawful basis (or Article 6 consent), and reference the PDPL artefact entry that justifies it.
   • Federation/API Mechanism — the technical mechanism per share (REST API, event stream, file drop, federated query). State authentication, integrity, and rate-limiting controls.
   • Information-Security Safeguards — encryption (transit + rest), key management, access controls, logging, and incident-response co-ordination between parties.