privacy-law-monitoring

Guides privacy law change monitoring and impact assessment for multi-jurisdiction organisations. Covers regulatory tracking sources, change classification, impact scoring methodology, and implementation prioritisation. Keywords: law monitoring, regulatory tracking, change management, impact assessment, implementation priority.

Jump to install

Repository: ThomasMoreAI/legal-skills-open
Last source activity: June 1, 2026 at 17:27
Detected SKILL.md language: English
Stars: 40
Forks: 4

Install options

The review-first prompt is selected by default. You can switch to a direct command or download a local copy.

Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.

A direct command skips the review prompt. Inspect the source before running it.

npx skills add https://github.com/ThomasMoreAI/legal-skills-open --skill privacy-law-monitoring

The command stays on one line. Scroll horizontally to inspect it before copying.

Prefer a local copy? Download the files currently available to SkillsMP.

Review the source files

Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.

SKILL.md

Source instructions · Read-only preview

Back to search Back to installation

fetching-arbitration-rules

Use when retrieving arbitration institutional rules (ICC, LCIA, SCC, SIAC, HKIAC, VIAC, МКАС/МАК при ТПП України, UNCITRAL) — fetching current version, verifying redaction applicable to the date of arbitration agreement, constructing URLs for official rule texts

2026-06-12

determining-pl-request-regime

Use when choosing the Polish legal regime for letters, requests, applications, complaints, petitions, public-information requests, KPA filings, PPSA complaints, RODO access requests, registry extracts, court-file access, tax/ZUS/cudzoziemcy/USC procedures, or professional lawyer letters. Prevents mixing UDIP, KPA, PPSA, RODO, registry, special-procedure, and advocate/radca letter regimes.

2026-06-12

applying-new-york-convention

Use when preparing applications for recognition and enforcement of foreign arbitral awards in Poland, applications for setting aside arbitral awards under KPC art. 1205–1211, or opposing such applications — mapping Article V of the 1958 New York Convention to art. 1214–1215 of the Polish KPC, identifying grounds for refusal, structuring public policy arguments

2026-06-12

View all from this repository

name	privacy-law-monitoring
title	Privacy Law Change Monitoring and Impact Assessment
description	Guides privacy law change monitoring and impact assessment for multi-jurisdiction organisations. Covers regulatory tracking sources, change classification, impact scoring methodology, and implementation prioritisation. Keywords: law monitoring, regulatory tracking, change management, impact assessment, implementation priority.
author	mukul975
author_url	https://github.com/mukul975/Privacy-Data-Protection-Skills/tree/main/skills/privacy/privacy-law-monitoring
license	Apache-2.0
version	0.1.0
execution_mode	open
jurisdiction	cross-jurisdiction
practice	data-protection
language	en

Source Type	Examples	Monitoring Frequency
Official gazettes	EU Official Journal, Brazil Diário Oficial da União, India Gazette, PRC State Council announcements	Daily automated monitoring
Regulator websites	EDPB, CNIL, ICO, ANPD, CAC, PIPC, PPC, OAIC, PDPC (Singapore), PDPC (Thailand)	Daily automated monitoring
Regulatory enforcement decisions	DPA decision databases, court rulings	Weekly review
Public consultations	Draft regulations, calls for comment	Weekly review

Source Type	Examples	Monitoring Frequency
Law firm alerts and briefings	Baker McKenzie Global Privacy Radar, DLA Piper Data Protection Laws of the World, Hogan Lovells Chronicle of Data Protection	Weekly digest
Industry associations	IAPP (International Association of Privacy Professionals), GPA (Global Privacy Assembly)	Weekly review
Academic publications	Computer Law & Security Review, International Data Privacy Law (IDPL)	Monthly review
Regulatory guidance and FAQs	EDPB guidelines, CNIL guides, PPC guidelines, ANPD resolutions	As published

Source Type	Examples	Monitoring Frequency
Legislative tracking	National parliament agendas, EU legislative observatory, US Congressional trackers	Monthly review
Political and policy signals	Government policy papers, party manifestos, ministerial speeches

name	privacy-law-monitoring
title	Privacy Law Change Monitoring and Impact Assessment
description	Guides privacy law change monitoring and impact assessment for multi-jurisdiction organisations. Covers regulatory tracking sources, change classification, impact scoring methodology, and implementation prioritisation. Keywords: law monitoring, regulatory tracking, change management, impact assessment, implementation priority.
author	mukul975
author_url	https://github.com/mukul975/Privacy-Data-Protection-Skills/tree/main/skills/privacy/privacy-law-monitoring
license	Apache-2.0
version	0.1.0
execution_mode	open
jurisdiction	cross-jurisdiction
practice	data-protection
language	en

privacy-law-monitoring

Install options

Review the source files

Privacy Law Change Monitoring and Impact Assessment

Overview

Monitoring Framework

Tier 1 Sources: Official Regulatory Publications

Tier 2 Sources: Interpretive and Analytical

Tier 3 Sources: Horizon Scanning

Privacy Law Change Monitoring and Impact Assessment

Overview

Monitoring Framework

Tier 1 Sources: Official Regulatory Publications

Tier 2 Sources: Interpretive and Analytical

Tier 3 Sources: Horizon Scanning

Change Classification Framework

Classification Categories

Classification Process

Impact Scoring Methodology

Impact Dimensions

Impact Score Calculation

Impact Categories

Implementation Prioritisation

Prioritisation Matrix

Implementation Workflow

Zenith Global Enterprises Monitoring Programme

Current Monitoring Scope

Recent Change Log

Escalation Matrix

Annual Monitoring Metrics

Category	Code	Definition	Response Timeline
New law enacted	LAW-NEW	A comprehensive data protection law enacted in a jurisdiction where the organisation operates or plans to operate	90 days to full assessment; implementation per gap analysis
Major amendment	LAW-AMD	Significant amendment to an existing law (new rights, new obligations, new penalties)	60 days to impact assessment; implementation per amendment effective date
Regulatory guidance	REG-GUID	New guidance, guidelines, or interpretive documents from a supervisory authority	30 days to review; adapt practices within 90 days if material
Enforcement decision	ENF-DEC	Notable enforcement action establishing new precedent or interpretation	14 days to relevance assessment; adapt practices within 60 days if applicable
Draft legislation	DRAFT-LEG	Published bill, draft regulation, or public consultation	Track; no immediate action; prepare impact assessment during consultation period
Adequacy decision	ADQ-DEC	New adequacy decision or adequacy revocation by a data protection authority	30 days to assess impact on cross-border transfer mechanisms
International development	INT-DEV	Treaty, mutual recognition arrangement, or international framework change	30 days to assess relevance

Dimension	Weight	Scoring (1-5)
Geographic scope	25%	1 = single jurisdiction; 3 = regional; 5 = global applicability
Operational change	30%	1 = policy update only; 3 = process change; 5 = system/infrastructure change
Data subject volume	15%	1 = <10K; 2 = 10K-100K; 3 = 100K-500K; 4 = 500K-1M; 5 = >1M
Enforcement risk	20%	1 = guidance only; 3 = active enforcement expected; 5 = enforcement actions in progress
Timeline pressure	10%	1 = >12 months; 2 = 6-12 months; 3 = 3-6 months; 4 = 1-3 months; 5 = <1 month

Score Range	Category	Response
4.0 - 5.0	Critical	Immediate project initiation; executive sponsor; dedicated resources
3.0 - 3.9	High	Prioritised project within 30 days; CPO oversight
2.0 - 2.9	Medium	Planned implementation within 90 days; privacy team lead
1.0 - 1.9	Low	Incorporated into next review cycle; routine update

Factor	Weight	Assessment Criteria
Legal deadline	30%	How much time until the change takes effect?
Penalty exposure	25%	What is the maximum potential penalty for non-compliance?
Enforcement activity	20%	Is the regulator actively enforcing this requirement?
Business impact	15%	How significantly does the change affect current operations?
Reputational risk	10%	Would non-compliance result in public attention or customer concern?

Region	Jurisdictions Monitored	Primary Laws
Europe	EU 27 + UK + Switzerland + Norway	GDPR, UK GDPR, nDSG, Personvernloven
Americas	Brazil, USA (12 states), Canada	LGPD, State laws, PIPEDA
Asia-Pacific	China, Japan, Korea, India, Singapore, Thailand, Australia	PIPL, APPI, PIPA, DPDP, PDPA (SG), PDPA (TH), Privacy Act
Middle East	UAE, Saudi Arabia	PDPL (SA), DPL (UAE)

Date	Jurisdiction	Change	Classification	Impact Score	Status
Jan 2026	India	DPDP Rules published for consultation	DRAFT-LEG	3.8 (High)	Tracking; preparing response
Feb 2026	Australia	Privacy Act reform amendments enacted	LAW-AMD	4.2 (Critical)	Implementation project initiated
Feb 2026	EU	EDPB guidelines on AI and GDPR	REG-GUID	3.1 (High)	Under review by DPO team
Mar 2026	China	CAC updated cross-border transfer guidance	REG-GUID	3.5 (High)	Assessment in progress
Mar 2026	Brazil	ANPD Resolution 20 on international transfers	REG-GUID	3.0 (High)	Under review

Impact Category	Notification Recipients	Response Time
Critical (4.0-5.0)	CPO, General Counsel, CEO, Board Privacy Committee	24 hours
High (3.0-3.9)	CPO, Regional DPOs, Legal	72 hours
Medium (2.0-2.9)	Regional DPOs, Privacy Operations	1 week
Low (1.0-1.9)	Privacy Operations	Next scheduled review

Metric	2025 Actual	2026 Target
Regulatory changes tracked	287	300+
Impact assessments completed	42	50+
Average assessment turnaround (days)	12	<10
Implementation completion rate	94%	>95%
Overdue implementations	3	0

privacy-law-monitoring

Source facts

Install options

Review the source files

More from this repository

Privacy Law Change Monitoring and Impact Assessment

Overview

Monitoring Framework

Tier 1 Sources: Official Regulatory Publications

Tier 2 Sources: Interpretive and Analytical

Tier 3 Sources: Horizon Scanning

More from this repository

Privacy Law Change Monitoring and Impact Assessment

Overview

Monitoring Framework

Tier 1 Sources: Official Regulatory Publications

Tier 2 Sources: Interpretive and Analytical

Tier 3 Sources: Horizon Scanning

Change Classification Framework

Classification Categories

Classification Process

Impact Scoring Methodology

Impact Dimensions

Impact Score Calculation

Impact Categories

Implementation Prioritisation

Prioritisation Matrix

Implementation Workflow

Zenith Global Enterprises Monitoring Programme

Current Monitoring Scope

Recent Change Log

Escalation Matrix

Annual Monitoring Metrics