| name | Privacy Policy |
| description | GDPR-compliant privacy framework, privacy by design, and data subject rights |
| license | Apache-2.0 |
| version | 1.0 |
| author | Hack23 AB |
| tags | ["privacy","gdpr","data-protection"] |
| category | security |
| frameworks | ["GDPR","ISO 27001:2022","NIST CSF 2.0"] |
| related_policies | ["Privacy_Policy.md"] |
🔒 Privacy Policy Skill
🎯 Purpose
Enforce GDPR-compliant privacy controls and privacy-by-design principles, based on Privacy Policy.
Key Principle: "Privacy through transparency and user control."
📚 Scope
- 🔐 Privacy by Design Principles
- 👤 Data Subject Rights (GDPR Articles 15-22)
- 📋 Consent Management
- 🔍 Privacy Impact Assessments
- 🛡️ Data Protection Measures
- 📊 Breach Notification (72-hour requirement)
⚙️ Security Rules
MUST Requirements
privacy_by_design:
data_minimization:
- collect_only_necessary: purpose_specific_data
- retention_limits: delete_when_no_longer_needed
- anonymization: pseudonymize_where_possible
user_controls:
- transparent_collection: clear_privacy_notices
- consent_granular: per_processing_purpose
- opt_out_easy: simple_withdrawal_mechanism
technical_measures:
- encryption: data_at_rest_and_in_transit
- access_controls: role_based_least_privilege
- audit_logging: track_personal_data_access
gdpr_compliance:
lawful_basis:
- identify_basis: [consent, contract, , ]
