All authors
Claude Skills by ThomasMoreAI
github.com/ThomasMoreAI20,252 skills4 installs4,077 views
- Privacy Data SharingBuild privacy-preserving data sharing platforms using synthetic data generation with the SDV library, data clean rooms, secure enclaves, and utility measurement. Covers end-to-end architecture for sharing analytical datasets while preserving individual privacy guarantees.Votes: 0GitHub stars: 85
- Privacy Engineering SandbaseaiUse when implementing or auditing privacy controls in products, infrastructure, analytics, or data flows; translate privacy principles into classification, minimization, consent, subject-rights, retention, vendor, and deletion evidence.Votes: 0GitHub stars: 85
- Privacy Maturity ModelGuides privacy program maturity assessment using the AICPA/CIPT Privacy Maturity Model with five levels: Ad Hoc, Repeating, Defined, Managed, and Optimized. Covers assessment methodology across ten privacy domains, scoring criteria, gap analysis, maturity roadmap generation, and benchmarking against industry peers. Keywords: privacy maturity, AICPA, maturity model, assessment, roadmap, benchmarking.Votes: 0GitHub stars: 85
- Privacy Metrics DashboardBuild privacy KPI dashboards tracking DSAR volume and response time, breach count and severity, DPIA completion rate, training coverage, and consent rates. Includes metric definitions, data collection patterns, visualization designs, and executive reporting templates for privacy program measurement.Votes: 0GitHub stars: 85
- Privacy Program MetricsGuides privacy program effectiveness measurement including leading and lagging indicators, KPI definition, benchmarking methodology, executive reporting formats, board-level privacy dashboards, and metric-driven program improvement. Covers operational, compliance, risk, and strategic privacy metrics across the program lifecycle. Keywords: privacy metrics, KPIs, benchmarking, executive reporting, dashboard, program effectiveness.Votes: 0GitHub stars: 85
- Privacy Record LinkageImplement privacy-preserving record linkage across datasets using Bloom filter encoding, secure hash matching, threshold tuning for precision and recall, and false positive management. Enables entity resolution without exposing raw personally identifiable information between parties.Votes: 0GitHub stars: 85
- Privacy Threshold AnalysisGuides the Privacy Threshold Analysis screening process to determine whether a full DPIA is required. Provides a quick-screen questionnaire, threshold criteria based on WP248rev.01, escalation triggers, and documentation requirements. Activate when evaluating new processing activities, system changes, or procurement decisions. Keywords: PTA, privacy threshold analysis, DPIA screening, quick-screen, threshold criteria, WP248, escalation triggers.Votes: 0GitHub stars: 85
- Processor Ropa CreationCreates GDPR Article 30(2) Records of Processing Activities for data processors with all four mandatory fields: processor and controller names and contact details, categories of processing, third country transfers, and security measures description. Activate for processor RoPA, Art. 30(2), processor records, sub-processor documentation.Votes: 0GitHub stars: 85
- Prompt Pack Ai System Data Governance Framework SboghossianUse when drafting a data governance framework specifically for an organization's AI and machine learning systems, addressing training data requirements, bias mitigation, data minimization, purpose limitation, transparency obligations, individual rights in automated decision-making, and compliance with emerging AI regulations. Covers privacy and data protection across MENA and global jurisdictions.Votes: 0GitHub stars: 85
- Prompt Pack Cookie Policy SboghossianUse when a company needs to draft or update a Cookie Policy for its website or app, explaining the types of cookies used (essential, analytics, marketing), their purposes and durations, third-party cookies, and how users manage preferences. Must comply with the jurisdiction's applicable law — GDPR and ePrivacy Directive for EU; UAE PDPL and TDRA guidance; KSA NDMO regulations; DIFC/ADGM DP Law; Lebanon Law No. 81 of 2018 (where applicable). Requires a cookie consent mechanism to be implemente...Votes: 0GitHub stars: 85
- Prompt Pack Data Breach Response Plan SboghossianUse when a company needs to draft an internal Data Breach Response Plan covering incident detection and classification, initial assessment, containment, notification to regulators and affected individuals, documentation, post-incident review, and role assignments. MENA-aware: covers UAE PDPL (72-hour notification), DIFC DP Law, ADGM DP Regs, KSA PDPL, GDPR, and UK GDPR notification requirements with their different timelines and thresholds.Votes: 0GitHub stars: 85
- Prompt Pack Data Processing Agreement SboghossianUse when a data controller needs to formalise its relationship with a data processor under a Data Processing Agreement (DPA), covering GDPR Article 28 requirements, security obligations, sub-processor approval, audit rights, and breach notification. MENA-aware: DIFC DP Law Art. 26, ADGM DP Regs, UAE PDPL, KSA PDPL all require controller-processor agreements with broadly similar content. Essential for any cloud, SaaS, or outsourcing arrangement.Votes: 0GitHub stars: 85
- Prompt Pack Data Retention Policy SboghossianUse when a company needs to draft a Data Retention Policy specifying how long different categories of personal and business data are retained, the legal and business justification for each retention period, secure deletion procedures, and litigation hold protocols. MENA-aware: covers UAE PDPL, DIFC DP Law, ADGM DP Regs, KSA PDPL, and Lebanon/Egypt frameworks, as well as GDPR and commercial/regulatory retention minimums across GCC, EU, and UK.Votes: 0GitHub stars: 85
- Prompt Pack Data Subject Access Request Procedure SboghossianUse when a company needs to draft an internal procedure for handling Data Subject Access Requests (DSARs) or equivalent individual rights requests under applicable data protection law. Covers identity verification, search protocols, response timelines, exemptions assessment, format of response, and escalation. MENA-aware: UAE PDPL, DIFC DP Law, ADGM DP Regs, KSA PDPL alongside GDPR and UK GDPR; timelines and exemptions differ by jurisdiction.Votes: 0GitHub stars: 85
- Prompt Pack Privacy Impact Assessment SboghossianUse when conducting a privacy impact assessment (PIA) or data protection impact assessment (DPIA) for a new project, system, or product that processes personal data. Identifies privacy risks, assesses necessity and proportionality, evaluates safeguards, and recommends mitigating measures. MENA-aware: covers GDPR Article 35 requirements alongside UAE Personal Data Protection Law, KSA Personal Data Protection Law, and Lebanon''s data protection framework.Votes: 0GitHub stars: 85
- Prompt Pack Privacy Policy SboghossianUse when a lawyer or compliance officer needs to draft a comprehensive privacy policy for a company operating across one or more jurisdictions. Covers data collection, legal bases, retention, individual rights, international transfers, cookies, and privacy contact information. Particularly useful for MENA-operating businesses navigating UAE Federal Decree-Law No. 45 of 2021, Saudi PDPL, Lebanese data-protection norms, DIFC/ADGM Data Protection Law, and EU GDPR as applicable.Votes: 0GitHub stars: 85
- Prompt Pack Third Party Data Sharing Agreement SboghossianUse when a user needs to draft a data sharing agreement between two or more organizations that jointly determine or separately control the purposes and means of processing personal data. Covers controller-to-controller and controller-to-processor configurations, legal bases for sharing, data subject rights obligations, security standards, onward transfer restrictions, and liability allocation. Especially relevant for MENA jurisdictions (UAE PDPL, KSA PDPL, Lebanon draft law, Egypt PDPL) and G...Votes: 0GitHub stars: 85
- Prompt Pack Vendor Data Protection Addendum SboghossianUse when a company needs to attach a data protection addendum (DPA) to a vendor or supplier agreement where the vendor may access, process, or store personal data on behalf of the company. Covers processor obligations, security requirements, sub-processing restrictions, audit rights, cross-border transfer mechanisms, and breach notification. Especially important for MENA entities subject to UAE PDPL, KSA PDPL, Egypt PDPL, or GDPR, where a written data processing agreement is legally mandatory.Votes: 0GitHub stars: 85
- Pseudonymization RiskAssessment of pseudonymization techniques and re-identification risk. Covers tokenization, hashing, encryption-based pseudonymization, and hybrid approaches. Includes re-identification risk scoring using the motivated intruder test, quantitative metrics (marketer, journalist, prosecutor models), and linkage attack resilience evaluation. References ENISA 2019 pseudonymization report.Votes: 0GitHub stars: 85
- Public Tool Privacy Policy Generator Public SboghossianUse when a business needs to generate a privacy policy, cookie policy, ROPA, or DPIA template through a guided form. Supports KSA PDPL, UAE PDPL, DIFC DP Law, Bahrain PDPL, Egypt PDPL, GDPR, and CCPA — with jurisdiction-specific addenda for multi-jurisdictional businesses. Outputs DOCX and PDF; includes a ROPA template and DPIA template as add-ons. Free public tool with email-capture; designed for SMEs, startups, and app developers needing compliant privacy documentation without external coun...Votes: 0GitHub stars: 85
- Purpose Based AccessDesign and implement Purpose-Based Access Control (PBAC) architecture including purpose ontology definition, policy engine configuration, audit logging of purpose verification at query time, and integration with existing IAM systems. Enforces GDPR Article 5(1)(b) purpose limitation technically.Votes: 0GitHub stars: 85
- Reg Feed Watcher ZekaisuniTürkiye odaklı düzenleyici kaynakları kontrol eder, yeni gelişmeleri önem eşiğine göre sınıflandırır ve aksiyon gerektirenleri policy-diff / comments / gaps akışına devreder. Kullanım: "regulatory update", "kaynakları kontrol et", "Resmi Gazete''de ne var", "KVKK/SPK/BDDK gündemi".Votes: 0GitHub stars: 85
- Regulatory ComplaintsManages responses to regulatory complaints lodged with supervisory authorities under GDPR Article 77, covering internal escalation procedures, DPA response coordination, remediation tracking, and compliance documentation. Activate for regulatory complaint, supervisory authority complaint, Art. 77, DPA response, ICO complaint queries.Votes: 0GitHub stars: 85
- Remote Work MonitoringEstablishes boundaries for monitoring remote and hybrid workers including screen capture, productivity tracking, camera and microphone activation, attendance verification, and activity logging. Applies proportionality principles, transparency requirements, and evaluates less intrusive alternatives per EDPB and national DPA guidance. Keywords: remote work, monitoring, screen capture, productivity tracking, webcam, home office, hybrid work, proportionality, surveillance.Votes: 0GitHub stars: 85
- Retention Impact AssessConducts retention impact assessments for new processing activities to determine appropriate data retention periods. Covers regulatory requirements scanning, proportionality review, purpose-based retention determination, and retention period documentation aligned with GDPR Article 5(1)(e) and Article 25 data protection by design. Activate for retention assessment, new processing retention, retention period determination queries.Votes: 0GitHub stars: 85
- Retention ScheduleDesigns and implements data retention schedules compliant with GDPR Article 5(1)(e) storage limitation principle. Maps data categories to retention periods with legal basis justification, regulatory minimum holding periods, and automated review triggers for schedule maintenance. Activate for retention policy, storage limitation, data lifecycle, retention period queries.Votes: 0GitHub stars: 85
- Ropa 250 ExemptionAssesses the GDPR Article 30(5) exemption for organisations under 250 employees. Covers the three exception conditions that negate the exemption: non-occasional processing, risk to data subject rights, and special category data processing. Activate for Art. 30(5), 250 employee exemption, small business RoPA, SME exemption, occasional processing.Votes: 0GitHub stars: 85
- Ropa Completeness AuditAudits Records of Processing Activities against supervisory authority templates from CNIL, ICO, and BfDI. Provides completeness scoring, gap identification, and remediation tracking. Activate for RoPA audit, completeness check, supervisory authority readiness, CNIL template, ICO template, BfDI template, gap analysis.Votes: 0GitHub stars: 85
- Ropa Dpia LinkageLinks RoPA entries to Data Protection Impact Assessments and lawful basis assessments. Covers cross-reference systems, dependency tracking, and update cascade triggers between RoPA, DPIA register, and lawful basis documentation. Activate for RoPA-DPIA link, cross-reference, dependency tracking, impact assessment linkage, cascade updates.Votes: 0GitHub stars: 85
- Ropa Executive DashboardCreates executive reporting and visualization from RoPA data including processing activity counts, risk heatmaps, compliance scores, trend analysis, and supervisory authority readiness indicators. Activate for RoPA dashboard, executive reporting, risk heatmap, compliance score, trend analysis, board reporting, KPI.Votes: 0GitHub stars: 85
- Saas Legal Docs Pooriaarab'Use when drafting or expanding a SaaS product''s Terms of Service and Privacy Policy pages — especially when a stub needs to become a full document, or when a compliance need (Twilio/A2P SMS toll-free registration, an app-store review, a data-processing request) requires real legal pages. Gives the section-by-section structure of a protective ToS and Privacy Policy, the standard protective-clause stack (''AS IS'' warranty disclaimer, capped limitation of liability, indemnification, third-par...Votes: 0GitHub stars: 85
- Saas Vendor InventorySaaS vendor data processing inventory management. Covers shadow IT discovery, API-based data flow detection, processing purpose mapping, contract status tracking, and continuous inventory reconciliation for cloud service providers.Votes: 0GitHub stars: 85
- Scc ImplementationGuides implementation of EU Standard Contractual Clauses under Commission Decision 2021/914 across all four modules (C2C, C2P, P2P, P2C). Covers clause-by-clause completion, Annex I-III drafting, and SCC module selection. Keywords: SCCs, standard contractual clauses, module selection, data transfers, Annex completion.Votes: 0GitHub stars: 85
- Secure Data DestructionImplements NIST SP 800-88 Rev. 1 media sanitization procedures including Clear, Purge, and Destroy methods for all media types. Covers certificate of destruction generation, verification procedures, vendor management for third-party destruction, and chain of custody documentation. Activate for data destruction, media sanitization, secure erasure, certificate of destruction queries.Votes: 0GitHub stars: 85
- Selecting Privacy Enhancing TechnologiesComprehensive PET selection guide covering differential privacy, homomorphic encryption, secure multi-party computation, federated learning, zero-knowledge proofs, and trusted execution environments. Includes use-case matching matrix, performance comparison, and GDPR alignment assessment for each technology.Votes: 0GitHub stars: 85
- Server Side TrackingImplementing server-side tracking with privacy controls using Google Tag Manager server containers. Covers first-party data collection, IP anonymization, consent-aware event forwarding, and reducing client-side third-party cookie exposure.Votes: 0GitHub stars: 85
- Singapore PdpaGuides compliance with Singapore''s Personal Data Protection Act 2012 (PDPA). Covers PDPC advisory guidelines, Do Not Call Registry, data intermediary obligations, deemed consent, notification requirements, and the 2020-2021 amendments. Keywords: Singapore PDPA, PDPC, Do Not Call Registry, deemed consent, data intermediary, advisory guidelines.Votes: 0GitHub stars: 85
- State Law TrackerTracks and monitors US state privacy legislation across all 50 states, DC, and territories. Covers enacted comprehensive privacy laws (California CCPA/CPRA, Virginia VCDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA, and subsequent enactments), pending bills, effective dates, and key requirement differences. Keywords: state privacy law, CCPA, CPRA, VCDPA, CPA, CTDPA, UCPA, multi-state.Votes: 0GitHub stars: 85
- Tcf V2 ImplementationImplementing the IAB Transparency and Consent Framework v2.2 for programmatic advertising consent management. Covers CMP registration, Global Vendor List integration, TC String encoding, publisher restrictions, and compliance validation.Votes: 0GitHub stars: 85
- Thailand PdpaGuides compliance with Thailand''s Personal Data Protection Act B.E. 2562 (2019). Covers consent framework, DPO requirements, PDPC enforcement, lawful bases for processing, cross-border transfer mechanisms, and data subject rights under the PDPA. Keywords: Thailand PDPA, PDPC, consent, DPO, cross-border transfers, data subject rights.Votes: 0GitHub stars: 85
- Transfer RecordsGuides maintenance of cross-border transfer registers, audit trails, and compliance documentation under GDPR Art. 30 and Art. 46, EDPB record-keeping guidance, and supervisory authority expectations. Keywords: transfer register, audit trail, Art. 30, Art. 46, documentation, compliance records.Votes: 0GitHub stars: 85
- Uk Aadc ImplementationImplements the UK Age Appropriate Design Code (Children''s Code) 15 standards under the Data Protection Act 2018 Section 123. Covers best interests assessment, age-appropriate application, transparency, data minimization, geolocation restrictions, and profiling defaults. Keywords: AADC, Children''s Code, ICO, age appropriate design, UK.Votes: 0GitHub stars: 85
- Uk Transfer MechanismsGuides implementation of UK international data transfer mechanisms post-Brexit including the International Data Transfer Agreement (IDTA), UK Addendum to EU SCCs, UK adequacy assessments, and ICO transfer risk assessment tool. Keywords: UK IDTA, UK addendum, ICO TRA, post-Brexit transfers, UK GDPR.Votes: 0GitHub stars: 85
- Vendor Breach CascadeVendor breach notification cascade management per GDPR Article 33(2). Covers processor-to-controller notification without undue delay, escalation paths, coordinated multi-party breach response, liability allocation, and regulatory notification coordination.Votes: 0GitHub stars: 85
- Vendor Cert AcceptanceVendor certification acceptance criteria and equivalence mapping. Covers ISO 27701, SOC 2 Privacy, APEC CBPR, EU Code of Conduct evaluation, certification scope analysis, gap supplementation requirements, and cross-framework equivalence assessment.Votes: 0GitHub stars: 85
- Vendor Monitoring ProgramOngoing vendor privacy compliance monitoring program. Covers annual reassessment procedures, continuous monitoring signals, contract renewal privacy triggers, performance metrics, KPIs, and vendor governance reporting dashboards.Votes: 0GitHub stars: 85
- Vendor Risk ScoringVendor privacy risk tiering methodology for processor management. Covers scoring factors including data volume, sensitivity, transfer locations, certifications, breach history, and control maturity with weighted risk calculation and tier assignment.Votes: 0GitHub stars: 85
- Vendor Termination DataVendor termination data return and deletion procedures per GDPR Article 28(3)(g). Covers data extraction formats, deletion certification requirements, transition planning, residual data handling, and post-termination verification.Votes: 0GitHub stars: 85
- Whistleblower DataImplements data protection compliance for whistleblowing systems under EU Directive 2019/1937 and GDPR. Covers anonymous reporting channels, identity protection for whistleblowers and accused persons, retention limits, access restrictions, and retaliation prevention. Addresses national transpositions and DPA guidance. Keywords: whistleblower, Directive 2019/1937, anonymous reporting, identity protection, retaliation, retention, reporting channel.Votes: 0GitHub stars: 85
- Esop Scheme Drafter RohasnagpalDrafts an employee stock option scheme document and individual grant letter template — eligibility, vesting, exercise mechanics, and leaver treatment — using only the parameters actually instructed and flagging tax-advantaged scheme qualification and regulatory approval requirements for verification rather than asserting them. Use this whenever a user wants an ESOP scheme or grant letters drafted — including phrasings like "draft our ESOP scheme document", "prepare a grant letter for this new...Votes: 0GitHub stars: 85