eu-privacy

Plugin eu-privacy from marketplace eu-agents in montoyer/eu-agents. Commands read from the repo's manifest — 1 month ago.

Skills (16)

• ai-act-officer

  Use when classifying an AI system under Regulation (EU) 2024/1689 (AI Act), preparing technical documentation, or assessing obligations for an EU institution deploying, operating, or procuring an AI system. Covers: prohibited practice check (Art. 5), risk tier classification (high-risk under Art. 6

• ai-governance-officer

  Use when designing or reviewing an internal AI governance framework for a European Commission DG or EU institution. Covers: AI system inventory and classification register, model cards and algorithmic transparency documentation, internal AI governance board terms of reference and decision workflow,

• cold-start-interview

  Personalise the eu-privacy plugin to a specific DG, processing activity, and working context before running a DPIA or any specialist data-protection skill. Collects: DG/Unit name, processing activity description, controller identity, data subjects, presence of special categories, non-EU cloud or AI

• data-breach-officer

  Use when a personal data breach has been detected or suspected involving an EU institution processing activity. Covers: initial breach assessment and containment, risk rating to data subjects (likelihood × severity of harm), Art. 34 EUDPR 72-hour EDPS notification drafting, Art. 35 EUDPR communicati

• data-subject-rights

  Use when receiving, assessing, or responding to a data subject rights request under Regulation (EU) 2018/1725 (EUDPR). Covers all six EUDPR rights: access (Art. 17), rectification (Art. 18), erasure (Art. 19), restriction of processing (Art. 20), data portability (Art. 22), and objection (Art. 23).

• dpia

  Use to produce a complete Data Protection Impact Assessment (DPIA) under Article 39 of Regulation (EU) 2018/1725 (EUDPR) for a processing activity of an EU institution, body, office, or agency. This is a multi-agent orchestration skill: it voices five specialist roles in sequence — IT Project Manage

• dpo

  Use when acting as or consulting the Data Protection Officer (DPO) for an EU institution, body, office, or agency under Regulation (EU) 2018/1725 (EUDPR). Covers: Art. 39 DPIA threshold screening (mandatory vs. discretionary), DPIA process leadership and sign-off, maintenance of the Record of Proces

• edps-complaint-handler

  Use when responding to a complaint or supervisory inquiry from the European Data Protection Supervisor (EDPS) under Regulation (EU) 2018/1725 (EUDPR). Covers: understanding the EDPS's Art. 57 supervisory powers, handling the EDPS's questionnaire or request for information (Art. 58(1) investigative p

• it-project-manager

  Use when documenting the technical architecture and data flows of an IT system for a Data Protection Impact Assessment (DPIA) under Regulation (EU) 2018/1725 (EUDPR). Covers: system architecture description, data flow mapping (inputs, processing, storage, outputs, deletion), identification of all da

• it-security-plan

  Use when drafting, reviewing, or updating an IT Security Plan (ISP) for a system that processes personal data within an EU institution. Covers: information asset classification, risk assessment (threat × vulnerability × impact), risk treatment plan with ISO 27001 Annex A and CIS Controls mapping, te

• it-security

  Use when conducting the security and threat-model section of a DPIA, or when assessing the security of a processing system under Regulation (EU) 2018/1725 (EUDPR). Covers: CIA triad threat modelling (Confidentiality, Integrity, Availability), STRIDE threat analysis for IT systems, security measures

• legal-officer

  Use when conducting the legal analysis section of a DPIA or advising on the lawfulness of a processing activity under Regulation (EU) 2018/1725 (EUDPR). Covers: identification and justification of legal basis under Art. 5(1) EUDPR (including Art. 5(1)(a) — task in the public interest / exercise of o

• privacy-notice-drafter

  Use when drafting or reviewing a privacy notice (data protection notice) for an EU institution processing activity under Arts. 15 and 16 of Regulation (EU) 2018/1725 (EUDPR). Covers all mandatory transparency information: controller identity, DPO contact, purpose and legal basis, data categories, re

• retention-schedule

  Use when designing, reviewing, or updating a data retention schedule for personal data processed by an EU institution under Regulation (EU) 2018/1725 (EUDPR). Covers: the storage limitation principle (Art. 25 EUDPR), retention period justification by reference to specific legal obligations or operat

• ropa-drafter

  Use when creating or updating a Record of Processing Activities (RoPA) entry under Art. 31 of Regulation (EU) 2018/1725 (EUDPR). Covers all mandatory RoPA fields: controller identity, joint controller arrangements, DPO contact, processing purpose, legal basis under Art. 5(1) EUDPR, data categories,

• tia-expert

  Use when conducting a Transfer Impact Assessment (TIA) for a transfer of personal data from an EU institution to a third country or international organisation under Art. 25 of Regulation (EU) 2018/1725 (EUDPR). Covers: transfer mechanism selection (adequacy decision, standard contractual clauses, bi

Similar plugins