claude

vendor-privacy-management-skills

11 vendor management skills: DPA drafting, sub-processor management, vendor risk scoring, breach cascade, due diligence

337 on GitHubby Mahipalv1.0.0Apache-2.0updated 7 months agocompliance
/

Plugin vendor-privacy-management-skills from marketplace privacy-data-protection-skills in mukul975/Privacy-Data-Protection-Skills. Commands read from the repo's manifest — 1 month ago.

What it installs

Skills (11)

  • cloud-provider-assessment

    Cloud service provider privacy assessment framework. Covers ISO 27018 cloud privacy controls, CSA STAR certification, SOC 2 Type II evaluation, shared responsibility model mapping, data residency verification, and cloud-specific privacy risk analysis. author: mukul975 version: "1.0" domain: privacy

  • dpa-drafting

    GDPR-compliant Data Processing Agreement drafting per Article 28(3). Covers all 8 mandatory provisions including subject matter, duration, nature and purpose, data types, categories of data subjects, controller and processor obligations, and sub-processor cascade requirements. author: mukul975 versi

  • saas-vendor-inventory

    SaaS vendor data processing inventory management. Covers shadow IT discovery, API-based data flow detection, processing purpose mapping, contract status tracking, and continuous inventory reconciliation for cloud service providers. author: mukul975 version: "1.0" domain: privacy subdomain: vendor-pr

  • sub-processor-management

    GDPR Article 28(2) sub-processor approval workflow management. Covers prior specific and general authorization mechanisms, change notification procedures, objection windows, flow-down obligation enforcement, and sub-processor chain risk monitoring. author: mukul975 version: "1.0" domain: privacy sub

  • vendor-breach-cascade

    Vendor breach notification cascade management per GDPR Article 33(2). Covers processor-to-controller notification without undue delay, escalation paths, coordinated multi-party breach response, liability allocation, and regulatory notification coordination. author: mukul975 version: "1.0" domain: pr

  • vendor-cert-acceptance

    Vendor certification acceptance criteria and equivalence mapping. Covers ISO 27701, SOC 2 Privacy, APEC CBPR, EU Code of Conduct evaluation, certification scope analysis, gap supplementation requirements, and cross-framework equivalence assessment. author: mukul975 version: "1.0" domain: privacy sub

  • vendor-monitoring-program

    Ongoing vendor privacy compliance monitoring program. Covers annual reassessment procedures, continuous monitoring signals, contract renewal privacy triggers, performance metrics, KPIs, and vendor governance reporting dashboards. author: mukul975 version: "1.0" domain: privacy subdomain: vendor-priv

  • vendor-privacy-audit

    On-site and remote vendor audit procedures per GDPR Article 28(3)(h). Covers audit planning, evidence collection methodologies, finding classification, remediation tracking, and audit report generation for processor compliance verification. author: mukul975 version: "1.0" domain: privacy subdomain:

  • vendor-privacy-due-diligence

    Pre-contract vendor privacy due diligence per GDPR Article 28(1). Covers risk questionnaires, technical controls assessment, certification review, data flow analysis, and documented sufficiency decisions for processor engagement. author: mukul975 version: "1.0" domain: privacy subdomain: vendor-priv

  • vendor-risk-scoring

    Vendor privacy risk tiering methodology for processor management. Covers scoring factors including data volume, sensitivity, transfer locations, certifications, breach history, and control maturity with weighted risk calculation and tier assignment. author: mukul975 version: "1.0" domain: privacy su

  • vendor-termination-data

    Vendor termination data return and deletion procedures per GDPR Article 28(3)(g). Covers data extraction formats, deletion certification requirements, transition planning, residual data handling, and post-termination verification. author: mukul975 version: "1.0" domain: privacy subdomain: vendor-pri

View source on GitHub

More from mukul975/Privacy-Data-Protection-Skills

All 21 plugins →

Complete collection of 282+ privacy and data protection skills covering GDPR, CCPA, HIPAA, LGPD, PIPL, and 15+ regulations

200 skills

337

18 GDPR compliance skills: audit, gap analysis, accountability, DPO, certification, DPA drafting, supervisory authority cooperation

18 skills

337

18 DPIA and PIA skills: GDPR Art. 35, risk scoring, stakeholder consultation, threshold screening, mitigation planning

18 skills

337

15 AI privacy skills: AI DPIA, training data compliance, bias assessment, transparency, LLM output privacy, federated learning

15 skills

337

15 DSAR and data subject rights skills: access, erasure, portability, rectification, objection, opt-out signals

15 skills

337

14 consent management skills: valid consent, consent withdrawal, preference centers, consent for research, children, mobile apps

14 skills

337

Similar plugins

ruflo-adr

claudecodex

ADR lifecycle management — create, index, supersede, and link Architecture Decision Records to code

5 skills · 1 command · 1 agent

ruvnet/ruflo 81,589

Install the "AAS Privacy & Compliance Engineering" workflow plugin from Agentic Awesome Skills.

6 skills

sickn33/agentic-awesome-skills 49,620

Automate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Security risks (including BOLA/BFLA), and apply AI-powered fixes. Designed for AI-assisted development workflows, it provides continuous guardrails through an audit->scan->remediate->validate loop, ensuring APIs meet enterprise security standards before deployment.

5 skills

anthropics/claude-plugins-official 47,076

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents

wshobson/agents 42,461

Twilio Skills provide procedural knowledge for AI coding agents — which APIs to use, in what order, and what to avoid. Covers SMS, Voice, WhatsApp, Verify, SendGrid, Compliance, and 30+ products.

57 skills · 1 MCP server

anthropics/knowledge-work-plugins 35,601

14 regulatory affairs & quality management skills for HealthTech/MedTech: ISO 13485 QMS, MDR 2017/745, FDA 510(k)/PMA, GDPR/DSGVO, ISO 27001 ISMS, CAPA management, risk management, clinical evaluation, SOC 2 compliance.

21 skills

alirezarezvani/claude-skills 29,725

Maintain vendor-privacy-management-skills?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins21 plugins