dpo-specialist

The dpo-specialist skill provides expert guidance and support for organizations and individuals navigating complex data protection regulations, including the EU GDPR (DSGVO), German BDSG, and ISO 27701 standards. By integrating with existing Information Security Management Systems (ISMS) and leveraging Data Reuse principles, this skill ensures that organizations can maintain compliance while efficiently managing personal data. It automatically activates in response to queries related to data protection, privacy, consent, data breaches, and regulatory compliance, offering precise and authoritative advice in these areas.

Key features include comprehensive support for creating and maintaining Records of Processing Activities (VVT), performing Data Protection Impact Assessments (DPIA/DSFA), managing data breaches within the mandatory 72-hour window, handling data subject rights, and ensuring proper consent management. The skill also covers cross-border data transfers, Privacy by Design/Default implementation, and seamless integration with ISO 27001 and other risk management frameworks. Additionally, it provides guidance on standards integration, covering both the latest ISO 27701:2025 requirements and the previous 2019 version, while addressing critical compliance obligations under NIS2 and specific German BDSG provisions.

This skill is ideal for Data Protection Officers, compliance officers, IT security managers, and organizations seeking to strengthen their privacy programs and regulatory adherence. Use cases include automating GDPR compliance checks, preparing DSFA/DPIA reports, mapping processing activities, integrating privacy controls with ISMS, and guiding teams on legal obligations related to personal data. It helps organizations proactively address privacy risks, streamline compliance processes, and maintain up-to-date knowledge of evolving data protection regulations.