data breach response manager

The problem

Managing a data breach manually often leads to missed regulatory deadlines, inconsistent evidence logging, and overlooked notification obligations. Privacy teams struggle to coordinate technical facts with legal requirements under high pressure without a structured framework.

What it does

• Generates structured breach response artefacts including triage reports, notifiability decision memos, and executive updates.
• Builds and maintains detailed incident timelines from T0 through discovery to remediation.
• Assesses harm severity from the perspective of affected data subjects to guide notification strategy.
• Drafts factual, plain-language notification content for regulators and individuals for legal review.
• Coordinates multi-stakeholder response plans across legal, IT, DPO, and executive teams.

Why this beats prompting it yourself

This skill enforces strict operating principles like evidence preservation and individual-centric harm assessment that general prompts ignore. It manages the complex interplay between controller and processor roles while ensuring jurisdiction-specific notification triggers are systematically checked.

Use cases

• Executing a tabletop exercise or breach readiness review for a privacy team.
• Drafting a regulatory notification memo after a misdirected email or lost device.
• Building a post-incident review and improvement plan after a confirmed breach.
• Coordinating response actions when a third-party vendor reports a data compromise.

Known limitations

Does not perform technical containment or forensic malware removal. Cannot file regulator notifications directly or provide definitive legal advice.