Professional GDPR Incident Response Management

This skill provides lawyers and legal professionals with a structured, rigorous framework for handling suspected data breaches. It automates the generation of essential legal documentation required under GDPR Article 33 and 34, ensuring that the critical 72-hour window is managed with precision.

What it does

• Fact Registry: Automatically builds a chronological log of events, data categories, and affected subjects to satisfy accountability requirements.
• Risk Assessment: Evaluates the severity of the breach to determine if notification to the Data Protection Authority (GBA/AP) or data subjects is legally required.
• Deadline Tracking: Calculates the 72-hour reporting window from the moment of discovery.
• Drafting: Produces draft notifications for regulators and communication templates for affected individuals, focused on factual accuracy without admitting liability.
• Action Planning: Generates tailored task lists for IT teams, processors, and insurance providers.

Why use this skill?

In high-pressure security incidents, manual drafting leads to missed deadlines and inconsistent documentation. This skill ensures that your legal analysis is documented in real-time, providing a "defensible record" of why certain decisions were made. It handles complex scenarios, such as distinguishing between controller and processor roles or managing sector-specific reporting obligations (NIS2, financial, healthcare).