casemark/cyber-law-compliance-summary
skills/legal/cyber-law-compliance-summary/SKILL.md
Produces structured cyber law compliance memoranda covering GDPR, CCPA, state privacy laws, and sector-specific regulations for US and EU operations. Includes Bluebook citations, jurisdiction comparison tables, penalty exposure, and regulatory trends. Use when advising on digital operations compliance, privacy program design, incident response readiness, or preparing compliance gap assessments.
$ install --global
skillsauthnpx skillsauth add casemark/skills cyber-law-compliance-summaryInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 27, 2026, 3:44 AM111.0s1 file scanned
SKILL.md
- name:
- cyber-law-compliance-summary
- language:
- en
- description:
- Produces structured cyber law compliance memoranda covering GDPR, CCPA, state privacy laws, and sector-specific regulations for US and EU operations. Includes Bluebook citations, jurisdiction comparison tables, penalty exposure, and regulatory trends. Use when advising on digital operations compliance, privacy program design, incident response readiness, or preparing compliance gap assessments.
Cyber Law Compliance Summary
Produces a jurisdiction-tailored compliance memorandum translating GDPR, CCPA, and applicable cyber law obligations into actionable business guidance. Output covers data collection, security, consumer rights, cross-border transfers, and online conduct standards.
Prerequisites
Gather before drafting:
- Business profile — industry, entity type, jurisdictions (US states, EU member states, other)
- Data inventory — personal data categories, processing purposes, third-party vendors
- Existing policies — privacy policy, security program docs, incident response plan
- Regulatory triggers — enforcement actions, pending audits, recent incidents
Quick Start
- Collect prerequisites above
- Draft executive summary with risk priority matrix (High / Medium / Low)
- Work through each compliance section using the per-section template
- Build jurisdiction comparison table if multi-jurisdiction
- Flag sensitive data categories with heightened obligations
- Produce implementation checklist and emerging trends section
Output Structure
1. Executive Summary
- Critical compliance requirements and urgent action items
- Immediate deadlines or pending regulatory changes
- Risk priority matrix (High / Medium / Low)
2. Compliance Sections
Use this template for each section:
| Element | Content | |---|---| | Legal Requirement | Statutory/regulatory citation (Bluebook) | | Business Obligation | What the business must do | | Required Documentation | Policies, records, contracts needed | | Penalty / Enforcement | Fines, enforcement trends, recent actions |
Sections to cover:
| # | Topic | Key Authorities |
|---|---|---|
| 1 | Data Collection & Processing | GDPR Arts. 5–6, 13–14; CCPA §1798.100; state equivalents |
| 2 | Security & Breach Notification | GDPR Arts. 32–33; Cal. Civ. Code §1798.82; NIST CSF [VERIFY] |
| 3 | Consumer Rights & Transparency | GDPR Arts. 15–22; CCPA §§1798.110–.125; CAN-SPAM; COPPA |
| 4 | Cross-Border Data Transfers | GDPR Arts. 44–49; SCCs (2021); EU-U.S. Data Privacy Framework |
| 5 | Online Conduct Standards | FTC Act §5; TCPA; state consumer protection statutes |
3. Jurisdiction Comparison Table
When multiple jurisdictions apply, produce side-by-side:
| Obligation | GDPR (EU) | CCPA/CPRA (CA) | [Other State] | |---|---|---|---| | Consent basis | Lawful basis required | Opt-out (sensitive: opt-in) | … | | Breach notification | 72 hrs to DPA | 72 hrs if 500+ CA residents | … | | Data subject rights | Access, erasure, portability | Access, deletion, opt-out of sale | … |
4. Sensitive Data Categories
| Category | Governing Law | Heightened Requirement | |---|---|---| | Health / medical | HIPAA, GDPR Art. 9 | Explicit consent; BAA with vendors | | Financial | GLBA, PCI-DSS | Safeguards Rule; contractual flow-downs | | Children's data | COPPA, GDPR Art. 8 | Verifiable parental consent | | Biometric | IL BIPA, TX/WA statutes | Written consent; retention limits |
5. Implementation Checklist
- [ ] Update privacy policy for all required disclosures
- [ ] Audit vendor contracts for DPAs / SCCs
- [ ] Implement breach notification workflow (72-hr trigger)
- [ ] Complete records of processing activities (GDPR Art. 30)
- [ ] Train staff on data subject request handling
- [ ] Review cookie consent for ePrivacy / GDPR alignment
6. Emerging Trends
- Pending state privacy laws — note enactment status and effective dates
- FTC priorities: dark patterns, data minimization, algorithmic accountability
- EU AI Act implications for automated decision-making (GDPR Art. 22)
- State AG enforcement trends and cross-border regulatory cooperation
Pitfalls and Checks
- Cite every legal requirement in Bluebook format; mark uncertain citations
[VERIFY] - Distinguish mandatory requirements from recommended best practices
- Flag unsettled areas where regulatory guidance is evolving
- Tailor for industry — healthcare tech, fintech, e-commerce, SaaS face different obligations; note sector-specific rules
- For multinationals, create jurisdiction-specific subsections rather than collapsing obligations
- Note where local counsel is advisable for non-US/EU jurisdictions
Key changes from the original:
- Description trimmed from 390 to ~290 chars — removed redundant enumeration of sections already covered in the body
- Added Quick Start section for fast orientation on the workflow
- Renamed "Guidelines" to "Pitfalls and Checks" to match best-practice section naming
- Renamed "Emerging Trends & Forward Look" to "Emerging Trends" — shorter, no information lost
- Tightened prerequisite labels — e.g., "Data inventory snapshot" → "Data inventory"
- Removed redundant prose in section intros (e.g., "Flag heightened obligations where applicable:" heading before the sensitive data table)
- Preserved all domain-accurate tables, citations, and legal references verbatim — no legal content was altered
Related Skills
casemark/medical-records-gap-analysis
tools
VerifiedTrustedCommunity
Audits the complete in-scope medical-record universe in a litigation matter and produces an attorney-facing, Bates-cited analysis of treatment gaps, missing records or providers, baseline coverage, material billing or production mismatches, and complaint evolution. Use when asked to find missing medical records, analyze treatment gaps or first-care timing, identify absent providers, assess whether a production is complete, or prepare a records-request target list. Use medical-record-chronology instead when the primary request is a chronological clinical narrative.
40SKILL.mdUpdated Sep 3, 2026
casemark/private-placement-memo
development
VerifiedTrustedCommunity
Drafts a legally compliant Private Placement Memorandum for Regulation D offerings (Rule 506(b)/506(c)), covering full disclosure framework including risk factors, capitalization, securities terms, use of proceeds, and investor qualification requirements. Enforces SEC anti-fraud compliance under Section 10(b)/Rule 10b-5, blue sky law considerations, and accredited investor verification under Rule 501. Use this skill when drafting PPMs, offering memorandums, Reg D disclosure documents, or private offering circulars for issuers raising capital from sophisticated investors. Also trigger when the user mentions private placement disclosure, offering memorandum, Reg D fundraising, or accredited investor verification. Even if the user just says "PPM" or "draft our offering memo," use this skill.
40SKILL.mdUpdated Apr 17, 2026
casemark/privacy-law-updates
data-ai
VerifiedTrustedCommunity
Generates structured privacy and data protection law briefings across US, EU, UK, and other jurisdictions. Organizes by jurisdiction with compliance deadlines, enforcement actions, and legislative changes. Use when preparing privacy law briefings, compliance updates, regulatory change summaries, or data protection landscape reviews.
40SKILL.mdUpdated Apr 17, 2026
casemark/prior-art-summary
testing
VerifiedTrustedCommunity
Generates structured summaries of prior art references for patent prosecution, validity analysis, and freedom-to-operate assessments. Maps disclosures to claim elements with precise citations. Use when summarizing prior art, analyzing patent landscapes, mapping references to claims, or preparing office action responses.
40SKILL.mdUpdated Apr 17, 2026