casemark/privacy-law-updates
skills/legal/privacy-law-updates/SKILL.md
Generates structured privacy and data protection law briefings across US, EU, UK, and other jurisdictions. Organizes by jurisdiction with compliance deadlines, enforcement actions, and legislative changes. Use when preparing privacy law briefings, compliance updates, regulatory change summaries, or data protection landscape reviews.
$ install --global
skillsauthnpx skillsauth add casemark/skills privacy-law-updatesInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 17, 2026, 2:14 PM30.8s1 file scanned
SKILL.md
- name:
- privacy-law-updates
- description:
- Generates structured privacy and data protection law briefings across US, EU, UK, and other jurisdictions. Organizes by jurisdiction with compliance deadlines, enforcement actions, and legislative changes. Use when preparing privacy law briefings, compliance updates, regulatory change summaries, or data protection landscape reviews.
Privacy Law Updates
Produces a structured briefing on recent privacy and data protection developments, oriented toward compliance planning and executive decision-making.
Quick Start
Confirm before generating:
- Reporting period — default: past 12–18 months
- Jurisdictions — default: US federal + state, EU/EEA, UK
- Industry context — platform type, data categories, cross-border transfers
- Audience — legal/compliance, executive, or both
Output Workflow
Step 1: Executive Overview
| Element | Content | |---|---| | Critical deadlines | Compliance dates requiring immediate action | | Major enforcement | Fines/orders signaling regulatory priorities | | New obligations | Requirements not previously in effect | | Strategic flags | Developments affecting product roadmap or vendors |
Step 2: Jurisdiction Developments
For each jurisdiction, use this entry template:
### [Jurisdiction]
#### [Development Title]
- **Type**: Legislation | Guidance | Enforcement | Court Decision
- **Effective date**: [date or timeline]
- **Scope**: [entities, data types, activities covered]
- **Key requirements/holdings**: [bullet list]
- **Delta from prior law**: [what changed]
- **Operational impact**: [systems, processes, documentation affected]
- **Penalties**: [non-compliance consequences]
- **Exemptions/safe harbors**: [if any]
Step 3: Cross-Cutting Topics
Cover only topics with material developments:
| Topic | Capture | |---|---| | Cross-border transfers | New mechanisms, adequacy decisions, SCCs updates | | Consent & notice | Changed standards, dark-pattern enforcement | | Data subject rights | Access, deletion, portability changes | | Breach notification | Amended timelines, reporting thresholds | | AI governance | Automated decision-making rules, transparency mandates | | Children's privacy | Age verification, parental consent, design codes | | Biometric data | New state/national laws, consent requirements |
Step 4: Forward-Looking
- Pending legislation with expected timelines
- Open regulatory consultations
- Announced DPA enforcement priorities
- Areas of legal uncertainty warranting monitoring
Checks and Pitfalls
- Jurisdiction-first organization — cross-reference in cross-cutting section; never repeat the same development twice
- Cite primary sources — statute sections, regulation articles, case names, DPA decisions
- Mark unverified citations with
[VERIFY] - Distinguish enacted law from proposals — clearly label pending/proposed items
- Flag jurisdictional conflicts where requirements create operational tension
- Include enforcement amounts — fines contextualize regulatory seriousness
- No editorializing on political likelihood; state procedural status only
- Note sector carve-outs (HIPAA, GLBA, COPPA, ePrivacy) where they interact with general frameworks
- Dual-audience tone — precise for compliance implementation, clear for executive briefing
Related Skills
casemark/skills/legal/automated-contract-summary
development
VerifiedTrustedCommunity
name: automated-contract-summary language: en description: Generates structured executive summaries of contracts using ML — captures key terms, party obligations, risk allocations, and compliance requirements in a standardized format. Optimized for high-volume review where speed and consistency matter. tags: - summarization - agreement - corporate --- # Automated Contract Summarization Produces standardized executive summaries of contracts using machine learning, capturing essential term
21SKILL.mdUpdated May 26, 2026
casemark/obligation-mapping
tools
VerifiedTrustedCommunity
Extracts regulatory obligations from dense regulations across jurisdictions. Breaks down multi-level regulations into clear article-level obligations, classifies applicability to a business, and prioritizes by risk level. Use when translating regulations into actionable compliance requirements.
21SKILL.mdUpdated May 25, 2026
casemark/horizon-scanning
development
VerifiedTrustedCommunity
Continuously monitors regulatory landscapes for changes relevant to a specific business. Ingests global regulatory updates, filters by relevance, summarizes impact, and produces an actionable change advisory. Use when tracking regulatory developments affecting a particular product or market.
21SKILL.mdUpdated May 25, 2026
casemark/gap-analysis
testing
VerifiedTrustedCommunity
Compares an organization's existing compliance controls, policies, and procedures against extracted regulatory obligations to identify coverage gaps. Produces a remediation plan with prioritized actions. Use when assessing compliance maturity or preparing for regulatory audits.
21SKILL.mdUpdated May 25, 2026