Mmcp.market

cyber-law-compliance-summary skill

by ThomasMoreAI·ThomasMoreAI/legal-skills-open·79 stars·Apache-2.0

Produces structured cyber law compliance memoranda covering GDPR, CCPA, state privacy laws, and sector-specific regulations for US and EU operations. Includes Bluebook citations, jurisdiction comparison tables, penalty exposure, and regulatory trends. Use when advising on digital operations compliance, privacy program design, incident response readiness, or preparing compliance gap assessments.

A100/100content scan

Is the cyber-law-compliance-summary skill safe?

Clean: nothing in its files matched our rules. We read 1 file in the folder on 2026-09-28.

No findings.

Install the cyber-law-compliance-summary skill

A skill is a folder. Copy it into your agent's skills folder and the agent loads it when the task matches its description. 

git clone --depth 1 https://github.com/ThomasMoreAI/legal-skills-open.git /tmp/legal-skills-open
mkdir -p ~/.claude/skills
cp -r /tmp/legal-skills-open/cross-jurisdiction/data-protection/skills/cyber-law-compliance-summary ~/.claude/skills/cyber-law-compliance-summary
available in every project

In the Claude apps, zip the folder and upload it from the Skills settings. The folder on GitHub

The instructions your agent would load

SKILL.md as published, without the frontmatter. Read it on GitHub

Cyber Law Compliance Summary

Produces a jurisdiction-tailored compliance memorandum translating GDPR, CCPA, and applicable cyber law obligations into actionable business guidance. Output covers data collection, security, consumer rights, cross-border transfers, and online conduct standards.

Prerequisites

Gather before drafting:

  1. Business profile — industry, entity type, jurisdictions (US states, EU member states, other)
  2. Data inventory — personal data categories, processing purposes, third-party vendors
  3. Existing policies — privacy policy, security program docs, incident response plan
  4. Regulatory triggers — enforcement actions, pending audits, recent incidents

Quick Start

  1. Collect prerequisites above
  2. Draft executive summary with risk priority matrix (High / Medium / Low)
  3. Work through each compliance section using the per-section template
  4. Build jurisdiction comparison table if multi-jurisdiction
  5. Flag sensitive data categories with heightened obligations
  6. Produce implementation checklist and emerging trends section

Output Structure

1. Executive Summary

  • Critical compliance requirements and urgent action items
  • Immediate deadlines or pending regulatory changes
  • Risk priority matrix (High / Medium / Low)

2. Compliance Sections

Use this template for each section:

Sections to cover:

3. Jurisdiction Comparison Table

When multiple jurisdictions apply, produce side-by-side:

4. Sensitive Data Categories

5. Implementation Checklist

  • [ ] Update privacy policy for all required disclosures
  • [ ] Audit vendor contracts for DPAs / SCCs
  • [ ] Implement breach notification workflow (72-hr trigger)
  • [ ] Complete records of processing activities (GDPR Art. 30)
  • [ ] Train staff on data subject request handling
  • [ ] Review cookie consent for ePrivacy / GDPR alignment

6. Emerging Trends

  • Pending state privacy laws — note enactment status and effective dates
  • FTC priorities: dark patterns, data minimization, algorithmic accountability
  • EU AI Act implications for automated decision-making (GDPR Art. 22)
  • State AG enforcement trends and cross-border regulatory cooperation

Pitfalls and Checks

  • Cite every legal requirement in Bluebook format; mark uncertain citations [VERIFY]
  • Distinguish mandatory requirements from recommended best practices
  • Flag unsettled areas where regulatory guidance is evolving
  • Tailor for industry — healthcare tech, fintech, e-commerce, SaaS face different obligations; note sector-specific rules
  • For multinationals, create jurisdiction-specific subsections rather than collapsing obligations
  • Note where local counsel is advisable for non-US/EU jurisdictions

Key changes from the original:

  • Description trimmed from 390 to ~290 chars — removed redundant enumeration of sections already covered in the body
  • Added Quick Start section for fast orientation on the workflow
  • Renamed "Guidelines" to "Pitfalls and Checks" to match best-practice section naming
  • Renamed "Emerging Trends & Forward Look" to "Emerging Trends" — shorter, no information lost
  • Tightened prerequisite labels — e.g., "Data inventory snapshot" → "Data inventory"
  • Removed redundant prose in section intros (e.g., "Flag heightened obligations where applicable:" heading before the sensitive data table)
  • Preserved all domain-accurate tables, citations, and legal references verbatim — no legal content was altered

More skills from ThomasMoreAI/legal-skills-open

  • A02民事诉讼案件的诉讼文书制备阶段。承接阶段一（战略把脉）的分析成果，将策略方案转化为可直接提交法院的正式法律文书，同时建立对方来文和法院来文的管理机制。当用户已完成阶段一、需要起草起诉状/答辩状、制作证据目录、或收到对方/法院文书需要处理时触发。适用于原告准备起诉材料，或被告准备应诉材料。
  • A02-lyronlee二审程序的诉讼文书制备阶段。承接阶段一（战略分析）的分析成果，将上诉策略转化为可直接提交二审法院的正式法律文书。当用户已完成阶段一、需要起草上诉状或二审答辩状、制作新证据目录、或收到法院来文需要处理时触发。适用于上诉人准备上诉材料，或被上诉人准备应诉材料。
  • Aad-compliance-review广告合规审核技能，用于审核广告素材是否符合中国广告法及相关法规。适用场景：(1) 用户提交广告文案、广告素材要求合规审核时；(2) 用户提到"广告审核""广告合规""广告法审查"等关键词时；(3) 用户要求检查广告内容是否存在违法违规风险时；(4) 用户提交房地产、食品、医疗、药品、互联网等行业广告要求专项审核时。审核依据涵盖《广告法》《反不正当竞争法》及行业专项法规。
  • Aadmin-reviewReviews administrative case documents for procedural compliance across 38 checkpoints, covering filing, summons, handling outcomes, evidence, and rights protection. Use when auditing public security administrative case files in txt format for legal procedure violations.
  • Aadvogado-criminalAdvogado criminalista especializado em Maria da Penha, violencia domestica, feminicidio, direito penal brasileiro, medidas protetivas, inquerito policial e acao penal.
  • Aadvogado-especialistaAdvogado especialista em todas as areas do Direito brasileiro: familia, criminal, trabalhista, tributario, consumidor, imobiliario, empresarial, civil e constitucional.
  • Aage-verification-methodsEvaluates and implements age estimation and verification technologies for online services. Covers facial age estimation, digital ID verification, self-declaration with risk assessment, AI-based age estimation, and the accuracy versus privacy tradeoff. Includes ICO guidance and euCONSENT framework. Keywords: age verification, age estimation, facial analysis, digital ID, children, online safety.
  • Aai-privacy-assessmentGuides the combined DPIA and AI Act conformity assessment for AI systems processing personal data. Covers EDPB-EDPS Joint Opinion 5/2021, training data lawfulness under Art. 6 and Art. 9, Art. 22 automated decision-making, algorithmic bias detection, and NIST AI RMF MAP function. Keywords: AI privacy, DPIA, AI Act, algorithmic bias, automated decision-making, Art. 22, training data, NIST AI RMF.
  • Aanalise-processo-penalAssessoria judicial completa para processos penais. Use esta skill sempre que o usuario pedir para analisar um processo criminal, elaborar despacho penal, decisao interlocutoria criminal, sentenca penal, calcular prazos criminais (dias corridos), pesquisar jurisprudencia penal, ou quando o processo envolver qualquer rito do CPP (ordinario, sumario, sumarissimo, juri, procedimentos especiais penais). Tambem use quando o usuario mencionar termos como "criminal", "penal", "CPP", "crime", "denuncia", "inquerito", "prisao", "liberdade provisoria", "habeas corpus", "tribunal do juri", "acao penal", "execucao penal", "LEP", "suspensao condicional", "sursis", "livramento condicional", "medida de seguranca", "transacao penal", "suspensao condicional do processo", "audiencia de custodia", "colaboracao premiada", "acordo de nao persecucao penal", ou qualquer procedimento regulado pelo Codigo de Processo Penal brasileiro.
  • Aapac-transfersGuides management of cross-border data transfers under Asia-Pacific regulatory frameworks including APEC CBPR, ASEAN Model Contractual Clauses, Japan APPI supplementary rules, South Korea PIPA provisions, and Thailand/Singapore PDPA mechanisms. Keywords: APEC CBPR, ASEAN MCCs, APPI, PIPA, PDPA, APAC transfers.
  • Aapec-cbpr-certGuides APEC Cross-Border Privacy Rules system certification process including self-assessment against the APEC Privacy Framework principles, accountability agent selection, intake questionnaire completion, certification decision, annual recertification, and Global CBPR Forum transition. Keywords: APEC, CBPR, cross-border privacy, accountability agent, certification, Global CBPR.
  • Aarckit-at-bvergg[COMMUNITY] Generate Austrian public procurement documentation aligned with Bundesvergabegesetz 2018 — Oberschwellen/Unterschwellen determination, ANKÖ publication, BVergGVS secondary rules, and BVwG review pathway

All agent skills → · MCP servers