goul4rt/lgpd-skills
19 skills
$npx skills add goul4rt/lgpd-skillsSkillInstalls
lgpd-anonymizationApply anonymization (Art. 5, XI) and pseudonymization (Art. 13, §4) techniques to take data out of LGPD scope or reduce risk in analytics pipelines.lgpd-auditMaestro orchestrator for end-to-end LGPD (Lei 13.709/2018) compliance in a software project.lgpd-audit-loggingDesign and implement immutable, hash-chained audit logging for accountability (LGPD Art. 6, X) and incident registration (Res. 15/2024 Art.lgpd-consent-schemaDesign the database schema for a versioned, append-only consent ledger that satisfies LGPD Art.lgpd-data-mappingBuild and maintain a data inventory (mapa de dados) of all personal data processing activities in the project.lgpd-dpaDraft and review Data Processing Agreements (DPA) with operadores under LGPD Art. 39.lgpd-dpo-encarregadoDesignate and publish the Encarregado (DPO) per LGPD Art. 41 + Resolução CD/ANPD nº 18/2024.lgpd-dsarImplement endpoints and workflow for data subject access requests (direitos do titular) under LGPD Art. 18.lgpd-eca-digital-minorsImplement obligations under Lei nº 15.211/2025 (ECA Digital), in force since 17 March 2026, for platforms accessed by minors or 'likely to be accessed' by…lgpd-encryption-keysConfigure encryption at rest, in transit, and key management aligned with LGPD Art.lgpd-incident-responseExecute the LGPD security incident response runbook (Art. 48 LGPD + Resolução CD/ANPD nº 15/2024).lgpd-international-transferSet up international data transfers per LGPD Arts. 33-36 and Resolução CD/ANPD nº 19/2024 (Cláusulas-Padrão Contratuais brasileiras).lgpd-legacy-retrofitRun a gap analysis and retrofit plan for an existing system that wasn't built with LGPD in mind.lgpd-legal-basisChoose and document the lawful basis (base legal) for each personal data processing activity under LGPD Art. 7 (common data) or Art. 11 (sensitive data).lgpd-privacy-policyDraft, version, and publish a privacy policy compliant with LGPD Art. 9 (seven mandatory elements) and ECA Digital if minors are present.lgpd-retention-erasureDefine retention rules and erasure mechanisms (LGPD Arts. 15-16) reconciling subject's right to erasure (Art.lgpd-ripdProduce a Relatório de Impacto à Proteção de Dados (RIPD / DPIA) under LGPD Art. 38 for high-risk processing activities.lgpd-ropaGenerate and maintain the Registro de Operações de Tratamento de Dados Pessoais (ROPA) required by LGPD Art. 37.lgpd-vendor-auditConduct due diligence on third-party operators (operadores) under LGPD Art. 39.