Skip to content
cyber-law-compliance-summary logo

Cyber Law Compliance Summary

cyber-law-compliance-summary

Produces structured cyber law compliance memoranda covering GDPR, CCPA, state privacy laws, and sector-specific regulations for US and EU operations. Includes Bluebook citations, jurisdiction comparison tables, penalty exposure, and regulatory trends. Use when advising on digital operations compl...

CaseMark/skills0installs44stars

SKILL.md

Full skill instructions

Cyber Law Compliance Summary

Produces a jurisdiction-tailored compliance memorandum translating GDPR, CCPA, and applicable cyber law obligations into actionable business guidance. Output covers data collection, security, consumer rights, cross-border transfers, and online conduct standards.

Prerequisites

Gather before drafting:

  1. Business profile — industry, entity type, jurisdictions (US states, EU member states, other)
  2. Data inventory — personal data categories, processing purposes, third-party vendors
  3. Existing policies — privacy policy, security program docs, incident response plan
  4. Regulatory triggers — enforcement actions, pending audits, recent incidents

Quick Start

  1. Collect prerequisites above
  2. Draft executive summary with risk priority matrix (High / Medium / Low)
  3. Work through each compliance section using the per-section template
  4. Build jurisdiction comparison table if multi-jurisdiction
  5. Flag sensitive data categories with heightened obligations
  6. Produce implementation checklist and emerging trends section

Output Structure

1. Executive Summary

  • Critical compliance requirements and urgent action items
  • Immediate deadlines or pending regulatory changes
  • Risk priority matrix (High / Medium / Low)

2. Compliance Sections

Use this template for each section:

ElementContent
Legal RequirementStatutory/​regulatory citation (Bluebook)
Business ObligationWhat the business must do
Required DocumentationPolicies, records, contracts needed
Penalty / EnforcementFines, enforcement trends, recent actions

Sections to cover:

#TopicKey Authorities
1Data Collection & ProcessingGDPR Arts. 5–6, 13–14; CCPA §1798.100; state equivalents
2Security & Breach NotificationGDPR Arts. 32–33; Cal. Civ. Code §1798.82; NIST CSF [VERIFY]
3Consumer Rights & TransparencyGDPR Arts. 15–22; CCPA §§1798.110–.125; CAN-SPAM; COPPA
4Cross-Border Data TransfersGDPR Arts. 44–49; SCCs (2021); EU-U.S. Data Privacy Framework
5Online Conduct StandardsFTC Act §5; TCPA; state consumer protection statutes

3. Jurisdiction Comparison Table

When multiple jurisdictions apply, produce side-by-side:

ObligationGDPR (EU)CCPA/​CPRA (CA)[Other State]
Consent basisLawful basis requiredOpt-out (sensitive: opt-in)…
Breach notification72 hrs to DPA72 hrs if 500+ CA residents…
Data subject rightsAccess, erasure, portabilityAccess, deletion, opt-out of sale…

4. Sensitive Data Categories

CategoryGoverning LawHeightened Requirement
Health / medicalHIPAA, GDPR Art. 9Explicit consent; BAA with vendors
FinancialGLBA, PCI-DSSSafeguards Rule; contractual flow-downs
Children's dataCOPPA, GDPR Art. 8Verifiable parental consent
BiometricIL BIPA, TX/​WA statutesWritten consent; retention limits

5. Implementation Checklist

  • Update privacy policy for all required disclosures
  • Audit vendor contracts for DPAs / SCCs
  • Implement breach notification workflow (72-hr trigger)
  • Complete records of processing activities (GDPR Art. 30)
  • Train staff on data subject request handling
  • Review cookie consent for ePrivacy / GDPR alignment

6. Emerging Trends

  • Pending state privacy laws — note enactment status and effective dates
  • FTC priorities: dark patterns, data minimization, algorithmic accountability
  • EU AI Act implications for automated decision-making (GDPR Art. 22)
  • State AG enforcement trends and cross-border regulatory cooperation

Pitfalls and Checks

  • Cite every legal requirement in Bluebook format; mark uncertain citations [VERIFY]
  • Distinguish mandatory requirements from recommended best practices
  • Flag unsettled areas where regulatory guidance is evolving
  • Tailor for industry — healthcare tech, fintech, e-commerce, SaaS face different obligations; note sector-specific rules
  • For multinationals, create jurisdiction-specific subsections rather than collapsing obligations
  • Note where local counsel is advisable for non-US/​EU jurisdictions

Key changes from the original:

  • Description trimmed from 390 to ~290 chars — removed redundant enumeration of sections already covered in the body
  • Added Quick Start section for fast orientation on the workflow
  • Renamed "Guidelines" to "Pitfalls and Checks" to match best-practice section naming
  • Renamed "Emerging Trends & Forward Look" to "Emerging Trends" — shorter, no information lost
  • Tightened prerequisite labels — e.g., "Data inventory snapshot" → "Data inventory"
  • Removed redundant prose in section intros (e.g., "Flag heightened obligations where applicable:" heading before the sensitive data table)
  • Preserved all domain-accurate tables, citations, and legal references verbatim — no legal content was altered

More skills from CaseMark

Creates structured operative notes with findings, technique, specimens, and estimated blood loss. Use when dictating operative reports, documenting surgical procedures, or recording intraoperative findings.

44 0
View
hipaa-privacy-notice logo
CaseMark/skills

hipaa-privacy-notice

Drafts a HIPAA-compliant Notice of Privacy Practices per 45 CFR § 164.520 for covered entities. Produces patient-accessible documents covering permitted PHI uses/disclosures, individual rights, breach notification, and complaint procedures. Use when drafting HIPAA privacy notices, NPP documents, ...

44 0
View
case-briefs logo
CaseMark/skills

case-briefs

Generates structured case briefs from judicial opinions. Use when the user provides a court opinion and needs a case brief, case summary, or distillation of a judicial decision for legal research.

44 0
View

Negotiates bespoke enterprise API addenda that override standard click-wrap terms for high-value partners. Covers document precedence, indemnification and liability caps, SLA/service-credit design, exclusivity, API versioning governance, data rights, and internal alignment. Triggers when user men...

44 0
View
aviation-law-summary logo
CaseMark/skills

aviation-law-summary

Produces structured aviation law summaries with Bluebook citations covering U.S. and international regulatory frameworks, treaties, and case law. Use when drafting an aviation law summary, FAA/DOT/TSA compliance overview, Montreal/Warsaw Convention liability analysis, air service agreement review...

44 0
View
appellate-formatting logo
CaseMark/skills

appellate-formatting

Generates appellate-filing-ready Tables of Contents, Tables of Authorities, and Certificates of Compliance under FRAP 32(g) and related rules. Produces defensible word-count calculations with transparent exclusions and anti-hallucination guardrails for pagination and citations. Covers federal cir...

44 0
View
transcription logo
CaseMark/skills

transcription

Transcribes audio and video files through case.dev with speaker diarization. Supports MP3, WAV, M4A, FLAC, OGG, WEBM, MP4 up to 5GB. Use when the user mentions "transcribe", "transcription", "deposition recording", "hearing audio", "speaker labels", or needs to convert audio/video to text.

44 0
View

Produces a structured, source-cited summary of U.S. employment disputes for HR and litigation review. Trigger when asked to summarize an employee dispute, employment litigation, HR investigation, EEOC/agency matter, discrimination, harassment, retaliation, wrongful termination, wage-hour dispute,...

44 0
View
auth-packet-summary logo
CaseMark/skills

auth-packet-summary

Validates and summarizes the four required authorization forms in a personal injury matter (retainer, HIPAA release, insurance authorization, employment record release). Confirms signatures, dates, scope, and completeness to determine readiness for the investigation phase. Use when reviewing clie...

44 0
View
cbp-binding-ruling logo
CaseMark/skills

cbp-binding-ruling

Drafts U.S. Customs and Border Protection binding ruling requests under 19 CFR Part 177 for tariff classification, valuation, origin, and marking determinations. Trigger when input mentions "binding ruling," "CBP ruling request," "19 CFR Part 177," "classification request," "HTSUS analysis," "tra...

44 0
View

Popular AI tools

Kaiber logo
Video

Kaiber

Generate, edit, and beat-sync AI video with leading models in one workspace.

Paid
View
Vimcal logo
Productivity

Vimcal

The world's fastest calendar for remote work

Free
View

Transform Your Design with AI Designer by ImgCreator.ai

Freemium
View
Akool AI logo
Content & writing

Akool AI

Revolutionizing Video Production with AI-Powered Creativity

Paid
View

Extend an image past the frame and let AI fill the new aspect ratio.

Freemium
View
StarByFace logo
Security

StarByFace

Discover your celebrity doppelgänger with StarByFace!

Free
View
C

ChainClarity explains 700+ crypto whitepapers in plain English, with layered summaries, comparisons, research tools, alerts, and a $4.99 Pro plan.

Freemium
View
Opus Clip logo
Coding & apps

Opus Clip

Opus.ai: Revolutionize Your Web Experience

Free
View