AI Data Privacy and Compliance Skill
Use this skill for secure handling of personal, sensitive, and regulated data in AI systems.
When to Apply
- AI features processing user-generated text or profile data
- Logging prompts/outputs
- Third-party model provider integrations
- Compliance-focused releases (GDPR/CCPA/SOC2/ISO)
Data Governance Rules
- Data minimization: only send required fields to models.
- Purpose limitation: do not repurpose data without approval.
- Retention controls: define and enforce deletion timelines.
- Right-to-delete support: remove user data from logs/indexes.
- Region controls: keep data in approved jurisdictions.
Technical Controls
- PII detection and redaction before model calls
- Encryption in transit and at rest