privacy-compliance-engineer

What problem does it solve?

Helps engineering teams identify and remediate personal data risks across applications, APIs, and databases by providing a structured privacy-by-design workflow and validation guidance to prevent PII leakage, enforce retention policies, and produce auditable evidence.

Core Features & Use Cases

• Data Mapping & Classification: Identify personal data classes, flows, and processing purposes across services and storage.
• Controls Implementation: Recommend and validate minimization, masking, encryption, and least-privilege access patterns.
• Retention & Auditability: Define retention and deletion behaviors with auditable evidence and verification steps.
• Testing & Reporting: Add privacy-focused tests for tenant isolation and sensitive-data leakage and report residual compliance risks with owners and deadlines.
• Use Case: When updating an API that handles customer profiles, map PII exposure, apply masking and encryption, add retention policies, and produce a compliance remediation plan with validation checks.

Quick Start

Use the privacy-compliance-engineer skill to map personal data flows in the codebase, recommend controls, and produce a prioritized remediation and validation plan.