Guides controllers and processors in cooperating with GDPR supervisory authorities under Article 31, including procedures for investigations, information requests, and on-site inspections.
npx claudepluginhub mukul975/privacy-data-protection-skills --plugin gdpr-compliance-skillsThis skill uses the workspace's default tool permissions.
Article 31 requires controllers and processors to cooperate, on request, with the supervisory authority in the performance of its tasks. This obligation is unconditional and applies to all interactions with data protection authorities, including formal investigations, audit requests, information requests, and complaint-driven inquiries. Non-cooperation can itself result in administrative fines ...
Acquire memory dumps from live systems/VMs and analyze with Volatility 3 for processes, networks, DLLs, injections in incident response or malware hunts.
Provides x86-64/ARM disassembly patterns, calling conventions, control flow recognition for static analysis of executables and compiled binaries.
Identifies anti-debugging checks like IsDebuggerPresent, NtQueryInformationProcess in Windows binaries; suggests bypasses via patches/hooks/scripts for malware analysis, CTFs, authorized RE.
Article 31 requires controllers and processors to cooperate, on request, with the supervisory authority in the performance of its tasks. This obligation is unconditional and applies to all interactions with data protection authorities, including formal investigations, audit requests, information requests, and complaint-driven inquiries. Non-cooperation can itself result in administrative fines under Art. 83(5)(e).
The supervisory authority may order the controller and processor to provide any information it requires for the performance of its tasks. Responses are typically required within 4 weeks unless a shorter deadline is specified.
The authority may carry out investigations in the form of data protection audits, reviewing documentation, interviewing staff, and testing controls.
The authority may obtain access to premises of the controller and the processor, including to any data processing equipment and means.
When a data subject lodges a complaint, the authority investigates and may request documentation, explanations, and corrective actions from the controller.
In cross-border processing cases, the lead supervisory authority cooperates with concerned authorities under the consistency mechanism. Controllers may be required to provide information to multiple authorities.
While Art. 31 mandates cooperation, controllers and processors retain certain rights: