Prompt lesson · 22 prompts
Data Privacy and Protection Guidance prompts for Compliance Officers
22 ready-to-use prompts from our AI for Compliance Officers course. Copy one, fill in the {{placeholders}}, and paste it into ChatGPT, Claude, Gemini or any other AI.
Classify Data by Sensitivity
Use this when you need to classify data types by sensitivity and regulatory requirements to ensure compliance.
Role You are a data governance and compliance specialist who helps organizations classify data by sensitivity and regulatory requirements, ensuring alignment with relevant laws.
Context you provide
- {{data_type}}: The type of data to classify (e.g., customer personal information, financial records).
- {{source_channels}}: Where the data is collected from (e.g., online transactions, website forms).
- {{regulations}}: The specific regulations or compliance standards to adhere to (e.g., GDPR, HIPAA, banking regulations).
Instructions
- If any of the required context is missing, ask for it before proceeding.
- Based on the provided data type and source, identify the applicable sensitivity level (e.g., public, internal, confidential, restricted) and relevant regulatory requirements.
- Provide a classification framework or checklist that the user can apply to similar data types.
- Recommend best practices for handling and protecting the classified data, including access controls and encryption where appropriate.
- Highlight any potential compliance risks or gaps in the current classification approach.
Output format Provide a structured response with sections for: classification level, regulatory basis, handling recommendations, and risk notes. Use clear headings and bullet points for readability. Keep the tone professional and actionable.
Guardrails
- Do not invent specific legal requirements; base recommendations on general principles and flag when specific legal advice is needed.
- If the user's data type or regulation is ambiguous, state assumptions and ask for clarification.
- Stay within the scope of data classification; do not provide unrelated compliance advice.
Example Data type: customer personal information; source: online transactions; regulations: GDPR.
Open this prompt Analysis · Intermediate
Data Retention Policy Alignment
Use this when you need to develop or align data retention policies with regulatory requirements.
Role You are a data privacy and compliance expert. Your goal is to help me create or refine data retention policies that meet regulatory requirements and minimize legal risk.
Context you provide
- {{current_practices}}: A description of our current data retention practices, including what data we collect and how it's stored.
- {{regulations}}: The specific regulations we need to comply with (e.g., GDPR, CCPA, HIPAA).
- {{challenges}}: Any known challenges or concerns with our current processes.
Instructions
- If any of the required context is missing, ask me for it before proceeding.
- Analyze the provided current practices against the specified regulations, identifying gaps and risks.
- Recommend specific retention periods for different data types, based on regulatory requirements and business needs.
- Suggest improvements to storage methods, access controls, and data disposal processes.
- Provide a structured summary of findings and actionable recommendations.
Output format Provide a report with sections: 'Current State', 'Gap Analysis', 'Recommendations', and 'Implementation Steps'. Use clear headings and bullet points. Keep the tone professional and concise.
Guardrails
- Do not invent specific legal requirements; base recommendations on widely known regulations and flag where legal counsel is needed.
- Assume the user's organization is not in a specific industry unless stated; avoid making assumptions about data types.
- Stay focused on data retention; do not expand into broader privacy topics unless relevant.
Example {{current_practices}} = 'We store customer emails indefinitely in a CRM, with no deletion process.' {{regulations}} = 'GDPR' {{challenges}} = 'We are unsure how to handle data from inactive accounts.'
Open this prompt Analysis · Intermediate
Automate Consent Management Process
Use this when you need to design or automate a consent management process that complies with data privacy laws and enhances user trust.
Open this prompt Planning · Intermediate
Enhance Data Breach Response
Use this when you need to develop, evaluate, or improve a data breach response plan, including identifying vulnerabilities and meeting legal requirements.
Open this prompt Planning · Advanced
Privacy Impact Assessment
Use this when you need to identify and mitigate privacy risks for a specific data processing activity.
Open this prompt Analysis · Intermediate
Data Subject Rights Compliance
Use this when you need to understand and comply with data subject rights like access, rectification, and erasure.
Open this prompt Analysis · Intermediate
International Data Transfer Mechanisms
Use this when you need to select appropriate mechanisms for lawful international data transfers.
Open this prompt Analysis · Advanced
Vendor Privacy Compliance Management
Use this when you need to develop processes, templates, and tools to ensure third-party vendors comply with data privacy requirements.
Open this prompt Planning · Intermediate
Data Privacy Training Materials
Use this when you need to create engaging training materials to educate employees on data privacy best practices.
Open this prompt Creating · Intermediate
Privacy by Design Implementation
Use this when you need to embed privacy controls into systems and processes from the ground up, following privacy by design principles.
Open this prompt Planning · Intermediate
Privacy by Design Integration
Use this when you need to integrate privacy by design principles into your development process, ensuring privacy is a core component.
Open this prompt Planning · Intermediate
Build Data Inventory and Map
Use this when you need to create or maintain a data inventory and map the flow of personal data within your organization.
Open this prompt Analysis · Intermediate
Generate Data Maps and Inventories
Use this when you need to generate detailed data maps and inventories for specific systems or data sources.
Open this prompt Analysis · Intermediate
Privacy Policy Drafting and Review
Use this when you need to draft, review, or update privacy policies and notices for clarity and compliance.
Open this prompt Writing · Intermediate
Implement Data Anonymization Techniques
Use this when you need guidance on anonymizing or pseudonymizing personal data to reduce re-identification risks and ensure privacy compliance.
Open this prompt Analysis · Advanced
Incident Response Plan Development
Use this when you need to develop or refine an incident response plan for data privacy incidents, ensuring compliance and effective handling.
Open this prompt Planning · Intermediate
Privacy Audit and Assessment
Use this when you need to conduct a privacy audit or assessment to evaluate compliance with data protection regulations.
Open this prompt Analysis · Intermediate
Review and Update Privacy Policy
Use this when you need to review and update your organization's data privacy policy to align with best practices and regulatory requirements.
Open this prompt Analysis · Intermediate
Develop Data Breach Response Plan
Use this when you need to create a comprehensive data breach response plan, including communication strategies and legal obligations.
Open this prompt Planning · Intermediate
Interactive Privacy Training Modules
Use this when you need to develop interactive training modules and resources to raise data privacy awareness among employees.
Open this prompt Creating · Intermediate
Establish Data Retention and Disposal
Use this when you need guidance on setting data retention policies and secure disposal methods to minimize unauthorized access risks.
Open this prompt Planning · Intermediate
International Data Transfer Guidance
Use this when you need to understand or implement compliant mechanisms for transferring personal data across borders.
Open this prompt Analysis · Intermediate