Prompt lesson · 27 prompts
Data Privacy Compliance prompts for CTOs (Chief Technology Officers)
27 ready-to-use prompts from our AI for CTOs (Chief Technology Officers) course. Copy one, fill in the {{placeholders}}, and paste it into ChatGPT, Claude, Gemini or any other AI.
Automate Data Retention Policy Enforcement
Use this when you want to automate the classification, retention, and disposal of data to ensure consistent compliance.
Role You are an automation and data governance expert who designs systems to automatically classify, retain, and dispose of data in line with privacy regulations.
Context you provide
- {{data_types}}: the types of data you need to manage (e.g., customer PII, logs, financial records).
- {{regulations}}: the regulations that dictate retention periods (e.g., GDPR, PCI DSS).
- {{infrastructure}}: your current data storage and processing environment (e.g., cloud, on-premise, databases).
- {{current_process}}: any existing manual or semi-automated retention processes.
Instructions
- If the data types or infrastructure are missing, ask for them before proceeding.
- Define a data classification scheme that categorizes data by sensitivity and retention requirements.
- Propose an automated workflow for tagging, storing, and deleting data based on the classification and retention schedule.
- Recommend tools or technologies (e.g., cloud services, scripts) that can implement the automation.
- Provide a step-by-step implementation plan, including testing and monitoring.
Output format A detailed automation plan with sections: Data Classification, Retention Schedule, Automation Workflow, Tool Recommendations, and Implementation Steps. Use technical but clear language.
Guardrails
- Do not assume specific tools; recommend based on the provided infrastructure.
- Do not provide legal advice; ensure the retention schedule is validated by legal counsel.
- Keep the plan practical and focused on automation, not manual processes.
Example data_types: customer PII, transaction logs, support tickets; regulations: GDPR, PCI DSS; infrastructure: AWS S3 and RDS; current_process: manual deletion quarterly.
Open this prompt Automation · Advanced
Build Breach Detection System
Use this when you need to design and implement a system that monitors data flows for breaches and enables timely notifications.
Role You are a cybersecurity and AI systems architect who designs robust breach detection systems that provide early warning and actionable alerts.
Context you provide
- {{data_flows}}: The data flows or systems to monitor (e.g., network traffic, database access logs).
- {{breach_indicators}}: Known indicators or labeled examples of breaches, if available.
- {{notification_requirements}}: How and to whom notifications should be sent (e.g., email, Slack, incident response team).
- {{constraints}}: Technical or operational constraints (e.g., real-time needs, legacy infrastructure).
Instructions
- Ask for any missing context before starting.
- Outline a step-by-step implementation plan for a breach detection system, including data collection, preprocessing, and monitoring approach.
- Describe how to use labeled data to train or tune a detection model, if applicable, or use rule-based/anomaly detection otherwise.
- Explain how to set up real-time monitoring and automated notifications, including escalation paths.
- Recommend metrics to evaluate detection accuracy and system effectiveness.
Output format Provide a structured plan with sections: Overview, Implementation Steps, Data Preprocessing, Detection Approach, Notification Workflow, Evaluation Metrics. Use clear headings and bullet points.
Guardrails Do not claim a specific model will work without data; suggest options. Flag assumptions about data availability and quality. Stay within breach detection scope, not broader security architecture.
Example data_flows: network traffic logs; breach_indicators: labeled dataset of past intrusions; notification_requirements: real-time alerts to SOC team via Slack; constraints: cloud-based infrastructure.
Open this prompt Planning · Advanced
Build Consent Management Platform
Use this when you need to develop or enhance a platform that manages user consent, including form generation and compliance classification.
Open this prompt Creating · Advanced
Build Data Privacy Compliance Audit Tool
Use this when you need to design an AI-powered tool to conduct regular privacy compliance audits and identify gaps in data practices.
Open this prompt Creating · Advanced
Conduct Data Protection Impact Assessment
Use this when you need to perform a DPIA for a new project, system, or data practice that may pose privacy risks.
Open this prompt Analysis · Advanced
Data Subject Request Chatbot
Use this when you need to design a chatbot that handles data subject requests under privacy regulations.
Open this prompt Creating · Intermediate
Data Subject Rights Workflow
Use this when you need to manage data subject rights requests efficiently and meet compliance timelines.
Open this prompt Planning · Intermediate
Design Consent Management System
Use this when you need to design or improve a system for managing user consent for data collection and processing.
Open this prompt Planning · Advanced
Design Data Anonymization Tool
Use this when you need to plan and implement a data anonymization tool that preserves data utility while meeting privacy regulations.
Open this prompt Planning · Advanced
Develop Breach Response Plan
Use this when you need to create or improve a data breach response plan, including notification and mitigation steps.
Open this prompt Planning · Intermediate
Develop Data Retention and Disposal Policies
Use this when you need to create or improve policies for how long to keep data and how to securely dispose of it.
Open this prompt Creating · Intermediate
Embed Privacy by Design
Use this when you need to integrate privacy considerations into product design and development from the start.
Open this prompt Planning · Intermediate
Generate Custom Data Privacy Policies
Use this when you need to create a data privacy policy tailored to your organization's sector, location, and applicable regulations.
Open this prompt Creating · Intermediate
Implement Data Minimization
Use this when you need to reduce the collection and storage of personal data to comply with privacy principles and improve efficiency.
Open this prompt Planning · Intermediate
Map Data Inventory
Use this when you need to create a comprehensive inventory and map of personal data across your organization for compliance or governance.
Open this prompt Analysis · Intermediate
Privacy Audit and Compliance Review
Use this when you need to assess your organization's privacy compliance and identify gaps.
Open this prompt Analysis · Advanced
Privacy by Design Framework
Use this when you need to build a comprehensive framework or tool for implementing privacy by design across your organization.
Open this prompt Creating · Advanced
Privacy Compliance Documentation
Use this when you need to create or update privacy compliance documents such as policies, procedures, and records of processing.
Open this prompt Creating · Intermediate
Privacy Impact Assessment Automation
Use this when you want to design an automated system to streamline the privacy impact assessment process.
Open this prompt Planning · Advanced
Privacy Impact Assessment Guidance
Use this when you need to conduct a privacy impact assessment for a project involving personal data.
Open this prompt Analysis · Intermediate
Privacy Impact Assessment Reporting
Use this when you need to generate comprehensive privacy impact assessment reports for different types of organizations.
Open this prompt Creating · Intermediate
Privacy Impact Assessment Review
Use this when you need to review an existing privacy impact assessment to identify gaps and improve privacy protections.
Open this prompt Analysis · Advanced
Privacy Incident Management
Use this when you need to manage privacy incidents from reporting through investigation and remediation.
Open this prompt Planning · Advanced
Privacy Training and Awareness
Use this when you need to develop privacy training materials and awareness campaigns for employees.
Open this prompt Creating · Intermediate
Privacy Training Program Design
Use this when you need to design an interactive privacy training program with simulations and assessments.
Open this prompt Creating · Intermediate
Review Data Privacy Policy Compliance
Use this when you need to audit an existing data privacy policy for gaps, ambiguities, or non-compliance with specific regulations.
Open this prompt Analysis · Intermediate
Vendor Privacy Risk Assessment
Use this when you need to evaluate the privacy practices of vendors or third parties to ensure they meet your standards.
Open this prompt Analysis · Advanced