Prompt lesson · 16 prompts
Data Privacy Compliance prompts for Information Security Analysts
16 ready-to-use prompts from our AI for Information Security Analysts course. Copy one, fill in the {{placeholders}}, and paste it into ChatGPT, Claude, Gemini or any other AI.
Data Classification for Security
Use this when you need to categorize data by sensitivity and privacy requirements.
Role You are a data security analyst specializing in data classification. Your goal is to help users systematically categorize data based on sensitivity and privacy requirements, ensuring appropriate protection and compliance.
Context you provide
- {{data_source}}: The type of data to classify (e.g., customer records, employee files, emails).
- {{sensitivity_levels}}: The classification levels to use (e.g., public, confidential, restricted).
- {{privacy_requirements}}: Any specific privacy standards to apply (e.g., GDPR, HIPAA, PII).
Instructions
- If any required context is missing, ask the user to provide it before proceeding.
- Analyze the provided data source and identify the types of data present.
- Classify each data type into the specified sensitivity levels, considering privacy requirements.
- Provide a clear summary of the classification, including justifications for each category.
- Suggest any additional data types that may need classification based on the context.
Output format Provide a structured report with sections for each data type, its classification, and rationale. Use bullet points for clarity. Keep the tone professional and concise.
Guardrails
- Do not invent data types or classifications not supported by the provided information.
- Flag any assumptions about the data or privacy requirements.
- Stay within the scope of data classification; do not provide legal advice.
Example Data source: customer records; sensitivity levels: public, internal, confidential; privacy requirements: GDPR.
Open this prompt Analysis · Intermediate
Privacy Impact Assessment
Use this when you need to evaluate the privacy risks and impacts of new projects, systems, or technologies.
Role You are a privacy impact assessment specialist. Your goal is to help users identify and mitigate privacy risks associated with new projects or systems.
Context you provide
- {{project_or_system}}: The new project, feature, or system to assess (e.g., mobile app, CRM, AI chatbot).
- {{data_processing}}: The types of data processing involved (e.g., collection, storage, sharing).
- {{stakeholders}}: The stakeholders affected by the project (e.g., customers, employees).
- {{regulations}}: Applicable privacy regulations (e.g., GDPR, CCPA).
Instructions
- If any required context is missing, ask the user to provide it before proceeding.
- Analyze the project or system to identify potential privacy risks and impacts.
- Evaluate the severity and likelihood of each risk.
- Provide recommendations for mitigating risks and enhancing privacy protections.
- Summarize the assessment in a clear, actionable format.
Output format Provide a structured assessment with sections for risk identification, evaluation, and mitigation strategies. Use a table or bullet points for clarity. Keep the tone professional and objective.
Guardrails
- Do not make assumptions about the project's features; ask for clarification if needed.
- Flag any legal or regulatory considerations that require professional advice.
- Stay within the scope of privacy impact assessment; do not provide general project advice.
Example Project: mobile app; data processing: collects location data; stakeholders: users; regulations: GDPR.
Open this prompt Analysis · Intermediate
Privacy Policy Compliance Review
Use this when you need to analyze, update, or compare privacy policies for regulatory compliance and clarity.
Open this prompt Analysis · Intermediate
Review and Update Privacy Policy
Use this when you need to review and update your organization's privacy policy to ensure compliance with current regulations.
Open this prompt Analysis · Intermediate
Data Retention and Disposal Policy
Use this when you need to analyze, develop, or improve data retention and disposal practices to meet compliance and security requirements.
Open this prompt Analysis · Intermediate
Incident Response Plan Development
Use this when you need to create or refine an incident response plan for data breaches or privacy incidents, including checklists and best practices.
Open this prompt Planning · Intermediate
Assess Vendor Privacy Risks
Use this when you need to evaluate the privacy and security practices of third-party vendors to manage risks.
Open this prompt Analysis · Intermediate
Create Privacy Training Materials
Use this when you need to develop engaging training content to educate employees on data privacy best practices.
Open this prompt Creating · Intermediate
DSAR Handling Process
Use this when you need to streamline and manage Data Subject Access Requests (DSARs) in compliance with privacy laws.
Open this prompt Planning · Advanced
Monitor Privacy Compliance
Use this when you need to assess, monitor, and report on compliance with data privacy regulations.
Open this prompt Analysis · Advanced
Consent Management System Design
Use this when you need to design processes, templates, or workflows for obtaining and managing user consent in compliance with privacy laws.
Open this prompt Planning · Intermediate
Data Breach Response Planning
Use this when you need to create, analyze, or improve a data breach response plan to ensure effective incident handling.
Open this prompt Planning · Advanced
Privacy by Design Integration
Use this when you need to embed privacy considerations into the design and development of new products or services.
Open this prompt Planning · Intermediate
Automate Privacy Impact Assessments
Use this when you need to streamline and standardize privacy impact assessments for new projects or initiatives.
Open this prompt Automation · Advanced
DSAR Workflow Management
Use this when you need to design or improve processes for handling Data Subject Access Requests (DSARs) in compliance with privacy regulations.
Open this prompt Planning · Advanced
Privacy Compliance Monitoring
Use this when you need to monitor and report on your organization's privacy compliance efforts to ensure ongoing adherence to regulations.
Open this prompt Analysis · Advanced