data-compliance-expert
Assess Data Compliance Across the Full Lifecycle
Organizations can miss legal duties across data collection, use, sharing, export, trading, and security. This skill structures assessments, risk classifications, controls, and audit deliverables.
๋ด ์์ด์ ํธ๋ก ์ค์น
์ด ์์ฒญ์ ์์ด์ ํธ์ ๋ณต์ฌํ์ธ์. ๊ณต์ Skill ํ์ด์ง์ ๋งค๋ํ์คํธ๊ฐ ํฌํจ๋์ด ์์ต๋๋ค.
Review the Skillstore skill "data-compliance-expert" from https://skillstore.io/skills/dhturing-data-compliance-expert.md and its manifest at https://skillstore.io/api/skills/dhturing-data-compliance-expert/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.์์ด์ ํธ๋ ๊ณ์ํด์ ๊ณํ์ ํ์ํ๊ณ ๋ณด์ ์ ์ฑ ์์ ์๊ตฌํ๋ ํ์ธ์ ์์ฒญํด์ผ ํฉ๋๋ค.
์์ด์ ํธ๊ฐ ์ฝ๊ธฐ ์ฌ์ด ๋ฆฌ์์ค
AI ์์ด์ ํธ, ํฌ๋กค๋ฌ, ์คํฌ๋ฆฝํธ๊ฐ ์ ์ฒด ํ์ด์ง ๋์ ์ ๋ฆฌ๋ ์ปจํ ์คํธ๋ง ํ์ํ ๋ ์ด ๋งํฌ๋ฅผ ์ฌ์ฉํ์ธ์.
ํ ์คํธํด ๋ณด๊ธฐ
"data-compliance-expert" ์ฌ์ฉ ์ค์ ๋๋ค. Assess a customer analytics project that combines account records with mobile location data.
์์ ๊ฒฐ๊ณผ:
- High risk: The purpose and necessity of location processing require documented review.
- Required evidence: Data inventory, privacy notice, consent records, access logs, retention schedule, and vendor agreements.
- Next action: Pause expanded use until the lawful basis, minimization, and sensitive information controls are verified.
"data-compliance-expert" ์ฌ์ฉ ์ค์ ๋๋ค. Outline a compliance audit for a company preparing a data transaction.
์์ ๊ฒฐ๊ณผ:
- Scope: Data source, ownership documents, personal information, important data, export exposure, security controls, and transaction terms.
- Method: Review documents, interview accountable roles, sample records, test control evidence, and classify findings.
- Deliverables: Audit report, four-level risk register, remediation plan, and evidence checklist.
"data-compliance-expert" ์ฌ์ฉ ์ค์ ๋๋ค. Create a remediation entry for missing data retention controls.
์์ ๊ฒฐ๊ณผ:
Medium risk: Retention periods are not consistently defined. Assign policy and system owners, approve schedules, configure deletion controls, and retain test evidence.
๋ณด์ ๊ฐ์ฌ
์์ All 12 static findings are false positives caused by documentation syntax, installation examples, public metadata links, or multilingual text entropy. The reviewed files contain no executable commands, hidden-file operations, encoded payloads, prompt injection, or suspicious network behavior.
์ํ ์์ธ
๐ ํ์ผ ์์คํ ์ ๊ทผ (2)
โ๏ธ ์ธ๋ถ ๋ช ๋ น์ด (3)
๐ ๋คํธ์ํฌ ์ ๊ทผ (2)
์ด ๋ณด๊ณ ์ ๊ณต์ ๋ฐ ์ธ์ฉ
๋ฒ์ ์ด ์ง์ ๋ ํ๊ฐ ๋ณด๊ณ ์, ์ค๋ฆฝ ๋ฐฐ์ง, ์๋ฒ ๋ ์นด๋ ๋ฐ ์ธ์ฉ์ ๊ณต์ ํ์ธ์. Skillstore๋ ๊ทผ๊ฑฐ๋ฅผ ๋ณด๊ณ ํ์ง๋ง ์ด Skill์ ์์ ์ฌ๋ถ๋ฅผ ํ๋จํ์ง ์์ต๋๋ค.
๋ณด๊ณ ์ ๋งํฌ ๋ณต์ฌ
https://skillstore.io/skills/dhturing-data-compliance-expert/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown ๋ฐฐ์ง
[](https://skillstore.io/skills/dhturing-data-compliance-expert?utm_source=security_passport_badge)HTML ๋ฐฐ์ง
<a href="https://skillstore.io/skills/dhturing-data-compliance-expert?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/dhturing-data-compliance-expert/security.svg" alt="Skillstore security assessment" loading="lazy"></a>์๋ฒ ๋ ์นด๋
<iframe src="https://skillstore.io/embed/skills/dhturing-data-compliance-expert.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>ํ์ ์ธ์ฉ (APA ยท BibTeX ยท CFF)
APA ์ธ์ฉ
ๅพ็ตๆฐ็. (2026). data-compliance-expert security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/dhturing-data-compliance-expert/audits/1BibTeX ์ธ์ฉ
@techreport{dhturing-data-compliance-expert-2026,
author = {ๅพ็ตๆฐ็},
title = {data-compliance-expert security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/dhturing-data-compliance-expert/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "data-compliance-expert security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "ๅพ็ตๆฐ็"
date-released: "2026-09-27"
url: "https://skillstore.io/skills/dhturing-data-compliance-expert/audits/1"
identifiers:
- type: other
value: "skillstore:dhturing-data-compliance-expert:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore ์ ์
์ด ์ ์์ ์ด์ ์ฆ๊ฑฐ ์ ๋ขฐ๋: ์ค๊ฐ๋ง๋ค ์ ์๋ ๊ฒ
Prepare a Compliance Baseline
Map data activities, identify missing evidence, and create a prioritized four-level risk register.
Classify Enterprise Data
Structure a data classification exercise and distinguish core, important, general, personal, and sensitive personal information.
Plan Audit Remediation
Convert audit observations into owners, deadlines, required evidence, and verification steps.
์ด ํ๋กฌํํธ๋ฅผ ์ฌ์ฉํด ๋ณด์ธ์
Review this data activity: [describe activity]. Identify applicable compliance areas, missing facts, likely risks, and immediate next steps.
Create a classification table for [data inventory]. Include category, sensitivity, legal status, processing purpose, access scope, retention, and supporting evidence.
Assess [business process] across all eight compliance areas. Produce four-level findings with evidence, legal basis, impact, owner, action, deadline, and validation method.
Design an audit program for [organization]. Cover scope, interviews, sampling, controls, evidence, legal updates, findings, remediation governance, and final quality checks.
๋ชจ๋ฒ ์ฌ๋ก
- Provide current business facts, data flows, systems, vendors, jurisdictions, contracts, and existing control evidence.
- Validate every conclusion against current laws, official standards, industry rules, and qualified professional advice.
- Assign each remediation action an owner, deadline, evidence requirement, and independent verification step.
ํผํ๊ธฐ
- Do not treat generated assessments as final legal opinions or regulatory approvals.
- Do not conclude compliance from written policies without testing execution records and technical controls.
- Do not share unnecessary personal, sensitive, confidential, or regulated data in prompts.
์์ฃผ ๋ฌป๋ ์ง๋ฌธ
Which compliance areas does this skill cover?
Can it provide a final legal opinion?
What information improves an assessment?
Does it support data classification?
Can it help with compliance audits?
How should legal updates be handled?
๊ฐ๋ฐ์ ์ธ๋ถ ์ ๋ณด
์์ฑ์
ๅพ็ตๆฐ็๋ผ์ด์ ์ค
MIT
Skillstore ๋ฆฌ๋น์
r1
๋ฒ์ ์๋ด
์์ฑ์๊ฐ ๋ฒ์ ์ ์ ์ธํ์ง ์์์ต๋๋ค.
๋ฆฌํฌ์งํ ๋ฆฌ
https://github.com/dhturing/turing-data-experts/tree/9c58ffa97ec5b760befef6f910eb23107cdcdbf4/skills/data-compliance-expert์ฐธ์กฐ
50b73f83991cf073cbdf3f5afad2bbac71dd3bae
์ ์ง๋ณด์ ์ต์ ์ฑ
2026. 9. 30.
์ฌ์ฉ๋
0 ๋ค์ด๋ก๋ ยท 0 ์กฐํ
ํ์ผ ๊ตฌ์กฐ