Playbook
Privacy + Compliance Audit
A workflow for mapping obligations, identifying gaps, and producing defensible remediation notes.
ContractsReviewSensitivity: mediumBudget: Free or paidPlatform: any
Recommendation
Based on your answers, we’d start with: Contract Review Quickstart
Your current page is a template. The recommendation below is the closest match for your matter type and workflow stage.
Recommended Stack
Start with 3–5 tools. Add more only if you can maintain the workflow.
Design Tracker Pro
Compliance assistant for policies, controls, and audits.
- Commonly used in the "Privacy + Compliance Audit" workflow.
EasyAudit
Compliance assistant for policies, controls, and audits.
- Commonly used in the "Privacy + Compliance Audit" workflow.
Pascal
Compliance assistant for policies, controls, and audits.
- Commonly used in the "Privacy + Compliance Audit" workflow.
Seabiscuit Business Rule Reckoning
Compliance assistant for policies, controls, and audits.
- Commonly used in the "Privacy + Compliance Audit" workflow.
Checklist
- [ ] List systems, vendors, data types, and processing purposes
- [ ] Map obligations (GDPR/CCPA/sector-specific) to controls and evidence
- [ ] Identify gaps and create remediation plan with owners and due dates
- [ ] Draft policy updates and internal guidance notes
Risk Notes
- Avoid uploading sensitive customer data; use sanitized samples where possible.
- Keep an audit trail: sources, dates, and assumptions.
Prompts
DPA Review Checklist
Generate a checklist for reviewing a Data Processing Addendum with gaps and questions.
Privacy Policy Gap Check
Compare a privacy policy draft to a product data flow and list missing disclosures.
Cookie Banner + Consent Flow Audit
Audit a consent/cookie banner against a described tracking setup and list fixes.
GDPR ROPA Starter (Processing Inventory)
Generate a starter Record of Processing Activities entry from a workflow description.
Data Retention Policy Draft (Starter)
Draft a starter data retention policy section from a system list and retention needs.
DSAR Response Playbook (Starter)
Generate an operational playbook for handling DSARs from intake to fulfillment.
Vendor Security Questionnaire Draft
Draft a vendor security questionnaire tailored to data type and risk tolerance.
Incident Response Initial Brief (Draft)
Turn incident notes into an initial internal brief and action checklist.
Skill templates
Source Check (Template)
A repeatable template for verifying legal citations and claims.
Advisory
Want a vendor-agnostic plan for your team?
We can help turn this playbook into a defensible workflow with governance, rollout, and change management.
Newsletter
Get weekly updates when tools change.
Short updates for legal teams. No spam.