privacy-legal-uk

/cold-start-interview

Run the cold-start interview — learns your UK data-protection practice and writes your practice profile from your privacy notice, DPA template, and a reference DPIA.

/dpia-generation

Generate a Data Protection Impact Assessment (DPIA) under UK GDPR Art.35 in house format for a new feature, product, or processing activity.

/dpa-review

Review a Data Processing Agreement against your UK GDPR Art.28 DPA playbook — auto-detects whether you're processor or controller and applies the right half of the playbook.

/dsar-response

Walk through a Data Subject Access Request (or erasure, portability, rectification, restriction, or objection request) and draft the response within the 1-month statutory deadline.

/use-case-triage

Quickly determine whether a UK processing activity needs a DPIA — surfaces lawful basis issues, Children's Code checks, PECR implications, and privacy notice conflicts.

/reg-gap-analysis

Diff a new or changed UK regulation, ICO guidance, or enforcement development against current privacy notice and practice — outputs a gap list and a remediation plan.

/policy-monitor

Keep the UK privacy notice current with practice — weekly sweep of saved DPIAs, DPA reviews, and triage results to find policy drift.

/matter-workspace

Manage matter workspaces — create, list, switch, close, or detach (practice-level).

/customize

Guided customisation of your UK privacy practice profile — change one thing without re-running the whole cold-start interview.