Privacy Law Updates
Produces a structured briefing on recent privacy and data protection developments, oriented toward compliance planning and executive decision-making.
Quick Start
Confirm before generating:
- Reporting period — default: past 12–18 months
- Jurisdictions — default: US federal + state, EU/EEA, UK
- Industry context — platform type, data categories, cross-border transfers
- Audience — legal/compliance, executive, or both
Output Workflow
Step 1: Executive Overview
| Element |
Content |
| Critical deadlines |
Compliance dates requiring immediate action |
| Major enforcement |
Fines/orders signaling regulatory priorities |
| New obligations |
Requirements not previously in effect |
| Strategic flags |
Developments affecting product roadmap or vendors |
Step 2: Jurisdiction Developments
For each jurisdiction, use this entry template:
### [Jurisdiction]
#### [Development Title]
- **Type**: Legislation | Guidance | Enforcement | Court Decision
- **Effective date**: [date or timeline]
- **Scope**: [entities, data types, activities covered]
- **Key requirements/holdings**: [bullet list]
- **Delta from prior law**: [what changed]
- **Operational impact**: [systems, processes, documentation affected]
- **Penalties**: [non-compliance consequences]
- **Exemptions/safe harbors**: [if any]
Step 3: Cross-Cutting Topics
Cover only topics with material developments:
| Topic |
Capture |
| Cross-border transfers |
New mechanisms, adequacy decisions, SCCs updates |
| Consent & notice |
Changed standards, dark-pattern enforcement |
| Data subject rights |
Access, deletion, portability changes |
| Breach notification |
Amended timelines, reporting thresholds |
| AI governance |
Automated decision-making rules, transparency mandates |
| Children's privacy |
Age verification, parental consent, design codes |
| Biometric data |
New state/national laws, consent requirements |
Step 4: Forward-Looking
- Pending legislation with expected timelines
- Open regulatory consultations
- Announced DPA enforcement priorities
- Areas of legal uncertainty warranting monitoring
Checks and Pitfalls
- Jurisdiction-first organization — cross-reference in cross-cutting section; never repeat the same development twice
- Cite primary sources — statute sections, regulation articles, case names, DPA decisions
- Mark unverified citations with
[VERIFY]
- Distinguish enacted law from proposals — clearly label pending/proposed items
- Flag jurisdictional conflicts where requirements create operational tension
- Include enforcement amounts — fines contextualize regulatory seriousness
- No editorializing on political likelihood; state procedural status only
- Note sector carve-outs (HIPAA, GLBA, COPPA, ePrivacy) where they interact with general frameworks
- Dual-audience tone — precise for compliance implementation, clear for executive briefing
1---2name: privacy-law-updates3description: Generates structured privacy and data protection law briefings across US, EU, UK, and other jurisdictions. Organizes by jurisdiction with compliance deadlines, enforcement actions, and legislative changes. Use when preparing privacy law briefings, compliance updates, regulatory change summaries, or data protection landscape reviews.4---5
6# Privacy Law Updates
7
8Produces a structured briefing on recent privacy and data protection developments, oriented toward compliance planning and executive decision-making.
9
10## Quick Start
11
12Confirm before generating:
13
141. **Reporting period** — default: past 12–18 months
152. **Jurisdictions** — default: US federal + state, EU/EEA, UK
163. **Industry context** — platform type, data categories, cross-border transfers
174. **Audience** — legal/compliance, executive, or both
18
19## Output Workflow
20
21### Step 1: Executive Overview
22
23| Element | Content |
24|---|---|
25| Critical deadlines | Compliance dates requiring immediate action |
26| Major enforcement | Fines/orders signaling regulatory priorities |
27| New obligations | Requirements not previously in effect |
28| Strategic flags | Developments affecting product roadmap or vendors |
29
30### Step 2: Jurisdiction Developments
31
32For each jurisdiction, use this entry template:
33
34```
35### [Jurisdiction]
36
37#### [Development Title]
38- **Type**: Legislation | Guidance | Enforcement | Court Decision
39- **Effective date**: [date or timeline]
40- **Scope**: [entities, data types, activities covered]
41- **Key requirements/holdings**: [bullet list]
42- **Delta from prior law**: [what changed]
43- **Operational impact**: [systems, processes, documentation affected]
44- **Penalties**: [non-compliance consequences]
45- **Exemptions/safe harbors**: [if any]
46```
47
48### Step 3: Cross-Cutting Topics
49
50Cover only topics with material developments:
51
52| Topic | Capture |
53|---|---|
54| Cross-border transfers | New mechanisms, adequacy decisions, SCCs updates |
55| Consent & notice | Changed standards, dark-pattern enforcement |
56| Data subject rights | Access, deletion, portability changes |
57| Breach notification | Amended timelines, reporting thresholds |
58| AI governance | Automated decision-making rules, transparency mandates |
59| Children's privacy | Age verification, parental consent, design codes |
60| Biometric data | New state/national laws, consent requirements |
61
62### Step 4: Forward-Looking
63
64- Pending legislation with expected timelines
65- Open regulatory consultations
66- Announced DPA enforcement priorities
67- Areas of legal uncertainty warranting monitoring
68
69## Checks and Pitfalls
70
71- **Jurisdiction-first organization** — cross-reference in cross-cutting section; never repeat the same development twice
72- **Cite primary sources** — statute sections, regulation articles, case names, DPA decisions
73- **Mark unverified citations** with `[VERIFY]`
74- **Distinguish enacted law from proposals** — clearly label pending/proposed items
75- **Flag jurisdictional conflicts** where requirements create operational tension
76- **Include enforcement amounts** — fines contextualize regulatory seriousness
77- **No editorializing** on political likelihood; state procedural status only
78- **Note sector carve-outs** (HIPAA, GLBA, COPPA, ePrivacy) where they interact with general frameworks
79- **Dual-audience tone** — precise for compliance implementation, clear for executive briefing
CaseMark