
Annual Data Privacy Risk Assessment
N.B. Schedule exercises quarterly; rotate Incident Commander to build bench strength. Invite [CustomerName] observers if contractually appropriate.
📄 Prompt Template
Conduct an annual data privacy risk assessment for [CompanyName], specifically focusing on areas with the highest risk to [SensitiveData]. Evaluate existing risk mitigation strategies and identify potential vulnerabilities in current data processing practices, especially with regard to third-party vendors, new technologies, and employee data access. Provide a detailed report summarizing the risks, potential consequences, and mitigation recommendations, along with a risk score for each identified issue.