{ "schema": "aiblocks-page/1", "id": "prepare-new-data-use-review-for-signoff", "type": "workflow", "name": "Prepare a new data use for review", "summary": "Check a new use of customer data before launch: get a triage call, a privacy assessment if needed and sign-off questions with owners.", "headline": "Prepare a new data use for review", "subhead": "Describe the feature and attach your privacy rules and policies. It decides whether a privacy assessment is needed, drafts one when it is and flags any serious legal risk. You get the call, the conditions with owners and the questions your reviewer must sign off.", "job": { "id": "check-contracts", "name": "Check contracts and rules" }, "level": "advanced", "thinking": "high", "tested": true, "updated": "2026-11-03", "first_published": "2026-10-25", "inputs": [ { "type": "question", "required": true, "label": "Question", "what": "the problem, decision or piece of work you want help with, and what a good outcome looks like" }, { "type": "document", "required": true, "label": "Document", "what": "a finished document, such as a Word file, a PDF or a page of notes" }, { "type": "policy", "required": false, "label": "Policy", "what": "a written policy or set of rules, such as a returns policy, a privacy policy or a staff handbook section, with the date it starts" } ], "outputs": [ { "type": "audit_report", "required": true, "label": "Audit report", "what": "findings with evidence, severity, missing inputs and next actions" }, { "type": "document", "required": true, "label": "Document", "what": "a finished document, such as a Word file, a PDF or a page of notes" }, { "type": "plan", "required": true, "label": "Plan", "what": "a dated plan: what to do, in what order, with a decision rule for each step" } ], "you_give": [ "FEATURE: who the data is about, which fields, why you collect them, where they go, how long you keep them, who can see them and which vendors get them", "PRACTICE_SETUP: your assessment template, house rules and who signs off", "FOOTPRINT: where you operate, who decides, and who receives the result", "SOURCE_PACK: the product spec, your current privacy policy, an earlier assessment and any dated legal guidance you rely on (attach what you have)" ], "you_get": [ "A triage call: no assessment, assessment needed or escalate, with the reasons from your facts", "A draft privacy impact assessment when triage calls for one", "A table of conditions, each with an owner", "Sign-off questions for the decision owner", "A note on any new or serious legal risk, or why none is raised", "A list of missing facts and checks that did not run" ], "use_when": [ "A product team wants to add a feature that collects or reuses customer data, such as location or purchase history.", "Someone asks \"does this need a privacy assessment?\" and you have no standard answer.", "A vendor or tool will receive personal data for the first time.", "Your reviewer wants one tidy pack to sign off." ], "skip_when": [ "You have no privacy rules, assessment template or named reviewer yet. Set those up first. The Privacy management audit planner shows what a privacy setup needs.", "The data belongs to staff, such as an HR tool. Use Employee data privacy reviewer or the Employee data privacy checker.", "You want your code scanned for GDPR risks. Use the GDPR privacy checker.", "You want legal advice or a launch approval. Only a qualified reviewer can give those." ], "output_sample": { "input": [ "FEATURE: the data, purpose, flows, retention, access and vendors", "PRACTICE_SETUP: your assessment template, house rules and sign-off process", "FOOTPRINT: where you operate and who decides", "SOURCE_PACK: spec, current privacy policy and earlier assessments" ], "prerequisites": [ "An AI that can read the whole unzipped folder, and web access for live rule checks (optional)" ], "output": [ { "name": "Triage route", "contains": "The call (no assessment, assessment or escalate) with reasons, sources and dates." }, { "name": "Draft assessment", "contains": "Risks, conditions and policy checks in your house format, only when triage calls for it." }, { "name": "Conditions table", "contains": "Each condition with its owner and due date." }, { "name": "Sign-off questions", "contains": "What the decision owner must answer before launch." }, { "name": "Escalation note", "contains": "New or serious legal risks, or why none is raised." }, { "name": "Missing and checks", "contains": "Gaps, and each check marked PASS, FAIL or NOT RUN." } ] }, "output_shape": "PROCESSING FACTS \nROUTE with reasons, sources and dates\nASSESSMENT \nCONDITIONS | | \nSIGN-OFF QUESTIONS | \nMISSING \nCHECKS ", "how_to_use": [ "Download the pack, unzip it and give the whole folder to Claude, ChatGPT or Gemini. Start with START_HERE.txt, then answer what the coordinator skill asks.", "Fill the four inputs: FEATURE, PRACTICE_SETUP, FOOTPRINT and SOURCE_PACK. With no PRACTICE_SETUP you get a setup checklist, not a call.", "Read the triage route and its reasons. Check that the data flows it lists match your product.", "If an assessment was drafted, give each condition to its owner to confirm. Fix anything wrong before it goes further.", "Send the pack to your privacy reviewer. Nothing here approves a launch." ], "checks": [ "Required practice setup and matter boundaries are satisfied before classification.", "Jurisdiction, dates and current-source limitations are explicit.", "Assessment/escalation follows the actual route.", "Sign-off and distribution stay with authorized owners." ], "steps": [ { "position": 1, "id": "new-data-use-screener", "name": "New data use privacy screener", "summary": "Describe the data, people and purpose. Check company rules and legal triggers, then route the use for the right privacy review.", "url": "https://useaiblocks.com/skills/new-data-use-screener" }, { "position": 2, "id": "privacy-impact-assessment-writer", "name": "Privacy impact assessment writer", "summary": "Describe a feature, its personal data and the regions it serves. Get an assessment-need check, source-based risks and launch conditions with owners.", "url": "https://useaiblocks.com/skills/privacy-impact-assessment-writer" }, { "position": 3, "id": "feature-legal-risk-assessor", "name": "Product feature legal risk reviewer", "summary": "Name a risky product feature. Get likely harms, severity, mitigations and a first-pass risk review.", "url": "https://useaiblocks.com/skills/feature-legal-risk-assessor" } ], "next": [ { "name": "Vietnam data privacy checker", "url": "https://useaiblocks.com/skills/vietnam-data-privacy-checker", "why": "Vietnam data privacy checker" }, { "name": "India data privacy checker", "url": "https://useaiblocks.com/skills/india-data-privacy-checker", "why": "India data privacy checker" }, { "name": "Privacy policy drift checker", "url": "https://useaiblocks.com/skills/privacy-policy-drift-checker", "why": "Privacy policy drift checker" } ], "source": null, "credits": [], "files": [ "references/practice-case.md" ], "links": { "page": "https://useaiblocks.com/workflows/prepare-new-data-use-review-for-signoff", "markdown": "https://useaiblocks.com/workflows/prepare-new-data-use-review-for-signoff.md", "json": "https://useaiblocks.com/workflows/prepare-new-data-use-review-for-signoff.json", "instructions": "https://useaiblocks.com/skills/prepare-new-data-use-review-for-signoff/SKILL.md", "download": "https://useaiblocks.com/skills/prepare-new-data-use-review-for-signoff.zip", "api_item": "https://useaiblocks.com/api/v1/items/prepare-new-data-use-review-for-signoff", "api_document": "https://useaiblocks.com/api/v1/documents/workflow/prepare-new-data-use-review-for-signoff", "mcp": "https://useaiblocks.com/mcp" } }