<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
---
name: implementing-privacy-awareness-training
description: >-
  Implement privacy awareness training covering data subject rights, consent
  management, privacy by design principles, breach notification requirements,
  and cross-regulation compliance for GDPR, CCPA, and HIPAA.
domain: cybersecurity
subdomain: security-awareness
tags:
  - privacy-awareness
  - gdpr
  - ccpa
  - hipaa
  - data-subject-rights
version: "1.0"
author: defconxt
license: AGPL-3.0
metadata:
  mitre-attack: []
---

# Implementing Privacy Awareness Training

## Overview

Privacy awareness training ensures all employees understand their obligations
when handling personal data. This skill covers data subject rights education,
consent and lawful basis training, privacy impact awareness, breach notification
responsibilities, and cross-jurisdictional privacy regulation compliance.

## Prerequisites

| Requirement | Install |
|---|---|
| Privacy framework | GDPR, CCPA/CPRA, HIPAA, or LGPD |
| Consent platform | OneTrust, TrustArc, or Cookiebot |
| Data inventory | Records of Processing Activities (RoPA) |

## Commands

| Command | Description |
|---|---|
| `node agent.js rights-training --regulation gdpr --audience customer-service` | Generate data subject rights training for customer-facing teams |
| `node agent.js consent --scenarios marketing,analytics,third-party` | Build consent management training scenarios |
| `node agent.js breach-notify --regulation gdpr --role dpo` | Create breach notification responsibility training |
| `node agent.js cross-reg --regulations gdpr,ccpa,hipaa --comparison matrix` | Generate cross-regulation comparison training |

## Workflow

### Step 1 — Assess Current State

Evaluate existing capabilities and identify gaps before implementing changes.

```bash
# Run assessment with agent tooling
node agent.js rights-training --regulation gdpr --audience customer-service
```

### Step 2 — Plan and Design

Define objectives, scope, timeline, and success criteria.

```bash
# Plan implementation
node agent.js consent --scenarios marketing,analytics,third-party
```

### Step 3 — Execute and Deliver

Implement the planned activities and deliver outputs.

```bash
# Execute delivery
node agent.js breach-notify --regulation gdpr --role dpo
```

### Step 4 — Measure and Optimize

Track results against success criteria and iterate.

```bash
# Measure results
node agent.js cross-reg --regulations gdpr,ccpa,hipaa --comparison matrix
```

## Verification

- [ ] Prerequisites validated and tools installed
- [ ] Assessment of current state completed
- [ ] Implementation plan documented and approved
- [ ] Execution completed per plan
- [ ] Results measured against defined KPIs
- [ ] Findings documented and next steps identified
