download dots
AI PromptsCategoriesAI Governance

🔐 Answer Data Protection Questions Confidently

Put a sensible process around how your organization uses AI, without stopping anyone getting work done. These prompts build the approval queue, the register of what is running, the log of what each tool actually did, and the policy an assistant checks submissions against. Written for the person who has been asked to own this and given no software to do it with.
  • Tested prompts
  • Edit for your use case
  • Works across models
  • Save in Taskade
Answer Data Protection Questions Confidently

Copy

Our data protection adviser asked which AI systems touch personal data and we could not answer. Build me a data protection record. For each approved AI use case, record whether personal data is involved, the specific categories rather than a general description, whose data it is, the lawful basis being relied on, whether the data leaves our organization and where it goes, the retention period, and how deletion happens. Record whether a fuller impact assessment was required, whether it was completed, and where it is stored. Capture all of this at the point of approval rather than reconstructing it later. Add an AI agent that reviews a submission and flags where it appears to involve personal data the submitter has not declared, where the retention period is missing or indefinite, and where the combination of data and purpose suggests a fuller assessment is needed, so it can be raised with our adviser. Make clear this records decisions and does not provide legal advice. Automate two things: an alert to the privacy owner when a submission involves sensitive categories, and a scheduled annual review of all records. Three logins: a submitter, a privacy owner, and a read only auditor.

Run this prompt with AI
STATUS · LIVE
v1

01 / Spark - intelligence awakens

Answer Data Protection Questions Confidently

Record personal data touched by each AI use case with basis, retention, and assessment status, flagged at approval time.

Start with AI
// the spark catches · intelligence awakens · the answer unfolds

The first data protection question about AI is which systems process personal data and on what basis. This records it as each use case is approved rather than reconstructing it later.

What's Included

  • Personal data recorded per use case including categories and subjects.
  • The basis and the assessment captured at approval time.
  • Retention and deletion stated rather than assumed.
  • An assistant that flags a use case needing a fuller assessment.

How To Use

  1. Record it at approval. Reconstructing it later is far harder and less accurate.
  2. Name the data categories specifically rather than writing customer data.
  3. State retention explicitly. Indefinite is a decision, not a default.
  4. Involve your privacy adviser on anything sensitive. This records, it does not advise.

Capture it during risk assessment, and cross-check with the vendor assessment.

Discover more

More Governance and Oversight Prompts

View all Governance and Oversight Prompts