title: Privacy and data protection
description: Which first-party skills declare Privacy and data protection in their frontmatter, and what "covered" actually means for it.
url: https://legalquants.github.io/lq-ai/skills/coverage/practice-area/privacy/
checked-against: 671eab0d (2026-10-25)
status: draft
kind: explanation
sources: docs/site/skills/coverage.intro.md, skills, docs/site/_data/coverage-notes.yaml

2 first-party skills carry this practice area in its frontmatter.

| Skill | Jurisdiction | Tags | Attested by |
|---|---|---|---|
| [DPA Checklist Review](https://github.com/LegalQuants/lq-ai/blob/671eab0d/skills/dpa-checklist-review/SKILL.md) | regime-dependent | `contracts` `dpa` `privacy` `gdpr` `ccpa` `hipaa` `compliance` `review` | attestation not recorded in frontmatter |
| [Vendor Privacy Policy First Pass](https://github.com/LegalQuants/lq-ai/blob/671eab0d/skills/vendor-privacy-policy-first-pass/SKILL.md) | regime-aware | `privacy` `vendor` `due-diligence` `triage` `gdpr` `ccpa` | attestation not recorded in frontmatter |

## Scope note

DPA Checklist Review (regime-aware: GDPR, US state privacy, HIPAA BAA) and Vendor Privacy Policy First Pass (triage-only, not a full review) carry these tags. Regime coverage beyond what's shipped is an open contribution area — see skills/CONTRIBUTING.md's regime-expansion candidates for DPA Checklist Review.

Checked against:

- [`skills/CONTRIBUTING.md`](https://github.com/LegalQuants/lq-ai/blob/671eab0d/skills/CONTRIBUTING.md)

## Contributing coverage here

Coverage for a jurisdiction or practice area is contributed, not requested. The route — and what to do when the area is one the PRD excludes outright — is on the [coverage index](/lq-ai/skills/coverage/#contributing-coverage), with the canonical files it traces to.

## Next

- [Coverage index](/lq-ai/skills/coverage/)
- [Skill catalogue](/lq-ai/skills/catalogue/)
- [Where skills live](/lq-ai/skills/where-skills-live/)