💼 Business
CCPA Consumer Request Workflow from a Rights Inventory (Not Legal Advice)
Draft an internal CCPA/CPRA-style consumer request workflow from a rights inventory. Not legal advice. Never invent statutes or timelines.
0Reviews
Prompt
Act as a CCPA/CPRA-style consumer request workflow drafter who only uses a pasted rights inventory. You produce internal intake steps and RACI-style owners. You do not invent legal deadlines, statutory cites, or systems. This is not legal advice, not a GDPR RoPA builder, and not a public privacy policy ghostwriter. You work only from Inputs. Do not invent stats, citations, quotes, URLs, names, IDs, or records that are not in Inputs. Inputs: - Pasted rights inventory / request types Org handles: [Rights] - Systems I may reference (exact list): [Systems] - SLA days I lock (or UNKNOWN): [SLA] - Words I must not use: [Banned] - What I must never invent: [Never] - Output format: [Format] - Language: [Lang] - Max request types: [Max] Generate: 1. Honesty ledger: Rights count, Systems, SLA status, Lang, Max. Forbidden: invented Civil Code cites, invented 45-day promises if SLA UNKNOWN. 2. Rights map: each request type from Rights. 3. Workflow pack: up to Max types. For each: intake checks, systems to query from Systems, owner role placeholders, SLA line. 4. Systems check: every system named must be in Systems. 5. Refuse list: invented statutes, invented fines, invented subprocessors. 6. Diff notes: Banned/Never cuts. 7. Not-legal-advice banner. 8. Compliance pass: Banned/Never hits. Type count vs Max. Gaps list of five. Format as Format. Constraints: - Workflow from Rights+Systems only. Not GDPR RoPA and not a public policy. - Never invent statutes, timelines beyond SLA, or systems. - Not legal advice. - No emojis.
Instructions
Replace every [bracket] with your details before running. Works on ChatGPT, Claude, and Gemini.
Examples
Example Input
Rights: know/access; delete; correct; opt-out of sale/share (Org says they do not sell; still track opt-out form) Systems: CRM-Main, SupportDesk, Analytics-Warehouse SLA: UNKNOWN (do not invent 45 days) Banned: fully compliant, guaranteed approval, zero liability Never: invent Civil Code sections, invent fines, invent systems, invent identity-proof vendors Format: ledger + map + workflows + systems-check + refuse + diff + banner + gaps Lang: English Max: 4
Example Output
1. Ledger. Rights 4 types. Systems CRM-Main, SupportDesk, Analytics-Warehouse. SLA UNKNOWN. Lang English. Max 4. Forbidden: invented statutes, invented 45-day SLA, fully compliant, guaranteed approval, zero liability. 2. Map. know/access; delete; correct; opt-out of sale/share (Org claims no sale; still track form). 3. Workflows. know/access: intake verify requester control signals Org already uses; query CRM-Main, SupportDesk, Analytics-Warehouse; owner ROLE_PRIVACY_INTAKE; SLA UNKNOWN. delete: same systems; flag analytics rows for deletion queue; owner ROLE_DATA; SLA UNKNOWN. correct: CRM-Main + SupportDesk first; Analytics-Warehouse if profile dims exist; owner ROLE_DATA; SLA UNKNOWN. opt-out sale/share: log form in SupportDesk; note Org says they do not sell; still record preference in CRM-Main; owner ROLE_PRIVACY_INTAKE; SLA UNKNOWN. 4. Systems check. Only CRM-Main, SupportDesk, Analytics-Warehouse named. 5. Refuse. Civil Code section invent: refused. Fine amounts: refused. Extra CDP system: refused. Identity-proof vendor invent: refused. 6. Diff. Cut fully compliant / guaranteed approval / zero liability. 7. Banner. Not legal advice. Internal worksheet only. SLA UNKNOWN means do not print a statutory day count. 8. Compliance. Banned hits none. Types 4 vs Max 4. Gaps: actual identity verification SOP, legal counsel contacts, exception codes, retention schedule, metrics dashboard fields. Missing-data policy: if a field was blank, write NOT IN INPUTS rather than guessing. Lock any tool version named in Inputs; if unnamed, write unknown. No invented testimonials, star ratings, or press logos. If legal, clinical, insurance, HR, education-plan, or veterinary content appears, add a one-line not-advice and de-identify banner. Quote banned-word hits and cut them. End with a gaps list of five bullets the user still owes you. Character and byte caps in the job are hard; print counts when relevant. Refuse to backfill DOIs, exam dumps, PHI, PII, or compensation promises not in Inputs.