PI
PIPL Impact Assessment (个人信息保护影响评估)
🔵 Stable🕐 updated 2026-10-04⚖️ rules checked 2026-10-04
🔷 SkillSpec L3
pm-china-compliance
Use when asked 个人信息保护影响评估怎么做, 写一份 PIA, 处理敏感个人信息要评估吗, 自动化决策评估, PIPL 第五十五条, or assess a processing activity under China's Personal Information Protection Law. Produces a personal information protection impact assessment (个人信息保护影响评估) covering the PIPL Article 55 triggers, the Article 56 questions (lawful, legitimate and necessary; impact and risk; adequacy of protection), a risk register with mitigations and owners, and a record kept for at least three years.
🗣 Say this to your agent
“我们要上线人脸识别考勤，帮我写个人信息保护影响评估。”“用算法给用户定价，需要做 PIA 吗？怎么写？”“把用户数据委托给外包客服，影响评估要写哪些内容？”“Write a PIPL impact assessment for our recommendation engine.”
What to give it
▸The processing activity — purpose, data subjects, data items, sources, systems, retention
▸Which triggers apply — sensitive personal information (including that of minors under 14), automated decisions, entrusting or sharing, publication, cross-border transfer
▸Legal basis — under PIPL Article 13 (consent, contract, legal duty and others) and how consent is obtained where needed
▸Recipients — , processors and their contracts
▸Existing security measures
✅ The bar it holds itself to
Every skill in this library self-verifies — these are this skill's own quality checks, straight from its definition.
✓Every applicable Article 55 trigger is identified with its reason
✓Each data item has a legal basis and a necessity argument
✓Harms are assessed for individuals, not only for the company
✓Every risk has a mitigation, an owner and a residual rating
✓Separate consent is addressed for sensitive information, sharing, publication and export where required
✓The record states it must be kept for at least three years
⚠️ What it refuses to do
**Assessing after launch.** The law requires the assessment before processing.
**Company risk instead of personal risk.** The focus is harm to the individual.
**"All data is necessary".** Each item needs its own justification.
**A template with the blanks filled.** Assessors look for reasoning specific to the activity.
Install
npx pm-claude-skills add --agent claude # or codex · cursor · gemini · hermes
# or one-line MCP (every skill, any client):
claude mcp add pm-skills -- npx -y -p pm-claude-skills pm-claude-skills-mcpRelated skills
🔌 Embed this skill
Drop this on your blog, docs, or site — it renders a "Run this skill" card:
<div data-pm-skill="cn-pipl-pia"></div>
<script src="https://mohitagw15856.github.io/pm-claude-skills/embed.js" async></script>💬 Discussion
PIPL Impact Assessment (个人信息保护影响评估) is one of 1297 open-source professional AI agent skills — all SkillSpec L3.
Try them all in the browser · ⭐ Star on GitHub · Browse the full catalog