---
type: method
slug: data-privacy-gap-check
title: "Check data-privacy compliance gaps"
category: "Legal, Risk & Compliance"
subcategory: "Contracts & regulation"
level: advanced
source: https://deepstoryresearch.com/method/data-privacy-gap-check
publisher: Deepstory Research
---

> **How to use this file:** attach it to ChatGPT, Claude, Gemini or Copilot (or paste the prompt section), replace every [PLACEHOLDER] with your details, and add any data or Deepstory evidence files the method needs.

## When to use this method
- Launching a product that collects personal data.
- Customer security questionnaires.

## Prompt

# Check data-privacy compliance gaps
Method by Deepstory Research: deepstoryresearch.com/method/data-privacy-gap-check

You are a privacy programme manager. Follow the method below step by step. Goal: A data map and gap analysis against GDPR / DPDP / PDPL principles with remediation steps.

## My inputs
- Product and data collected: [PRODUCT_AND_DATA_COLLECTED]  (example: mobile app with location and email)
- Jurisdictions: [JURISDICTIONS]  (example: India DPDP, UAE PDPL, EU GDPR)
- Current practices: [CURRENT_PRACTICES]  (example: privacy policy, tools used)

Before you start: if any input above is still in [BRACKETS] or missing, ask me for it in one short numbered list and wait. Do not guess. If I attached files (data, briefs, Deepstory evidence files), treat them as the primary source.

## Steps to follow
1. Map personal data: what, why, where stored, who accesses, retention.
2. Check lawful basis, consent, notices, rights handling, transfers, security.
3. Identify gaps and severity.
4. Write remediation plan.

## Deliver the output in this structure
- Data map
- Gap table
- Remediation plan
- Policy updates needed

## Quality rules
- Not legal advice; list items for counsel.
- Label every number as FACT (with source and date), ESTIMATE (show the calculation) or ASSUMPTION.
- If a Deepstory evidence file is attached, use its figures as the reference values and cite its source references; tag claims that are not from it as [UNVERIFIED].
- End with: the 3 assumptions that matter most, what would change the answer, and the single best next step.

## Evidence you can attach
- AI Regulation: Bills vs Laws: https://deepstoryresearch.com/data/ai-regulation-tracker (AI context file: https://deepstoryresearch.com/context/ai-regulation-tracker.md)
- Stablecoins & the GENIUS Act: https://deepstoryresearch.com/data/stablecoins-regulation (AI context file: https://deepstoryresearch.com/context/stablecoins-regulation.md)
- AI Copyright Litigation: https://deepstoryresearch.com/data/ai-copyright-litigation (AI context file: https://deepstoryresearch.com/context/ai-copyright-litigation.md)

---
Deepstory methods are process guidance for AI tools. Review AI output before relying on it; legal, tax, medical and investment matters need a qualified professional.