# 13-SaaS-DPA-and-Privacy-Doc-Set Skill

## Objective

Produce DPA + ROPA + retention schedule + breach-notification procedure + DSAR procedure for a SaaS that processes personal data.

## Execution Steps

1. Verify Compliance_Docs.md and sub-processor list exist.
2. Invoke `logic.prompt`.
3. Review with Legal, Privacy Officer, Security lead.

## Standards

- GDPR Art.28, 30, 32, 33, 34, 35, 44
- POPIA s.19, 22, 23
- DPPA 2019 (Uganda)
- CCPA / CPRA