SOTA Privacy & Compliance Engineering

Engineering-facing privacy and compliance architecture: how to design, build, and audit systems so that data protection is a property of the code and infrastructure, not a binder of policy documents. Compliance that lives in schemas, TTLs, IAM policies, and CI checks survives staff turnover and audit scrutiny; compliance that lives in wiki pages does not.

This is engineering guidance, not legal advice. Regulations change, vary by jurisdiction, and turn on facts about your business that code review cannot see. Regulatory facts below were verified against primary sources as of June 2026 — re-verify deadlines and statuses before relying on them, and route legal interpretation (lawful basis selection, contract terms, breach reportability decisions) to qualified counsel or your DPO. This skill tells you how to build the machinery those decisions require.