医械跨境数据隐私合规v1.0.0

A medical device manufacturer plans to launch a connected device (e.g., a smart insulin pen) in the EU. The scenario focuses on mapping patient data flows, conducting a DPIA, and ensuring GDPR compliance, including special category data handling and cross-border transfer mechanisms.

A health tech startup wants to commercialize a mobile app that collects health data from users in the US. The scenario assesses whether the startup acts as a Covered Entity or Business Associate under HIPAA, and addresses security rule requirements and BAA agreements with partners.

A Chinese medical device exporter needs to transmit patient health data from devices sold in China to cloud servers overseas. The scenario involves determining if the data export triggers China's security assessment, standard contract, or certification path, and preparing necessary documentation.

A wearable device company processes health data from users in the EU and plans to store data in the US. The scenario focuses on performing a Data Protection Impact Assessment (DPIA) and implementing appropriate safeguards like Standard Contractual Clauses (SCCs).

A multinational company with products across the EU, US, and China wants a unified compliance framework. The scenario uses the skill to map data flows across jurisdictions, reconcile GDPR, HIPAA, and PIPL requirements, and produce a consolidated compliance action plan.

Offer consulting services to medical device manufacturers entering global markets. Use this skill to quickly generate data flow maps and compliance checklists, reducing manual analysis time. Charge per project or hourly for regulatory expertise.

Develop a subscription-based software platform that integrates this skill's logic to automate data flow mapping and generate DPIA templates. Target device manufacturers and health tech startups. Monetize via monthly/annual subscriptions.

Create online courses or certification programs for medical device professionals on data privacy compliance. Use the skill as a teaching aid. Generate revenue through course fees or institutional partnerships.