Today's Agent Skill: Data Breach Notification Letter Drafter
What It Does
If customer data leaks, most US states require you to notify affected customers within 30 to 60 days — some in as few as 15. This skill drafts a compliant notification letter in the format each state expects, so you're not scrambling with a lawyer at 9pm on a Friday.
How It Works
The agent takes the incident details (what happened, when, what data was exposed, what you've done), the states where affected customers live, and produces one letter per state with the required disclosures, contact information, and any state-specific language (e.g., California's Civil Code 1798.29 attribution or Massachusetts' explicit ID-theft resources).
How to Deploy It
Deploy in Claude Code, Gemini CLI, Cursor, or Windsurf. Store the skill alongside your incident response plan so it's usable when you need it — not something you're inventing during a live breach. Always route the drafts through an attorney and your cyber insurance carrier before sending; the skill is a starting point, not a substitute for counsel.
SKILL.md — Ready to Deploy
## Description
Drafts state-specific data breach notification letters for US small businesses, based on incident facts and affected customer geography.
## Trigger
Invoke when the user says "draft breach notification letters" or provides an incident summary plus a list of affected states.
## Input
- Incident summary: what happened, when discovered, when it occurred
- Type of data exposed (names, emails, SSN, financial account, health info, credentials)
- Number of affected individuals
- Remediation steps already taken
- List of states where affected individuals reside
- Company contact for follow-up questions
- Optional: name of external forensics firm
## Steps
1. For each state in the input, identify the relevant breach notification statute.
2. Determine the required notice timeline and any AG or credit bureau notification triggers.
3. Draft a letter per state that includes: date of incident, date of discovery, type of information involved, steps taken, steps the customer should take, and a contact for questions.
4. Add state-specific required language and citations.
5. Draft a separate short cover email version for customers who opted into digital communication where the state Copy the full SKILL.md and drop it into your agent's skills directory to activate this skill.