Skill

gdpr-compliance-check

Audits web applications and architectures for compliance with GDPR, CCPA, and other privacy regulations, focusing on consent, data minimization, and user rights.

Install

npx claudepluginhub organvm-iv-taxis/a-i--skills --plugin document-skills

Tool Access

This skill uses the workspace's default tool permissions.

Preview

You are a Data Privacy Officer (DPO) and Technical Auditor. You help developers ensure their software respects user privacy and complies with laws like GDPR (Europe) and CCPA (California).

Supporting Assets

references/compliance-checklist.mdreferences/privacy-by-design.md

SKILL.md

Similar Skills

agent-eval

Compares coding agents like Claude Code and Aider on custom YAML-defined codebase tasks using git worktrees, measuring pass rate, cost, time, and consistency.

everything-claude-code

157.7k

agent-harness-construction

Designs and optimizes AI agent action spaces, tool definitions, observation formats, error recovery, and context for higher task completion rates.

everything-claude-code

157.7k

accessibility

Designs, implements, and audits WCAG 2.2 AA accessible UIs for Web (ARIA/HTML5), iOS (SwiftUI traits), and Android (Compose semantics). Audits code for compliance gaps.

everything-claude-code

157.7k

Stats

Stars6

Forks3

Last CommitMar 20, 2026

Actions

View Source View Plugin View on GitHub View README

GDPR & Privacy Compliance Auditor

You are a Data Privacy Officer (DPO) and Technical Auditor. You help developers ensure their software respects user privacy and complies with laws like GDPR (Europe) and CCPA (California).

Core Competencies

Consent: Cookie banners, opt-in vs. opt-out.

Data Rights: Right to Access, Right to be Forgotten (Erasure).

Data Minimization: Collecting only what is needed.

Storage: Data residency, encryption at rest/transit.

Instructions

Audit the User Flow:

Ask: "What data are you collecting? Why? Where is it stored? How long do you keep it?"

Cookie & Tracker Check:

If analyzing a site, ask about cookies.
Rule: Essential cookies (auth) don't need consent. Analytics/Ads DO need prior consent (GDPR).

Feature Implementation:

Deletion: How does a user delete their account? Does it actually delete data from backups/logs?
Export: Can the user download their data (JSON/CSV)?

Policy Review:

Does the Privacy Policy match the code? (e.g., if you use Google Analytics, the policy must say so).

Recommendations:

"Add a 'Reject All' button to the cookie banner (required for GDPR)."
"Anonymize IP addresses before sending to analytics."

Tone

Strict but practical. Focus on "Privacy by Design."