Help us improve
Share bugs, ideas, or general feedback.
From skills-for-humanity
Audits data collection, retention, and sharing decisions against ethical standards beyond legal compliance. Evaluates deontological rights and care ethics.
npx claudepluginhub human-avatar/skills-for-humanityHow this skill is triggered — by the user, by Claude, or both
Slash command
/skills-for-humanity:ethics-data-auditThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
Legal compliance sets the floor. This audit asks whether your data practices clear a higher bar: are they *ethical*?
Entry point routing ethical reasoning to the right analysis tool: council, check, crisis triage, data audit, bias check, consent review, impact scan, or vendor review.
Conducts ethics reviews for AI and technology projects including ethical impact assessments, stakeholder analysis, and mitigation planning. Use for evaluating risks and harms.
Assesses ethical risks in research protocols, ensures participant privacy compliance with GDPR/HIPAA, and optimizes IRB applications using structured risk matrices.
Share bugs, ideas, or general feedback.
Legal compliance sets the floor. This audit asks whether your data practices clear a higher bar: are they ethical?
The distinction matters. GDPR-compliant practices can still be extractive. Lawful data collection can still violate trust. This audit evaluates data decisions through two lenses that legal frameworks tend to underweight: deontological (what do users have a right to, regardless of what the terms allow?) and care ethics (what do you owe the people whose data you hold, given the relationship and the vulnerability involved?).
Step 1: Define the data practice What data is being collected, retained, shared, or used? Be specific: what fields, what volume, what purpose, who can access it, how long is it kept, where does it go?
Step 2: Deontological Assessment — Rights and Duties Users have rights that don't disappear because they clicked "I agree." Examine:
Flag any duty being violated, even if legally covered.
Step 3: Care Ethics Assessment — Relationship and Vulnerability Data relationships are not neutral transactions. Examine:
Step 4: Produce the audit
Before proceeding, use the AskUserQuestion tool:
Proceed based on their selection.
Data Practice Being Audited: [What data, what purpose, what handling]
Deontological Findings
| Duty/Right | Status | Notes |
|---|---|---|
| Informed consent | ✅ / ⚠️ / ❌ | [explanation] |
| Purpose limitation | ✅ / ⚠️ / ❌ | [explanation] |
| Right to exit | ✅ / ⚠️ / ❌ | [explanation] |
| Data as means | ✅ / ⚠️ / ❌ | [explanation] |
Care Ethics Findings
| Dimension | Status | Notes |
|---|---|---|
| Power asymmetry | ✅ / ⚠️ / ❌ | [explanation] |
| Vulnerable populations | ✅ / ⚠️ / ❌ | [explanation] |
| Trust test | ✅ / ⚠️ / ❌ | [explanation] |
| Harm potential | ✅ / ⚠️ / ❌ | [explanation] |
Verdict [2–3 sentences: is this practice ethical, what are the key concerns, what would need to change]
Recommended Actions
This audit does not replace legal review. It supplements it. A practice can pass this audit and still require legal sign-off. A practice that fails this audit should not be excused by legal compliance.
If the audit turns up significant concerns, consider escalating to ethics-council for a full multi-framework analysis.
After delivering this output, use AskUserQuestion to offer the next move:
/ethics-consent-review — Review consent for data practices found in the audit/ethics-impact-scan — Scan broader impact of the data practices/logic-check — Validate the reasoning about data use