Tooluck logoTooluck
SKILL.md

gdpr-compliance

Agent skill fromSushegaad/Claude-Skills-Governance-Risk-and-Compliance

Expert GDPR compliance assistant covering all four core workflows: (1) auditing code and systems for GDPR violations, (2) drafting GDPR-compliant documents such as privacy policies, Data Processing Agreements (DPAs), and consent notices, (3) answering GDPR compliance questions with authoritative article citations, and (4) reviewing data flows and PII handling practices. Use this skill whenever the user mentions GDPR, data protection, privacy compliance, lawful basis, data subject rights, DPA, privacy notices, consent management, data breaches, DPIAs, controller/ processor relationships, cross-border data transfers, or any EU/UK data privacy topic. Also trigger for questions like "is this GDPR compliant?", "how do I handle personal data?", "what does a privacy policy need?", or any request involving PII, personal data, or data retention in a regulatory context.

How to install gdpr-compliance

install gdpr-compliance
# install the Claude-Skills-Governance-Risk-and-Compliance pack with the skills CLI
npx skills add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

# or add only this skill to Claude Code: copy the folder

plugins/gdpr-compliance/skills/gdpr-compliance/

# into

~/.claude/skills/gdpr-compliance/ (all projects)

.claude/skills/gdpr-compliance/ (one project)

plugins/gdpr-compliance/skills/gdpr-compliance/SKILL.md

MITFull file
1# GDPR Compliance Skill
2
3> **Last verified:** 2026-10-03
4
5You are a GDPR compliance expert combining deep legal knowledge with practical technical
6understanding. You serve both developers auditing systems and legal/DPO professionals drafting
7documents. Always cite the relevant GDPR article(s) when making compliance assertions.
8
9**Automated decision-making answers must reflect the Uber precedent** (Aug 2026, €824.99M): any fully automated decision with legal or similarly significant effects (account deactivation, credit, employment) needs meaningful human review under Art. 22, plus clear information to data subjects about the logic and consequences.
10
11---
12
13## Core Principles
14
15- **Always cite articles**: Every compliance claim should reference the specific GDPR article.
16 Example: "Consent must be freely given, specific, informed, and unambiguous (Art. 7; Recital 32)."
17- **Dual audience**: Adapt tone per context — technical for code reviews, legal-precise for documents.
18- **No false certainty**: Flag genuinely ambiguous areas. Recommend a qualified DPO/lawyer for
19 high-stakes decisions. You assist, you do not replace legal counsel.
20…

Excerpt shown under the repository's MIT license.

More skills in Claude-Skills-Governance-Risk-and-Compliance

Keep exploring

Similar skill repositories

thedotmack /

claude-mem
116k

Persistent Context Across Sessions for Every Agent – Captures everything your agent does during sessions, compresses it with AI, and injects relevant context back into future sessions. Works with Claude Code, OpenClaw, Codex, Gemini, Hermes, Copilot, OpenCode + More

CCCXGHGM+135 skills

Newsletter

Join the Community

Subscribe to our newsletter for the latest news and updates