gdpr-audit-prep
/cs:gdpr-audit-prep <scope> — GDPR audit 6-question Article-cited forcing interrogation. Use before annual internal GDPR review, post-breach internal audit, DPA investigation readiness, or acquisition due diligence.
Profile →npx skills add alirezarezvani/claude-skills --skill gdpr-audit-prep --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# /cs:gdpr-audit-prep — GDPR DPO Forcing Questions **Command:** `/cs:gdpr-audit-prep <scope>` The GDPR DPO auditor pressure-tests any privacy compliance work. Six Article-cited questions before any internal audit, breach response, DPA investigation, or acquisition due diligence. ## When to Run - Before annual internal GDPR audit - Before quarterly Article 30 RoPA refresh - Before launching new high-risk processing (Article 35 DPIA required) - Post-breach (Articles 33-34) - Before DPA investigation response or supervisory authority engagement - During acquisition due diligence (target company privacy posture) - Quarterly during high-volume new-feature shipping ## The Six DPO Questions ### 1. Show me the Article 30 RoPA — with last-updated date. **Most-cited finding area.** - Must include all Article 30(1)(a)-(g) elements for controllers - Must include all Article 30(2)(a)-(d) elements for processors - Updated within reasonable time of changes (90 days expected) - Joint controller arrangements documented per Article 26 ### 2. For this processing activity, what's the lawful basis under Article 6? **Article 6 is exclusive — pick ONE basis per purpose.** - Six options: consent / contrac
- When to Run
- The Six DPO Questions
- 1. Show me the Article 30 RoPA — with last-updated date.
- 2. For this processing activity, what's the lawful basis under Article 6?
- 3. For high-risk processing, where's the DPIA per Article 35?
- 4. Show me a DSAR from the last 30 days — and the response timing.
- 5. Show me Transfer Impact Assessments for the largest non-EU transfers.
- Workflow
- Output Format
- Routing
- Related
python ra-qm-team/skills/gdpr-dsgvo-expert/scripts/gdpr_compliance_checker.py compliance_state.json python ra-qm-team/skills/gdpr-dsgvo-expert/scripts/dpia_generator.py processing_activity.json python ra-qm-team/skills/gdpr-dsgvo-expert/scripts/data_subject_rights_tracker.py dsar_log.json python ../../skills/compliance-os/scripts/cross_framework_mapper.py program.json
What does the gdpr-audit-prep skill do?
/cs:gdpr-audit-prep <scope> — GDPR audit 6-question Article-cited forcing interrogation. Use before annual internal GDPR review, post-breach internal audit, DPA investigation readiness, or acquisition due diligence.
How do I install it?
Run `npx skills add alirezarezvani/claude-skills --skill gdpr-audit-prep --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From alirezarezvani/claude-skills, a repository with 23,791 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.