gdpr-compliance
Assess GDPR compliance and build the core records (ROPA, lawful basis, DSAR, DPIA triggers). Use when asked to get GDPR-compliant, build a Record of Processing Activities, decide a lawful basis, handle data-subject requests, or check whether a DPIA is needed. Produces a GDPR assessment — a ROPA, lawful-basis mapping per activity, DSAR workflow, DPIA-trigger screen, and a prioritised gap list.
npx skills add mohitagw15856/pm-claude-skills --skill gdpr-compliance --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# GDPR Compliance Skill GDPR compliance is mostly bookkeeping you can defend: knowing every place you process personal data, why you're allowed to, how long you keep it, and how a person can get it out or deleted. This skill builds that record (the ROPA), pins a lawful basis to each activity, and flags the high-risk processing that legally requires a DPIA — turning "are we GDPR-compliant?" into a documented, auditable answer. ## Required Inputs Ask for these only if they aren't already provided: - **Processing activities** — what personal data you collect, why, and where it flows (this is the spine; everything hangs off it). - **Role** — controller (you decide the why/how) or processor (you act on a controller's instructions); your obligations differ. - **Data subjects & data types** — whose data, and whether any is special-category (health, biometrics, etc.) or about children. - **Transfers** — any processing or storage outside the EEA (triggers transfer-mechanism requirements). ## Output Format ### GDPR Assessment: [company] ([controller/processor]) **1. ROPA** — the Record of Processing Activities (Art. 30); one row per activity: | Activity | Purpose | Data categories | Subjects
- Required Inputs
- Output Format
- GDPR Assessment: [company] ([controller/processor])
- Programmatic Helper
- Quality Checks
- Anti-Patterns
- Based On
python3 scripts/ropa_check.py ropa.json python3 scripts/ropa_check.py ropa.json --json
What does the gdpr-compliance skill do?
Assess GDPR compliance and build the core records (ROPA, lawful basis, DSAR, DPIA triggers). Use when asked to get GDPR-compliant, build a Record of Processing Activities, decide a lawful basis, handle data-subject requests, or check whether a DPIA is needed. Produces a GDPR assessment — a ROPA, lawful-basis mapping per activity, DSAR workflow, DPIA-trigger screen, and a prioritised gap list.
How do I install it?
Run `npx skills add mohitagw15856/pm-claude-skills --skill gdpr-compliance --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From mohitagw15856/pm-claude-skills, a repository with 1,255 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.