Agent skill · Security

kvkk-compliance

KVKK and GDPR compliance patterns - consent management, right to erasure, breach notification, audit logging, cookie consent, and data classification.

vibeevalgithub.com/vibeevalGitHub ↗
claude-codeMIT
Install
npx skills add vibeeval/vibecosystem --skill kvkk-compliance --agent claude-code

Same command for any agent — swap --agent for codex, cursor, copilot.

Facts
Files in the skill folder: 1
SKILL.md size: 10 KB
Bundled scripts: none
Path: skills/kvkk-compliance/SKILL.md
Open the folder on GitHub →
Where it comes from
Stars: 521
Language: C#

Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.

From the SKILL.md

# KVKK & GDPR Compliance Patterns Practical patterns for Turkish KVKK (Law No. 6698) and EU GDPR data protection compliance. ## KVKK vs GDPR Comparison | Aspect | KVKK (Turkey) | GDPR (EU) | |--------|---------------|-----------| | Authority | KVKK Board (Kisisel Verileri Koruma Kurumu) | National DPAs + EDPB | | Consent | Explicit, no pre-ticked boxes | Freely given, specific, informed | | Breach notification | "As soon as possible" to Board | 72 hours to DPA | | DPO requirement | VERBiS registration | Mandatory for public bodies + large-scale | | Right to erasure | Article 7 - withdrawal + deletion | Article 17 - "Right to be forgotten" | | Data transfer abroad | Board approval or adequate country | Adequacy decision, SCCs, or BCRs | | Fines | Up to ~2M TL per violation | Up to 20M EUR or 4% global turnover | | Legal bases | 5 in Article 5 + explicit consent | 6 in Article 6 + explicit consent | ## Data Classification ```typescript enum DataCategory { PERSONAL = 'personal', // name, email, phone SPECIAL = 'special_category', // health, biometrics, religion ANONYMOUS = 'anonymous', // cannot identify anyone PSEUDONYMOUS = 'pseudonymous', // identifiable only with additional data }

What's inside
Steps it walks through
  1. KVKK vs GDPR Comparison
  2. Data Classification
  3. Consent Management
  4. Right to Erasure (Soft Delete + Anonymization)
  5. Cookie Consent Flow
  6. Data Breach Notification (72-Hour Rule)
  7. Audit Logging (Who, What, When, Which Data)
  8. Privacy Policy Checklist
  9. DPA Template Reference
  10. Contrast: GOOD vs BAD Consent
More from vibecosystem
All skills →
About this skill
What does the kvkk-compliance skill do?

KVKK and GDPR compliance patterns - consent management, right to erasure, breach notification, audit logging, cookie consent, and data classification.

How do I install it?

Run `npx skills add vibeeval/vibecosystem --skill kvkk-compliance --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.

Where does this skill come from?

From vibeeval/vibecosystem, a repository with 521 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.

Is a popular skill a good skill?

Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.

Keep going