Agent skill · Design & Presentation

gdpr-privacy-notice-eu-oliver-schmidt-prietz

Draft GDPR/DSGVO-compliant privacy notices as .docx for any EU/EEA jurisdiction and audience. Use when user asks to create a privacy policy/notice, mentions "Datenschutzerklärung", "politique de confidentialité", "privacy notice", needs Art. 13/14 disclosures, AI Act transparency, cookie policy, or notices for applicants ("Bewerber-Datenschutz"), employees ("Beschäftigten-Datenschutz"), B2B partners, or B2C customers. Covers DE (DSGVO+BDSG+TDDDG), FR (RGPD+LIL+LCEN), AT, IT, ES, NL, BE, IE, UK GDPR. Five notice types: Website/App, Applicant, Employee, Business Partner, B2C Customer.

lawve-aigithub.com/lawve-aiGitHub ↗
claude-codeNOASSERTION
Install
npx skills add lawve-ai/awesome-legal-skills --skill privacy-notice-generator-oliver-schmidt-prietz --agent claude-code

Same command for any agent — swap --agent for codex, cursor, copilot.

Facts
Files in the skill folder: 10
SKILL.md size: 23 KB
Bundled scripts: none
Version: 2026.06.05
Declared author: Oliver Schmidt-Prietz
Path: skills/privacy-notice-generator-oliver-schmidt-prietz/SKILL.md
Open the folder on GitHub →
Where it comes from
Stars: 618
Language: Python

Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.

Review
written from the skill's own SKILL.md · Aug 5, 2026

What it does

Generates jurisdiction-aware, GDPR-compliant privacy notices as professional .docx documents. It guides the user through selecting notice type, jurisdiction, and template, then collects controller, data, purposes, recipients, and transfers information, and finally drafts a structured .docx privacy notice with sections tailored to the chosen type and jurisdiction.

How it works

  1. Scope, Notice Type & Template Selection: Determine the notice type from a predefined list (Website/App, Applicant/Recruiting, Employee, Business Partner, B2C Customer, Combined); determine target jurisdictions; choose a base template or generate from references/templates.md if no user template is provided. For multilingual needs, decide primary language and translations per scenario. Reference checks and multi-language verification steps are outlined.
  2. Information Intake: Collect controller identity, data inventory, purposes & legal bases, recipients/transfers, cookies, AI usage, and DPIA indicators. Use guided groups (A–G) to ensure all relevant categories are captured. Includes explicit handling rules for special category data and AI-related processing. Produce a structured summary for user confirmation before drafting.
  3. Draft the Notice: Use the selected notice type’s section map from references/NOTICE_TYPES.md to include only approved sections. Follow a standard structure with sections such as Who We Are, What Data We Collect, Why We Process, Who Receives Data, International Transfers, Retention, Rights, Cookies, AI/Automated Decisions, Data Security, Children’s Data, Changes, and Contact. Follow drafting rules for language, tone, legal bases, retention, and AI transparency when applicable.
  4. Verify & Deliver: (Not shown in the excerpt) Likely steps include compliance checks (Art. 13/14, AI Act, multi-language verification) and final .docx output via a docx skill.

When to use it

Use when a user asks to create a GDPR/DSGVO privacy notice for any EU/EEA jurisdiction or audience and when the service involves multiple audiences such as Website/App visitors, job applicants, employees, business partners, or B2C customers. Applicable to DE, FR, AT, IT, ES, NL, BE, IE, UK GDPR and supports pan-EU / multi-jurisdiction needs.

What it can touch

Noted tools include: claude-code. The workflow references data collection, intake, and drafting steps that imply touching documents (.docx) and reference materials. Specific touch points include: loading reference files (references/NOTICE_TYPES.md, references/templates.md), collecting controller data, data categories, and crafting a .docx output via a docx skill.

Caveats

License: AGPL-3.0. No explicit risk or refusal terms are stated here. The skill requires careful alignment with jurisdiction-specific templates and legal bases; it highlights that sections to include/skip depend on the chosen notice type. It also notes that if a DPIA is required, it should be separate and prepared prior to processing; the privacy notice can be drafted, but the DPIA is a separate exercise.

From the SKILL.md

# Pan-EU GDPR Privacy Notice Generator Generate jurisdiction-aware, GDPR-compliant privacy notices as professional .docx documents. ## Workflow Overview ``` 1. SCOPE → Notice type, jurisdiction(s), template choice 2. INTAKE → Type-driven collection: controller info, data inventory, legal bases 3. DRAFT → Generate notice from template + type profile + collected info 4. VERIFY → Art. 13/14 compliance check + type-specific checks + AI Act check 5. DELIVER → .docx output via docx skill ``` ## Step 1: Scope, Notice Type & Template Selection ### Determine Notice Type (FIRST QUESTION) Before anything else, determine what type of privacy notice is needed. Load `references/NOTICE_TYPES.md` and ask: > "What type of privacy notice do you need?" | Type | Description | |---|---| | **Website / App** | For visitors, users, subscribers of a website, web app, or mobile app | | **Applicant / Recruiting** | For job applicants and candidates (Bewerber, candidats) | | **Employee** | For employees, contractors, interns (Beschäftigte, salariés) | | **Business Partner (B2B)** | For contact persons at vendors, suppliers, clients, partners | | **B2C Customer** | For end consumers in a customer/purchase rela

What's inside
Steps it walks through
  1. Workflow Overview
  2. Step 1: Scope, Notice Type & Template Selection
  3. Determine Notice Type (FIRST QUESTION)
  4. Determine Jurisdiction
  5. Template Selection
  6. Multi-Language Decision Tree
  7. Platform Sub-Type (Website/App type only)
  8. Step 2: Information Intake
  9. Group A — Controller Identity
  10. Group B — Data Inventory
  11. Group C — Purposes & Legal Bases
  12. Group D — Recipients & Transfers
  13. Group E — Cookies & Tracking
  14. Group F — AI & Automated Processing
Ships with 9 files
  • LICENSE.txt
  • README.md
  • evals.json
  • references/DE.md
  • references/EU_COMMON.md
  • references/FR.md
  • references/NOTICE_TYPES.md
  • references/OTHER_EU.md
  • references/templates.md
More from awesome-legal-skills
All skills →
About this skill
What does the gdpr-privacy-notice-eu-oliver-schmidt-prietz skill do?

Draft GDPR/DSGVO-compliant privacy notices as .docx for any EU/EEA jurisdiction and audience. Use when user asks to create a privacy policy/notice, mentions "Datenschutzerklärung", "politique de confidentialité", "privacy notice", needs Art. 13/14 disclosures, AI Act transparency, cookie policy, or notices for applicants ("Bewerber-Datenschutz"), employees ("Beschäftigten-Datenschutz"), B2B partners, or B2C customers. Covers DE (DSGVO+BDSG+TDDDG), FR (RGPD+LIL+LCEN), AT, IT, ES, NL, BE, IE, UK GDPR. Five notice types: Website/App, Applicant, Employee, Business Partner, B2C Customer.

How do I install it?

Run `npx skills add lawve-ai/awesome-legal-skills --skill privacy-notice-generator-oliver-schmidt-prietz --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.

Where does this skill come from?

From lawve-ai/awesome-legal-skills, a repository with 618 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.

Is a popular skill a good skill?

Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.

Keep going