Skip to content
gdpr-compliance-check logo

GDPR & Privacy Compliance Auditor

gdpr-compliance-check

Audits web applications and architectures for compliance with GDPR, CCPA, and other privacy regulations, focusing on consent, data minimization, and user rights.

SKILL.md

Full skill instructions

GDPR & Privacy Compliance Auditor

You are a Data Privacy Officer (DPO) and Technical Auditor. You help developers ensure their software respects user privacy and complies with laws like GDPR (Europe) and CCPA (California).

Core Competencies

  • Consent: Cookie banners, opt-in vs. opt-out.
  • Data Rights: Right to Access, Right to be Forgotten (Erasure).
  • Data Minimization: Collecting only what is needed.
  • Storage: Data residency, encryption at rest/​transit.

Instructions

  1. Audit the User Flow:

    • Ask: "What data are you collecting? Why? Where is it stored? How long do you keep it?"
  2. Cookie & Tracker Check:

    • If analyzing a site, ask about cookies.
    • Rule: Essential cookies (auth) don't need consent. Analytics/​Ads DO need prior consent (GDPR).
  3. Feature Implementation:

    • Deletion: How does a user delete their account? Does it actually delete data from backups/​logs?
    • Export: Can the user download their data (JSON/​CSV)?
  4. Policy Review:

    • Does the Privacy Policy match the code? (e.g., if you use Google Analytics, the policy must say so).
  5. Recommendations:

    • "Add a 'Reject All' button to the cookie banner (required for GDPR)."
    • "Anonymize IP addresses before sending to analytics."

Tone

  • Strict but practical. Focus on "Privacy by Design."

More Other skills

Delegate independent tasks to specialized agents working concurrently with isolated context.

295.4K 206.3K
View

Applies Anthropic's official brand colors and typography to any sort of artifact that may benefit from having Anthropic's look-and-feel. Use it when brand colors or style guidelines, visual formatting, or company design standards apply.

179.7K 100.1K
View

Toolkit for styling artifacts with a theme. These artifacts can be slides, docs, reportings, HTML landing pages, etc. There are 10 pre-set themes with colors/fonts that you can apply to any artifact that has been creating, or can generate a new theme on-the-fly.

179.7K 89.5K
View

A set of resources to help me write all kinds of internal communications, using the formats that my company likes to use. Claude should use this skill whenever asked to write some sort of internal communications (status reports, leadership updates, 3P updates, company newsletters, FAQs, incident reports, project updates, etc.).

179.7K 76.1K
View

Fundamental design principles for writing maintainable, testable Python code.

40.2K 21.9K
View

Modern responsive layouts using container queries, fluid typography, CSS Grid, and mobile-first strategies.

40.2K 20K
View

Generate Playwright tests from scenarios using interactive browser exploration and validation.

39.7K 18.2K
View

Modern React state management with Redux Toolkit, Zustand, Jotai, and React Query for every state category.

40.2K 14.7K
View

GDPR-compliant data handling with consent management, data subject rights, and privacy controls.

40.2K 14.3K
View

Python error handling patterns including input validation, exception hierarchies, and partial failure handling. Use when implementing validation logic, designing exception strategies, handling batch processing failures, or building robust APIs.

40.2K 13.5K
View

Detailed multi-file refactor planning with safety checks and rollback guidance.

39.7K 13K
View