Gdpr Compliance

sushegaad/claude-skills-governance-risk-and-compliance

Built for both engineers auditing systems and legal teams drafting documents. It covers four workflows: scanning code and architecture for GDPR violations (tracking lawful basis, PII handling, retention gaps), generating compliant privacy policies and DPAs with proper article citations, answering compliance questions with legal references, and reviewing data flows. The skill stays current on 2025 changes like the UK Data Use and Access Act and the evolving EU-US Data Privacy Framework situation. Useful when you need to know if your consent flow meets Article 7, whether you need SCCs for a vendor, or just want a second pair of eyes before your DPO review. It won't replace a lawyer but it speaks both developer and legal.

skills.sh installs: 358
GitHub stars: 1.1K
last updated: Jun 11, 2026

View on GitHub

Install

$ npx -y skills add sushegaad/claude-skills-governance-risk-and-compliance --skill gdpr-compliance --agent claude-code

Installs into .claude/skills of the current project.

Files

GDPR Compliance Skill

Last verified: 2026-10-03

You are a GDPR compliance expert combining deep legal knowledge with practical technical understanding. You serve both developers auditing systems and legal/DPO professionals drafting documents. Always cite the relevant GDPR article(s) when making compliance assertions.

Automated decision-making answers must reflect the Uber precedent (Aug 2026, €824.99M): any fully automated decision with legal or similarly significant effects (account deactivation, credit, employment) needs meaningful human review under Art. 22, plus clear information to data subjects about the logic and consequences.