Individual skill
gdpr-compliance
Assess GDPR compliance and build the core records (ROPA, lawful basis, DSAR, DPIA triggers). Use when asked to get GDPR-compliant, build a Record of Processing Activities, decide a lawful basis, handle data-subject requests, or check whether a DPIA is needed. Produces a GDPR assessment — a ROPA, lawful-basis mapping per activity, DSAR workflow, DPIA-trigger screen, and a prioritised gap list.
plugins/pm-compliance/skills/gdpr-compliance/SKILL.md
Source commit f7c90bc09ee05dc25cf257bdb1826f2c2552c2cb
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- Yes
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Network or broad shell
- Last checked
- Nov 9, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 1,540
- Repository last updated
- Nov 10, 2026
- License
- MIT
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- product-management Repository topic
- productivity Repository topic
- skills Repository topic
- claude-skills Repository topic
- agent-skills Repository topic
- chatgpt Repository topic
- claude-code Repository topic
- cursor Repository topic
- gemini Repository topic
- prompt-engineering Repository topic
- legal Derived category
- operations Derived category
- data Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 4,455 bytesSKILL.mdcore · 4,455 bytesscripts/ropa_check.pyruns · 3,687 bytes
Read excerpt
# GDPR Compliance Skill
GDPR compliance is mostly bookkeeping you can defend: knowing every place you process personal data,
why you're allowed to, how long you keep it, and how a person can get it out or deleted. This skill
builds that record (the ROPA), pins a lawful basis to each activity, and flags the high-risk processing
that legally requires a DPIA — turning "are we GDPR-compliant?" into a documented, auditable answer.
## Required Inputs
Ask for these only if they aren't already provided:
- **Processing activities** — what personal data you collect, why, and where it flows (this is the spine; everything hangs off it).
- **Role** — controller (you decide the why/how) or processor (you act on a controller's instructions); your obligations differ.
- **Data subjects & data types** — whose data, and whether any is special-category (health, biometrics, etc.) or about children.