Gdpr Data Handling
Unverified●30/40Claude Code◐PartialHas SKILL.md but declares no allowed-tools — Claude Code will ask for permission each time
Cursor◐PartialPlain prose you can paste in — but no Cursor rules file
Codex◐PartialPlain prose you can paste in — but no AGENTS.md
Gemini CLI◐PartialPlain prose you can paste in
Copilot◐PartialPlain prose you can paste in — but no Copilot instructions file
npx agentalley add gdpr-data-handlingWho is stuck, and on what
Implement GDPR-compliant data handling with consent management, data subject rights, and privacy by design. Use when building systems that process EU personal data, implementing privacy controls, or conducting GDPR compliance reviews.
The whole source
Frontmatter — 2 properties
| name | gdpr-data-handling |
|---|---|
| description | Implement GDPR-compliant data handling with consent management, data subject rights, and privacy by design. Use when building systems that process EU personal data, implementing privacy controls, or conducting GDPR compliance reviews. |
| 1 | --- |
| 2 | name: gdpr-data-handling |
| 3 | description: Implement GDPR-compliant data handling with consent management, data subject rights, and privacy by design. Use when building systems that process EU personal data, implementing privacy controls, or conducting GDPR compliance reviews. |
| 4 | ---A5 — No allowed-tools declared — no way to tell what this skill may touch |
| 5 | |
| 6 | # GDPR Data Handling |
| 7 | |
| 8 | Practical implementation guide for GDPR-compliant data processing, consent management, and privacy controls. |
| 9 | |
| 10 | ## When to Use This Skill |
| 11 | |
| 12 | - Building systems that process EU personal data |
| 13 | - Implementing consent management |
| 14 | - Handling data subject requests (DSRs) |
| 15 | - Conducting GDPR compliance reviews |
| 16 | - Designing privacy-first architectures |
| 17 | - Creating data processing agreements |
| 18 | |
| 19 | ## Core Concepts |
| 20 | |
| 21 | ### 1. Personal Data Categories |
| 22 | |
| 23 | | Category | Examples | Protection Level | |
| 24 | | ---------------------- | --------------------------- | ------------------ | |
| 25 | | **Basic** | Name, email, phone | Standard | |
| 26 | | **Sensitive (Art. 9)** | Health, religion, ethnicity | Explicit consent | |
| 27 | | **Criminal (Art. 10)** | Convictions, offenses | Official authority | |
| 28 | | **Children's** | Under 16 data | Parental consent | |
| 29 | |
| 30 | ### 2. Legal Bases for Processing |
| 31 | |
| 32 | ``` |
| 33 | Article 6 - Lawful Bases: |
| 34 | ├── Consent: Freely given, specific, informed |
| 35 | ├── Contract: Necessary for contract performance |
| 36 | ├── Legal Obligation: Required by law |
| 37 | ├── Vital Interests: Protecting someone's life |
| 38 | ├── Public Interest: Official functions |
| 39 | └── Legitimate Interest: Balanced against rights |
| 40 | ``` |
| 41 | |
| 42 | ### 3. Data Subject Rights |
| 43 | |
| 44 | ``` |
| 45 | Right to Access (Art. 15) ─┐ |
| 46 | Right to Rectification (Art. 16) │ |
| 47 | Right to Erasure (Art. 17) │ Must respond |
| 48 | Right to Restrict (Art. 18) │ within 1 month |
| 49 | Right to Portability (Art. 20) │ |
| 50 | Right to Object (Art. 21) ─┘ |
| 51 | ``` |
| 52 | |
| 53 | ## Detailed worked examples and patterns |
| 54 | |
| 55 | Detailed sections (starting with `## Implementation Patterns`) live in `references/details.md`. Read that file when the navigation summary above is insufficient. |
| 56 | |
| 57 | ## Best Practices |
| 58 | |
| 59 | ### Do's |
| 60 | |
| 61 | - **Minimize data collection** - Only collect what's needed |
| 62 | - **Document everything** - Processing activities, legal bases |
| 63 | - **Encrypt PII** - At rest and in transit |
| 64 | - **Implement access controls** - Need-to-know basis |
| 65 | - **Regular audits** - Verify compliance continuously |
| 66 | |
| 67 | ### Don'ts |
| 68 | |
| 69 | - **Don't pre-check consent boxes** - Must be opt-in |
| 70 | - **Don't bundle consent** - Separate purposes separately |
| 71 | - **Don't retain indefinitely** - Define and enforce retention |
| 72 | - **Don't ignore DSARs** - 30-day response required |
| 73 | - **Don't transfer without safeguards** - SCCs or adequacy decisions |
| 74 |
Reviews
Installed this one?Write the first review and take the Trailblazer badge.
Alternatives
Structure Your Invention For A Patent FilingDescribe your invention in plain words and get back a formal write-up that lays out the problem it solves, how it works, and which parts are worth protecting.●····●37/40Claims Drafting: The Core Patent SkillDescribe your invention in plain words and get back a numbered set of formal patent claims — the legal wording that defines exactly what you own.●····●36/40Patent Novelty and Non-Obviousness CheckDescribe your invention in everyday words and get back a clear read on whether it's new and original enough to patent, plus where it might hit trouble.●····●35/40Patent Pipeline: From Invention to FilingDescribe your invention in plain words and get back a complete first-draft patent application — claims, full description, and abstract — ready to hand to a patent attorney.●····●35/40