Agent skill · data analytics · wshobson
gdpr-data-handling
Implement GDPR-compliant data handling with consent management, data subject rights, and privacy by design. Use when building systems that process EU personal data, implementing privacy controls, or conducting GDPR compliance reviews.
Why this skill is useful
Provides specific legal frameworks and compliance patterns for GDPR that the AI wouldn't reliably generate on its own.
What it needs
About 1k tokens when loaded. Last updated 2026-08-05. 38,570 stars on the source repository.
What this skill does
GDPR Data Handling Practical implementation guide for GDPR-compliant data processing, consent management, and privacy controls. When to Use This Skill Building systems that process EU personal data Implementing consent management Handling data subject requests (DSRs) Conducting GDPR compliance reviews Designing privacy-first architectures Creating data processing agreements Core Concepts 1. Personal Data Categories Category Examples Protection Level ---------------------- --------------------------- ------------------ Basic Name, email, phone Standard Sensitive (Art. 9) Health, religion, ethnicity Explicit consent Criminal (Art. 10) Convictions, offenses Official authority Children's Under 16 data Parental consent 2. Legal Bases for Processing 3. Data Subject Rights Detailed worked examples and patterns Detailed sections (starting with ## Implementation Patterns) live in references/details.md. Read that file when the navigation summary above is insufficient. Best Practices Do's Minimize data collection - Only collect what's needed Document everything - Processing activities, legal bases Encrypt PII - At rest and in transit Implement access controls - Need-to-know basis Regular audits - Verify compliance continuously Don'ts Don't pre-check consent boxes - Must be opt-in Don't bundle consent - Separate purposes separately Don't retain indefinitely - Define and enforce retention Don't ignore DSARs - 30-day response required Don't transfer without safeguards - SCCs or adequacy decisions
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills wshobson/gdpr-data-handling