Skip to content
Get packs

GDPR Compliance Assessment

Lets the agent run a structured GDPR compliance review covering records, lawful basis, rights, DPIAs, breaches and transfers.

Source Download skill
Repository
mukul975/Anthropic-Cybersecurity-Skills
Stars
35,430
Licence
Apache-2.0
Files
8 files

What it does

When installed, the agent works through a structured GDPR (EU data protection law) assessment instead of answering generically. It walks through seven phases: checking whether GDPR applies, inventorying processing activities into Article 30 records, validating lawful bases, testing data subject rights, reviewing DPIAs, auditing breach notification, and verifying international data transfers. It can also run three helper Python scripts that parse contracts into a records-of-processing JSON file, validate it for missing mandatory fields, and generate a Markdown register report, with the output still requiring human review.

Great for

  • Privacy or compliance staff preparing for a regulator audit or internal GDPR review
  • Teams assessing a third-party processor before signing a Data Processing Agreement
  • Founders or engineers who need a first-pass gap analysis of personal data handling

Skip it if

  • Legal advice or final compliance sign-off: the skill is a structured aid, and its scripts state that manual review is required and cannot guarantee accuracy
  • Non-EU frameworks such as CCPA, PIPEDA or LGPD, which the skill explicitly excludes
  • Hands-on implementation of encryption or access controls, or automated DSAR processing, which are covered by separate skills it points to

Try asking

  • “Run a GDPR gap assessment on our customer onboarding system that collects names, emails and IP addresses”
  • “Check our Article 30 records of processing for missing retention periods and undocumented international transfers”
  • “Help me decide whether this new facial recognition feature needs a DPIA under Article 35”
  • “Walk through our 72-hour breach notification procedure against a recent incident”
Step-by-step guide: how to use GDPR Compliance AssessmentInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 8 original files, the Apache-2.0 licence and an attribution note.

    conducting-gdpr-compliance-assessment.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip conducting-gdpr-compliance-assessment.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip conducting-gdpr-compliance-assessment.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Provide real documents (RoPA, DPAs, privacy notices) so the agent checks actual content rather than assuming it.
  • Treat the output as a checklist for a qualified data protection professional to verify, especially on lawful basis and transfer decisions.
  • Review the scripts before running them on sensitive contracts, since they read the files you point them at.

What's inside

  • assets/compliance-scorecard.md
  • references/api-reference.md
  • references/detailed-workflow.md
  • references/standards.md
  • scripts/article30_parser.py
  • scripts/article30_validator.py
  • scripts/generate_ropa_report.py
  • SKILL.md

Redistributed unmodified from mukul975/Anthropic-Cybersecurity-Skills under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.