Skip to content
Get packs

GDPR Engineering Guide

Adds GDPR privacy engineering rules to your code, APIs, logs, and data retention

Source Download skill
Repository
github/awesome-copilot
Stars
40,703
Licence
MIT
Files
3 files

What it does

This skill gives the agent a checklist of GDPR privacy practices for software engineering. When you design APIs, data models, logging, authentication, or retention jobs, the agent applies rules such as collecting less data, masking sensitive values, anonymizing IP addresses in logs, using generic error messages, and setting a retention period for every table that holds personal data. It is a reference and guidance document; it does not scan your code or enforce anything by itself.

Great for

  • Developers building apps that store user accounts, emails, or other personal data
  • Tech leads and architects reviewing designs or pull requests for privacy issues
  • Teams that want privacy-by-design defaults written into their engineering workflow

Skip it if

  • Legal advice: the skill is engineering guidance inspired by CNIL and GDPR articles, not a substitute for a lawyer or Data Protection Officer, and it cannot decide your legal basis for processing
  • Non-EU or non-GDPR projects where the rules do not apply, since following them unnecessarily may add cost without benefit
  • Production compliance audits on their own: the visible text is a guide, so relying on it alone to prove compliance is risky

Try asking

  • “Is this user registration endpoint GDPR-compliant? Review the design and tell me what to change.”
  • “Design a data model for customer profiles with retention and deletion in mind.”
  • “Review this logging code for personal data that should be masked or removed.”
  • “Propose error handling for our login API that does not leak database details.”
Step-by-step guide: how to use GDPR Engineering GuideInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 3 original files, the MIT licence and an attribution note.

    gdpr-compliant.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip gdpr-compliant.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip gdpr-compliant.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Name the specific feature or file you want reviewed so the agent can apply the relevant section, such as logging, API design, or retention.
  • Treat the agent's output as a starting point and confirm legal questions such as legal basis, DPIA need, and sub-processor contracts with your legal or privacy team.
  • The visible skill text is cut off at section 9 (Encryption), and the referenced files were not fully included in this review, so ask about topics the visible text does not cover and verify them against the source.

What's inside

  • references/data-rights.md
  • references/Security.md
  • SKILL.md

Redistributed unmodified from github/awesome-copilot under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.