GDPR/DSGVO Expert
This skill automates GDPR and German DSGVO compliance by scanning codebases for privacy risks, generating Data Protection Impact Assessment (DPIA) documentation, and tracking data subject rights requests with one-month deadlines. It produces compliance reports, DPIA markdown documents, and request tracking outputs.
✨ What it does
- Scans codebases for personal data patterns and risky code practices
- Generates DPIA reports with threshold assessment and risk identification
- Tracks data subject rights requests with Art. 12(3) one-month deadlines
- Provides reference guides for GDPR and German BDSG requirements
- Includes workflows for processing activity assessment and DSAR handling
🎯 When to use it
- Running GDPR compliance assessments or privacy audits on a codebase
- Generating DPIA documentation for processing activities
- Managing data subject rights requests (DSARs) and tracking deadlines
- Checking German BDSG-specific requirements such as DPO appointment or video surveillance
🚀 How to use
Trigger by asking for GDPR compliance checks, DPIA generation, or DSAR tracking. Provide a project path for code scans, or use the provided CLI commands. For DPIA, fill the input template. For DSAR, use the tracker commands.
Example prompts:
Check this service for GDPR risks
Track an access request deadline
📄 Output: Compliance reports, DPIA markdown documents, and data subject rights tracking outputs.
📦 Add this skill to Claude Code
# 1. Get the skills repo
git clone --depth 1 https://github.com/alirezarezvani/claude-skills /tmp/claude-skills
# 2. Copy this skill into your project (or ~/.claude/skills for all projects)
mkdir -p .claude/skills
cp -r /tmp/claude-skills/ra-qm-team/skills/gdpr-dsgvo-expert .claude/skills/gdpr-dsgvo-expertSkill source: ra-qm-team/skills/gdpr-dsgvo-expert/SKILL.md
⚠️ Good to know
Final compliance determinations must be routed to the DPO or legal counsel; the skill provides tools and guidance but not legal advice.
❓ FAQ
What is the deadline for responding to a data subject request?
All rights must be fulfilled within one month of receipt (Art. 12(3)), with possible extension of two further months for complex requests.
When is a DPIA required?
A DPIA is required for systematic monitoring, large-scale special category data, automated decision-making, or other high-risk criteria as per EDPB guidelines.
When is a Data Protection Officer (DPO) mandatory under German BDSG?
A DPO is mandatory if you have 20 or more employees processing personal data automatically, or if processing requires a DPIA, among other conditions.
🤖 Overview, features, install steps and FAQ were generated from the project's SKILL.md on Sep 4, 2026. Always check the original source before running commands.