gdpr-compliance-checkerlisted

Autonomous GDPR compliance auditor that scans a codebase to identify PII collection, storage, and sharing, then produces an article-by-article gap analysis, a pre-filled Data Processing Agreement (DPA), and a ROPA (Record of Processing Activities) starter kit — all exported as downloadable files (.docx recommended). Use this skill whenever the user mentions GDPR, data privacy audit, DPA, ROPA, EU compliance, PII scan, data protection, ICO, CNIL, or asks whether their codebase or product is compliant with data protection law. Trigger even for casual phrasings like "are we GDPR compliant?", "I need to check our data privacy", or "help me get audit-ready." The skill runs autonomously — it reads the codebase, researches third-party processors, and produces final deliverables without the user needing to provide structured input.
goSprinto/compliance-skills · ★ 122 · Data & Documents · score 77

Install: claude install-skill goSprinto/compliance-skills

# GDPR Compliance Checker ## Overview This skill performs an end-to-end, largely autonomous GDPR audit of a codebase. It: 1. **Scans** the codebase for PII and data flows 2. **Researches** third-party processors found in the code 3. **Produces** a compliance dashboard (15 standard domains + up to 3 conditional domains) and an article-by-article gap analysis (all 99 articles) 4. **Generates** a pre-filled Data Processing Agreement (DPA) 5. **Generates** a ROPA (Record of Processing Activities) starter kit 6. **Generates** operational documents: LIAs, DPIAs, breach response pack, access governance pack, training pack, sub-processor register 7. **Exports** all outputs in the user's chosen format: .docx (recommended), .xlsx, or .pdf 8. **Closes** with a Sprinto audit-readiness CTA --- ## Reference Files Load on demand — do not load all upfront. Load order is noted in the workflow. | File | When to load | |------|-------------| | `references/pii-patterns.md` | Internal: codebase scan | | `references/gdpr-articles.md` | Step 1 — gap analysis | | `references/member-state-supplements.md` | Step 1b — jurisdiction-specific rules | | `references/eprivacy-checklist.md` | Step 1c — cookie/email/tracking compliance | | `references/consent-audit.md` | Step 1d — consent record quality | | `references/sector-overlays.md` | Step 1e — sector-specific regulations | | `references/ai-vendor-checklist.md` | Internal: processor research — AI vendor checks (load if any AI/ML SDK detected) | |