dpdp-claude-dev-skilllisted

India DPDP Act 2023 + DPDP Rules 2025 compliance for software development — use while designing, building, reviewing or auditing any product that touches personal data of people in India. Turns the law into engineering controls (consent ledger, notices, rights APIs, retention/erasure jobs, breach runbook, child age-gating, logging, encryption) and gives a verification checklist with section/rule citations. Use this skill whenever the user mentions DPDP, DPDPA, Indian privacy law, personal data, PII, consent flows, sign-up/onboarding forms, user deletion, data retention, audit logs, breach/incident response, children's data, privacy policy, cookie/consent banners, or asks "is this compliant", "review this build/schema/API for privacy", or is building any app, SaaS, IoT or AI product for Indian users or clients — even if DPDP is not named.
sachin-uvera/kavach-dpdp · ★ 0 · AI & Automation · score 72

Install: claude install-skill sachin-uvera/kavach-dpdp

# DPDP Dev Skill — building software that complies with India's DPDP law Source texts (read in full when this skill was written): - Digital Personal Data Protection Act, 2023 (No. 22 of 2023) — cited as **S.** (section) - Digital Personal Data Protection Rules, 2025, G.S.R. 846(E), notified 13 Nov 2025 — cited as **R.** (rule) and **Sch.** (schedule) - PIB explainer "DPDP Rules, 2025 Notified" (17 Nov 2025) This skill is an engineering translation, not legal advice. When a finding hinges on interpretation (e.g. whether a use is a "legitimate use", Significant Data Fiduciary status, sector laws like RBI/IRDAI/health), say so and recommend legal review. --- ## 1. How to use this skill Pick the mode from the user's request: | Mode | Trigger | Output | |---|---|---| | **Design** | New feature/product, architecture, data model | Data inventory + controls list mapped to §5, plus open questions | | **Build** | Writing code, schema, APIs, UI copy | Code/config that implements the control; cite S./R. in comments where it helps reviewers | | **Review / Audit** | "Is this compliant?", PR, schema, existing app | Findings report using the template in §9 | Always start with §3 (does DPDP apply, and in what role). Then walk §5 control by control. Don't dump the whole checklist — report only what's relevant to the artefact in front of you, but never skip Security (C8), Breach (C9) and Retention (C10) for any system that stores personal data. --- ## 2. Legal status and timeline (as o