القائمة
Conduct a GDPR compliance assessment for a system or processing activity.
يُحدَّد Prompt الذي يراجع المصدر أولًا بشكل افتراضي. يمكنك التبديل إلى أمر مباشر أو تنزيل نسخة محلية.
اقرأ SKILL.md وأي ملفات مرافقة يعرضها SkillsMP قبل أن تقرر التثبيت.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
يتجاوز الأمر المباشر Prompt المخصّص للمراجعة. افحص المصدر قبل تشغيله.
npx skills add https://github.com/ThomasMoreAI/legal-skills-open --skill assess-gdprيبقى الأمر في سطر واحد. مرّر أفقيًا لمراجعته كاملًا قبل النسخ.
تفضّل نسخة محلية؟ نزّل الملفات المتاحة حاليًا لدى SkillsMP.
Use when retrieving arbitration institutional rules (ICC, LCIA, SCC, SIAC, HKIAC, VIAC, МКАС/МАК при ТПП України, UNCITRAL) — fetching current version, verifying redaction applicable to the date of arbitration agreement, constructing URLs for official rule texts
Use when choosing the Polish legal regime for letters, requests, applications, complaints, petitions, public-information requests, KPA filings, PPSA complaints, RODO access requests, registry extracts, court-file access, tax/ZUS/cudzoziemcy/USC procedures, or professional lawyer letters. Prevents mixing UDIP, KPA, PPSA, RODO, registry, special-procedure, and advocate/radca letter regimes.
Use when preparing applications for recognition and enforcement of foreign arbitral awards in Poland, applications for setting aside arbitral awards under KPC art. 1205–1211, or opposing such applications — mapping Article V of the 1958 New York Convention to art. 1214–1215 of the Polish KPC, identifying grounds for refusal, structuring public policy arguments
استنادا إلى تصنيف SOC المهني
عرض SKILL.md
| name | assess-gdpr |
| title | GDPR Compliance Assessment |
| description | Conduct a GDPR compliance assessment for a system or processing activity. |
| author | melodic-software |
| author_url | https://github.com/melodic-software/claude-code-plugins/tree/main/plugins/compliance-planning/skills/assess-gdpr |
| license | MIT |
| version | 0.1.0 |
| execution_mode | open |
| jurisdiction | general |
| practice | data-protection |
| language | en |
Conduct a comprehensive GDPR compliance assessment.
Load these skills:
gdpr-compliance - GDPR requirements and DPIA guidancedata-classification - Personal data categorizationSpawn the privacy-officer agent with the following prompt:
Conduct a comprehensive GDPR compliance assessment for: $ARGUMENTS
Perform the following assessments:
1. Data Mapping
- Identify all personal data collected
- Categorize data (standard vs special category)
- Map data flows (collection, processing, storage, sharing)
- Identify controllers and processors
- Document international transfers
2. Lawful Basis Assessment
- Determine lawful basis for each processing activity
- Validate consent mechanisms (if applicable)
- Conduct Legitimate Interest Assessment (if applicable)
3. DPIA Determination
- Assess if DPIA is required
- If required, conduct risk assessment
- Recommend mitigations for identified risks
4. Data Subject Rights
- Assess implementation of all rights
- Identify gaps in rights fulfillment
- Recommend improvements
5. Privacy by Design
- Evaluate data minimization
- Assess purpose limitation
- Review storage limitation
- Check transparency measures
6. Documentation Review
- Privacy notices
- Processing records (Article 30)
- Data protection policies
Provide a complete GDPR assessment with:
- Compliance score by area
- Gap analysis with priorities
- Remediation roadmap
- Evidence requirements
Ensure the report includes:
# Assess a customer data processing system
/compliance-planning:assess-gdpr "customer relationship management system processing EU customer data"
# Assess a marketing platform
/compliance-planning:assess-gdpr "email marketing platform with subscriber consent management"
# Assess an e-commerce site
/compliance-planning:assess-gdpr "e-commerce website serving EU customers with payment processing"
# GDPR Compliance Assessment: [System Name]
| Area | Score | Status |
|------|-------|--------|
| Lawful Basis | [X/10] | [Status] |
| Data Subject Rights | [X/10] | [Status] |
| Security | [X/10] | [Status] |
| Documentation | [X/10] | [Status] |
| | | |
[Critical finding 1]
[Critical finding 2]
---
[Detailed data mapping]
---
[Assessment per processing activity]
---
[Implementation status per right]
---
[If yes, full DPIA]
---
| Gap | GDPR Article | Risk | Remediation |
|-----|--------------|------|-------------|
---
[Action]
[Action]
[Action]
---
[ ] Privacy notice updated
[ ] Article 30 records complete
[ ] DPIAs conducted
[ ] BAAs/DPAs in place
[ ] Consent records maintained