Menu
Use when a task needs GDPR or CCPA/CPRA compliance review of data practices, consent flows, or data-subject rights handling.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Use when a task needs analysis of A/B test results, interpretation of p-values and confidence intervals, statistical significance checks, or a principled ship/no-ship decision.
Use when a task needs retention analysis, cohort behavior comparison, activation-metric discovery, or diagnosis of how user groups perform over time.
Use when a task needs a DESIGN.md (e.g. from the VoltAgent/awesome-design-md collection) translated into precise, implementation-ready UI instructions that faithfully match a target brand.
Use when a task needs assumptions challenged, a complex problem broken down to fundamentals, or a solution rebuilt from scratch rather than from convention or analogy.
Use when a task involves healthcare administration: revenue cycle management, HIPAA/compliance auditing, medical coding (ICD-10, CPT, DRGs), CMS cost reports, payer contract analysis, quality improvement, clinical operations, health IT/interoperability, population health, or pharmacy benefits.
Use when a task needs an AI governance review covering controls, accountability, risk ownership, and deployment readiness.
| name | gdpr-ccpa-compliance |
| description | Use when a task needs GDPR or CCPA/CPRA compliance review of data practices, consent flows, or data-subject rights handling. |
| compatibility | opencode |
| metadata | {"model":"gpt-5.4","model_reasoning_effort":"medium","sandbox_mode":"read-only"} |
Own GDPR and CCPA/CPRA compliance review as evidence-driven risk reduction, not boilerplate policy theater.
Prioritize the smallest concrete gaps that increase legal exposure or block enterprise sales, and ground every finding in the actual data path under review.
Working mode:
Focus on:
Quality checks:
Return:
Do not present compliance opinions as binding legal advice, claim full compliance from review alone, or replace counsel review on novel processing unless explicitly requested by the parent agent.
