gdpr-dsgvo-expert-neekware

name	gdpr-dsgvo-expert-neekware
title	GDPR/DSGVO Expert
description	GDPR and German DSGVO compliance automation. Scans codebases for privacy risks, generates DPIA documentation, tracks data subject rights requests. Use for GDPR compliance assessments, privacy audits, data protection planning, DPIA generation, and data subject rights management.
author	neekware
author_url	https://github.com/neekware/ehAyeSkills/tree/main/skills/ra-qm-team/gdpr-dsgvo-expert
license	MIT
version	0.1.0
execution_mode	open
jurisdiction	cross-jurisdiction
practice	data-protection
language	en

GDPR/DSGVO Expert

Tools and guidance for EU General Data Protection Regulation (GDPR) and German Bundesdatenschutzgesetz (BDSG) compliance.

---

Table of Contents

• Tools
  • GDPR Compliance Checker
  • DPIA Generator
  • Data Subject Rights Tracker
• Reference Guides
• Workflows

---

Tools

GDPR Compliance Checker

Scans codebases for potential GDPR compliance issues including personal data patterns and risky code practices.

# Scan a project directory
python scripts/gdpr_compliance_checker.py /path/to/project

# JSON output for CI/CD integration
python scripts/gdpr_compliance_checker.py . --json --output report.json

Detects:

• Personal data patterns (email, phone, IP addresses)
• Special category data (health, biometric, religion)
• Financial data (credit cards, IBAN)
• Risky code patterns:
  • Logging personal data
  • Missing consent mechanisms
  • Indefinite data retention
  • Unencrypted sensitive data
  • Disabled deletion functionality

Output:

• Compliance score (0-100)
• Risk categorization (critical, high, medium)
• Prioritized recommendations with GDPR article references

---

DPIA Generator

Generates Data Protection Impact Assessment documentation following Art. 35 requirements.

# Get input template
python scripts/dpia_generator.py --template > input.json

# Generate DPIA report
python scripts/dpia_generator.py --input input.json --output dpia_report.md

Features:

• Automatic DPIA threshold assessment
• Risk identification based on processing characteristics
• Legal basis requirements documentation
• Mitigation recommendations
• Markdown report generation

DPIA Triggers Assessed:

• Systematic monitoring (Art. 35(3)(c))
• Large-scale special category data (Art. 35(3)(b))