gdpr-data-handling – Data & Science skill for AI agents
Implement GDPR-compliant data handling with consent management, data subject rights, and privacy by design. Use when building systems that process EU personal data, implementing privacy controls, or conducting GDPR compliance reviews.
Install the gdpr-data-handling skill with one command
Pick the tool you use, copy the command and paste it in your terminal. The skill lands in that tool's skills folder and is ready in your next session.
Claude Code
mkdir -p ~/.claude/skills && curl -fsSL https://skill.dn1nguoi.com/z/gdpr-data-handling-a9b53.tgz | tar xz -C ~/.claude/skills
Call it in Claude Code: /gdpr-data-handling – then describe the task you want done.
Codex
mkdir -p ~/.codex/skills && curl -fsSL https://skill.dn1nguoi.com/z/gdpr-data-handling-a9b53.tgz | tar xz -C ~/.codex/skills
Call it in Codex: $gdpr-data-handling – then describe the task you want done.
Hermes Agent
mkdir -p ~/.hermes/skills && curl -fsSL https://skill.dn1nguoi.com/z/gdpr-data-handling-a9b53.tgz | tar xz -C ~/.hermes/skills
Call it in Hermes Agent: /gdpr-data-handling – then describe the task you want done.
DeepSeek
mkdir -p ~/.deepcode/skills && curl -fsSL https://skill.dn1nguoi.com/z/gdpr-data-handling-a9b53.tgz | tar xz -C ~/.deepcode/skills
Call it in DeepSeek: /gdpr-data-handling – then describe the task you want done.
SKILL.md content
GDPR Data Handling
Practical implementation guide for GDPR-compliant data processing, consent management, and privacy controls.
When to Use This Skill
- Building systems that process EU personal data
- Implementing consent management
- Handling data subject requests (DSRs)
- Conducting GDPR compliance reviews
- Designing privacy-first architectures
- Creating data processing agreements
Core Concepts
1. Personal Data Categories
| Category | Examples | Protection Level |
| ---------------------- | --------------------------- | ------------------ |
| Basic | Name, email, phone | Standard |
| Sensitive (Art. 9) | Health, religion, ethnicity | Explicit consent |
| Criminal (Art. 10) | Convictions, offenses | Official authority |
| Children's | Under 16 data | Parental consent |
2. Legal Bases for Processing
Article 6 - Lawful Bases:
├── Consent: Freely given, specific, informed
├── Contract: Necessary for contract performance
├── Legal Obligation: Required by law
├── Vital Interests: Protecting someone's life
├── Public Interest: Official functions
└── Legitimate Interest: Balanced against rights3. Data Subject Rights
Right to Access (Art. 15) ─┐
Right to Rectification (Art. 16) │
Right to Erasure (Art. 17) │ Must respond
Right to Restrict (Art. 18) │ within 1 month
Right to Portability (Art. 20) │
Right to Object (Art. 21) ─┘Detailed worked examples and patterns
Detailed sections (starting with ## Implementation Patterns) live in references/details.md. Read that file when the navigation summary above is insufficient.
Best Practices
Do's
- Minimize data collection - Only collect what's needed
- Document everything - Processing activities, legal bases
- Encrypt PII - At rest and in transit
- Implement access controls - Need-to-know basis
- Regular audits - Verify compliance continuously
Don'ts
- Don't pre-check consent boxes - Must be opt-in
- Don't bundle consent - Separate purposes separately
- Don't retain indefinitely - Define and enforce retention
- Don't ignore DSARs - 30-day response required
- Don't transfer without safeguards - SCCs or adequacy decisions
Related skills
- chief-data-officer-advisor – Chief Data Officer advisory for startups: AI training data rights and consent…
- gget – Queries 20+ bioinformatics resources through CLI/Python. Supports quick lookups of gene…
- asset-it-management – Asset and IT register: serial, model, condition, assignee, location, purchase value…
- astropy – Astropy is the core Python package for astronomy, providing essential functionality for…
- chief-data-officer-advisor – Chief Data Officer advisory for startups: AI training data rights and consent…
- drug-discovery – Drug discovery: ChEMBL search, drug-likeness, interactions.
- attendance – Daily attendance register: check-in and check-out, hours worked, work mode, late…
- dspy – DSPy: declarative LM programs, auto-optimize prompts, RAG.