Skip to main content
affpapa.org
RU EN
skill Claude Code CX Codex Cursor

gdpr-data-handling — Claude Code skill: what it does, install

Guides GDPR data handling with consent management, data subject rights, and privacy by design. Use it when a system processes EU personal data.

Install into Claude Code · Plugin marketplace All methods and platforms ↓ 
/plugin marketplace add wshobson/agents
/plugin install hr-legal-compliance@claude-code-workflows
Open on GitHub

What gdpr-data-handling does

This skill guides GDPR data processing work, from choosing a lawful basis to designing consent controls. It covers basic, sensitive, criminal, and children’s data, plus access, rectification, erasure, restriction, portability, and objection rights.

The package includes a practical guide, a data-category table, lawful-basis notes, and controls for data minimization, processing records, PII encryption, need-to-know access, and retention. Detailed implementation patterns live in references/details.md, which is the next file to read when the summary is not enough.

Use it while building consent management, handling DSRs, or reviewing a privacy-first architecture. Check opt-in behavior, separate consent purposes, and safeguards for transfers, such as SCCs or adequacy decisions. It fits systems that process EU personal data; projects outside that scope have little reason to add it.

What it helps with

  • choose a lawful basis for processing personal data
  • design consent flows without pre-checked boxes
  • handle a data subject request for access or erasure
  • classify personal data and its protection level
  • review PII retention, encryption, and transfer controls

Example prompts for the agent

  • Review the lawful basis for processing email and phone data in `src/consent.ts`.
  • Design a DSR erasure flow and its response deadline.
  • Run a GDPR compliance review using `references/details.md`.

How to install gdpr-data-handling

1Plugin marketplace

/plugin marketplace add wshobson/agents
/plugin install hr-legal-compliance@claude-code-workflows

This installs the whole hr-legal-compliance plugin with all its skills

2Skills CLI (Vercel)

npx skills add wshobson/agents --skill gdpr-data-handling -a claude-code

3Manually: put the files in place

~/.claude/skills/gdpr-data-handling/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/gdpr-data-handling/

From the same set213

The whole set →
typescript-advanced-types Seth Hobson Guides an agent through advanced TypeScript types, from generics to conditional and mapped types. Use it for typed libraries, API clients, or strict configuration objects. Claude Code CX Codex Cursor 92,169installs tailwind-design-system Seth Hobson Helps build design systems with Tailwind CSS v4, from theme tokens to component variants. Use it when a project needs shared UI patterns. Claude Code CX Codex Cursor 70,180installs brand-landingpage Travis D. Elliott This skill interviews you about the product and its visual direction, then builds a landing page through Stitch. Use it when there’s no established design yet. Claude Code CX Codex Cursor 39,476installs python-testing-patterns Seth Hobson This skill guides Python testing with pytest, fixtures and mocks. Use it when building a test suite or tracking down failing checks. Claude Code CX Codex Cursor 36,943installs python-performance-optimization Seth Hobson This skill profiles Python code to locate CPU and memory bottlenecks. Use it when an application responds slowly or consumes too many resources. Claude Code CX Codex Cursor 35,675installs nextjs-app-router-patterns Seth Hobson This skill covers Next.js App Router patterns for rendering, routing, and data fetching. Use it when starting an App Router project or moving from Pages Router. Claude Code CX Codex Cursor 32,529installs api-design-principles Seth Hobson Use this skill to plan or review REST and GraphQL APIs. It helps when writing a specification or setting API conventions for a team. Claude Code CX Codex Cursor 30,348installs code-review-excellence Seth Hobson This skill guides pull request reviews, catches logic and security issues, and helps teams give specific feedback. Use it for review standards or developer mentoring. Claude Code CX Codex Cursor 30,193installs

Similar

gke-service-networking official google Configures GKE edge networking, routing, load balancing, Cloud Armor, and private endpoints. Useful when publishing services or debugging Ingress failures. Claude Code Gemini CLI CX Codex 4,800installs agent-platform-troubleshooting official google Troubleshoots Google Cloud Gemini Enterprise Agent Platform failures, including 403 and 500 responses plus gateway and IAP permission errors. Claude Code Gemini CLI CX Codex 4,800installs golang-security samber Identifies Go vulnerabilities, models threats with STRIDE and DREAD, and fixes injections, secret leaks, and cryptography flaws. Claude Code CX Codex Cursor +1 42,100installs gke-manifest-generation official google Creates and updates Kubernetes manifests for GKE Autopilot and Standard. Use it when defining app resources, health checks, or network routes. Claude Code Gemini CLI CX Codex 4,600installs security-review official github Reviews code and dependencies for vulnerabilities, exposed secrets, and access-control flaws. Use it before a release or when auditing a project path. GitHub Copilot 5,500installs git-guardrails-claude-code Matt Pocock This skill adds a Claude Code hook that stops risky Git commands before they run. Use it when an agent must not push or discard working-tree changes. Claude Code 499,069installs ponytail-review DietrichGebert ponytail-review reviews a change beyond the diff, checking connected code, bugs, risks, load, tests, speed, and unnecessary code. Use it for PRs and commits. Claude Code CX Codex Cursor +1 56,300installs ponytail-audit DietrichGebert It audits a repository and ranks bugs, risks, and redundant code in a one-shot report. Use it when you need a review without code changes. Claude Code CX Codex Cursor +1 44,800installs

Questions about gdpr-data-handling

How do I install gdpr-data-handling in Claude Code?

Add the marketplace with /plugin marketplace add wshobson/agents, install the plugin with /plugin install hr-legal-compliance@claude-code-workflows, or run npx skills add wshobson/agents --skill gdpr-data-handling -a claude-code. The skill file is placed at ~/.claude/skills/gdpr-data-handling/SKILL.md.

What does gdpr-data-handling do?

It guides GDPR data handling through consent management, data subject rights, and privacy by design. It also covers processing records, access controls, retention, encryption, and transfer safeguards.

Which platforms support gdpr-data-handling?

The skill is intended for Claude Code, Codex, and Cursor. Each platform uses its own npx skills add installation command.

Source text

SKILL.md · MIT 
---
name: gdpr-data-handling
description: Implement GDPR-compliant data handling with consent management, data subject rights, and privacy by design. Use when building systems that process EU personal data, implementing privacy controls, or conducting GDPR compliance reviews.
---

# GDPR Data Handling

Practical implementation guide for GDPR-compliant data processing, consent management, and privacy controls.

## When to Use This Skill

- Building systems that process EU personal data
- Implementing consent management
- Handling data subject requests (DSRs)
- Conducting GDPR compliance reviews
- Designing privacy-first architectures
- Creating data processing agreements

## Core Concepts

### 1. Personal Data Categories

| Category               | Examples                    | Protection Level   |
| ---------------------- | --------------------------- | ------------------ |
| **Basic**              | Name, email, phone          | Standard           |
| **Sensitive (Art. 9)** | Health, religion, ethnicity | Explicit consent   |
| **Criminal (Art. 10)** | Convictions, offenses       | Official authority |
| **Children's**         | Under 16 data               | Parental consent   |

### 2. Legal Bases for Processing

```
Article 6 - Lawful Bases:
├── Consent: Freely given, specific, informed
├── Contract: Necessary for contract performance
├── Legal Obligation: Required by law
├── Vital Interests: Protecting someone's life
├── Public Interest: Official functions
└── Legitimate Interest: Balanced against rights
```

### 3. Data Subject Rights

```
Right to Access (Art. 15)      ─┐
Right to Rectification (Art. 16) │
Right to Erasure (Art. 17)       │ Must respond
Right to Restrict (Art. 18)      │ within 1 month
Right to Portability (Art. 20)   │
Right to Object (Art. 21)       ─┘
```

## Detailed worked examples and patterns

Detailed sections (starting with `## Implementation Patterns`) live in `references/details.md`. Read that file when the navigation summary above is insufficient.

## Best Practices

### Do's

- **Minimize data collection** - Only collect what's needed
- **Document everything** - Processing activities, legal bases
- **Encrypt PII** - At rest and in transit
- **Implement access controls** - Need-to-know basis
- **Regular audits** - Verify compliance continuously

### Don'ts

- **Don't pre-check consent boxes** - Must be opt-in
- **Don't bundle consent** - Separate purposes separately
- **Don't retain indefinitely** - Define and enforce retention
- **Don't ignore DSARs** - 30-day response required
- **Don't transfer without safeguards** - SCCs or adequacy decisions

© Seth Hobson · MIT · wshobson/agents

See also

Project sponsors

Companies that keep this analytics open
Gold sponsor
Nutra.Club

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor