What problem does it solve? Healthcare platforms must prove that user consent is collected, enforced, and revocable across every data touchpoint, but consent flags are often scattered across models, views, and frontend components with no unified audit trail. This Skill systematically inventories consent points, verifies backend enforcement, checks minor/dependent consent handling, and maps data subject rights coverage against HIPAA and GDPR requirements. ## Core Features & Use Cases - Consent Points Inventory: Greps Django models, views, mutations, and React components to map every consent flag (e.g., User.is_agree, Client.tandc_consent) to its UI element and backend enforcement point. - Enforcement & Minor Consent Verification: Runs Django ORM queries to find active users operating without consent, validates parent/dependent account relationships, and checks jurisdiction-specific age-of-consent rules. - Data Subject Rights Audit: Checks for data export, account deletion cascade, rectification, and consent withdrawal endpoints required by GDPR Articles 17-20 and HIPAA 164.524-528. - Use Case: Before a production release of a telehealth feature, run the audit to discover that video recording consent and clinical notes sharing consent are missing, then generate a prioritized gap report for the compliance team. ## Quick Start Ask the assistant to run a consent tracking audit across the backend and frontend with scope set to all, and produce a compliance gap report.
