What problem does it solve? Java microservices that process user data risk GDPR/CCPA violations through unmasked PII in logs, unencrypted database fields, and missing deletion or retention mechanisms. This Skill provides concrete patterns to handle personal data correctly across the entire service lifecycle. ## Core Features & Use Cases - PII Masking in Logs: Apply a custom @Mask annotation with a Jackson JsonSerializer or logging pattern converter so sensitive fields never appear in plain text. - Field-Level Encryption: Encrypt sensitive columns at rest using JPA Attribute Converters with AES-256 and support for key rotation. - Right to be Forgotten: Implement a Deletion Coordinator that scrambles PII synchronously, purges backups asynchronously, and emits a UserPurgedEvent on completion. - Use Case: When a user requests account deletion, the service marks the user as deleted, anonymizes their email and phone in the main database, schedules purges of audit logs and backups, and enforces TTL-based retention on remaining records. ## Quick Start Apply the data-privacy skill to add PII masking, encryption, and a deletion workflow to my Spring Boot user service.
