gdpr-ccpa-privacy-auditor

Audit web applications to compare privacy policies with observed tracking practices.

2|1|Updated Jan 25, 2026
One-click install
npx skills add https://github.com/jorgealves/agent_skills --skill gdpr-ccpa-privacy-auditor
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: gdpr-ccpa-privacy-auditor
Source: https://github.com/jorgealves/agent_skills/tree/main/gdpr-ccpa-privacy-auditor
Command: npx skills add https://github.com/jorgealves/agent_skills --skill gdpr-ccpa-privacy-auditor

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audits web applications to ensure declared privacy policies match actual data collection practices, helping prevent privacy laundering and regulatory risk.

Core Features & Use Cases

  • Policy-to-implementation alignment: Cross-checks stated data collection with observed trackers and cookies.
  • Public webpage assessments: Applies to marketing sites, product pages, and consent banners to detect mismatches.
  • Due diligence and governance: Useful for privacy impact assessments and vendor risk reviews.

Quick Start

Use the gdpr-ccpa-privacy-auditor to scan a public website and compare the policy text against detected tracking signals and data collection indicators.

Frequently Asked Questions about gdpr-ccpa-privacy-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I verify my privacy policy matches actual website tracking and data collection?

To verify privacy policy alignment, you must cross-reference stated data collection claims against detected tracking signals, cookies, and scripts. This process detects privacy laundering by ensuring declared policies match observed technical behavior on public webpages.

What is a privacy audit and how does it detect mismatches in consent banners?

A privacy audit detects consent banner mismatches by applying NLP-based cross-referencing between policy text and observed data collection indicators. It scans public marketing pages to identify where stated data practices diverge from actual tracking behavior.

Can I use a privacy audit for vendor risk assessment and due diligence?

Yes, you can use a privacy audit for vendor risk assessment and due diligence. It guides periodic reviews of external applications, verifying that vendor privacy policies align with their actual data collection and tracking practices.

Do I need source code access to audit web application privacy policies?

You do not need source code access to audit web application privacy policies, as cookie and script scanning works on public websites. However, optional source code access provides deeper visibility for internal privacy impact assessments.

What is the best way to check for GDPR and CCPA compliance gaps on marketing pages?

The best way to check for GDPR and CCPA compliance gaps is scanning marketing pages for tracking signals and cross-referencing them against policy text. This identifies privacy laundering where observed data collection exceeds stated policy claims.

What are the limitations of auditing privacy policies without source code?

Auditing privacy policies without source code limits visibility to client-side cookies and scripts on public webpages. It cannot detect server-side data collection or backend tracking practices, requiring optional source code access for complete privacy impact assessments.