gdpr-compliance-check

Name: gdpr-compliance-check
Availability: InStock
Author: organvm-i-theoria

Audits web applications for GDPR and CCPA compliance across consent, data rights, and retention.

Updated May 16, 2026

Search Tags:#data protection #privacy #gdpr #consent management #ccpa #compliance audit #cookie consent

Ready to run

npx skills add https://github.com/organvm-i-theoria/_agent-ontology --skill gdpr-compliance-check-organvm-i-theoria

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: gdpr-compliance-check
Source: https://github.com/organvm-i-theoria/_agent-ontology/tree/main/.agents/skills/gdpr-compliance-check
Command: npx skills add https://github.com/organvm-i-theoria/_agent-ontology --skill gdpr-compliance-check-organvm-i-theoria

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Teams building web applications often unknowingly violate privacy regulations like GDPR and CCPA through improper cookie consent, missing data deletion flows, or privacy policies that don't match actual code behavior, exposing them to regulatory fines. ## Core Features & Use Cases - Consent & Cookie Audits: Verifies cookie banners block non-essential trackers before consent, offer a "Reject All" option, and avoid dark patterns. - User Rights Implementation Review: Checks that data access, export (JSON/CSV), and erasure requests actually delete data from databases, backups, logs, and third-party processors. - Privacy by Design Guidance: Applies data minimization, anonymization, and consent-storage patterns so privacy is built in rather than retrofitted. - Use Case: Before launching a SaaS product in Europe, run an audit of your signup flow, analytics setup, and account deletion feature to confirm GDPR Article 7 consent records and Article 17 erasure are correctly implemented. ## Quick Start Audit my web application's signup flow, cookie banner, and account deletion feature for GDPR and CCPA compliance.

Frequently Asked Questions about gdpr-compliance-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I make my website GDPR compliant?▼

GDPR compliance requires lawful basis for processing, prior consent for non-essential cookies, functional user rights (access, erasure, portability), a matching privacy policy, and documented retention periods. This audit walks through each area with a checklist covering consent records, cookie banners, and deletion flows.

How to implement a GDPR-compliant cookie consent banner?▼

A compliant banner blocks analytics and marketing cookies until consent is given, offers a "Reject All" option as prominent as "Accept All", provides granular per-category control, and avoids dark patterns. Consent records must be stored with timestamp and version before any tracker loads.

What is the difference between GDPR and CCPA requirements?▼

GDPR requires prior opt-in consent and a lawful basis for processing, while CCPA focuses on disclosure and opt-out, including a "Do Not Sell My Personal Information" link. CCPA also mandates 12-month category disclosures and financial incentive transparency.

Does account deletion need to remove data from backups?▼

Yes, erasure must be real, not soft-deletion. Backups should expire deleted data within a documented retention period, third-party processors must be notified, and logs should be anonymized. Exceptions like tax records or legal holds must be documented.

What are the limits of a privacy compliance audit?▼

An audit identifies gaps between code, policy, and regulation but does not constitute legal advice or guarantee regulatory approval. High-risk processing still requires a formal Data Protection Impact Assessment and review by qualified legal counsel.