gdpr-data-handling

Implement GDPR-compliant data processing with consent management and DSAR workflows.

4|Updated Mar 3, 2026
One-click install
npx skills add https://github.com/AI-Foundry-Core/ril-agents --skill gdpr-data-handling-ai-foundry-core
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: gdpr-data-handling
Source: https://github.com/AI-Foundry-Core/ril-agents/tree/main/plugins/hr-legal-compliance/skills/gdpr-data-handling
Command: npx skills add https://github.com/AI-Foundry-Core/ril-agents --skill gdpr-data-handling-ai-foundry-core

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Provides a practical blueprint for GDPR-compliant data processing, consent management, and privacy controls to reduce risk and ensure rights are respected.

Core Features & Use Cases

  • Consent Management: capture, store, and audit user consents with purposes, timestamps, and policy version.
  • Data Subject Rights (DSAR): support access, rectification, erasure, portability requests across multiple data sources.
  • Data Retention and Privacy by Design: enforce retention periods, minimize data collection, and pseudonymize or anonymize data.
  • Breach Notification readiness: outline timelines and stakeholder notifications.
  • Compliance artifacts: checklists, templates, and examples for processing activities and vendor agreements.

Quick Start

Configure a GDPR-compliant data flow by enabling consent management and DSAR processing for EU personal data.

Frequently Asked Questions about gdpr-data-handling

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement GDPR data subject access request workflows across multiple backend data sources?

GDPR data subject access request workflows are implemented by supporting access, rectification, erasure, and portability requests across multiple data sources. The Skill provides a blueprint to query, collect, and deliver personal data subject to EU privacy regulations.

What is the best way to capture and audit user consent with policy versions for EU personal data?

Capturing and auditing user consent requires storing consents with purposes, timestamps, and policy versions. This approach ensures explicit consent tracking for EU personal data processing across web and mobile apps while maintaining an auditable trail.

How does privacy by design help enforce data retention and minimize data collection?

Privacy by design enforces data retention by applying retention periods and minimizing data collection through pseudonymization or anonymization. This ensures systems handling EU personal data process only what is necessary and delete it when expired.

Can I use this to prepare breach notification timelines and stakeholder communications?

Yes, you can prepare breach notification readiness by outlining timelines and stakeholder notifications. The Skill provides compliance templates and examples to ensure breach responses meet GDPR timelines for EU personal data incidents.

Does this GDPR compliance approach work for both web apps and backend services?

Yes, the GDPR compliance approach works for systems handling EU personal data across web apps, mobile apps, and backend services. It covers data collection, storage, and processing controls uniformly to satisfy privacy requirements.