skills.rest
mikkelkrogsholm
mikkelkrogsholmCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

gdpr-dpa

Generates GDPR-compliant Data Processing Agreements by scanning project files for sub-processors and personal data types.

5|3|Updated Feb 21, 2026
Search Tags:#compliance#data processing#privacy#gdpr#dpa#sub-processor
One-click install
npx skills add https://github.com/mikkelkrogsholm/dev-skills --skill gdpr-dpa
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: gdpr-dpa
Source: https://github.com/mikkelkrogsholm/dev-skills/tree/main/gdpr-dpa
Command: npx skills add https://github.com/mikkelkrogsholm/dev-skills --skill gdpr-dpa

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill automates the creation of Data Processing Agreements (DPAs) by scanning a project for sub-processors and identifying personal data types, eliminating manual compliance guesswork.

Core Features & Use Cases

  • Automated Sub-processor Discovery: Scans project files (dependencies, configs, code) to identify third-party services handling personal data.
  • Personal Data Identification: Analyzes schemas and models to determine what types of personal data are processed.
  • Issue Flagging: Highlights potential compliance issues like unknown sub-processors or missing EU regions.
  • DPA Generation: Populates a template with identified sub-processors, data types, and processing purposes.
  • Use Case: A startup needs to generate a DPA for their new SaaS product. This Skill scans their codebase, identifies Stripe, Sentry, and Neon as sub-processors, notes that sensitive data is handled, and generates a draft DPA ready for legal review.

Quick Start

Use the gdpr-dpa skill to generate a data processing agreement for the current project.

Frequently Asked Questions about gdpr-dpa

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automatically generate a GDPR Data Processing Agreement from my source code?▼

This Skill automates GDPR Data Processing Agreement generation by scanning project dependencies, configurations, and source code to identify sub-processors and personal data types, then populating a DPA template ready for legal review.

What is a sub-processor and how are they discovered for GDPR compliance?▼

Sub-processors are third-party services handling personal data. This Skill discovers them by scanning project dependencies and configuration files, then cross-referencing those services against a reference database to extract GDPR metadata.

Can I use this to identify what personal data types my application processes?▼

Yes, this Skill identifies personal data types by analyzing project schemas and models to determine what specific personal data is processed, ensuring accurate documentation within the generated Data Processing Agreement.

Does the DPA generator flag compliance issues with unknown sub-processors?▼

Yes, the DPA generator flags potential compliance issues like unknown sub-processors or missing EU regions before generating the final agreement, highlighting privacy configuration gaps for resolution prior to legal review.

What's the best way to prepare a SaaS project for automated DPA generation?▼

Ensure your project dependencies, configuration files, and source code schemas are accessible. The Skill scans these elements to extract sub-processors, personal data types, and processing purposes to populate the DPA template.

When do I need a Data Processing Agreement for my software project?▼

You need a Data Processing Agreement when your software processes personal data via third-party sub-processors. This Skill automates creation by scanning your codebase to identify services and generate a compliant DPA draft.

Related Skills

Explore More Legal & Compliance Skills→
DatTran26DatTran26

ck:security-scan

Scan codebases for security vulnerabilities, secrets, and dependency risks.

Community
Advanced
kcass16kcass16
11

kevin

Analyze AI legal and compliance issues for startup vendor contracts.

Community
Advanced
Benmore-StudioBenmore-Studio
1

security-compliance-audit

Assess security controls across SOC 2, GDPR, HIPAA, PCI-DSS, and ISO 27001.

Official
Advanced
scumunnascumunna
1

data-subject-rights-and-subprocessor-governance

Automate data subject rights requests and sub-processor governance across advertising platforms.

Community
Advanced