gdpr-expert

Provide GDPR compliance guidance on lawful bases, DPIAs, and data subject rights.

367|83|Updated Dec 26, 2025
One-click install
npx skills add https://github.com/GRCEngClub/claude-grc-engineering --skill gdpr-expert-grcengclub
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: gdpr-expert
Source: https://github.com/GRCEngClub/claude-grc-engineering/tree/main/plugins/frameworks/gdpr/skills/gdpr-expert
Command: npx skills add https://github.com/GRCEngClub/claude-grc-engineering --skill gdpr-expert-grcengclub

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

GDPR compliance is complex and rapidly evolving. This skill provides expert guidance on the General Data Protection Regulation, its 99 articles, seven principles, six lawful bases, data subject rights, DPIA requirements, breach notification, cross-border transfers, and enforcement considerations to help teams reduce risk and accelerate implementation.

Core Features & Use Cases

  • Comprehensive explanations of GDPR articles, principles, and key terms with practical interpretations.
  • Guidance on lawful bases, DPIAs, data subject rights, cross-border data transfers, and breach notification processes for real-world programs.
  • Roadmaps and best practices for building compliant privacy programs, audits, and vendor/processor engagements.

Quick Start

Ask the GDPR expert to generate a GDPR readiness assessment for your organization.

Frequently Asked Questions about gdpr-expert

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I determine the correct lawful basis for processing personal data under GDPR?

GDPR lawful basis determination requires evaluating six available legal foundations to identify the appropriate justification for your specific data processing activities. This skill provides practical interpretations of these lawful bases to help reduce compliance risk.

When do I need to perform a DPIA for my data processing activities?

A DPIA is required for GDPR compliance when processing involves high risk to data subject rights, such as large-scale monitoring or sensitive data handling. This skill offers guidance on conducting DPIAs to ensure your privacy program meets regulatory requirements.

How do I manage data subject rights requests effectively?

Managing data subject rights involves addressing access, erasure, and portability requests within GDPR mandated timeframes. This skill delivers regulatory insights on handling these obligations to build compliant real-world privacy programs.

What is the best way to handle cross-border data transfers under GDPR?

Handling cross-border data transfers requires implementing appropriate safeguards like Standard Contractual Clauses to maintain GDPR compliance. This skill provides guidance on lawful transfer mechanisms and enforcement considerations.

What are the steps for GDPR breach notification and who needs to be informed?

GDPR breach notification requires informing the supervisory authority within 72 hours and affected data subjects without undue delay. This skill outlines the breach notification process to ensure your team responds compliantly.

Do I need a full privacy program audit to achieve GDPR compliance?

Achieving GDPR compliance requires building a comprehensive privacy program that addresses the seven principles and 99 articles. This skill provides roadmaps and best practices for audits and vendor engagements to accelerate implementation.