gdpr-rails

Implement GDPR workflows for Ruby on Rails applications processing EU personal data.

21|2|Updated May 24, 2026
One-click install
npx skills add https://github.com/sandeepmvl/rails-skills --skill gdpr-rails
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: gdpr-rails
Source: https://github.com/sandeepmvl/rails-skills/tree/main/skills/52-gdpr-rails
Command: npx skills add https://github.com/sandeepmvl/rails-skills --skill gdpr-rails

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Rails applications handling EU resident personal data often lack built-in GDPR compliance workflows, leading to legal risk, regulatory fines, and costly retrofitting of required features like data export, erasure, and consent management.

Core Features & Use Cases

  • DSAR Export: Build self-service data export endpoints that deliver full user data bundles within GDPR's 30-day deadline.
  • Right to Erasure: Implement anonymisation workflows that scrub personal data while retaining required records for legal obligations, with audit logs that survive erasure.
  • Consent & Lawful Basis Tracking: Record user consent timestamps, IP addresses, and lawful basis for all personal data fields to meet regulatory requirements.
  • Use Case: For a Rails e-commerce app with EU customers, use this skill to add a user privacy portal that handles data download and account deletion requests automatically.

Quick Start

Use the gdpr-rails skill to implement a DSAR export service and user erasure workflow for my Rails application that handles EU customer data.

Frequently Asked Questions about gdpr-rails

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement GDPR data subject access requests in a Rails app?

To implement GDPR data subject access requests (DSAR) in a Rails app, build self-service data export endpoints that deliver full user data bundles within the 30-day deadline. This workflow automates user data collection and packaging for compliance.

What is the right to erasure workflow for Rails applications handling EU customer data?

The right to erasure workflow for Rails applications involves implementing anonymisation processes that scrub personal data while retaining required records for legal obligations. It ensures erasure-surviving audit logs maintain compliance records after account deletion.

How do I record user consent and lawful basis for GDPR compliance in Ruby on Rails?

Record user consent and lawful basis in Ruby on Rails by capturing consent timestamps, IP addresses, and the lawful basis for all personal data fields. This tracking mechanism meets GDPR regulatory requirements for explicit user permission.

Can I pseudonymise analytics data and enforce retention schedules in Rails for privacy compliance?

You can pseudonymise analytics data and enforce automated retention schedules in Rails for privacy compliance. This skill satisfies technical requirements for data minimisation by automatically managing data lifecycles and obscuring personal identifiers.

Does Rails GDPR compliance require 72-hour breach notification and vendor DPA validation?

GDPR compliance for production Rails deployments requires 72-hour breach notification workflows and vendor DPA validation. These technical requirements ensure that data breaches are reported to regulators and third-party processors are contractually compliant.

What are the limitations of adding a privacy portal to an existing Rails e-commerce app?

A limitation of adding a privacy portal to an existing Rails e-commerce app is that erasure workflows must carefully scrub personal data without violating legal obligations to retain specific records. Retrofitting automated retention and audit logging requires careful architectural planning.