gdpr-review

Analyze web applications for GDPR, RGPD, and nLPD compliance.

Updated Feb 5, 2026
One-click install
npx skills add https://github.com/benjaminhaeberli/claude-plugins --skill gdpr-review
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: gdpr-review
Source: https://github.com/benjaminhaeberli/claude-plugins/tree/main/skills/general/gdpr-review
Command: npx skills add https://github.com/benjaminhaeberli/claude-plugins --skill gdpr-review

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Analyze a web application for GDPR/RGPD and nLPD compliance from a developer perspective, helping identify data flows, consent, retention, and user-right gaps.

Core Features & Use Cases

  • Privacy checks: Identify personal data collected, consent coverage, and data retention gaps.
  • Rights verification: Validate access, deletion, export, and control mechanisms for user data.
  • Use Case: For a web app with forms, analytics, and third-party integrations, ensure cookies and data handling comply with CNIL and GDPR.

Quick Start

Begin the GDPR review by selecting a project and running the audit to generate a structured report with remediation guidance. The assessment uses CNIL developer guidance and GDPR articles to shape the checklist and scoring.

Frequently Asked Questions about gdpr-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my web application for GDPR compliance in the codebase?

You can audit web application GDPR compliance by analyzing HTML, JavaScript, TypeScript, and PHP source code to identify personal data collection, consent mechanisms, and data retention gaps. The review validates user rights and generates a structured report aligned with CNIL guidance.

What is GDPR codebase analysis and how does it identify data protection risks?

GDPR codebase analysis is a developer-focused review that detects privacy risks by mapping data flows and third-party integrations. It identifies code patterns where personal data is collected and validates consent, deletion, and export mechanisms against GDPR articles.

Can I check if my JavaScript forms and analytics meet CNIL data retention requirements?

Yes, you can check JavaScript forms and analytics against CNIL data retention requirements by scanning the codebase for data handling patterns. The audit identifies retention gaps and verifies that user access, deletion, and control mechanisms are properly implemented.

Does the GDPR compliance audit support PHP and common web frameworks?

Yes, the GDPR compliance audit supports PHP and common web frameworks alongside HTML, CSS, JavaScript, and TypeScript. It applies privacy assessment criteria across these technologies to identify data collection flows and third-party integration risks.

What is the best way to find third-party integration privacy gaps in a web app?

The best way to find third-party integration privacy gaps is to perform a structured codebase audit that maps external data flows. This review detects integrations collecting personal data and generates remediation recommendations aligned with GDPR and nLPD standards.

How do I generate a structured report for GDPR user rights verification?

You generate a structured report for GDPR user rights verification by running an audit on your project that validates access, deletion, export, and control mechanisms. The output covers identified data flows and provides specific remediation guidance for compliance gaps.