How do I install the "tw Ecom Compliance Pdpa" skill?

Run npx skillmds@latest add charlieviettq/tw-ecom-compliance-pdpa in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is "tw Ecom Compliance Pdpa" safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with "tw Ecom Compliance Pdpa"?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is "tw Ecom Compliance Pdpa" free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published "tw Ecom Compliance Pdpa"?

charlieviettq (@charlieviettq) published this skill. Their other Agent Skills are listed on their SkillMD profile.

"tw Ecom Compliance Pdpa" by charlieviettq

Name: "tw Ecom Compliance Pdpa"
Author: charlieviettq

"tw Ecom Compliance Pdpa"

"E-commerce-specific PDPA (個資法) compliance — member consent at signup, cookie consent, order / payment data retention, DSAR (data subject access request) handling, and cross-border data transfer for TW merchants. Use when building a TW e-commerce signup / CRM flow, responding to member data requests, or auditing cookies. For generic PDPA / GDPR basics see `law-gdpr-pdpa`. STATUS: SKELETON — body pending.".

charlieviettq Updated Sep 17, 2026

File contents

E-Commerce PDPA Compliance

STATUS: SKELETON — body pending.

When to use this skill

Designing member signup consent for a TW store
Building cookie-consent banner for TW traffic
Responding to DSAR (resident data subject access request)
Designing data-retention policy for order / payment data
Cross-border transfer (TW → AWS US / GCP APAC)

Do NOT use when

Generic PDPA / GDPR concepts → law-gdpr-pdpa
Marketing consent for LINE OA → tw-ecom-operations-line-oa

Core concepts

TODO: 個資法 §5 specific-purpose principle, 第八條告知義務, 蒐集 vs 處理 vs 利用 split.

Decision tree

TODO: data flow → consent form design.

Implementation guidance

TODO: consent form template, DSAR SOP, retention schedule, cross-border transfer assessment.

Gotchas

TODO: 5-6 pitfalls (opt-in vs opt-out confusion, third-party embed leakage, employee access logging, data-breach 72hr notification).

IRON LAW

TODO.

Output Format