# Data Privacy Compliance

> Implement data privacy compliance — lawful basis, notices, rights handling, retention, and cross-border transfers — aligned to applicable regimes (e.g. GDPR-style principles). Use when designing data practices, responding to data subject requests, or reviewing privacy risk in products.

- Skill: `itsual/data-privacy-compliance` (Agent Skill)
- Install (CLI): `npx skillmds@latest add itsual/data-privacy-compliance`
- Raw SKILL.md: https://api.skillmd.com/api/skills/itsual/data-privacy-compliance/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: itsual (https://skillmd.com/u/itsual)
- Updated: 2026-09-21
- Page: https://skillmd.com/skills/itsual/data-privacy-compliance

---


# Data Privacy Compliance

## Overview

Privacy compliance protects individuals’ data rights and reduces regulatory and trust risk. It requires lawful processing, transparency, security, and accountable governance — not only a privacy policy page.

## When to Use

- Product and data-flow privacy reviews
- Privacy notices and consent design
- Data subject rights (access, deletion, portability)
- Vendor and cross-border transfer assessments
- Retention and deletion schedule design

## Core Practices

- Map personal data: what, why, where, who, how long
- Establish lawful basis / legitimate purpose per use case
- Honor data subject rights within required timelines
- Minimize data and restrict access by role
- Govern processors with contracts and diligence
- Assess high-risk processing (DPIA-style) before launch

## Principles

- Privacy by design beats privacy by retrofit
- Consent is not a cure-all; purpose limitation still applies
- Security of personal data is a privacy control
- Documentation is part of accountability

## Verification

- [ ] Data inventory covers material processing
- [ ] Rights request process meets timelines
- [ ] High-risk processing has assessment and mitigation