# Gdpr Compliance

> Implement GDPR data protection requirements. Configure consent management, data subject rights, and privacy by design. Use when processing EU personal data.

- Skill: `majiayu000/gdpr-compliance-3` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add majiayu000/gdpr-compliance-3`
- Raw SKILL.md: https://api.skillmd.com/api/skills/majiayu000/gdpr-compliance-3/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- License: MIT
- Author: majiayu000 (https://skillmd.com/u/majiayu000)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/majiayu000/gdpr-compliance-3

---


# GDPR Compliance

Implement GDPR requirements for EU data protection.

## Key Principles

```yaml
principles:
  lawfulness: Legal basis for processing
  purpose_limitation: Specific, explicit purposes
  data_minimization: Adequate, relevant, limited
  accuracy: Accurate and up to date
  storage_limitation: No longer than necessary
  integrity: Secure processing
  accountability: Demonstrate compliance
```

## Data Subject Rights

```yaml
rights:
  - Right to access
  - Right to rectification
  - Right to erasure
  - Right to restrict processing
  - Right to data portability
  - Right to object
  - Rights related to automated decisions
```

## Technical Implementation

```python
# Data export for portability
def export_user_data(user_id):
    return {
        "profile": get_profile(user_id),
        "activity": get_activity_log(user_id),
        "preferences": get_preferences(user_id)
    }

# Right to erasure
def delete_user_data(user_id):
    anonymize_profile(user_id)
    delete_activity_log(user_id)
    log_deletion(user_id)
```

## Best Practices

- Privacy impact assessments
- Data processing agreements
- Consent management
- Breach notification (72 hours)
- Data Protection Officer (if required)