Gdpr · garethmdowns bundle Scan a codebase to produce draft GDPR/UK GDPR artefacts. Use whenever the user wants to audit a repository for personal data processing, generate a draft ROPA (Record of Processing Activities), identify third party data flows, flag international transfers, detect AI/LLM data processing, or build a starting point for a privacy notice. Trigger on phrases like "gdpr scan", "privacy audit", "ropa", "record of processing", "data inventory", "what personal data does this app collect", "privacy review", "data protection review", "find personal data in this code", or any time the user references compliance, privacy notices, processors, or transfer registers in the context of a codebase. Always frame outputs as drafts requiring human review by a qualified person, never as compliance determinations.
