Compliance Review · leodisa bundle Build or review code for compliance with the EU AI Act, GDPR, the NIS2 Directive (EU 2022/2555), and secure-development (SSDLC) best practice. Three modes. REVIEW: audit a repo and produce an evidence-based gap analysis — triggers on "compliance review", "gap analysis", "NIS2 check", "is this repo GDPR compliant", "security audit of the code". DESIGN/BUILD: apply the same requirements as compliance-by-design guardrails while writing new code, then self-check — triggers on "build X with GDPR/AI Act/NIS2 in mind", "compliant/secure/privacy by design". DATA MASKING: when the user shares a dataset (CSV, JSON, query result) that may contain personal data, never read it raw — ask whether to pseudonymise (keeps joins) or anonymise (k-anonymity), then protect it first — triggers on "anonymise/mask this data" or any dataset handed over for analysis. Use whenever code or data must meet a security/privacy/AI regulation, even if no framework is named. Advisory only, not legal advice.
