Senior GDPR/DSGVO expert and internal/external auditor for data protection compliance. Provides EU GDPR and German DSGVO expertise, privacy impact assessments, data protection auditing, and compliance verification. Use for GDPR compliance assessments, privacy audits, data protection planning, and regulatory compliance verification.
npxskills add davila7/claude-code-templates--skill gdpr-dsgvo-expertLoading…
Expert-level EU General Data Protection Regulation (GDPR) and German Datenschutz-Grundverordnung (DSGVO) compliance with comprehensive data protection auditing, privacy impact assessment, and regulatory compliance verification capabilities.
Design and implement comprehensive data protection compliance programs ensuring systematic GDPR/DSGVO adherence.
GDPR Compliance Framework:
GDPR/DSGVO COMPLIANCE IMPLEMENTATION
├── Legal Basis and Lawfulness
│ ├── Lawful basis identification (Art. 6)
│ ├── Special category data processing (Art. 9)
│ ├── Criminal conviction data (Art. 10)
│ └── Consent management and documentation
├── Individual Rights Implementation
│ ├── Right to information (Art. 13-14)
│ ├── Right of access (Art. 15)
│ ├── Right to rectification (Art. 16)
│ ├── Right to erasure (Art. 17)
│ ├── Right to restrict processing (Art. 18)
│ ├── Right to data portability (Art. 20)
│ └── Right to object (Art. 21)
├── Accountability and Governance
│ ├── Data protection policies and procedures
│ ├── Records of processing activities (Art. 30)
│ ├── Data protection impact assessments (Art. 35)
│ └── Data protection by design and default (Art. 25)
└── International Data Transfers
├── Adequacy decisions (Art. 45)
├── Standard contractual clauses (Art. 46)
├── Binding corporate rules (Art. 47)
└── Derogations (Art. 49)
Conduct systematic Data Protection Impact Assessments ensuring comprehensive privacy risk identification and mitigation.
DPIA Process Framework:
DPIA Threshold Assessment
DPIA Execution Process
DPIA Documentation and Review
Implement comprehensive data subject rights fulfillment processes ensuring timely and effective rights exercise.
Data Subject Rights Framework:
DATA SUBJECT RIGHTS IMPLEMENTATION
├── Rights Request Management
│ ├── Request receipt and verification
│ ├── Identity verification procedures
│ ├── Request assessment and classification
│ └── Response timeline management
├── Rights Fulfillment Processes
│ ├── Information provision (privacy notices)
│ ├── Data access and copy provision
│ ├── Data rectification and correction
│ ├── Data erasure and deletion
│ ├── Processing restriction implementation
│ ├── Data portability and transfer
│ └── Objection handling and opt-out
├── Complex Rights Scenarios
│ ├── Conflicting rights balancing
│ ├── Third-party rights considerations
│ ├── Legal obligation conflicts
│ └── Legitimate interest assessments
└── Rights Response Documentation
├── Decision rationale documentation
├── Technical implementation evidence
├── Timeline compliance verification
└── Appeal and complaint procedures
Address German-specific implementation of GDPR including national derogations and additional requirements.
German DSGVO Specificities:
Implement specialized data protection measures for healthcare data processing in medical device environments.
Healthcare GDPR Compliance:
Health Data Processing Framework
Medical Device Data Protection
Healthcare Stakeholder Coordination
Manage complex international data transfer scenarios ensuring GDPR Chapter V compliance.
International Transfer Framework:
Transfer Mechanism Assessment
Transfer Risk Assessment
Supplementary Measures Implementation
Conduct systematic GDPR compliance audits ensuring comprehensive data protection verification.
GDPR Audit Methodology:
Audit Planning and Scope
Audit Execution Process
Audit Finding and Reporting
Conduct comprehensive privacy risk assessments ensuring systematic privacy risk management.
Privacy Risk Assessment Framework:
Prepare organization for supervisory authority investigations and external privacy audits.
External Audit Readiness:
Supervisory Authority Preparation
Compliance Verification
Provide comprehensive support to Data Protection Officer functions ensuring effective data protection governance.
DPO Support Framework:
Establish comprehensive data protection governance ensuring organizational accountability and compliance.
Governance Structure:
Monitor comprehensive privacy program performance ensuring continuous improvement and compliance demonstration.
Privacy Performance KPIs:
Continuously improve privacy program through regulatory monitoring, best practice adoption, and technology integration.
Program Enhancement:
Regulatory Intelligence
Privacy Program Evolution
gdpr-compliance-checker.py: Comprehensive GDPR compliance assessment and verificationdpia-automation.py: Data Protection Impact Assessment workflow automationdata-subject-rights-tracker.py: Individual rights request management and trackingprivacy-audit-generator.py: Automated privacy audit checklist and report generationgdpr-implementation-guide.md: Complete GDPR compliance implementation frameworkdsgvo-specific-requirements.md: German DSGVO implementation and national requirementsdevice-data-protection.md: Medical device data protection compliance guidanceinternational-transfer-guide.md: Chapter V international transfer complianceprivacy-audit-methodology.md: Comprehensive GDPR audit procedures and checklistsgdpr-templates/: Privacy notice, consent, and data subject rights response templatesdpia-tools/: Data Protection Impact Assessment worksheets and frameworksaudit-checklists/: GDPR compliance audit and assessment checkliststraining-materials/: Data protection awareness and compliance training programs
Create or update AgentSkills. Use when designing, structuring, or packaging skills with scripts, references, and assets.
Create or update AgentSkills. Use when designing, structuring, or packaging skills with scripts, references, and assets.
Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.
CLI to manage emails via IMAP/SMTP. Use `himalaya` to list, read, write, reply, forward, search, and organize emails from the terminal. Supports multiple accounts and message composition with MML (MIME Meta Language).
Create or update AgentSkills. Use when designing, structuring, or packaging skills with scripts, references, and assets.
Create or update AgentSkills. Use when designing, structuring, or packaging skills with scripts, references, and assets.
Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.
CLI to manage emails via IMAP/SMTP. Use `himalaya` to list, read, write, reply, forward, search, and organize emails from the terminal. Supports multiple accounts and message composition with MML (MIME Meta Language).