Privacy Compliance Checker
Audit code and data flows for GDPR/CCPA compliance violations
What You Can Do
You can systematically audit your code and data flows to uncover privacy compliance risks across GDPR, CCPA, and other regulatory frameworks. The skill maps where personally identifiable information is collected, processed, stored, and transmitted—then validates that consent mechanisms, data minimization practices, retention policies, and deletion implementations meet legal requirements. This catches compliance gaps early, before they result in regulatory fines or enforcement actions.
Features
Identifies all collection, processing, storage, and transmission points for personal data
Checks that consent mechanisms are properly implemented, documented, and auditable
Verifies you're only collecting and retaining data necessary for stated purposes
Ensures data retention schedules align with GDPR/CCPA timelines and legal holds
Confirms GDPR Article 17 and CCPA deletion request implementations work end-to-end
Flags unreachable or undocumented data storage locations
Identifies privacy gaps created by vendor integrations and APIs
Validates documented legal grounds for each data processing activity
Example Output
Example 1: PII Collection Gap
- ⚠️ FINDING: Uncontrolled PII Collection
Location: /src/signup.js, line 47
Issue: Email collected without explicit opt-in consent checkbox
Severity: HIGH (GDPR Art. 7 violation)
Fix: Add checkbox for marketing consent before form submission
Example 2: Retention Policy Issue
✗ FINDING: Missing Data Retention Policy
Location: user_analytics_pipeline.sql
Issue: No deletion trigger for inactive user records after 36 months
Severity: MEDIUM (CCPA non-compliance)
Fix: Implement automated purge job for records > 3 years old
Recommendation: Document retention rationale in DPA
Example 3: Vendor Risk
- ⚠️ FINDING: Unvetted Third-Party Data Flow
Location: config/integrations.json
Issue: User events sent to analytics vendor without DPA in place
Severity: CRITICAL (GDPR Art. 28 violation)
Fix: Execute Data Processing Agreement before data transfer resumes
What's Included
- SKILL.md: Full compliance checker instruction set with GDPR/CCPA framework
- PII Mapping Template: Spreadsheet to catalog all data flows and processing activities
- Consent Mechanism Checklist: Step-by-step validation framework for consent collection
- Data Retention Policy Worksheet: Table for documenting legal retention periods per data type
- Compliance Audit Report Template: Structured findings format with severity levels and remediation steps
Who It's For
- Compliance Officers — Conducting privacy audits and building compliance frameworks
- Privacy Engineers — Building privacy-by-design into data architectures
- Security Teams — Assessing privacy and data protection risk in code reviews
- General Counsel & Legal — Preparing compliance evidence and DPA documentation
- Product Managers — Vetting new features for privacy violations before launch
Best For
- Privacy compliance audits — Quarterly or bi-annual reviews of code and data flows
- Third-party vendor assessments — Checking integrations before adding analytics, CRM, or payment processors
- New feature launches — Reviewing data collection, consent forms, and preference centers before shipping
- Incident response — Validating deletion request implementations and tracking down orphaned data
- Regulatory preparation — Building evidence packages for GDPR/CCPA assessments and audits
You might also like
Turn complaint situations into retention opportunities by analyzing each issue strategically, assessing rating risk, and recommending tailored responses that balance guest satisfaction with your bottom line. You'll get data-driven recommendations on whether to offer refunds, credits, upgrades, or service recovery actions, complete with messaging templates and follow-up protocols designed to recover ratings.
by heygen-com
Automatically analyze market conditions, competitor pricing, and historical demand patterns to generate optimal rental rates that maximize revenue. You'll receive data-driven pricing recommendations updated in real-time, along with demand forecasts that help you adjust inventory allocation and staffing. This skill helps rental agencies capture peak demand while maintaining competitiveness during slower seasons.
by heygen-comRender dynamic videos directly from HTML/code using Puppeteer and ffmpeg, with built-in support for AI voiceover, caption overlays, and motion animation. Convert markdown changelogs into polished 45-60 second branded videos with animated UI mockups, captions, and AI narration. Create explainer videos, product demos, and animated visualizations using code-first workflows and motion doctrines that enforce consistency and quality.
by heygen-com
This skill analyzes real-time demand, occupancy rates, and market conditions to generate dynamic pricing recommendations for cruise cabins and ancillary services. You'll receive data-driven strategies for yield management, cabin pricing optimization by category, and revenue forecasting that account for seasonal demand, competitor positioning, and customer segmentation. Maximize your revenue per available cabin (RevPAC) and identify upsell opportunities across dining, activities, and service packages.
by heygen-com
Conduct thorough GDPR/CCPA compliance audits by analyzing your data handling practices, identifying gaps against regulatory requirements, and generating comprehensive risk assessment matrices. You'll receive data flow documentation, control assessments, and actionable remediation recommendations tailored to your organization's specific context. This skill transforms complex privacy regulations into clear, measurable compliance metrics and visual risk profiles.
by skillslib
You can rapidly audit your organization's business processes and documentation against GDPR, CCPA, HIPAA, and SOC2 requirements. The skill maps your current state to regulatory obligations, identifies specific gaps and missing controls, assigns risk severity based on penalty exposure, and generates prioritized remediation roadmaps with timelines and dependencies — all formatted for board presentations and audit committee review.
by uipath
Orchestrate personalized guest journeys by analyzing preferences, past interactions, and luxury service expectations. This skill helps you craft memorable VIP experiences through intelligent preference mapping, service coordination, and anticipatory hospitality recommendations. You'll deliver white-glove service at scale by automating guest data analysis and generating tailored recommendations that exceed expectations.
by heygen-com
Develop sophisticated dynamic pricing and yield management strategies that optimize revenue per available seat mile (RASM). Claude helps you analyze demand patterns, forecast price elasticity, simulate revenue scenarios, and recommend data-driven pricing adjustments across fare classes and booking windows. Strengthen your competitive position by making informed decisions on capacity allocation, overbooking policies, and real-time price adjustments.
by heygen-com