Privacy Compliance Checker
Audit code and data flows for GDPR/CCPA compliance violations
What You Can Do
You can systematically audit your code and data flows to uncover privacy compliance risks across GDPR, CCPA, and other regulatory frameworks. The skill maps where personally identifiable information is collected, processed, stored, and transmitted—then validates that consent mechanisms, data minimization practices, retention policies, and deletion implementations meet legal requirements. This catches compliance gaps early, before they result in regulatory fines or enforcement actions.
Features
Identifies all collection, processing, storage, and transmission points for personal data
Checks that consent mechanisms are properly implemented, documented, and auditable
Verifies you're only collecting and retaining data necessary for stated purposes
Ensures data retention schedules align with GDPR/CCPA timelines and legal holds
Confirms GDPR Article 17 and CCPA deletion request implementations work end-to-end
Flags unreachable or undocumented data storage locations
Identifies privacy gaps created by vendor integrations and APIs
Validates documented legal grounds for each data processing activity
Example Output
Example 1: PII Collection Gap
- ⚠️ FINDING: Uncontrolled PII Collection
Location: /src/signup.js, line 47
Issue: Email collected without explicit opt-in consent checkbox
Severity: HIGH (GDPR Art. 7 violation)
Fix: Add checkbox for marketing consent before form submission
Example 2: Retention Policy Issue
✗ FINDING: Missing Data Retention Policy
Location: user_analytics_pipeline.sql
Issue: No deletion trigger for inactive user records after 36 months
Severity: MEDIUM (CCPA non-compliance)
Fix: Implement automated purge job for records > 3 years old
Recommendation: Document retention rationale in DPA
Example 3: Vendor Risk
- ⚠️ FINDING: Unvetted Third-Party Data Flow
Location: config/integrations.json
Issue: User events sent to analytics vendor without DPA in place
Severity: CRITICAL (GDPR Art. 28 violation)
Fix: Execute Data Processing Agreement before data transfer resumes
What's Included
- SKILL.md: Full compliance checker instruction set with GDPR/CCPA framework
- PII Mapping Template: Spreadsheet to catalog all data flows and processing activities
- Consent Mechanism Checklist: Step-by-step validation framework for consent collection
- Data Retention Policy Worksheet: Table for documenting legal retention periods per data type
- Compliance Audit Report Template: Structured findings format with severity levels and remediation steps
Who It's For
- Compliance Officers — Conducting privacy audits and building compliance frameworks
- Privacy Engineers — Building privacy-by-design into data architectures
- Security Teams — Assessing privacy and data protection risk in code reviews
- General Counsel & Legal — Preparing compliance evidence and DPA documentation
- Product Managers — Vetting new features for privacy violations before launch
Best For
- Privacy compliance audits — Quarterly or bi-annual reviews of code and data flows
- Third-party vendor assessments — Checking integrations before adding analytics, CRM, or payment processors
- New feature launches — Reviewing data collection, consent forms, and preference centers before shipping
- Incident response — Validating deletion request implementations and tracking down orphaned data
- Regulatory preparation — Building evidence packages for GDPR/CCPA assessments and audits
You might also like
Automatically analyze market conditions, competitor pricing, and historical demand patterns to generate optimal rental rates that maximize revenue. You'll receive data-driven pricing recommendations updated in real-time, along with demand forecasts that help you adjust inventory allocation and staffing. This skill helps rental agencies capture peak demand while maintaining competitiveness during slower seasons.
by heygen-com
Generate personalized, high-value travel itineraries tailored to your clients' preferences, budget, and travel style. You'll research luxury accommodations, curate world-class dining and experiences, and create compelling proposal documents that close deals. The skill handles multi-destination routing, timeline optimization, and produces polished markdown proposals ready to share with clients.
by heygen-comRender dynamic videos directly from HTML/code using Puppeteer and ffmpeg, with built-in support for AI voiceover, caption overlays, and motion animation. Convert markdown changelogs into polished 45-60 second branded videos with animated UI mockups, captions, and AI narration. Create explainer videos, product demos, and animated visualizations using code-first workflows and motion doctrines that enforce consistency and quality.
by heygen-com
Generate privacy impact assessments, data processing agreements, and breach notification templates tailored to your organization's specific data flows and regulatory obligations. You'll produce audit-ready compliance documentation, identify data handling risks, and streamline responses to regulatory requirements and data subject requests.
by joabgonzalez
This skill analyzes real-time demand, occupancy rates, and market conditions to generate dynamic pricing recommendations for cruise cabins and ancillary services. You'll receive data-driven strategies for yield management, cabin pricing optimization by category, and revenue forecasting that account for seasonal demand, competitor positioning, and customer segmentation. Maximize your revenue per available cabin (RevPAC) and identify upsell opportunities across dining, activities, and service packages.
by heygen-com
Create comprehensive travel itineraries with contingency protocols, coordinate multiple vendors and stakeholders, and manage complex guest experiences end-to-end. You'll generate detailed schedules, communication templates, and risk mitigation plans that keep your executive mobility seamless and your VIP relationships thriving. Every detail—from dietary preferences to security considerations—gets captured and coordinated across teams.
by heygen-com
This skill analyzes historical booking patterns, competitor pricing, and market demand to optimize cabin pricing and revenue across cruise itineraries. It forecasts revenue outcomes by simulating different pricing strategies against predicted demand curves, helping you identify optimal booking windows and price points for maximum yield. You'll receive actionable recommendations on price adjustments, capacity management, and promotional timing backed by data-driven analysis.
by heygen-com
Turn complaint situations into retention opportunities by analyzing each issue strategically, assessing rating risk, and recommending tailored responses that balance guest satisfaction with your bottom line. You'll get data-driven recommendations on whether to offer refunds, credits, upgrades, or service recovery actions, complete with messaging templates and follow-up protocols designed to recover ratings.
by heygen-com