Gdpr Compliant

This is a compliance reference built for engineers who need to ship GDPR-compliant features without reading 99 articles of legalese. It gives you tables, defaults, and hard rules for common tasks like API design, logging, retention windows, and encryption standards. Useful when you're adding a new data collection feature, reviewing a PR that touches user data, or setting up deletion jobs. The source material is dense with specifics: retention defaults by data type, which hashing algorithms to use, how to mask IPs in logs. It won't replace a lawyer for edge cases, but it will stop you from logging passwords or storing personal data in query strings.

skills.sh installs: 1.7K
GitHub stars: 41K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add github/awesome-copilot --skill gdpr-compliant --agent claude-code

Installs into .claude/skills of the current project.

Files

GDPR Engineering Skill

Actionable GDPR reference for engineers, architects, DevOps, and tech leads. Inspired by CNIL developer guidance and GDPR Articles 5, 25, 32, 33, 35.

Golden Rule: Collect less. Store less. Expose less. Retain less.

For deep dives, read the reference files in references/:

references/data-rights.md — user rights endpoints, DSR workflow, RoPA
references/security.md — encryption, hashing, secrets, anonymization, cloud, CI/CD, incident response, architecture patterns