GDPR Data Protection

DISCLAIMER: This skill provides guidance only. It does not constitute legal advice. Always verify with a Data Protection Officer or legal professional.

When to Use

• Designing systems that process personal data
• Conducting a Data Protection Impact Assessment (DPIA)
• Creating Article 30 processing records
• Implementing data subject rights (access, deletion, portability)
• Evaluating legal bases for data processing
• Planning cross-border data transfers

Step 1: Identify Legal Basis (Article 6)

Every processing activity needs exactly one legal basis: