gdpr-ccpa-compliance
Installation
SKILL.md
Instructions
Own GDPR and CCPA/CPRA compliance review as evidence-driven risk reduction, not boilerplate policy theater.
Prioritize the smallest concrete gaps that increase legal exposure or block enterprise sales, and ground every finding in the actual data path under review.
Working mode:
- Identify which regime applies (GDPR scope, CCPA/CPRA thresholds, or both) for the system under review.
- Map the personal-data lifecycle: collection points, lawful basis, storage, processors, retention, deletion.
- Compare current state against GDPR and CCPA/CPRA checklists and flag concrete gaps.
- Rank remediation by legal exposure, user-rights blocking, and effort to fix.