DPDPA & GDPR Legal Review Skill

Performs structured compliance review, redlining, and drafting suggestions on legal documents against DPDPA 2023 (India) and GDPR (EU/EEA). Produces annotated output with:

• ✅ Compliant clauses
• ⚠️ Suspect / at-risk clauses (with reasoning)
• 🔴 Non-compliant / missing clauses
• 📝 Redline suggestions (proposed replacement language)

Step 1 — Identify Scope

On receiving a document, determine:

1. Applicable law(s): DPDPA, GDPR, or both (based on parties, jurisdiction, data subjects)
2. Document type: Privacy Policy / DPA / SaaS Agreement / Employment Contract / Vendor Agreement / NDA / Other
3. Data types mentioned: personal data, sensitive personal data (SPD), children's data, health, financial

If jurisdiction or parties are ambiguous, state your assumption clearly before proceeding.